On Wed, 10 Mar 2021, Viktor Dukhovni wrote:
On Wed, Mar 10, 2021 at 04:45:29PM +0100, Markus E. wrote:
Sorry, I meant it's empty in my config. I know that defaults to
"permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination".
But, you gave me a good hint here. I'll try to set
smtpd_relay_restrictions to "permit_mynetworks, reject_unauth_destination"
instead (I dont need sasl auth here).
I'll give it a try.
I thought it was enought to have reject_unauth_destination in
smtpd_recipient_restrictions.
It is. You also need to have the default settings for:
soft_bounce = no
relay_domains_reject_code = 554
Either of:
soft_bounce = yes
relay_domains_reject_code = 454
would explain your symptoms.
OK, just a quick follow-up.
I moved reject_unauth_destination from smtpd_recipient_restrictions to
smtpd_relay_restrictions.
I didn't have smtpd_relay_restrictions specified in my config before, so the
default values were in use (one of them being defer_unauth_destination)
Now I see 554 reject codes on Relay access denied, as wanted.
All the best.
-me
