On 3/15/2019 2:37 PM, Francesc Peñalvez wrote:
I have this directive active reject_unknown_client_hostname and in some
ips when it does not solve at the moment of doing the RCPT it does not
solve correctly, as it is logical send code 450 blocking the mail. Well
my question is how could I put some ips in particular that I know are
reliable for that the reject_unknown_client_hostname be skipped. I have
added these ips with the OK directive in the access file but it does
not
work as I would like it to do
Postfix processes restrictions in order. Your access table
whitelist must come before the rule rejecting the mail.
Move reject_unknown_client_hostname to *after* your access table in
your restriction list.
And for external IPs it's safer to use "PERMIT_AUTH_DESTINATION"
rather than "OK" to prevent open relay accidents.
-- Noel Jones
