Martijn de Munnik wrote: > Hi list, > > How can I enable the address_verify_map only for the relay_domains? > > postconf -n > > smtpd_client_restrictions = reject_rbl_client virbl.dnsbl.bit.nl >
This is rather redundant since you also specify it in recipient restrictions and delay reject is yes. Best to remove this line to avoid confusion and limit DNS queries to destinations you control. > smtpd_recipient_restrictions = permit_mynetworks, > permit_sasl_authenticated, reject_non_fqdn_recipient, > reject_non_fqdn_sender, reject_unknown_sender_domain, > reject_unverified_recipient, reject_unauth_destination, > reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, > reject_rbl_client virbl.dnsbl.bit.nl check_policy_service > inet:127.0.0.1:12525, check_policy_service inet:127.0.0.1:1002 To answer the query: Replace reject_unverified_recipient with "check_recipient_access hash:/path/to/file" /path/to/file: slagenlandwonen.nl reject_unverified_recipient wfcommunicatie.nl reject_unverified_recipient #add rest after #Note: add periods before each in another entry if you want to cover sub-domains as well #Current default behavior will allow them without the period, but may change in the future #or if you change parent_domain_matches_subdomains setting