1.4 KiB
1.4 KiB
Allow certain users to send email as another user
iRedMail configures Postfix to reject the request when sender specifies an
owner for the MAIL FROM address (From:
header), but the client is not (SASL)
logged in as that MAIL FROM address owner; or when the client is (SASL) logged
in, but the client login name doesn't own the MAIL FROM address.
Sometimes we do need to send email as another user, this tutorial describes
how to allow certain users to do this with iRedAPD plugin
reject_sender_login_mismatch
.
-
Remove
reject_sender_login_mismatch
restriction rule in Postfix settingsmtpd_sender_restrictions
(/etc/postfix/main.cf
). Out iRedAPD plugin will do the same restriction for you.After removed
reject_sender_login_mismatch
, Postfix setting looks like below:
smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated
- Enable plugin
reject_sender_login_mismatch
in iRedAPD config file/opt/iredapd/settings.py
:
plugins = ['reject_sender_login_mismatch', ...]
- List senders who are allowed to send email as different users in iRedAPD
config file
/opt/iredapd/settings.py
, in parameterALLOWED_LOGIN_MISMATCH_SENDERS
. For example:
ALLOWED_LOGIN_MISMATCH_SENDERS = ['user1@here.com', 'user2@here.com']
NOTE: this parameter does not present by default, please add it manually.
Restart iRedAPD service. That's all.