Alain Spineux wrote:
Hi

I've some question bout the smtp_*_restrictions

When smtpd_delay_reject=yes (the default) :


- May I expect the policies will be called in the expected order :
first the one from smtpd_client_restrictions (in the order they are
defined of course),
then the ones from smtpd_sender_restrictions and finally the ones from
smtpd_recipient_restrictions


yes (order is respected).


- It looks like even if a policy appear in the 3 restrictions, it is
tested only once !
Right ?


there's some "caching" there. but from a logical standpoint, consider the checks as re-executed.

- If smtpd_delay_reject=yes then I could merge all the policy in the
smtpd_recipient_restrictions
and cleanup duplicate policy ! Right ?


yes. many people put all checks under smtpd_recipient_restrictions, and reserve the others for some "exceptional" controls (such as "local_only" addresses, ... etc). make sure to put reject_unauth_destination soon enough. it is the check that blocks relay.

Reply via email to