58 lines
3.1 KiB
HTML
58 lines
3.1 KiB
HTML
<html>
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<title>Allow certain users to send email as another user</title>
|
|
<link rel="stylesheet" type="text/css" href="./css/markdown.css" />
|
|
</head>
|
|
<body>
|
|
|
|
<div id="navigation">
|
|
<a href="http://www.iredmail.org" target="_blank"><img alt="iRedMail web site" src="images/logo-iredmail.png" style="vertical-align: middle; height: 30px;"/> <span>iRedMail</span></a>
|
|
// <a href="./index.html">Document Index</a></div><h1 id="allow-certain-users-to-send-email-as-another-user">Allow certain users to send email as another user</h1>
|
|
<p>iRedMail configures Postfix to
|
|
reject the request when sender specifies an owner for the MAIL FROM address
|
|
(<code>From:</code> header), but the client is not (SASL) logged in as that MAIL FROM
|
|
address owner; or when the client is (SASL) logged in, but the client login
|
|
name doesn't own the MAIL FROM address.</p>
|
|
<p>Sometimes we do need to send email as another user, this tutorial describes
|
|
how to allow certain users to do this with iRedAPD plugin
|
|
<code>reject_sender_login_mismatch</code>.</p>
|
|
<ul>
|
|
<li>
|
|
<p>Remove <code>reject_sender_login_mismatch</code> restriction rule in Postfix
|
|
setting <code>smtpd_sender_restrictions</code> (<code>/etc/postfix/main.cf</code>). Out iRedAPD
|
|
plugin will do the same restriction for you.</p>
|
|
<p>After removed <code>reject_sender_login_mismatch</code>, Postfix setting looks like
|
|
below:</p>
|
|
</li>
|
|
</ul>
|
|
<pre><code>smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated
|
|
</code></pre>
|
|
|
|
<ul>
|
|
<li>Enable plugin <code>reject_sender_login_mismatch</code> in iRedAPD config file
|
|
<code>/opt/iredapd/settings.py</code>:</li>
|
|
</ul>
|
|
<pre><code class="python">plugins = ['reject_sender_login_mismatch', ...]
|
|
</code></pre>
|
|
|
|
<ul>
|
|
<li>List senders who are allowed to send email as different users in iRedAPD
|
|
config file <code>/opt/iredapd/settings.py</code>, in parameter
|
|
<code>ALLOWED_LOGIN_MISMATCH_SENDERS</code>. For example:</li>
|
|
</ul>
|
|
<pre><code class="python">ALLOWED_LOGIN_MISMATCH_SENDERS = ['user1@here.com', 'user2@here.com']
|
|
</code></pre>
|
|
|
|
<pre><code>NOTE: this parameter does not present by default, please add it manually.
|
|
</code></pre>
|
|
<p>Restart iRedAPD service. That's all.</p><p style="text-align: center; color: grey;">All documents are available in <a href="https://bitbucket.org/zhb/iredmail-docs/src">BitBucket repository</a>, and published under <a href="http://creativecommons.org/licenses/by-nd/3.0/us/" target="_blank">Creative Commons</a> license. If you found something wrong, please do <a href="http://www.iredmail.org/contact.html">contact us</a> to fix it.<script>
|
|
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
|
|
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
|
|
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
|
|
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
|
|
|
|
ga('create', 'UA-3293801-21', 'auto');
|
|
ga('send', 'pageview');
|
|
</script>
|
|
</body></html> |