On Thu, Aug 14, 2014 at 09:11:14PM +0530, tejas sarade wrote:
> What will happen if I put hostname or DNS suffix like abc.local or
> just local in mynetworks.
Access for those hosts will be unreliable, with occasional bounced
mail when DNS resolution tempfails. How much of a problem that is
depends on how reliable DNS is at both ends.
> Will postfix do the reverse lookup of client IP and if it matches the
> hostname in mynetworks, allow it to relay email?
Alone, that would insecure. The name also has to also forward verify (PTR
name has to list the origin IP among its A or AAAA records).
So yes, names are allowed, but if you can instead use addresses,
that is better. When neither work well, use SASL or client cert
fingerprints.
--
Viktor.
