Jan P. Kessler wrote:
1. Will check_sender_mx_access lookup an a record if there is no mx record for a given sender domain? I guess it won't as there's reject_unknown_sender but I'd prefer to be sure.
If there's no MX, the sender domain's A record will be used. If there's no A record either, then there's no lookup.
2. Is there a maximum number of mx records that will be checked by postfix? Are there any standards requiring or recommending this? Just to prevent trivial DoS attempts by setting up domains with hundred of mx records.
The max is however many MX hosts fit in 32k. I've seen some domains with hundreds of MX records (one for each host in a /24). This hasn't caused any noticeable problem.
PS. looks as if your workstation clock is 1h fast. -- Noel Jones