On Fri, Apr 27, 2012 at 08:55:15AM -0700, kar...@mailcan.com wrote: > smtpd_recipient_restrictions = > check_recipient_access hash:/usr/local/etc/postfix/conf/bozos
Remove or at least move _after_ reject_unauth_destination. This is prone for open relay. > reject_non_fqdn_recipient Why? > permit_sasl_authenticated > permit_mynetworks > reject_unauth_destination > reject_unlisted_recipient > reject_non_fqdn_sender > reject_unknown_sender_domain > reject_rbl_client zen.spamhaus.org > reject_rbl_client b.barracudacentral.org > permit Remove, it does nothing anyway. > In the end it's getting blocked, and that's what I want. But, if I > understand how this works, every one of those rejects is a DNS check to > spamhaus, and some postfix load on my server. You have a local dns cache, it does the work for you. Bastian -- Intuition, however illogical, is recognized as a command prerogative. -- Kirk, "Obsession", stardate 3620.7