Quanah Gibson-Mount:
> Currently we set:
>
> [zimbra ~]$ postconf smtpd_recipient_restrictions
> smtpd_recipient_restrictions = reject_non_fqdn_recipient,
> permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination,
> reject_unlisted_recipient, reject_non_fqdn_sender, permit
>
> I'd like to make use of smtpd_relay_restrictions as it is now available in
> Postfix 2.10. I don't believe any of my items need to remain in
> smtpd_recipient_restrictions, correct? I can simply move them all to
> smtpd_relay_restrictions as I understand the documentation, since none of
> them are currently related specifically to spam blocking rules.
You can do the following (it is 100% supported) but I would recommend
the solution at the end of this reply.
- set smtpd_relay_restrictions empty and leave everything in
smtpd_recipient_restrictions
or:
- move everything to smtpd_relay_restrictions and set
smtpd_recipient_restrictions empty.
However the idea is to separate the relay authorization features
from the anti-spam features. For example:
# Relay authorization.
smtpd_relay_restrictions =
permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination
# SPAM blocking.
smtpd_recipient_restrictions =
reject_non_fqdn_recipient reject_unlisted_recipient, reject_non_fqdn_sender
In the end, the configuration will be easier to understand, and
therefore people will make fewer mistakes.
Wietse
