On Apr 13, 2013, at 15.33, Russell Jones <russ...@jonesmail.me> wrote:
> Hi all, > > Upgrading mail server from Postfix 2.9 to 2.10. Could I get a quick sanity > check to ensure my (fairly simple) setup is sane with the new > smtpd_relay_restrictions? Thanks :-) > > smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated > reject_unauth_destination > smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated > check_client_access hash:/etc/postfix/rbl_override reject_rbl_client > zen.spamhaus.org really, neither of permit_mynetworks nor permit_sasl_authenticated belong in any global restrictions. smtp auth [e.g sasl] is for submission clients, which should be using submission/587, and these days, i really just discourage use of permit_mynetworks altogether. -ben
