On 26 Aug 2016, at 11:59, Aggelos wrote:
On 26/08/2016 03:58 μμ, @lbutlr wrote:
[...]
The restrictions are pressed in order until there is a result of OK
or REJECT.
Then it should stop checking when it matches by IP the OK in
/etc/postfix/maps/whitelisted_clients, right?
No, because an OK or PERMIT does not propagate from one restriction list
to the next. Whitelisting on any basis only applies in the scope of the
restriction list where the whitelisting directive exists.
You are rejecting an unknown helo hostname, so the whitelist is never
even checked.
But the smtpd_helo_restrictions come later in the order of checks,
isn't that so?
Yes, but you can't protect a message from smtpd_helo_restrictions with a
whitelist in smtpd_client_restrictions.
