On 9/11/2009 3:30 AM, Duncan B. wrote:
I tried putting "permit_mynetworks" at the end of the
smtpd_recipient_restrictions instead, but it still just allows all
relaying from mynetworks:
smtpd_recipient_restricions = reject_unauth_destination,
reject_non_fqdn_recipient, reject_unknown_recipient_domain,
permit_mynetworks
Am I doing something wrong?
It seems to me that the restrictions aren't processed in the order that
you specify them on the smtpd_recipient_restrictions line? :)
Your observations are flawed. Postfix does indeed evaluate
restrictions in the order given.
Perhaps you forgot to run "postfix reload" or perhaps your
main.cf has more than one smtpd_recipient_restrictions defined.
or perhaps you misspelled "restricions" in main.cf like you
did in this message.
Always check your "postconf -n" output to verify that postfix
see what you expect.
> Sorry for replying again, but I think I may have resolved this:
>
> Set smtpd_delay_reject = yes
> set smtpd_sender_restrictions = reject_non_fqdn_sender,
> reject_unknown_sender_domain, reject_non_fqdn_recipient,
> reject_unknown_recipient_domain
>
> smtpd_recipient_restrictions = permit_mynetworks,
reject_unauth_destination
>
> This seems to have the desired effect. This look OK to you
guys?
Yes, this is fine also. There are multiple ways to do what
you described earlier.
-- Noel Jones