On Thu, 10 Sep 2009, Duncan B. wrote: > The list of CIDR IP ranges to relay for is in the mynetworks variable, > so I can't do the recipient domain verification in > "smtpd_recipient_restrictions" because I need "permit_mynetworks", so > that my networks can relay through the box! permit_mynetworks skips the > other checks for those networks.
Why don't you reject_unknown_recipient_domain BEFORE permitting your networks (and/or SASL authenticated clients) in smtpd_recipient_restrictions? > So, how do I make mynetworks exempt from the > smtpd_recipient_restrictions, yet make mynetworks able to relay through > the box? Huh? As an aside, you appear to be confused by how Postfix processes various restriction lists. Just because a client is OK'd in smtpd_recipient_restrictions does NOT mean that client gets a free pass through smtpd_data_restrictions or any following restrictions in the SMTP conversation. -- Sahil Tandon <sa...@tandon.net>