Am 22. Oktober 2016 08:18:36 MESZ, schrieb Tomoyuki Murakami <tomoy...@pobox.com>: > >On Fri, 21 Oct 2016 22:15:32 +0200, Paul van der Vlis ><p...@vandervlis.nl> wrote: >> Hello, > >> Some settings and logs: >> >> smtpd_relay_restrictions = >> permit_mynetworks, >> permit_sasl_authenticated, >> check_sender_access hash:/etc/postfix/whitelist, >> reject_invalid_hostname, >> reject_non_fqdn_sender, >> reject_non_fqdn_recipient, >> reject_unknown_sender_domain, >> reject_unknown_recipient_domain, >> reject_unauth_pipelining, >> reject_unauth_destination, >> check_policy_service unix:private/shadelist, >> reject_rbl_client bl.spamcop.net, >> reject_rbl_client zen.spamhaus.org, >> reject_rbl_client ix.dnsbl.manitu.net, >> permit > >permit after all ?
Yes. - Permit the stuff that shouldn't be rejected (mynetworks, sasl authenticated) - Perform various checks and reject the things you don't like - Permit everything that made it through that obstacle course -- Christian Kivalo