Paul Cartwright put forth on 12/8/2010 8:01 PM: > On 12/08/2010 08:07 PM, Stan Hoeppner wrote: >> As a general rule for smtpd_foo_restrictions: >> >> 1. inbuilt Postfix checks are fastest (eg. reject_non_fqdn_sender) >> 2. local table lookups are 2nd fastest (eg. hash, cidr, pcre) >> 3. policy servers can be fast or not so fast, depending on what they do >> 4. dnsbl lookups require a remote network query--typically slowest > putting each item on a line by itself, even with the comma at the end > causes postfix to give errors on reloading. > here is what it looks like now: > smtpd_recipient_restrictions = permit_mynetworks, > permit_sasl_authenticated, reject_unauth_destination, > check_reverse_client_hostname_access pcre:/etc/postfix/fqrdns.pcre > check_client_access cidr:/etc/postfix/china.cidr, > reject_unknown_sender_domain, reject_unknown_recipient_domain, > reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_rbl_client > dnsbl.sorbs.net, reject_rbl_client zen.spamhaus.org, reject_rhsbl_sender > dbl.spamhaus.org, reject_rhsbl_helo dbl.spamhaus.org
Paste your entire main.cf so we can give you pointers on how to properly format it. You're obviously missing something. -- Stan
