On 10/2/2014 4:37 AM, Alberto Lepe <d...@alepe.com> wrote: > On Thu, Oct 2, 2014 at 5:27 PM, Alberto Lepe <d...@alepe.com > <mailto:d...@alepe.com>> wrote: > > There is a customer that is sending mails from excel using a > banned client in the server "header_checks" restrictions (client > can not be changed due to technical restrictions). > I allowed the customer in sender_access, however postfix is still > blocking it. > How can I set "sender_access" to be before "header_checks" ? > > Thanks, > > This is part of my main.cf <http://main.cf>: > > header_checks = regexp:/etc/postfix/header_checks > ... > smtpd_sender_restrictions = > check_client_access hash:/etc/postfix/client_access, > check_sender_access hash:/etc/postfix/sender_access, > permit_mynetworks, > permit_sasl_authenticated, > reject_non_fqdn_sender, > reject_unknown_sender_domain >
> It seems its not possible according to some sources I found. Does that > still stand today? First, postconf -n output is much preferred (full, only anonymizing critical info if desired). Second - if you put all of your restrictions under smtpd_recipient_restrictions, you can order them however you like, and in most (but not all) cases this is the best way as it makes it very easy to make sense of how/when they are applied: http://www.postfix.org/SMTPD_ACCESS_README.html#timing