Default actions on restrictions

[Nick Howitt]

Hi, I am trying to set up authentication on 587 and I'm struggling with the postfix implementation in ClearOS. I have a restriction: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_recipient_domain, reject_unauth_pipelining, reject_invalid_hostname, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unauth_destination, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, reject_rbl_client 2.0.0.127.b.barracudacentral.org, permit But when I make certain changes it adds , check_policy_service unix:/var/spool/postfix/postgrey/socket to the end of it. Postfix then throws an error saying there is no point adding anything after a "permit" instruction. I filed a bug with ClearOS but their response is that they use a standard "postconf" tool rather than their own script. This has me wondering, is there any need to have a "permit" statement at the end of smtpd_recipient_restrictions? If not, then it would get round the issue irrespective of any discussion of whether it was a postconf tool bug or not. Similarly I have permit at the end of smtpd_sender_restrictions and smtpd_helo_restrictions. Is it necessary? FWIW postfix is at version 2.6.6 TIA, Nick