On 10/7/2014 10:53 AM, Viktor Dukhovni wrote: > On Tue, Oct 07, 2014 at 11:32:47AM -0400, Wietse Venema wrote: > >> What else needs to be considered? >> >> There are more settings whose defaults can be confusing to people >> who aren't familiar with 10+ years of Postfix history. >> >> - relay_domains (default: $mydestination). This should be empty. >> >> - mynetworks-style (default: subnet). This should be "host".
I like the above two changes. The defaults often are confusing for people new to postfix. >> >> - parent_domains_matches_subdomains. I am reluctant to change this >> because it affects so many Postfix features. A cascade of warning >> messages could be confusing. Almost every postfix how-to on the web assumes this feature defaults on. Changing the default will be painful. > > Also: > > smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, > defer_unauth_destination > > could become: > > smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, > reject_unauth_destination > I think this feature is too new to change the safe default. -- Noel Jones
