Gerben Wierda:
> smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks  
> reject_unauth_destination check_policy_service unix:private/policy permit
> 

To exclude some site from greylist checks, use an access table
*after* reject_unauth_destination and before the check_policy_service.

/etc/postfix/main.cf:
    smtpd_recipient_restrictions = 
        ...
        reject_unauth_destination
        check_client_access hash:/etc/postfix/client_access
        check_policy_service unix:private/policy

/etc/postfix/client_access:
    amazon.com  permit
    ...

The reason for having the whitelist after reject_unauth_destination
is that it is safe to use "permit" without becoming an open relay
(to avoid the latter problem, Postfix 2.10 recomments using
smtpd_relay_restrictions for the mail relay policy, and
smtpd_recipient_restrictions for the spam policy).

        Wietse

Reply via email to