On 17 Feb 2021, at 18:17, Gary Aitken wrote:
Why is it comparing the client domain / ip and not the domain portion
of
the recipient address?
Read the description of permit_mynetworks available via 'man 5
postconf'. The $mynetworks parameter is a set of IP addresses.
I thought by saying
smtpd_recipient_restrictions=permit_mynetworks
I was saying allow any recipient in one of $mynetworks?
Nope. smtpd_recipient_restrictions lists the restrictions that are
applied at the time of each RCPT command. Technically, all of the
logically prior smtpd_*_restrictions lists are also evaluated at that
time in Postfix unless you unset smtpd_delay_reject, but they are
evaluated in logical order. The individual restriction directives in the
smtpd_*_restrictions lists each apply to particular attributes of the
SMTP transaction, regardless of which list they are in. Again, see 'man
5 postconf' for full details.
Beyond that, networks are networks, domains are domains. It isn't
meaningful to say that a recipient is in a network. Recipients are in
domains.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
