From: Noel Jones on
On 6/12/2010 4:04 PM, Walter Pinto wrote:
> Clarification,
>
> Troubleshooting what seems to be mail being sent FROM our own domains
> _without authentication_ TO anywhere.
>

Apparently we're having a hard time understanding exactly what
you are asking for. Showing your "postconf -n" and logging of
the unwanted behavior might help us understand.

If you want all local users to authenticate before sending
mail, the solution is to remove the local LAN from the
mynetworks setting, ie.
mynetworks = 127.0.0.1


-- Noel Jones

From: Jeroen Geilman on
> There's no need to be rude sir.

You have strange conceptions of rudeness.

Also, please do not top-post.

> I'm just trying to become more familiar with the Postfix system as an
> alternative to Qmail which I've had more real world experience dealing
> with,

Yeah. Qmail breaks so many standards it's not even funny.

>
> You have my problem reversed. I'm troubleshooting what seems to be
> mail being sent FROM our own domains TO anywhere

You end your restrictions with PERMIT.
Hence, you need to explicitly REJECT mail that's from unauthenticated
users, or postfix will eventually reach the end of the ruleset and
simply permit the mail.

It is not unimportant to be aware of the fact that permit_* restrictions
yield either an OK or a DUNNO response, and reject_* restrictions yield
either a DUNNO or a REJECT response.
There is no restriction that yields either an OK or a REJECT - so
checking for authenticated users does not either PERMIT or REJECT on its
own.

J.