2014-10-21 20:46:53 -05:00
|
|
|
# Allow certain users to send email as another user
|
2014-10-21 10:28:41 -05:00
|
|
|
|
|
|
|
|
iRedMail configures Postfix to
|
|
|
|
|
reject the request when sender specifies an owner for the MAIL FROM address
|
|
|
|
|
(`From:` header), but the client is not (SASL) logged in as that MAIL FROM
|
|
|
|
|
address owner; or when the client is (SASL) logged in, but the client login
|
|
|
|
|
name doesn't own the MAIL FROM address.
|
|
|
|
|
|
|
|
|
|
Sometimes we do need to send email as another user, this tutorial describes
|
|
|
|
|
how to allow certain users to do this with iRedAPD plugin
|
|
|
|
|
`reject_sender_login_mismatch`.
|
|
|
|
|
|
|
|
|
|
* Remove `reject_sender_login_mismatch` restriction rule in Postfix
|
|
|
|
|
setting `smtpd_sender_restrictions` (`/etc/postfix/main.cf`). Out iRedAPD
|
|
|
|
|
plugin will do the same restriction for you.
|
|
|
|
|
|
|
|
|
|
After removed `reject_sender_login_mismatch`, Postfix setting looks like
|
|
|
|
|
below:
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
* Enable plugin `reject_sender_login_mismatch` in iRedAPD config file
|
|
|
|
|
`/opt/iredapd/settings.py`:
|
|
|
|
|
|
|
|
|
|
```python
|
|
|
|
|
plugins = ['reject_sender_login_mismatch', ...]
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
* List senders who are allowed to send email as different users in iRedAPD
|
|
|
|
|
config file `/opt/iredapd/settings.py`, in parameter
|
|
|
|
|
`ALLOWED_LOGIN_MISMATCH_SENDERS`. For example:
|
|
|
|
|
|
|
|
|
|
```python
|
|
|
|
|
ALLOWED_LOGIN_MISMATCH_SENDERS = ['user1@here.com', 'user2@here.com']
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
NOTE: this parameter does not present by default, please add it manually.
|
|
|
|
|
|
|
|
|
|
Restart iRedAPD service. That's all.
|
