用后缀限制发件人和收件人

Question

很抱歉，关于这个话题的问题翻了一番，但是有那么多，有些非常混乱，有些仍然是“旧的”格式，还有一些不符合我的情况。

smtpd_restriction_classes = allowed
allowed = permit

smtpd_sender_restrictions =
        check_sender_access hash:/etc/postfix/restricted_senders,
        reject

smtpd_recipient_restrictions = 
        permit_mynetworks,
        reject_unauth_destination,
        permit_sasl_authenticated,
        check_recipient_access hash:/etc/postfix/recipient_domains,
        reject_rbl_client zen.spamhaus.org,
        reject_rhsbl_helo dbl.spamhaus.org,
        reject_rhsbl_sender dbl.spamhaus.org

我有这个代码工作，但我仍然可以发送邮件给root@thisserver.net (一些随机用户)

Apr  4 13:40:46 mail-server postfix/local[22937]: 0C1C5160030: to=<root@thisserver.net>, relay=local, delay=0.23, delays=0.23/0/0/0, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail)

和"user@thisserver.net“

Apr  4 13:41:42 mail-server postfix/smtpd[22931]: NOQUEUE: reject: RCPT from mail-vk0-f52.google.com[209.85.213.52]: 550 5.1.1 <user@thisserver.net>: Recipient address rejected: User unknown in local recipient table; from=<someuser@randomserver.com> to=<user@thisserver.net> proto=ESMTP helo=<mail-vk0-f52.google.com>
Apr  4 13:41:42 mail-server postfix/smtpd[22931]: disconnect from mail-vk0-f52.google.com[209.85.213.52]

我想实现的是，只有一个用户的电子邮件服务器(info@thisserver.net)能够发送和接收电子邮件，任何其他必须立即拒绝。该用户只能接收少数用户的邮件和"recipient_domains“。

restricted_senders:

info@thisserver.net allowed

recipient_domains:

info@google.com allowed
user35@server.com allowed
thisserveronly.net allowed

如果我的配置有错误，或者我只是错过了什么，请有人给我建议吗？

Answer 1

我想我解决了：

smtpd_relay_restrictions = 
    permit_mynetworks, 
    permit_sasl_authenticated,
    reject_unauth_destination

smtpd_sender_restrictions =
    check_sender_access hash:/etc/postfix/restricted_senders, 
    reject

smtpd_recipient_restrictions = 
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unauth_destination,
    check_recipient_access hash:/etc/postfix/recipient_domains

允许我从thisserver.net的帐户restricted_senders和"rcpt到：“将只交付到"recipient_domain"，里面只有info@thisserver.net。

当然，我还在SPF的dns上添加了TXT记录。