86 lines
4.1 KiB
HTML
86 lines
4.1 KiB
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<title>Allow user to send email without smtp authentication</title>
|
|
<link rel="stylesheet" type="text/css" href="./css/markdown.css" />
|
|
</head>
|
|
<body>
|
|
|
|
<div id="navigation">
|
|
<a href="https://www.iredmail.org" target="_blank">
|
|
<img alt="iRedMail web site"
|
|
src="./images/logo-iredmail.png"
|
|
style="vertical-align: middle; height: 30px;"
|
|
/>
|
|
<span>iRedMail</span>
|
|
</a>
|
|
// <a href="./index.html">Document Index</a></div><div class="admonition note">
|
|
<p class="admonition-title">This tutorial is available in other languages. <a href="https://bitbucket.org/zhb/iredmail-docs/src">Help translate more</a></p>
|
|
<p><a href="./allow.user.to.send.email.without.authentication-it_IT.html">Italiano</a> / <a href="./allow.user.to.send.email.without.authentication-zh_CN.html">简体中文</a> /</p>
|
|
</div>
|
|
<h1 id="allow-user-to-send-email-without-smtp-authentication">Allow user to send email without smtp authentication</h1>
|
|
<h2 id="postfix">Postfix</h2>
|
|
<p>Create a plain text file: <code>/etc/postfix/accepted_unauth_senders</code>, list all
|
|
users' email addresses which are allowed to send email without smtp
|
|
authentication. We use user email address <code>user@example.com</code> for example:</p>
|
|
<pre><code>user@example.com OK
|
|
</code></pre>
|
|
|
|
<p>It's ok to use IP address instead like below:</p>
|
|
<blockquote>
|
|
<p>For more allowed sender format, please check Postfix manual page: <a href="http://www.postfix.org/access.5.html">access(5)</a>.</p>
|
|
</blockquote>
|
|
<pre><code>192.168.1.1 OK
|
|
192.168.2 OK
|
|
172.16 OK
|
|
</code></pre>
|
|
|
|
<p>Create hash db file with <code>postmap</code> command:</p>
|
|
<pre><code># postmap hash:/etc/postfix/accepted_unauth_senders
|
|
</code></pre>
|
|
|
|
<p>Modify Postfix config file <code>/etc/postfix/main.cf</code> to use this text file:</p>
|
|
<pre><code>smtpd_sender_restrictions =
|
|
check_sender_access hash:/etc/postfix/accepted_unauth_senders,
|
|
[...OTHER RESTRICTIONS HERE...]
|
|
</code></pre>
|
|
|
|
<p>Restart/reload postfix to make it work:</p>
|
|
<pre><code># /etc/init.d/postfix restart
|
|
</code></pre>
|
|
|
|
<h2 id="iredapd">iRedAPD</h2>
|
|
<p>iRedAPD plugin <code>reject_sender_login_mismatch</code> will check forged sender address.
|
|
If sender domain is hosted on your server, but no smtp auth, it will be
|
|
considered as a forged email. In this case, iRedAPD will reject this email
|
|
(with rejection message: <code>Policy rejection not logged in</code>), so we need to
|
|
bypass either sender email address. If email is sent by an internal network
|
|
device like printer, fax, we can also its IP address directly.</p>
|
|
<ul>
|
|
<li>To bypass sender email address <code>user@example.com</code>, please add setting in
|
|
<code>/opt/iredapd/settings.py</code> like below:</li>
|
|
</ul>
|
|
<pre><code>ALLOWED_FORGED_SENDERS = ['user@example.com']
|
|
</code></pre>
|
|
|
|
<ul>
|
|
<li>To bypass sender IP address or network, for example, <code>192.168.0.1</code> and
|
|
<code>192.168.1.0/24</code>, please add setting in <code>/opt/iredapd/settings.py</code> like below:</li>
|
|
</ul>
|
|
<pre><code>MYNETWORKS = ['192.168.0.1', '192.168.1.0/24']
|
|
</code></pre>
|
|
|
|
<p>Restarting iRedAPD service is required if you updated <code>/opt/iredapd/settings.py</code>.</p><div class="footer">
|
|
<p style="text-align: center; color: grey;">All documents are available in <a href="https://bitbucket.org/zhb/iredmail-docs/src">BitBucket repository</a>, and published under <a href="http://creativecommons.org/licenses/by-nd/3.0/us/" target="_blank">Creative Commons</a> license. You can <a href="https://bitbucket.org/zhb/iredmail-docs/get/tip.tar.bz2">download the latest version</a> for offline reading. If you found something wrong, please do <a href="https://www.iredmail.org/contact.html">contact us</a> to fix it.</p>
|
|
</div>
|
|
<!-- Global site tag (gtag.js) - Google Analytics -->
|
|
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-3293801-21"></script>
|
|
<script>
|
|
window.dataLayer = window.dataLayer || [];
|
|
function gtag(){dataLayer.push(arguments);}
|
|
gtag('js', new Date());
|
|
|
|
gtag('config', 'UA-3293801-21');
|
|
</script>
|
|
</body></html> |