On Sun, Jun 01, 2014 at 10:57:30PM -0600, Glenn English wrote:

> Postfix seems happy with a domain name in mynetworks. I put IPs
> in there earlier and it didn't seem to work, but the domain names
> did -- I found how to fix my problem with an ASCII domain name in
> the config.

Apparently happy or not, mynetworks is only documented to support
network addresses, not client domains.

    http://www.postfix.org/postconf.5.html#mynetworks

While some vestigial undocumented support for client names may be
present in some (unspecified) versions of Postfix as a best-effort
backwards-compatibility crutch, such support is deprecated and
unreliable (works inconsistently even when implemented).  When I
say that mynetworks should only include network addresses, I mean
what I say.

Relay control is available via any of:

    * Static network addresses of authorized clients.

        permit_mynetworks
        permit_inet_interfaces          (2.2 or later)

    * SASL authentication of authorized accounts.

        permit_sasl_authenticated
        check_sasl_access               (2.11 or later)

    * Fingerprints of authorized TLS client certificates.

        permit_tls_clientcerts          (2.2 or later)
        check_ccert_access              (2.2 or later)

    * (Discouraged and fragile) All client certificates issued
      by one or a few trusted CAs.

          permit_tls_all_clientcerts    (2.2 or later)

-- 
        Viktor.

Reply via email to