Yves Dorfsman:
> Wietse Venema wrote:
> >>
> >> For years I have been using the settings:
> >>
> >> smtpd_recipient_restrictions =
> >> permit_mynetworks,
> >> reject_unauth_destination,
> >> permit
> >
> > This allows relaying only from "local" clients.
> >
> >> smtpd_client_restrictions =
> >> permit_sasl_authenticated,
> >> reject_unknown_address,
> >> reject_unknown_client,
> >> reject_unknown_reverse_client_hostname,
> >> check_client_access hash:/etc/postfix/access,
> >> reject_rbl_client sbl-xbl.spamhaus.org
> >
> > This allows everything from SASL-authenticated clients, REGARDLESS of
> > what follows after permit_sasl_authenticated.
>
> Yes, this is my understanding from the documentation. But then, why do I get
> "450 4.7.1 Client host rejected: cannot find your reverse hostname" unless I
> comment out the three "reject_*"?
Because you did not look at "postconf -n" command output.
> > This is why you should have followed the mailing list welcome
> > instructions, and posted "postconf -n" command output instead of
> > main.cf cut-and-paste fragments.
>
> Sorry, I apologise, here's the output from my postconf -n:
There's no reject_unknown_* in there, so this does not reproduce
the complaint.
Wietse