Proof of concept of using Mysql to store SASL users and allowed sender domains.
- Postfix
- Cyrus SASL library
- Mysql as a storage for users configuration
- Mysql IP has to be used, hostname does not work (Cyrus seem to treat it as socket name rather than hostname)
- Auth: user unable to send a email not using auth
- Auth: user unable to auth using incorrect username or password
- Auth: user able to auth using username & password from the Mysql table containing users
- Sender: user allowed to send mail only as
*@example.comcan send an email from[email protected] - Sender: user allowed to send mail only as
*@example.comcan not send an email from[email protected] - Sender: user allowed to send mail as
*@example.netand*@mail.example.netcan send an email from[email protected]and[email protected] - Sender: user allowed to send mail as
[email protected]can send an email from[email protected] - Sender: user allowed to send mail as
[email protected]can NOT send emails from any other address
# Look up sender in sender map
postmap -q [email protected] mysql:/etc/postfix/virt/senders.cf
# Get SASL config
saslfinger -s
-- Enable sql log to see what queries Postfix is making
SET global log_output = 'FILE';
SET global general_log_file='/var/log/mysql/general.log';
SET global general_log = 1;