On Mon, Mar 09, 2015 at 06:53:21PM +0100, Sebastian Nielsen wrote: > I have noticed some automated open relay testing services do "fail" a domain > if it rejects a relay too early (eg in MAIL FROM).
Obviously, Postfix cannot and does not reject relay attempts at MAIL FROM. At that point the destination domain is not available to make relay decisions. Likely you're unaware of "smtpd_delay_reject = yes". > And you are a bit wrong with IP adress lookup. Yes, check_sender_access do > not itself lookup IPs. On this list, a reasonably safe bet is that I'm not wrong. If you disagree, think harder, do some more research, ... -- Viktor.