Re: no valid recipient

[Gary Aitken]

On 2/17/21 2:17 PM, Wietse Venema wrote:

Gary Aitken:

< mail-pf1-f170.google.com[209.85.210.170]: DATA

mail-pf1-f170.google.com[209.85.210.170]:

    554 5.5.1 Error: no valid recipients

That is incomplete. There is also an RCPT TO command, plus a response
from Postfix that says why the recipient is rejected.

Thanks, here's what I see:

3096  RCPT TO
3146  >>> START Client host RESTRICTIONS <<<
3176  >>> END Client host RESTRICTIONS <<<
3177  >>> START Helo command RESTRICTIONS <<<
3184  >>> END Helo command RESTRICTIONS <<<
3185  >>> START Sender address RESTRICTIONS <<<
3230  generic_checks: name=check_sender_access status=1
3231  >>> END Sender address RESTRICTIONS <<<
3232  >>> START Recipient address RESTRICTIONS <<<
      generic_checks: name=permit_mynetworks
...
      match_hostname: mynetworks: mail-pf1-f182.google.com ~?
            postfix-server-domain.com
      match_hostaddr: mynetworks: 209.85.210.182 ~?
            postfix-server-domain.com
      match_hostname: mynetworks: mail-pf1-f182.google.com ~?
            other-domain.com
      match_hostaddr: mynetworks: 209.85.210.182 ~?
            other-domain.com
      match_list_match: mail-pf1-f182.google.com: no match
      match_list_match: 209.85.210.182: no match
      generic_checks: name=permit_mynetworks status=0
      generic_checks: name=reject
      NOQUEUE: reject: RCPT from mail-pf1-f182.google.com[209.85.210.182]:
        554 5.7.1 <someb...@postfix-server-domain.com>:
            Recipient address rejected:
        Access denied; from=<m...@other-domain.com>
            to=<someb...@postfix-server-domain.com>
        proto=ESMTP helo=<mail-pf1-f182.google.com>
        generic_checks: name=reject status=2
3253  >>> END Recipient address RESTRICTIONS <<<
      > mail-pf1-f182.google.com[209.85.210.182]: 554 5.7.1
        <someb...@postfix-server-domain.com>:
        Recipient address rejected: Access denied
      < mail-pf1-f182.google.com[209.85.210.182]: DATA
      > mail-pf1-f182.google.com[209.85.210.182]:
        554 5.5.1 Error: no valid recipients

Why is it comparing the client domain / ip and not the domain portion of
the recipient address?  I thought by saying
  smtpd_recipient_restrictions=permit_mynetworks
I was saying allow any recipient in one of $mynetworks?

Thanks,

Gary