On 06/06/2011 02:52 AM, Amish Munshi wrote:
On Sun, Jun 5, 2011 at 1:05 PM, Rony gnulinuxist@gmail.com wrote:
Mails are going as required and only to those in the recipient_access list as required. Now if an employee has left and his/her entries are removed from the postfix box as well as the ISP server mail accounts, the Outlook Express mailer can still send mails as that non-existent user. What I found through more reading of docs is that my OE accounts can send mails even without authentication as I don't have smtpd_auth_enable and the LAN is in my mynetworks parameter. Not a big problem as it is local and under control and the OE account can be deleted for that user. However, why is the ISP allowing this unknown user which postfix is relaying when I have everything set in the smtp_auth_ part of postfix? Suppose there is a flaw in my settings, shouldn't the ISP's mail server reject those mails when the username and password do not match with their list? That user has been deleted from their server.
If you add a new user to postfix and DO NOT add this user to ISP. Is it possible to send mails as this new user using OE?
Even if you remove the user from postfix and the ISP, I can still send from OE as another user.