On Mon, 26 Jan 2026 11:37:19 -0800, Jaroslaw Rafa via Postfix-users wrote:
> 
> I think "permit_auth_destination" is the problem here. The documentation
> says the following:
> 
> permit_auth_destination
>     Permit the request when one of the following is true:

so it indeed was the ordering.  thanks for confirming.

> I guess it would probably work better for you to split the restrictions
> between smtpd_relay_restrictions for forwarding (as indicated in the comment
> in the configuration you posted) and smtpd_recipient_restrictions for final
> delivery, instead of putting one long and possibly self-contradictory list
> of checks into the latter. That's what different restriction lists are for.
> See http://www.postfix.org/SMTPD_ACCESS_README.html

which confuses me, admittedly a low bar.

but i take the point of splitting.  so i now have

    smtpd_recipient_restrictions =
        reject_unknown_recipient_domain,
        reject_unverified_recipient
    smtpd_relay_restrictions =
        permit_mynetworks,
        permit_sasl_authenticated

randy
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to