Update manage.iredapd.html with details of iRedAPD plugin 'reject_sender_login_mismatch'.

This commit is contained in:
Zhang Huangbin 2016-05-03 14:33:13 +08:00
parent c2cd016b29
commit d12eadfecd
7 changed files with 111 additions and 29 deletions

View File

@ -1,4 +1,4 @@
# Manage iRedAPD (white/blacklists, greylisting) # Manage iRedAPD (white/blacklists, greylisting, and more)
[TOC] [TOC]
@ -56,7 +56,51 @@ update it with new values. This way you will keep custom settings after
upgrading iRedAPD -- because iRedAPD upgrade tool will copy upgrading iRedAPD -- because iRedAPD upgrade tool will copy
`/opt/iredapd/settings.py` to new iRedAPD release during upgrading. `/opt/iredapd/settings.py` to new iRedAPD release during upgrading.
## White/Blacklisting ## Feature: Sender address control
Plugin `reject_sender_login_mismatch` will reject emails if:
* smtp authentication username (`sasl_username`) is different than than sender address (`From:`). This is usually called `sender login mismatch`. Note: This can be performed by Postfix with restriction rule `reject_sender_login_mismatch` in `smtpd_sender_restrictions =`.
* sender address is forged (sender doesn't perform smtp auth and sender domain is hosted on localhost)
It offers some parameters to control whether or not to reject email:
* for forged sender address checking:
```
# Check whether sender is forged in message sent without smtp auth.
CHECK_FORGED_SENDER = True
# If you allow someone or some service providers to send email as forged
# (your local) address, you can list all allowed addresses in this parameter.
# For example, if some ISPs may send email as 'user@mydomain.com' (mydomain.com
# is hosted on your server) to you, you should add `user@mydomain.com` as one
# of forged senders.
# Sample: ALLOWED_FORGED_SENDERS = ['user@mydomain.com', 'mydomain.com']
ALLOWED_FORGED_SENDERS = []
```
* for sender login mismatch:
```
# Allow sender login mismatch for specified senders or sender domains.
#
# Sample setting: allow local user `user@local_domain_1.com` and all users
# under `local_domain_2.com` to send email as other users.
#
# ALLOWED_LOGIN_MISMATCH_SENDERS = ['user@local_domain_1.com', 'local_domain_2.com']
ALLOWED_LOGIN_MISMATCH_SENDERS = []
# Strictly allow sender to send as one of user alias addresses. Default is True.
ALLOWED_LOGIN_MISMATCH_STRICTLY = True
# Allow member of mail lists/alias account to send email as mail list/alias
# ('From: <email_of_mail_list>' in mail header). Default is False.
ALLOWED_LOGIN_MISMATCH_LIST_MEMBER = False
```
## Feature: White/Blacklisting
### How to disable white/blacklists completely ### How to disable white/blacklists completely
@ -141,7 +185,7 @@ White/blacklisting is controlled by plugin `amavisd_wblist` (file
# python wblist_admin.py --account user@mydomain.com --list --blacklist # python wblist_admin.py --account user@mydomain.com --list --blacklist
``` ```
## Greylisting ## Feature: Greylisting
!!! note !!! note

View File

@ -464,7 +464,7 @@ We need to update 2 parameters in Postfix config file: `proxy_read_maps`,
* On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings: * On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings:
``` ```
postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf' postconf -e sender_dependent_relayhost_maps='proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf'
``` ```
@ -472,7 +472,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:ldap:/etc/postfix/ldap/sender
* On __FreeBSD__, please run 2 commands below to update Postfix settings: * On __FreeBSD__, please run 2 commands below to update Postfix settings:
``` ```
postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf' postconf -e sender_dependent_relayhost_maps='proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf'
``` ```
@ -617,7 +617,7 @@ We need to update 2 parameters in Postfix config file: `proxy_read_maps`,
* On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings: * On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings:
``` ```
postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:mysql:/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/etc/postfix/mysql/sender_dependent_relayhost_maps.cf'
``` ```
@ -625,7 +625,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:mysql:/etc/postfix/mysql/send
* On __FreeBSD__, please run 2 commands below to update Postfix settings: * On __FreeBSD__, please run 2 commands below to update Postfix settings:
``` ```
postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf'
``` ```
@ -742,7 +742,7 @@ We need to update 2 parameters in Postfix config file: `proxy_read_maps`,
* On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings: * On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings:
``` ```
postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:pgsql:/etc/postfix/pgsql/sender_dependent_relayhost_maps.cf' postconf -e sender_dependent_relayhost_maps='proxy:pgsql:/etc/postfix/pgsql/sender_dependent_relayhost_maps.cf'
``` ```
@ -750,7 +750,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:pgsql:/etc/postfix/pgsql/send
* On __FreeBSD__, please run 2 commands below to update Postfix settings: * On __FreeBSD__, please run 2 commands below to update Postfix settings:
``` ```
postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf'
``` ```

View File

@ -33,9 +33,7 @@
We offer remote upgrade support if you don't want to get your hands dirty, We offer remote upgrade support if you don't want to get your hands dirty,
check [the details](../support.html) and [contact us](../contact.html). check [the details](../support.html) and [contact us](../contact.html).
