I made the syslog_name = postfix-test change, and pasted the contents below. The postfr...@gmail.com isn't specified in allowed_users, but postfr...@yahoo is. Also, where do I remove smtpd_access_maps? I don't see that setting in main.cf.
/var/log/maillog: Mar 20 13:43:37 slc-monitor1 postfix-test/smtp[19788]: 49B21B3DE52: to=<postfr...@gmail.com>, relay=gmail-smtp-in.l.google.com[209.85.221.75]:25, delay=4.7, delays=0.12/0.01/0.79/3.8, dsn=2.0.0, status=sent (250 2.0.0 OK 1237578217 7si1722746qyk.143) Mar 20 13:43:37 slc-monitor1 postfix-test/qmgr[19142]: 49B21B3DE52: removed The test emails: [r...@myhost postfix]# postmap -q postfr...@yahoo.com hash:/etc/postfix/allowed_users OK [r...@myhost postfix]# postmap -q yahoo.com hash:/etc/postfix/allowed_users [r...@myhost postfix]# echo $? 1 [r...@myhost postfix]# postmap -q com hash:/etc/postfix/allowed_users [r...@myhost postfix]# echo $? 1 Contents of allowed_users: postfr...@yahoo.com OK output from "postconf -n": alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases always_bcc = usern...@host.com bounce_queue_lifetime = 100d command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 html_directory = no inet_interfaces = all local_header_rewrite_clients = static:all mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man masquerade_domains = .host.com host.com maximal_backoff_time = 900s maximal_queue_lifetime = 100d mydestination = myhost.host.com mydomain = host.com mynetworks = 192.168.0.0/24, 192.168.90.0/24, 192.168.20.0/24 newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = reject_unauth_destination, check_recipient_access hash:/etc/postfix/allowed_users, reject syslog_name = postfix-test unknown_local_recipient_reject_code = 550 Thanks again for all of your help! ________________________________ From: Victor Duchovni <victor.ducho...@morganstanley.com> To: postfix-users@postfix.org Sent: Friday, March 20, 2009 2:07:37 PM Subject: Re: Issue with smtpd_recipient_restrictions On Fri, Mar 20, 2009 at 12:00:25PM -0700, Post Freak wrote: > Hello, > Yes, postconf did respond with one line and 3 restrictions. Here are the > results: > > [r...@myhost postfix]# postconf smtpd_recipient_restrictions > smtpd_recipient_restrictions = reject_unauth_destination, > check_recipient_access hash:/etc/postfix/allowed_users, reject Now prove with unedited log entries that the Postfix configured via this main.cf file (set syslog_name=postfix-test to show that the server is using this main.cf file and restart Postfix) accepts "RCPT TO:" commands with a recipient that is not the $address_verify_sender and is not listed in the allowed_users table via any of the documented access(5) lookup keys. Show logging. postconf -n output postmap -q results for each full address and domain part. postmap -q u...@example.com hash:/etc/postfix/allowed_users postmap -q example.com hash:/etc/postfix/allowed_users postmap -q com hash:/etc/postfix/allowed_users consider removing "smtpd_access_maps" from "parent_domain_matches_subdomains" -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:majord...@postfix.org?body=unsubscribe%20postfix-users> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.