Ajuda com Autenticacao SMTP

phcmaia
(usa Fedora)

Enviado em 21/04/2010 - 10:44h

Olá pessoal ,

Depois de mt tentar sozinho decidir pedir arrego . kkkk
Estou com o seguinte problema
Ultilizo saslauthd para autenticar meus usuarios BLZA ta funcionando , se o usuario nao marcar a opcao aparece "Not Logged In" , entretanto , se o usuario colocar o no endereço do remetente MAIL FROM um endereco tipo jkdasdda@gmail.com e nao marcar a autenticacao o servidor tá enviando !!! se o usuario colocar asdjkadd@meudominio ele nao deixa enviar pois nao é uma conta valida do meu dominio oq é legal ! Estou quebrando a cabeca para como bloquear esse envio de sem autenticacao com emails que nao sao do meu dominio !
Se vcs puderem me ajudar fico agradecido pois nao estou conseguindo enxergar oq pode esta acontecendo !
Vou compartilhar meu main.cf

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no
smtpd_helo_required = yes
# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_use_tls = yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
#smtp_generic_maps = hash:/etc/postfix/generic
newaliases_path = /usr/bin/newaliases_postfix

myhostname = mailserver.meudominio.gov.br
alias_maps = hash:/etc/postfix/aliases
alias_database = hash:/etc/postfix/aliases
myorigin = /etc/mailname
mydestination = inpa.gov.br,localhost.meudominio.gov.br, localhost
mynetworks = 127.0.0.0/8 172.20.0.0/16 172.21.0.0/16 172.22.0.0/16 172.23.0.0/16 172.24.0.0/16 172.25.0.0/16 172.26.0.0/16 172.27.0.0/16 172.28.0.0/16
mailbox_command =
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = ipv4
unknown_local_recipient_reject_code = 550
#SASL
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
#smtpd_sasl_path = smtpd
#smtpd_sasl_local_domain = $myhostname
smtpd_sender_login_maps = hash:/etc/postfix/sender_login_maps
#RESTRICOES
smtpd_recipient_restrictions = reject_unauth_destination, reject_unauth_pipelining, reject_unlisted_sender, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_non_fqdn_sender, reject_invalid_helo_hostname, reject_unlisted_recipient, reject_rbl_client zen.spamhaus.org, reject_rbl_client sbl.spamhaus.org, permit_sasl_authenticated, permit_mynetworks , reject_non_fqdn_helo_hostname, reject_unauth_destination

smtpd_sender_restrictions = reject_unverified_sender, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, reject_sender_login_mismatch, reject_unlisted_recipient, reject_non_fqdn_sender, reject_unknown_sender_domain ,reject_unauth_pipelining, permit_sasl_authenticated,

smtpd_reject_unlisted_sender=yes
smtpd_tls_auth_only = no
smtp_tls_note_starttls_offer = yes
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_error_sleep_time = 0
smtpd_client_connection_count_limit = 5
tls_random_source = dev:/dev/urandom
home_mailbox = Maildir/
header_checks = regexp:/etc/postfix/header_checks
body_checks = regexp:/etc/postfix/body_checks
smtp_destination_recipient_limit = 20
ignore_mx_lookup_error = yes