We would like to block a couple ranges of ips before a sasl login is
able to happen. Smtpd_recipient_restrictions looks like this:
smtpd_recipient_restrictions =
permit_mynetworks,
check_client_access cidr:/etc/postfix/restricted
permit_sasl_authenticated,
check_client_access mysql:/etc/postfix/authb4smtp.cf,
reject_unauth_destination
Just want to confirm this configuration will reject connections before
sasl is allowed. Also would it make more sense to put the
check_client_access cidr:/etc/postfix/restricted in
smtpd_client_restrictions instead?