On Thu, Nov 17, 2022 at 02:48:40PM -0500, Viktor Dukhovni wrote: > > Is there a way to make this restriction *only* apply to the username > > present in that file? > > Yes: https://www.postfix.org/postconf.5.html#check_sasl_access > > Presumably SASL is only offered on ports 465 and 587, and not on port > 25, so "smtpd_sender_restrictions" is replaced with > "mua_sender_restrictions" with appropriate overrides in master.cf: > > default_database_type = hash > indexed = ${default_database_type}:${config_directory}/ > > mua_client_restrictions = permit_sasl_authenticated, reject > mua_sender_restrictions = > # If more than a few users, consider an indexed table > check_sasl_access inline:{{jdoe = reject_sender_login_mismatch}}, > check_sender_access pipemap:{ > ${indexed}restricted_senders, > static:reject_sender_logic_mismatch > }
Thanks, Viktor! I'll work on this. -Bryan