<!--
* [0.9.5](http://www.iredmail.org/forum/topic.html), May 1, 2016. [Upgrade from iRedMail-0.9.4](./upgrade.iredmail.0.9.4-0.9.5.html) (contains SQL/LDAP structure changes) * [0.9.5](http://www.iredmail.org/forum/topic.html), May 1, 2016. [Upgrade from iRedMail-0.9.4](./upgrade.iredmail.0.9.4-0.9.5.html) (contains SQL/LDAP structure changes)
-->
* [0.9.4](http://www.iredmail.org/forum/topic10512.html), Jan 25, 2016. [Upgrade from iRedMail-0.9.3](./upgrade.iredmail.0.9.3-0.9.4.html) * [0.9.4](http://www.iredmail.org/forum/topic10512.html), Jan 25, 2016. [Upgrade from iRedMail-0.9.3](./upgrade.iredmail.0.9.3-0.9.4.html)
* [0.9.3](http://www.iredmail.org/forum/topic10261.html), Dec 14, 2015. [Upgrade from iRedMail-0.9.2](./upgrade.iredmail.0.9.2-0.9.3.html) (contains SQL/LDAP structure changes) * [0.9.3](http://www.iredmail.org/forum/topic10261.html), Dec 14, 2015. [Upgrade from iRedMail-0.9.2](./upgrade.iredmail.0.9.2-0.9.3.html) (contains SQL/LDAP structure changes)
* [0.9.2](http://www.iredmail.org/forum/topic9280.html), Jun 3, 2015. [Upgrade from iRedMail-0.9.1](./upgrade.iredmail.0.9.1-0.9.2.html) * [0.9.2](http://www.iredmail.org/forum/topic9280.html), Jun 3, 2015. [Upgrade from iRedMail-0.9.1](./upgrade.iredmail.0.9.1-0.9.2.html)

View File

@ -111,7 +111,7 @@
<li><a href="ldap.bulk.create.mail.users.html">LDAP: Bulk create mail users</a></li> <li><a href="ldap.bulk.create.mail.users.html">LDAP: Bulk create mail users</a></li>
<li><a href="ldap.user.mail.forwarding.html">LDAP: User mail forwarding</a></li> <li><a href="ldap.user.mail.forwarding.html">LDAP: User mail forwarding</a></li>
<li><a href="mailbox.sharing.html">Mailbox sharing (Sharing IMAP folder with other users)</a></li> <li><a href="mailbox.sharing.html">Mailbox sharing (Sharing IMAP folder with other users)</a></li>
<li><a href="manage.iredapd.html">Manage iRedAPD (white/blacklists, greylisting)</a></li> <li><a href="manage.iredapd.html">Manage iRedAPD (white/blacklists, greylisting, and more)</a></li>
<li><a href="monitor.incoming.and.outgoing.mails.with.bcc.html">Monitor incoming and outgoing mails with BCC</a></li> <li><a href="monitor.incoming.and.outgoing.mails.with.bcc.html">Monitor incoming and outgoing mails with BCC</a></li>
<li><a href="move.detected.spam.to.junk.folder.html">Move detected spam to Junk folder</a></li> <li><a href="move.detected.spam.to.junk.folder.html">Move detected spam to Junk folder</a></li>
<li><a href="per-account.transport.html">Per-domain or per-user transport (relay)</a></li> <li><a href="per-account.transport.html">Per-domain or per-user transport (relay)</a></li>

View File

@ -61,11 +61,8 @@
<p>We offer remote upgrade support if you don't want to get your hands dirty, <p>We offer remote upgrade support if you don't want to get your hands dirty,
check <a href="../support.html">the details</a> and <a href="../contact.html">contact us</a>.</p> check <a href="../support.html">the details</a> and <a href="../contact.html">contact us</a>.</p>
</div> </div>
<!--
* [0.9.5](http://www.iredmail.org/forum/topic.html), May 1, 2016. [Upgrade from iRedMail-0.9.4](./upgrade.iredmail.0.9.4-0.9.5.html) (contains SQL/LDAP structure changes)
-->
<ul> <ul>
