On 8/26/2016 10:59 AM, Aggelos wrote: > > Then it should stop checking when it matches by IP the OK in > /etc/postfix/maps/whitelisted_clients, right?
It stops checking smtpd_client_restrictions, and moves on to smtpd_helo_restrictions. *Each* smtpd_*_restrictions section must result in OK (or DUNNO) for mail to be accepted. As you have found, mail whitelisted in smtpd_client_restrictions can still be rejected in another section. The fix is to whitelist the mail in each section that may cause a reject. Some people find it easier to put all their restrictions in smtpd_recipient_restrictions so they only have to whitelist once. This design is intentional and well documented, and allows flexible control of mail.
