On Sat, Apr 30, 2022 at 08:55:54PM +1000, raf wrote:
> Ah yes, and access(5) says .domain.tld only matches
> subdomains when smtpd_access_maps is not in
> parent_domain_matches_subdomains, but it is there by
> default, so ".domain.tld" wouldn't work at all. It
> needs to be "domain.tld".
I generally override "parent_domain_matches_subdomains" to be empty,
and configure all "subtree" keys explicitly, at the cost of occasionally
having to add both "foo.example" and ".foo.example" lookup keys.
--
Viktor.
