Viktor

Thanks so much.  I now have this in main.cf instead with permit at the
end...

smtpd_recipient_restrictions    =
        reject_non_fqdn_sender,
        reject_non_fqdn_recipient,
        reject_unknown_sender_domain,
        reject_unknown_recipient_domain,
        reject_unauth_pipelining,
        permit_sasl_authenticated,
        permit

If I may ask a follow up question.....When I now restart Postfix,
/var/log/mail.err has this cryptic error...

Jan 20 21:47:02 server postfix/smtpd[357169]: fatal: in parameter
smtpd_relay_restrictions or smtpd_recipient_restrictions, specify at least
one working instance of: reject_unauth_destination,
defer_unauth_destination, reject, defer, defer_if_permit or
check_relay_domains


On Mon, Jan 20, 2025 at 5:30 PM Viktor Dukhovni via Postfix-users <
postfix-users@postfix.org> wrote:

> On Mon, Jan 20, 2025 at 05:19:57PM -0600, Christian Seberino via
> Postfix-users wrote:
>
> > I set up a Postfix server to send and receive emails for autoprog.org.
> > It successfully sends but cannot receive emails.  When I try the sender
> > gets "Recipient address rejected: Access denied".  Why?  How fix?
> Thanks.
> >
> > smtpd_recipient_restrictions = reject_non_fqdn_sender,
> >     reject_non_fqdn_recipient, reject_unknown_sender_domain,
> >     reject_unknown_recipient_domain, reject_unauth_pipelining,
> >     permit_sasl_authenticated, reject
>
> The only "permit" here is for SASL authenticated users, with a final
> "reject" nothing else is allowed.  Plausible for an outgoing submission
> server, but not for receiving inbound mail from others.  Postfix is
> doing exactly what you asked.
>
> More reasonable would be:
>
>     smtpd_recipient_restrictions =
>         reject_unauth_destination,
>         reject_unauth_pipelining,
>         reject_non_fqdn_sender,
>         reject_unknown_sender_domain,
>         ... Perhaps a carefully chosen mainstream RBL ...
>         ... The final "permit" is implicit, but perhaps a useful reminder
> ...
>         permit
>
> And in master.cf, a different set of restrictions for submission,
> via "-o foo=bar" overrides for all the standard restriction lists.
>
> --
>     Viktor.
> _______________________________________________
> Postfix-users mailing list -- postfix-users@postfix.org
> To unsubscribe send an email to postfix-users-le...@postfix.org
>
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to