<li><a href="http://www.iredmail.org/forum/topic.html">0.9.5</a>, May 1, 2016. <a href="./upgrade.iredmail.0.9.4-0.9.5.html">Upgrade from iRedMail-0.9.4</a> (contains SQL/LDAP structure changes)</li>
<li><a href="http://www.iredmail.org/forum/topic10512.html">0.9.4</a>, Jan 25, 2016. <a href="./upgrade.iredmail.0.9.3-0.9.4.html">Upgrade from iRedMail-0.9.3</a></li> <li><a href="http://www.iredmail.org/forum/topic10512.html">0.9.4</a>, Jan 25, 2016. <a href="./upgrade.iredmail.0.9.3-0.9.4.html">Upgrade from iRedMail-0.9.3</a></li>
<li><a href="http://www.iredmail.org/forum/topic10261.html">0.9.3</a>, Dec 14, 2015. <a href="./upgrade.iredmail.0.9.2-0.9.3.html">Upgrade from iRedMail-0.9.2</a> (contains SQL/LDAP structure changes)</li> <li><a href="http://www.iredmail.org/forum/topic10261.html">0.9.3</a>, Dec 14, 2015. <a href="./upgrade.iredmail.0.9.2-0.9.3.html">Upgrade from iRedMail-0.9.2</a> (contains SQL/LDAP structure changes)</li>
<li><a href="http://www.iredmail.org/forum/topic9280.html">0.9.2</a>, Jun 3, 2015. <a href="./upgrade.iredmail.0.9.1-0.9.2.html">Upgrade from iRedMail-0.9.1</a></li> <li><a href="http://www.iredmail.org/forum/topic9280.html">0.9.2</a>, Jun 3, 2015. <a href="./upgrade.iredmail.0.9.1-0.9.2.html">Upgrade from iRedMail-0.9.1</a></li>

View File

@ -1,7 +1,7 @@
<html> <html>
<head> <head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Manage iRedAPD (white/blacklists, greylisting)</title> <title>Manage iRedAPD (white/blacklists, greylisting, and more)</title>
<link rel="stylesheet" type="text/css" href="./css/markdown.css" /> <link rel="stylesheet" type="text/css" href="./css/markdown.css" />
</head> </head>
<body> <body>
@ -14,15 +14,16 @@
/>&nbsp; />&nbsp;
<span>iRedMail</span> <span>iRedMail</span>
</a> </a>
&nbsp;&nbsp;//&nbsp;&nbsp;<a href="./index.html">Document Index</a></div><h1 id="manage-iredapd-whiteblacklists-greylisting">Manage iRedAPD (white/blacklists, greylisting)</h1> &nbsp;&nbsp;//&nbsp;&nbsp;<a href="./index.html">Document Index</a></div><h1 id="manage-iredapd-whiteblacklists-greylisting-and-more">Manage iRedAPD (white/blacklists, greylisting, and more)</h1>
<div class="toc"> <div class="toc">
<ul> <ul>
<li><a href="#manage-iredapd-whiteblacklists-greylisting">Manage iRedAPD (white/blacklists, greylisting)</a><ul> <li><a href="#manage-iredapd-whiteblacklists-greylisting-and-more">Manage iRedAPD (white/blacklists, greylisting, and more)</a><ul>
<li><a href="#introduce-iredapd">Introduce iRedAPD</a></li> <li><a href="#introduce-iredapd">Introduce iRedAPD</a></li>
<li><a href="#how-to-disable-iredapd-service">How to disable iRedAPD service</a></li> <li><a href="#how-to-disable-iredapd-service">How to disable iRedAPD service</a></li>
<li><a href="#how-to-enable-or-disable-iredapd-plugins">How to enable or disable iRedAPD plugins</a></li> <li><a href="#how-to-enable-or-disable-iredapd-plugins">How to enable or disable iRedAPD plugins</a></li>
<li><a href="#how-to-add-custom-settings">How to add custom settings</a></li> <li><a href="#how-to-add-custom-settings">How to add custom settings</a></li>
<li><a href="#whiteblacklisting">White/Blacklisting</a><ul> <li><a href="#feature-sender-address-control">Feature: Sender address control</a></li>
