Hi Viktor!

Thanks for the quick reply!

On 08/11/2017 11:37 PM, Viktor Dukhovni wrote:
Far simpler:

     indexed = ${default_database_type}:${config_directory}/
     smtpd_relay_restrictions =
        permit_mynetworks,
        check_sasl_access ${indexed}sasl_list,
        reject_unauth_destination

     /etc/postfix/sasl_list:
        username1 OK
      username3 OK

With this, you only need to list the permitted users, there's no
need to list the rejects, these are handled by the required "default
deny" restriction at the end.
But.... where is the "default deny" at the end?

Because this does not look very different from my config:

smtpd_relay_restrictions = permit_mynetworks, check_sasl_access 
hash:/etc/postfix/sasl_list, permit_sasl_authenticated, 
reject_unauth_destination, check_recipient_access 
pcre:$config_directory/x-add-envelope-to

I don't see much difference..? (except the indexed = $....)

What am I missing/not seeing?

MJ

Reply via email to