tatiana philippova wrote:
Hi Noel, many thanks for reply. So if I need restrict sending to some recipients that are exactly in mynetworks (this postfix instance relays email to other email-application on the same host) I have to put check_recipient_access regexp:/etc/postfix/recipient.regexp before permit_mynetworks but have to warn any other admins do not place any OK rules in /etc/postfix/recipient.regexp?
Put your check_recipient_access in smtpd_sender_restrictions so an accidental entry won't cause a security problem.
I do understand that it is bad practice drop silently any email.. but I just need prevent sending auto-replies (NDR) from this "other"
Use DISCARD when necessary, but usually REJECT will serve just as well. If you DISCARD legit mail unintentionally, no one will ever know. If you REJECT legit mail unintentionally, at least the sender will be notified and can use other means to contact you.
-- Noel Jones