On Tue, Mar 11, 2014 at 10:47:42AM -0600, Blake wrote:
> I have settled on the following configuration, but am still open
> to ideas.
> 
> smtpd_relay_restrictions = permit_mynetworks, reject

This says, *if* you are using a version 2.10 or newer (you didn't 
answer that question), that you will ONLY accept mail originating 
from within $mynetworks, and ANY other mail will be rejected.

"postconf mail_version"

This is surely not what you want. You're talking about mail which 
comes from Google; they are not within your $mynetworks (or, if they 
are, you have very serious problems.)

> smtpd_recipient_restrictions = check_recipient_access
> hash:/etc/postfix/blacklist_recipient, permit_mynetworks, reject

This looks like a bad idea too. This says you will accept any mail 
with a permitting access(5) action for any recipient in your
/etc/postfix/blacklist_recipient file, or any mail originating from 
$mynetworks, and ANY other mail will be rejected.

Postfix will do what you tell it to. If you tell it to reject all 
mail, that's what you get.

I think Noel already referred you to the SMTPD_ACCESS_README, but 
you're not understanding. EVERY restriction stage MUST resolve to 
"dunno" or a permit action. If any stage results in "reject", the 
mail is rejected.
-- 
  http://rob0.nodns4.us/
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:

Reply via email to