Yves Dorfsman: > Wietse Venema wrote: > >> > >> For years I have been using the settings: > >> > >> smtpd_recipient_restrictions = > >> permit_mynetworks, > >> reject_unauth_destination, > >> permit > > > > This allows relaying only from "local" clients. > > > >> smtpd_client_restrictions = > >> permit_sasl_authenticated, > >> reject_unknown_address, > >> reject_unknown_client, > >> reject_unknown_reverse_client_hostname, > >> check_client_access hash:/etc/postfix/access, > >> reject_rbl_client sbl-xbl.spamhaus.org > > > > This allows everything from SASL-authenticated clients, REGARDLESS of > > what follows after permit_sasl_authenticated. > > Yes, this is my understanding from the documentation. But then, why do I get > "450 4.7.1 Client host rejected: cannot find your reverse hostname" unless I > comment out the three "reject_*"?
Because you did not look at "postconf -n" command output. > > This is why you should have followed the mailing list welcome > > instructions, and posted "postconf -n" command output instead of > > main.cf cut-and-paste fragments. > > Sorry, I apologise, here's the output from my postconf -n: There's no reject_unknown_* in there, so this does not reproduce the complaint. Wietse