We have an email, company@example.com that when you send to it, it goes
out to the whole company. I would like to limit it so that only certain
accounts like "theboss@example.com" can send to it.
I have read http://www.postfix.org/RESTRICTION_CLASS_README.html and it
actually seemed simple enough but it doesnt work.



heres what I have in main.cf

smtpd_restriction_classes = insiders_only
insiders_only = check_sender_access hash:/etc/postfix/insiders,reject

smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks
reject_unauth_destination
reject_rbl_client relays.ordb.org
reject_rbl_client sbl.spamhaus.org
reject_rbl_client opm.blitzed.org
reject_rbl_client blackholes.wirehub.net
reject_rbl_client list.dsbl.org
check_recipient_access hash:/etc/postfix/protected_destinations


heres my protected_destinations:
company@example.com insiders_only

heres my insiders:
theboss@example.com

I have postmapped the 2 files and reloaded postfix.

Still anyone can send to company@example.com.
I also realize that the example in
http://www.postfix.org/RESTRICTION_CLASS_README.html was really to
restrict sending to an address from the outside and that part works.

thanks

harry

correction on the insiders file:
theboss@example.com OK

hforbess@gmail.com wrote:
> We have an email, company@example.com that when you send to it, it goes
> out to the whole company. I would like to limit it so that only certain
> accounts like "theboss@example.com" can send to it.
> I have read http://www.postfix.org/RESTRICTION_CLASS_README.html and it
> actually seemed simple enough but it doesnt work.
>
>
>
> heres what I have in main.cf
>
> smtpd_restriction_classes = insiders_only
> insiders_only = check_sender_access hash:/etc/postfix/insiders,reject
>
> smtpd_recipient_restrictions = permit_sasl_authenticated,
> permit_mynetworks
> reject_unauth_destination
> reject_rbl_client relays.ordb.org
> reject_rbl_client sbl.spamhaus.org
> reject_rbl_client opm.blitzed.org
> reject_rbl_client blackholes.wirehub.net
> reject_rbl_client list.dsbl.org
> check_recipient_access hash:/etc/postfix/protected_destinations
>
>
> heres my protected_destinations:
> company@example.com insiders_only
>
> heres my insiders:
> theboss@example.com
>
> I have postmapped the 2 files and reloaded postfix.
>
> Still anyone can send to company@example.com.
> I also realize that the example in
> http://www.postfix.org/RESTRICTION_CLASS_README.html was really to
> restrict sending to an address from the outside and that part works.
>
> thanks
>
> harry
>

You need to move "check_recipient_access hash:/etc/postfix/protected_destinations"
from the bottom to the top of the smtpd_recipient_restrictions list.

--
Greg

Yes, that did it.
Thanks Greg.

harry