Quoting Noel Jones <njo...@megan.vbhcs.org>:
smtpd_recipient_restrictions = check_sender_access
hash:/etc/postfix/sender_blacklist, check_recipient_access
hash:/etc/postfix/recipient_blacklist,
If you intend the above two checks evaluate before permit_mynetworks
and -- more importantly -- before reject_unauth_destination, it's
safer to move them to smtpd_sender_restrictions so that an
accidental OK doesn't turn you into an open relay.
http://www.postfix.org/SMTPD_ACCESS_README.html#danger
Noted. Thanks for pointing that out. I'll get that fixed.
But that doesn't explain why the access tables don't seem to work
for you. My guess is that you're using the From: header rather than
the envelope sender.
That's it! To test whether it was working I was using an external
account on an Exchange server which I do not control. Upon closer
inspection, it appears that the envelope header does not match the
From: header. It has a bunch of stuff prepended before the actual
address. After testing with another (non-Exchange) account, I find
that it works as expected.
Many thanks for your assistance!
Craig