Kai Schaetzl: [ Charset ISO-8859-1 converted... ] > Addendum. > > Currently, I get client rejections with the setup shown in my last mail > (despite the delay). I don't know if it hits *always*, though. I can't > check if it didn't hit for some client where the name matches, there are > too many entries. > > I expected it to carry out the helo checks before client checks. > e.g. in a "natural" order of helo, client, sender, rcpt. > Was this assumption wrong?
The order of evaluation is in http://www.postfix.org/SMTPD_ACCESS_README.html Postfix evaluates client restrictions before helo_restrictions before sender restrictions before recipient restrictions. HOWEVER, by default Postfix evaluates all of these at RCPT TO time. Wietse