On 26-May-2010, at 14:12, brian wrote:
> 
> I'll give all that a try. Does this order seem alright?

No, not really.

> smtpd_recipient_restrictions =
>  permit_mynetworks,
>  reject_unlisted_recipient,
>  reject_invalid_hostname,
>  reject_non_fqdn_hostname,
>  reject_non_fqdn_recipient,
>  reject_non_fqdn_sender,
>  reject_unauth_destination,
>  reject_unknown_recipient_domain,
>  reject_unauth_pipelining

smtpd_recipient_restrictions =
 reject_non_fqdn_sender,
 reject_non_fqdn_recipient,
 reject_unknown_sender_domain,
 reject_invalid_hostname,
 permit_mynetworks,
[ … rest of restrictions ]
 reject_rbl_client zen.spamhaus.org
 permit

Even if someone is in your network, there is no reason to allow unknown sender 
domains, invalid hostnames and (usually) non-fqdn, though in some circumstances 
these two rules might not be desired.

-- 
Well I've seen the Heart of Darkness/Read the writing on the wall/an the
voice out in the desert/Was the voice out in the hall

Reply via email to