Re: exception to tls and sasl with postfix

* Peter Marshall <peter.marshall@caris.com>:
> I am still stuck on this.
>
> Basically what I want is to force TLS and sasl on everyone who wants to
> send mail using my mail server except internal users. Does anyone know
> how to do this. I have googled arround a lot, and am still not able to
> find a solution.

This setup is described in our book.

smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination

Now require TSL when SASL is to be used:
http://www.postfix.org/TLS_README.html#server_tls_auth

smtpd_tls_auth_only = yes

That's it.

--
Ralf Hildebrandt (Ralf.Hildebrandt@charite.de) spamtrap@charite.de
http://www.postfix-book.com/ Tel. +49 (0)30-450 570-155