Am 17.05.2014 18:51, schrieb [email protected]: > As a first check with you, though, from this server I have from > > postconf smtpd_recipient_restrictions > > the following current order > > check_recipient_access hash:/usr/local/etc/postfix/conf/traps > reject_non_fqdn_recipient > permit_sasl_authenticated > permit_mynetworks > reject_unlisted_recipient > reject_non_fqdn_sender > reject_unknown_sender_domain > reject_rbl_client b.barracudacentral.org > reject_rbl_client zen.spamhaus.org > check_policy_service unix:private/policy > permit > > which I've tried to keep from server to server. I get that it's a naive > copy, and I'll do my homework. > > Is there any GLARING problem in the order above?
looks fine, i would place the following on top! reject_non_fqdn_recipient reject_non_fqdn_sender reject_unlisted_sender you usually don't want non-full-qualified addresses or invalid senders even in case of authenticated users or from trusted machines and for cron-mails and such things smtpd-restrictions don't apply at all because they are using the sendmail-binary/pickup be careful that "check_recipient_access" never says "OK" or you get a open relay