<li><a href="#feature-whiteblacklisting">Feature: White/Blacklisting</a><ul>
<li><a href="#how-to-disable-whiteblacklists-completely">How to disable white/blacklists completely</a></li> <li><a href="#how-to-disable-whiteblacklists-completely">How to disable white/blacklists completely</a></li>
<li><a href="#manage-whiteblacklists">Manage white/blacklists</a><ul> <li><a href="#manage-whiteblacklists">Manage white/blacklists</a><ul>
<li><a href="#available-arguments">Available arguments</a></li> <li><a href="#available-arguments">Available arguments</a></li>
@ -31,7 +32,7 @@
</li> </li>
</ul> </ul>
</li> </li>
<li><a href="#greylisting">Greylisting</a><ul> <li><a href="#feature-greylisting">Feature: Greylisting</a><ul>
<li><a href="#how-to-disable-greylisting-completely">How to disable greylisting completely</a></li> <li><a href="#how-to-disable-greylisting-completely">How to disable greylisting completely</a></li>
<li><a href="#general-settings">General settings</a></li> <li><a href="#general-settings">General settings</a></li>
<li><a href="#manage-greylisting-settings">Manage greylisting settings</a><ul> <li><a href="#manage-greylisting-settings">Manage greylisting settings</a><ul>
@ -88,7 +89,49 @@ Instead, you should copy the settings you want to modify from
update it with new values. This way you will keep custom settings after update it with new values. This way you will keep custom settings after
upgrading iRedAPD -- because iRedAPD upgrade tool will copy upgrading iRedAPD -- because iRedAPD upgrade tool will copy
<code>/opt/iredapd/settings.py</code> to new iRedAPD release during upgrading.</p> <code>/opt/iredapd/settings.py</code> to new iRedAPD release during upgrading.</p>
<h2 id="whiteblacklisting">White/Blacklisting</h2> <h2 id="feature-sender-address-control">Feature: Sender address control</h2>
<p>Plugin <code>reject_sender_login_mismatch</code> will reject emails if:</p>
<ul>
<li>smtp authentication username (<code>sasl_username</code>) is different than than sender address (<code>From:</code>). This is usually called <code>sender login mismatch</code>. Note: This can be performed by Postfix with restriction rule <code>reject_sender_login_mismatch</code> in <code>smtpd_sender_restrictions =</code>.</li>
<li>sender address is forged (sender doesn't perform smtp auth and sender domain is hosted on localhost)</li>
</ul>
<p>It offers some parameters to control whether or not to reject email:</p>
<ul>
<li>for forged sender address checking:</li>
</ul>
<pre><code># Check whether sender is forged in message sent without smtp auth.
CHECK_FORGED_SENDER = True
# If you allow someone or some service providers to send email as forged
# (your local) address, you can list all allowed addresses in this parameter.
# For example, if some ISPs may send email as 'user@mydomain.com' (mydomain.com
# is hosted on your server) to you, you should add `user@mydomain.com` as one
# of forged senders.
# Sample: ALLOWED_FORGED_SENDERS = ['user@mydomain.com', 'mydomain.com']
ALLOWED_FORGED_SENDERS = []
</code></pre>
<ul>
<li>for sender login mismatch:</li>
</ul>
<pre><code># Allow sender login mismatch for specified senders or sender domains.
