Rodre Ghorashi-Zadeh wrote:
At this point I think the only explanation is that the recipient MX didn't match what is in your table. It does appear that the lookup occurred, and no match was found.

One possibility is that your DNS is borked and not properly looking up MX records. Test with:
# dig example.com MX
where example.com is the recipient domain. Make sure the MX is listed in the output.

I had checked this and email server the MX record was correct every time.

Adding a second -v to smtpd will increase the logging another notch and I think will show the data passed to the table, along with hundreds of other irrelevant lines.

--

Okay I think it is fixed. The problem was that the:

check_recipient_mx_access,cidr:/etc/postfix/smarthost.cidr

value should be under:

smtpd_recipient_restrictions=

and not:

smtpd_sender_restrictions=

Only if you changed the default value of smtpd_delay_reject, which you shouldn't. Shame on me for not examining your "postconf -n" output.


as it is the recipients MX that I am trying to filter on. My question now is: 
is this the best and only place to put this value? My 
/etc/postfix/smarthost.cidr now looks like:

208.65.144.0/21 FILTER smtp:[mail.shawcable.com]

and my smtpd_recipient_restrictions=  in my master.cf looks like:

smtpd_recipient_restrictions=check_recipient_mx_access,cidr:/etc/postfix/smarthost.cidr,permit_mynetworks,reject

do we all concur that this setup is correct? Thanks again for all the info + 
help.

Yes, that's fine. Although it would be easier to just set smtpd_delay_reject back to it's default of "yes", or remove it from your config entirely.


--
Noel Jones

Reply via email to