On Mon, Sep 30, 2019 at 01:00:18PM +0000, Nicolas Breuer wrote:
> Indeed if i remove the IP address from "mynetworks", I got a "relay access
> denied"
Good, this is the expected behaviour.
> The behavior is strange because :
> - the MX of the domain is not this server itself.
That's not relevant. An MTA can be (and many often are) configured
to accept mail for a domain, without being a designated MX host for
the domain. MX records are for the benefit of sending systems,
receiving systems decide what to accept based on local information.
[ Postfix can be configured to accept email for additional domains
based on the MX RRs of those domains, but this is not a good idea
in most cases:
http://www.postfix.org/postconf.5.html#permit_mx_backup
http://www.postfix.org/postconf.5.html#permit_mx_backup_networks ]
> - the domain is * not * in virtual_alias_domain
> - the email is * still * in virtual file.
>
> If I understand you correctly, if the IP address is in my network, Postfix
> didn't
> check the MX of the domain if an email related to this domain is in virtual
> file.
Inbound access control is not based on MX records by default and
is never *restricted* on the basis on "missing" MX records.
--
Viktor.
