On Sat, May 17, 2014, at 09:58 AM, [email protected] wrote: > looks fine, i would place the following on top! > > reject_non_fqdn_recipient > reject_non_fqdn_sender > reject_unlisted_sender > > you usually don't want non-full-qualified addresses or invalid senders > even in case of authenticated users or from trusted machines and for > cron-mails and such things smtpd-restrictions don't apply at all because > they are using the sendmail-binary/pickup
I've reordered those, ADDING the " reject_unlisted_sender" which I did not have. Reading about it at postconf.5.html your comments certainly make sense to me. I have a vague recollection that I did, long ago, and caused myself some sort of problem, but I can't find it in my notes. > be careful that "check_recipient_access" never says "OK" or you get a > open relay Yes. It ONLY contains REJECTS, no OKs. Thanks for the advice! Grant
