Viktor
Thanks so much. I now have this in main.cf instead with permit at the
end...
smtpd_recipient_restrictions =
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_unauth_pipelining,
permit_sasl_authenticated,
permit
If I may ask a follow up question.....When I now restart Postfix,
/var/log/mail.err has this cryptic error...
Jan 20 21:47:02 server postfix/smtpd[357169]: fatal: in parameter
smtpd_relay_restrictions or smtpd_recipient_restrictions, specify at least
one working instance of: reject_unauth_destination,
defer_unauth_destination, reject, defer, defer_if_permit or
check_relay_domains
On Mon, Jan 20, 2025 at 5:30 PM Viktor Dukhovni via Postfix-users <
[email protected]> wrote:
> On Mon, Jan 20, 2025 at 05:19:57PM -0600, Christian Seberino via
> Postfix-users wrote:
>
> > I set up a Postfix server to send and receive emails for autoprog.org.
> > It successfully sends but cannot receive emails. When I try the sender
> > gets "Recipient address rejected: Access denied". Why? How fix?
> Thanks.
> >
> > smtpd_recipient_restrictions = reject_non_fqdn_sender,
> > reject_non_fqdn_recipient, reject_unknown_sender_domain,
> > reject_unknown_recipient_domain, reject_unauth_pipelining,
> > permit_sasl_authenticated, reject
>
> The only "permit" here is for SASL authenticated users, with a final
> "reject" nothing else is allowed. Plausible for an outgoing submission
> server, but not for receiving inbound mail from others. Postfix is
> doing exactly what you asked.
>
> More reasonable would be:
>
> smtpd_recipient_restrictions =
> reject_unauth_destination,
> reject_unauth_pipelining,
> reject_non_fqdn_sender,
> reject_unknown_sender_domain,
> ... Perhaps a carefully chosen mainstream RBL ...
> ... The final "permit" is implicit, but perhaps a useful reminder
> ...
> permit
>
> And in master.cf, a different set of restrictions for submission,
> via "-o foo=bar" overrides for all the standard restriction lists.
>
> --
> Viktor.
> _______________________________________________
> Postfix-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
>
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
