Matus UHLAR - fantomas wrote on Thu, 8 Nov 2018 12:12:49 +0100: > the problem lies in "parent_domain_matches_subdomains" which is (and should > be) empty in postfix and apparently even is in new postfix version.
As I wrote earlier, it *is* set implicitely by backwards-compatibilty. > First I thought I might be using wrong syntax (site vs. .site), but I > scanned the postfix docs and found that the default compatibility setting > for access_maps should allow "site" to be used for subdomain matching as > well. postconf -d|grep parent_domain_matches_subdomains parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd _authorized_clients,relay_domains,smtpd_access_maps At the moment it seems to be working as intended. But I can't see a config change vs. yesterday morning that could have made a change with this. The only change I made is stop the delay (temporarily) and move the check_client_access from recipient_restrictions to client_restrictions (and not move them back after delaying the checks again). I'll see if I can come up with more clues/reproduction next week. At the moment I'm happy that it *seems* to be working, although the order is now not what I wanted. Kai
