On Tue, Sep 02, 2014 at 07:25:15PM +0200, Lubomir Majersky wrote:
> > # Postfix 2.10 or later, ocnsider: smtpd_relay_restrictions
> > smtpd_recipient_restrictions =
> > permit_mynetworks,
> > check_client_access cidr:${config_directory}/allow-sasl.cidr,
> > reject_unauth_destination,
> > ... UCE restrictions ...
> >
> Rules for detection client are evaluated in the following order:
>
> 1. smtpd_client_restrictions
> 2. smtpd_helo_restrictions
> 3. smtpd_sender_restrictions
> 4. smtpd_recipient_restrictions
>
> I think it would be better to move the parameter:
>
> 'check_client_access cidr:${config_directory}/allow-sasl.cidr'
>
> to the section 'smtpd_sender_restrictions'. Must also be in the
> 'smtpd_recipient_restrictions'?
No, this is relay control. With Postfix <= 2.9, this goes into
smtpd_recipient_restrictions. With Postfix >= 2.10, the best place
is smtpd_relay_restrictions, but the older approach is also fine.
--
Viktor.
