[pfx] reject_sender_login_mismatch question

I would like to prevent email users from sending mail as other users,
but I need to make some exceptions for users that have access to shared
mailboxes like support@

The man page states:

reject_authenticated_sender_login_mismatch
  Reject the request when the client is authenticated with SASL, but
  either the MAIL FROM address is not listed in
  $smtpd_sender_login_maps, or the SASL login name is not an owner for
  that address.

However if I have these settings:

smtpd_sender_login_maps = hash:/etc/postfix/smtpd_sender_login_maps
mua_sender_restrictions =
        reject_sender_login_mismatch
mua_relay_restrictions =
        permit_sasl_authenticated
        reject
mua_recipient_restrictions =
        reject_non_fqdn_recipient
        reject_unknown_recipient_domain
        permit_sasl_authenticated
        reject

# cat smtpd_sender_login_maps
[email protected] [email protected]

Only mail from support@ with user marco is allowed, all other users are
rejected, as they are not listed in the smtpd_sender_login_maps.

I would like to avoid duplicating all of the Dovecot userdb users in
the above table and I would prefer to use smtpd_sender_login_maps as an
exceptions table, i.e.:

If authenticated user is sending mail as himself or herself then allow,
otherwise check smtpd_sender_login_maps and if not listed then reject.

Is there a way to configure Postfix like this?
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]