[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

limitar por dominios zentyal 3.4



Buenos dias a todos

Tengo una tarea que hacer la empresa para la cual trabajo y debo tener restriccion por dominios en correos

Uso Zentyal 3.4

Es restringir a un grupo de usuarios a enviar y recibir correos .cu , el que quede fuera de este grupo enviara y recibira correo de cualquier dominio.

Alguna idea funcional

Lo he intentdo desde plantilla de zentya /usr/share/zentya/stub...

les dejo lo que he hecho quizas hay algun procedimiento mas sencillo si me ayudan pues mejor

Aclaro que no me gusta esto pero es lo que me piden.

Aqui mi configuracion main.cf.mas

# Generated by Zentyal
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# require helo
smtpd_delay_reject  = yes
smtpd_helo_required = yes

strict_rfc821_envelopes = yes
disable_vrfy_command = yes

smtpd_banner = lsm.ida.cu ESMTP
biff = no

# appending .domain is the MUAs job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

myorigin = /etc/mailname
myhostname = lsm.ida.cu
mydestination = $myorigin,$myhostname,localhost,localhost.$mydomain
smtp_helo_name = leia.ida.cu
## smtp_helo_name = lsm.ida.cu
alias_maps = hash:/etc/aliases

alias_database = hash:/etc/aliases
local_recipient_maps = proxy:unix:passwd.byname $alias_maps

relayhost =



mynetworks = 127.0.0.0/8

message_size_limit = 0
mailbox_size_limit = 0
virtual_mailbox_limit = 0
recipient_delimiter = +
inet_interfaces = all

# Aliases
virtual_alias_domains = $virtual_alias_maps
virtual_alias_maps = ldap:/etc/postfix/valiases.cf,ldap:/etc/postfix/useraliases.cf,ldap:/etc/postfix/groupaliases.cf

# Virtual Domains
dovecot_destination_recipient_limit = 1
virtual_transport = dovecot
virtual_mailbox_base = /var/vmail/
virtual_mailbox_maps= ldap:/etc/postfix/mailbox.cf

virtual_mailbox_domains = ldap:/etc/postfix/vdomains.cf

virtual_minimum_uid = 100
virtual_uid_maps = static:108
virtual_gid_maps = static:114

# TLS/SSL
smtpd_use_tls = yes
smtpd_tls_key_file  = /etc/postfix/sasl/postfix.pem
smtpd_tls_cert_file = /etc/postfix/sasl/postfix.pem
#smtpd_tls_loglevel = 0

### mio -----------------


smtpd_restriction_classes = cu-in, cu-out, int-in, int-out

cu-in = check_sender_access regexp:/etc/postfix/cu, reject
cu-out = check_recipient_access regexp:/etc/postfix/cu, reject
int-in = check_sender_access regexp:/etc/postfix/int, reject
int-out = check_recipient_access regexp:/etc/postfix/int, reject



###stmpd_helo_restrictions = reject_unknown_hostname

#smtpd_recipient_restrictions = permit_mynetworks,
# check_sender_access hash:/etc/postfix/usuarios_out, # check_recipient_access hash:/etc/postfix/filtro_nac,
#                               reject

#smtpd_sender_restrictions =    permit_mynetworks,
# check_recipient_access hash:/etc/postfix/usuarios_in, # check_sender_access hash:/etc/postfix/filtro_nac,
#                               reject

#### --------- mio ------------

# recipient restrictions
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, check_helo_access pcre:/etc/postfix/helo_checks.pcre
##                               permit_mynetworks,
## check_recipient_access hash:/etc/postfix/access-in.cf,
##                               reject

submission_recipient_restrictions = reject_non_fqdn_sender, reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject
smtpd_restriction_classes = submission_recipient_restrictions

# SASL authentication
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
#smtpd_tls_auth_only = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_local_domain =  $myorigin
broken_sasl_auth_clients = yes

smtpd_sender_restrictions=reject_authenticated_sender_login_mismatch
# check_sender_access hash:/etc/postfix/access-out.cf,
                   #       reject

smtpd_sender_login_maps = ldap:/etc/postfix/login.cf

content_filter=smtp-amavis:127.0.0.1:10024


Alguna idea agradezto toda ayuda




Reply to: