> On May 2, 2018, at 12:20 PM, David Byrne <david.by...@vooservers.com> wrote: > > I thought I could do this in a sender access file within > smtpd_sender_restrictions, but I’m not having much luck. > > File: /etc/postfix/main.cf > smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/insiders > > File: :/etc/postfix/insiders > *@good-domain.com OK > *@*.* REJECT
THe syntax for access tables is documented at http://www.postfix.org/acess.5.html Neither of the lookup key formats you're listing in the file are described as valid forms in the documentation. Also see: http://www.postfix.org/pcre_table.5.html http://www.postfix.org/regexp_table.5.html http://www.postfix.org/DATABASE_README.html http://www.postfix.org/DATABASE_README.html#types http://www.postfix.org/postconf.5.html#parent_domain_matches_subdomains The simplest approach is: # Empty, sub-domains must be matched explicitly parent_domain_matches_subdomains = smtpd_sender_restrictions = check_sender_access ...permit-table..., reject where "permit-table" permits exactly the desired senders, in accordance with the documented lookup key syntax. -- Viktor.