Hi, On Sun, Sep 20, 2020 at 10:06 PM Viktor Dukhovni <[email protected]> wrote: > > On Sun, Sep 20, 2020 at 08:53:36AM -0400, Alex wrote: > > > > > smtpd_recipient_restrictions = > > > > permit_mynetworks, > > > > permit_sasl_authenticated, > > > > check_recipient_access pcre:/etc/postfix/local_recip_map, > > > > reject > > > > But this doesn't account for the catch-all for the vexample.com > > domain. Are you saying that because of the reject, the virtual map is > > never processed? > > I don't know what you're finding surprising here. There's no magic, the > restrictions are evaluated *exactly* as written. There's no mention > of virtual here, so for remote senders, only recipients listed in > > check_recipient_access pcre:/etc/postfix/local_recip_map, > > are permitted and all others are rejected.
Okay, at the risk of sounding redundant and perhaps obtuse, there's no way to have a catch-all for one domain while having recipient restrictions for others? Can I add the /etc/postfix/virtual map as a check_recipient_access restriction and have it processed first?
