On Tue, Feb 24, 2015 at 09:02:43PM -0500, Alex Regan wrote: > On 02/24/2015 08:34 PM, Viktor Dukhovni wrote: > >On Tue, Feb 24, 2015 at 08:07:59PM -0500, Alex Regan wrote: > > > >>>>smtpd_recipient_restrictions = > >>>>---------------------------- > >>>> ... > >>>> check_sender_access hash:/etc/postfix/sender_checks, > >>>> ------------------- ------------------------------- > >>>> reject_unknown_sender_domain, > >>>> ---------------------------- > >>>> ... > >>>> permit > >>>> > >>>>smtpd_sender_restrictions = reject_unknown_sender_domain > >>>>------------------------- ---------------------------- > > > >The problem was that you were checking in two places, but added an > >exception in only one of them. > > So you're saying that if I didn't have the smtpd_sender_restrictions at all, > it would have worked in recipient restrictions, correct?
Yes, that is, the exception would have been effective. > >Maybe. Depends whether any of these need exceptions for hosts > >in mynetworks (previously in effect when they were part of the > >recipient restrictions). > > > >See http://www.postfix.org/postconf.5.html#smtpd_delay_reject > > > >Some people find the "all in one approach" simpler. With Postfix > >2.10 or later (only), you're encouraged to move relay control into > >"smtpd_relay_restrictions". Otherwise depends on your needs and > >which you find easier to work with. > > Now that I've separated it out, I believe I'll have an easier time of > understanding it and maintaining it. > > Hmm... Would you describe what my configuration would look like using the > new relay restrictions? Are you running Postfix 2.10 or later? http://www.postfix.org/postconf.5.html#smtpd_relay_restrictions http://www.postfix.org/SMTPD_ACCESS_README.html#lists -- Viktor.
