Score:1

Require authentication from subset of mynetworks in postfix

cn flag

Is it possible to configure smtp for postfix to require authentication, (e.g. with smtp_sasl_auth_enable = yes), for certain IP ranges but have other ranges un-authenticated?

For our local network we want hosts to be able to relay through the smtp servers without authentication, including sending externally. That network range is listed in mynetworks.

But for other ranges, not on our network but in mynetworks, it would be better to require authentication to smtp.

Is this possible?

Score:1
jp flag

Quote from the documentation

By default, Postfix will forward mail from clients in authorized network blocks to any destination. Authorized networks are defined with the mynetworks configuration parameter.

If you want to require auth for some networks you need to remove them from mynetworks. You'll need to enable relaying for SASL authenticated clients with permit_sasl_authenticated.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.