On Tuesday 17 Nov 2015 15:50:22 Viktor Dukhovni wrote: > On Tue, Nov 17, 2015 at 03:26:55PM +0000, Neil Smith wrote: > > > On Tuesday 17 Nov 2015 14:43:50 Viktor Dukhovni wrote: > > > > > > smtpd_recipient_restrictions = > > > > permit_sasl_authenticated > > > > permit_mynetworks > > > > permit_mx_backup > > > > check_recipient_access hash:/etc/postfix/recipient_checks > > > > reject_unauth_destination > > > > > > Notice that cute little "permit_mx_backup" in the restriction > > > list before "check_recipient_access"? :-) > > > > If you don't mind, could you please explain why that's a problem? > > See: > > http://www.postfix.org/postconf.5.html#permit_mx_backup > > Read the description attentively.
OK, I think I understand. The permit_mx_backup directive is seeing that the message is being delivered to someone on this host, so therefore Postfix accepts the message before checking the recipient_access. > In general, permit_mx_backup is > a bad idea, instead configure "relay_domains" explicitly and get > rid of permit_mx_backup. Don't forget about "relay_recipient_maps". Thank you. I'll will go off and investigate making that better. Neil.
