I seem to be able to setup a desktop email client and send email to my server, from any external network, and the email will be accepted for delivery as long as a) the sender uses any "from address" ("local part") @my.real-domain.com, and b) the recipient has a mailbox @my.real-domain.com.
The only means by which I was able to eliminate this behavior was to define a directive that was introduced in versions >= 2.10: smtpd_relay_restrictions = permit_mynetworks, reject_unauth_destination while leaving the same restrictions in smtpd_recipient_restrictions. I'm using a package in the Ubuntu 10.04 LTS repository and, by default, the smtpd_relay_restrictions directive is not defined. Should it be defined by default? Or is there some sound reason for which it should not be defined by default? Postfix "postfinger" output for this server (prior to closing this "hole"): http://pastebin.com/QGE3cah5 Thanks for any insight here. -Ben