Per Jessen wrote: > This produces an ndr, which is also rejected due to lack of authentication, > as '<>' doesn't seem to be found in smtp_sasl_password_maps.
Extract from a test with debug enabled: (suitably snipped & obscured) Dec 9 10:40:56 neon postfixo/qmgr[16294]: A77FE33266: from=<>, size=2813, nrcpt=1 (queue active) Dec 9 10:40:56 neon postfixo/smtp[16320]: < outbound.example.com[127.0.0.1]:25: 220 outbound.example.com ESMTP Postfix Dec 9 10:40:56 neon postfixo/smtp[16320]: > outbound.example.com[127.0.0.1]:25: EHLO mail.example1.com Dec 9 10:40:56 neon postfixo/smtp[16320]: < outbound.example.com[127.0.0.1]:25: 250-outbound.example.com Dec 9 10:40:56 neon postfixo/smtp[16320]: < outbound.example.com[127.0.0.1]:25: 250-STARTTLS Dec 9 10:40:56 neon postfixo/smtp[16320]: < outbound.example.com[127.0.0.1]:25: 250-AUTH DIGEST-MD5 CRAM-MD5 Dec 9 10:40:56 neon postfixo/smtp[16320]: < outbound.example.com[127.0.0.1]:25: 250-AUTH=DIGEST-MD5 CRAM-MD5 Dec 9 10:40:56 neon postfixo/smtp[16320]: < outbound.example.com[127.0.0.1]:25: 250-ENHANCEDSTATUSCODES Dec 9 10:40:56 neon postfixo/smtp[16320]: < outbound.example.com[127.0.0.1]:25: 250-8BITMIME Dec 9 10:40:56 neon postfixo/smtp[16320]: < outbound.example.com[127.0.0.1]:25: 250 DSN Dec 9 10:40:56 neon postfixo/smtp[16320]: server features: 0x903f size 0 Dec 9 10:40:56 neon postfixo/smtp[16320]: Using ESMTP PIPELINING, TCP send buffer size is 4096 Dec 9 10:40:56 neon postfixo/smtp[16320]: maps_find: smtp_sasl_passwd: outbound.example.com: not found Dec 9 10:40:56 neon postfixo/smtp[16320]: maps_find: smtp_sasl_passwd: outbound.example.com: not found Dec 9 10:40:56 neon postfixo/smtp[16320]: smtp_sasl_passwd_lookup: no auth info found (sender=`', host=`outbound.example.com') Dec 9 10:40:56 neon postfixo/smtp[16320]: > outbound.example.com[127.0.0.1]:25: MAIL FROM:<> SIZE=2813 I guess this is intended behaviour - there is no sender address, so the destination hostname is looked up instead, but shouldn't there also be a lookup with sender='<>' ? /Per Jessen, Zürich