On 11/8/2016 11:49 μμ, Richard Klingler wrote:

I've put it also now on the client restriction..but the message looks the 
same...
Clients still can try to do SMTP AUTH...

The following works for me:

   smtpd_restriction_classes = controlled_senders,allowed_list1

   controlled_senders = check_sender_access
   hash:/etc/postfix/blocked_senders
   allowed_list1= check_client_access cidr:/etc/postfix/clients.cidr,reject

Of course it's vice versa than what you want to do with clients: clients.cidr includes only OK clients. If you do it your way (with REJECTs in cidr file), remove reject from the end.

...and keep:

   smtpd_recipient_restrictions =
      permit_mynetworks
      permit_sasl_authenticated
      reject_unverified_recipient
      reject_unauth_destination
      ...

Nick

Reply via email to