On 11.04.23 07:31, tom--- via Postfix-users wrote:
If I added this config in main.cf:

smtpd_helo_restrictions =   permit_mynetworks,
                           reject_invalid_helo_hostname,
                           reject_non_fqdn_helo_hostname,
                           reject_unknown_helo_hostname

many email MUA such as thunderbird were delivering messages from a dyna IP with just localhost as HELO hostname. so their messages will be rejected by postfix.

If I changed the above configuration to:

smtpd_helo_restrictions =   permit_mynetworks,
                           permit_sasl_authenticated,
                           reject_invalid_helo_hostname,
                           reject_non_fqdn_helo_hostname,
                           reject_unknown_helo_hostname


it seems in HELO stage permit_sasl_authenticated not happened. so email was still rejected.

for home users and desktop clients, should I disable the helo checking above?

do these use port 25 to submit mail or different?
These settings are usually overridden in master.cf, services submission (port 587) or smtps/submissions (port 465).

End clients should use these ports instead of 25.

--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"To Boot or not to Boot, that's the question." [WD1270 Caviar]
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to