#
# Sample setting: allow local user `user@local_domain_1.com` and all users
# under `local_domain_2.com` to send email as other users.
#
# ALLOWED_LOGIN_MISMATCH_SENDERS = ['user@local_domain_1.com', 'local_domain_2.com']
ALLOWED_LOGIN_MISMATCH_SENDERS = []
# Strictly allow sender to send as one of user alias addresses. Default is True.
ALLOWED_LOGIN_MISMATCH_STRICTLY = True
# Allow member of mail lists/alias account to send email as mail list/alias
# ('From: &lt;email_of_mail_list&gt;' in mail header). Default is False.
ALLOWED_LOGIN_MISMATCH_LIST_MEMBER = False
</code></pre>
<h2 id="feature-whiteblacklisting">Feature: White/Blacklisting</h2>
<h3 id="how-to-disable-whiteblacklists-completely">How to disable white/blacklists completely</h3> <h3 id="how-to-disable-whiteblacklists-completely">How to disable white/blacklists completely</h3>
<p>To disable white/blacklists completely, please remove plugin name <p>To disable white/blacklists completely, please remove plugin name
<code>amavisd_wblist</code> in iRedAPD config file <code>/opt/iredapd/settings.py</code>, <code>amavisd_wblist</code> in iRedAPD config file <code>/opt/iredapd/settings.py</code>,
@ -166,7 +209,7 @@ parameter <code>plugins =</code>:</p>
# python wblist_admin.py --account user@mydomain.com --list --blacklist # python wblist_admin.py --account user@mydomain.com --list --blacklist
</code></pre> </code></pre>
<h2 id="greylisting">Greylisting</h2> <h2 id="feature-greylisting">Feature: Greylisting</h2>
<div class="admonition note"> <div class="admonition note">
<p class="admonition-title">Note</p> <p class="admonition-title">Note</p>
<p>Greylisting is available in iRedAPD-1.7.0 and later releases.</p> <p>Greylisting is available in iRedAPD-1.7.0 and later releases.</p>

View File

@ -507,7 +507,7 @@ perl -pi -e 's#mtaTransport#senderRelayHost#g' sender_dependent_relayhost_maps*.
<ul> <ul>
<li>On <strong>Linux/OpenBSD</strong>, please run 2 commands below to update Postfix settings:</li> <li>On <strong>Linux/OpenBSD</strong>, please run 2 commands below to update Postfix settings:</li>
</ul> </ul>
<pre><code>postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' <pre><code>postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf' postconf -e sender_dependent_relayhost_maps='proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf'
</code></pre> </code></pre>
@ -515,7 +515,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:ldap:/etc/postfix/ldap/sender
<ul> <ul>
<li>On <strong>FreeBSD</strong>, please run 2 commands below to update Postfix settings:</li> <li>On <strong>FreeBSD</strong>, please run 2 commands below to update Postfix settings:</li>
</ul> </ul>
<pre><code>postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' <pre><code>postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf' postconf -e sender_dependent_relayhost_maps='proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf'
</code></pre> </code></pre>
@ -636,7 +636,7 @@ by below one:</p>
<ul> <ul>
<li>On <strong>Linux/OpenBSD</strong>, please run 2 commands below to update Postfix settings:</li> <li>On <strong>Linux/OpenBSD</strong>, please run 2 commands below to update Postfix settings:</li>
</ul> </ul>
<pre><code>postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' <pre><code>postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:mysql:/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/etc/postfix/mysql/sender_dependent_relayhost_maps.cf'
</code></pre> </code></pre>
@ -644,7 +644,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:mysql:/etc/postfix/mysql/send
<ul> <ul>
<li>On <strong>FreeBSD</strong>, please run 2 commands below to update Postfix settings:</li> <li>On <strong>FreeBSD</strong>, please run 2 commands below to update Postfix settings:</li>
</ul> </ul>
<pre><code>postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' <pre><code>postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf'
</code></pre> </code></pre>
@ -739,7 +739,7 @@ by below one:</p>
<ul> <ul>
<li>On <strong>Linux/OpenBSD</strong>, please run 2 commands below to update Postfix settings:</li> <li>On <strong>Linux/OpenBSD</strong>, please run 2 commands below to update Postfix settings:</li>
</ul> </ul>
<pre><code>postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' <pre><code>postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:pgsql:/etc/postfix/pgsql/sender_dependent_relayhost_maps.cf' postconf -e sender_dependent_relayhost_maps='proxy:pgsql:/etc/postfix/pgsql/sender_dependent_relayhost_maps.cf'
</code></pre> </code></pre>
@ -747,7 +747,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:pgsql:/etc/postfix/pgsql/send
<ul> <ul>
<li>On <strong>FreeBSD</strong>, please run 2 commands below to update Postfix settings:</li> <li>On <strong>FreeBSD</strong>, please run 2 commands below to update Postfix settings:</li>
</ul> </ul>
<pre><code>postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' <pre><code>postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps'
postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf'
</code></pre> </code></pre>