On Mon, Nov 16, 2015 at 11:31:23PM -0600, Chris Boylan wrote: > So if I build a one line /etc/postfix/access with > .xyz REJECT
http://www.postfix.org/postconf.5.html#parent_domain_matches_subdomains If smtpd_acces_maps is included, then the key is "xyz" not ".xyz". You can always list both, but I think it rather risky to block an entire gTLD. -- Viktor.