On Sun, Jun 01, 2014 at 10:57:30PM -0600, Glenn English wrote: > Postfix seems happy with a domain name in mynetworks. I put IPs > in there earlier and it didn't seem to work, but the domain names > did -- I found how to fix my problem with an ASCII domain name in > the config.
Apparently happy or not, mynetworks is only documented to support network addresses, not client domains. http://www.postfix.org/postconf.5.html#mynetworks While some vestigial undocumented support for client names may be present in some (unspecified) versions of Postfix as a best-effort backwards-compatibility crutch, such support is deprecated and unreliable (works inconsistently even when implemented). When I say that mynetworks should only include network addresses, I mean what I say. Relay control is available via any of: * Static network addresses of authorized clients. permit_mynetworks permit_inet_interfaces (2.2 or later) * SASL authentication of authorized accounts. permit_sasl_authenticated check_sasl_access (2.11 or later) * Fingerprints of authorized TLS client certificates. permit_tls_clientcerts (2.2 or later) check_ccert_access (2.2 or later) * (Discouraged and fragile) All client certificates issued by one or a few trusted CAs. permit_tls_all_clientcerts (2.2 or later) -- Viktor.