[SLL] postfix whitelist

[Glenn Stone]

On Mon, Jan 15, 2007 at 09:55:08AM -0800, Adam Quigley wrote:
>We have a request-tracker system set up but we only want specific
>companies we support to be able to send mail to it.  Is there a way to
>refuse all mail except domains specified in a whitelist?

Several, depending on how you want to do it: By IP, by sender, by smtp
client, by authorization... look at smtpd_recipient_restrictions in the docs
on postfix.org for details.  I'm thinking you probably want to do it with a
check_sender_access pcre (Perl-Compatible Regular Expression) file... 

Oooh!  Learned something!  Postfix implements per-recipient access
restrictions.  Howto is here:

http://www.postfix.org/RESTRICTION_CLASS_README.html

This will enable you to restrict only the request-tracker alias to the
domains you want, without killing everyone else's access; you won't have to
have a separate Postfix server just for the app.  (And given that I run
multiple domains, I may do some tinkering with it myself... )  Run 
"postconf -m" to find out what type of maps you can support; you will want
to add PCRE support if you don't, because it just makes it so much easier.

Hope this gets you started in the right direction.  

-- Glenn