> On May 19, 2017, at 1:52 PM, Marcio Merlone <marcio.merl...@a1.ind.br> wrote:
>
> smtpd_relay_restrictions =
> permit_sasl_authenticated,
> defer_unauth_destination
> smtpd_sender_restrictions =
> reject_non_fqdn_sender
> smtpd_recipient_restrictions =
> check_recipient_access hash:/etc/postfix/protected_destinations,
> permit_mynetworks,
> permit_sasl_authenticated,
> reject_unauth_destination
> smtpd_restriction_classes = insiders_only
> insiders_only = check_sender_access hash:/etc/postfix/insiders, reject
>
>
> protected_destinations:
> a...@domain.tld insiders_only
>
> insiders:
> b...@domain.tld OK
>
> With this, a user like j...@domain.tld is able to send to a...@domain.tld,
> which is not the desired behavior.
Logs? Did the mail arrive via SMTP? On what port?
Possible problems:
* Mail is sent via sendmail(1) and not SMTP
* Mail is sent via the submission port 587, where the restrictions
are different
* Mail is not sent via this Postfix instance
...
--
Viktor.
