Hi Viktor! Thanks for the quick reply!
On 08/11/2017 11:37 PM, Viktor Dukhovni wrote:
Far simpler: indexed = ${default_database_type}:${config_directory}/ smtpd_relay_restrictions = permit_mynetworks, check_sasl_access ${indexed}sasl_list, reject_unauth_destination /etc/postfix/sasl_list: username1 OK username3 OK With this, you only need to list the permitted users, there's no need to list the rejects, these are handled by the required "default deny" restriction at the end.
But.... where is the "default deny" at the end? Because this does not look very different from my config:
smtpd_relay_restrictions = permit_mynetworks, check_sasl_access hash:/etc/postfix/sasl_list, permit_sasl_authenticated, reject_unauth_destination, check_recipient_access pcre:$config_directory/x-add-envelope-to
I don't see much difference..? (except the indexed = $....) What am I missing/not seeing? MJ