Preventing domain impresonation

[Marek Kozlowski]

:-)

Let's assume my hostname is 'sth.mydomain.tld'
The following configuration:

#-------------------------------------------------
smtpd_recipient_restrictions =
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_unauth_destination,
        check_sender_access hash:/etc/postfix/sender_checks_my,
        ...

# cat /etc/postfix/sender_checks_my
sth.mydomain.tld        554 Please enable SMTP AUTH
#-------------------------------------------------





# cat /etc/postfix/sender_checks_my
1.2.3.4/24              OK
sth.mydomain.tld        554 Please enable SMTP AUTH

? Is there any other way? Thanks!

Best regards,
Marek

accepts mail from '...@sth.mydomain.tld' only from authenticated users or the hosts specified by the 'mynetworks' list. I'm wondering if there is a simple way of extending the list of hosts that may send me e-mails with '...@sth.mydomain.tld' as the sender address to my whole network (lets say '1.2.3.4/24') but without modifying the 'mynetworks' (which AFAIK grant much more privileges) list. What takes the precedence is case of:

smime.p7s
Description: S/MIME Cryptographic Signature