On 12/30/2011 4:11 PM, Wietse Venema wrote:
Stephen Atkins:
On 12/30/2011 3:59 PM, Wietse Venema wrote:
Stephen Atkins:
So it turns out my replacement while I was on vacation modified my
main.cf.  I went back to an back up I have a few weeks ago and changed
it back.  Now I don't have that problem any more.  What it came down to
was "check_relay_domains" had been removed for some reason.

Use "permit_mynetworks, reject_unauth_destination" instead of
"check_relay_domains". I am about to remove "check_relay_domains"
from Postfix.

Thanks.  I see that in the log file now.  I will remove it as
reject_unauth_destination is also in there.

No, you need to replace the check_relay_domains AT THE BEGINNING
of smtpd_recipient_restrictions by

"permit_mynetworks, reject_unauth_destination" AT THE BEGINNING
of smtpd_recipient_restrictions

otherwise you are at risk of becoming an open relay again.

So is this valid or bad?

smtpd_recipient_restrictions =
  permit_mynetworks,
  permit_sasl_authenticated,
  reject_unauth_destination,

if not where should the permit_sasl_authenticated go?

--
Stephen Atkins
Information Systems
Resorts of the Canadian Rockies INC.
http://www.skircr.com
satk...@skircr.com
Voice: (403) 209-3367
Cell: (403) 510-8333
Fax: (403) 244-3774

Reply via email to