Установлен почтовый сервер Postfix+Dovecot+Mysql. Не могу разобраться как запретить отправку писем от пользователей своего домена без авторизации. Сделать авторизацию обязательной если отправитель с моего сервера.
# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
bounce_queue_lifetime = 1d
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = scan:127.0.0.1:10025
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
default_privs = nobody
delay_warning_time = 1h
disable_mime_input_processing = yes
header_checks = regexp:/etc/postfix/header_checks
html_directory = no
inet_interfaces = all
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command = /usr/lib/dovecot/deliver -d «USER»
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
maximal_queue_lifetime = 2d
message_size_limit = 52428800
mydomain = mydomain.ru
myhostname = mx.mydomain.ru
mynetworks = 127.0.0.0/8
myorigin = $mydomain
queue_directory = /var/spool/postfix
receive_override_options = no_address_mappings
recipient_bcc_maps = hash:/etc/postfix/recipient_bcc
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_tls_security_level = may
smtp_tls_session_cache_database =
btree:$data_directory/smtp_tls_session_cache
smtpd_banner = $myhostname ESMTP
smtpd_recipient_restrictions =
permit_sasl_authenticated,
reject_unauth_destination,
check_policy_service unix:/var/spool/postfix/postgrey/socket, reject_unknown_client_hostname, reject_non_fqdn_recipient,
reject_unverified_recipient,
reject_rbl_client cbl.abuseat.org, reject_rbl_client dialups.mail-abuse.org, permit
smtpd_reject_unlisted_sender = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = /var/spool/postfix/private/dovecot-auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_cert_file = /root/cert/mx.mydomain.ru.crt
smtpd_tls_key_file = /root/cert/mx.mydomain.ru.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
soft_bounce = no
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:$config_directory/sql/valias.cf
virtual_gid_maps = static:12
virtual_mailbox_base = /var/vmail
virtual_mailbox_domains = mysql:$config_directory/sql/vdomains.cf
virtual_mailbox_maps = mysql:$config_directory/sql/vmailbox.cf
virtual_minimum_uid = 1150
virtual_transport = dovecot
virtual_uid_maps = static:1150
Проверяю так:
# telnet mx.mydomain.ru 25
Trying 192.168.0.1...
Connected to mx.mydomain.ru.
Escape character is '^]'.
220 mx.mydomain.ru ESMTP
ehlo client.mydomain.ru
250-mx.mydomain.ru
250-PIPELINING
250-SIZE 52428800
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN CRAM-MD5
250-AUTH=PLAIN LOGIN CRAM-MD5
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:<director@mydomain.ru>
250 2.1.0 Ok
rcpt to:<admin@mydomain.ru>
250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
Вас повышают до технического директора компании! Оклад 300 000 рублей в месяц!
.
250 2.0.0 Ok: queued as DCEB5B204BC
quit
221 2.0.0 Bye
Connection closed by foreign host.
