id	summary	reporter	owner	description	type	status	priority	milestone	component	resolution	keywords	cc
421	Turn on reject_sender_login_mismatch	andersk		"To help cut down on outgoing spam, we should require that mail sent directly through Scripts carry a matching `@scripts.mit.edu` address or an address at a matching Scripts vhost.  After all, if you want to send mail from `@mit.edu`, `@gmail.com`, etc., you should be sending it through `outgoing.mit.edu`, `smtp.gmail.com`, etc.—a mismatch here would be an SPF violation anyway.

I think this would be achieved by '''[http://www.postfix.org/postconf.5.html#smtp_sender_restrictions smtpd_sender_restrictions] = reject_sender_login_mismatch''', with '''[http://www.postfix.org/postconf.5.html#smtpd_sender_login_maps $smtpd_sender_login_maps]''' configured in correspondence with our '''$virtual_alias_maps'''.

This probably implies disabling SMTP to localhost:25."	enhancement	new	normal		mail