Require/force users use login/passwd

[Shaggy]

but only script in the server are allowed.  we might tune this to allow only authentificated users by default. That's the config I use.

Beside that you can change it in postfix.

Code:

smtpd_sender_restrictions = permit_sasl_authenticated,
                                reject_sender_login_mismatch,
                                reject_unlisted_sender,
                                permit
smtpd_recipient_restrictions = permit_sasl_authenticated,
                                reject_unauth_destination,
                                reject_non_fqdn_sender,
                                reject_non_fqdn_recipient,
                                reject_unknown_recipient_domain,
                                reject_rbl_client bl.spamcop.net,
                                reject_rbl_client b.barracudacentral.org,
                                reject_rbl_client zen.spamhaus.org,
                                reject_rbl_client dnsbl.sorbs.net,
                                check_policy_service unix:private/policy-spf

this is what i added from what i read it should not allow anyone to send mail w/o using login/pass
or did i mess something up ?