> On a related note, because I am specifying a SQL table for the
> smtpd_sender_login_maps, I configured it using proxy:mysql, which meant
> I had to override proxy_read_maps to allow that. It is unclear to me the
> risks of adding something to proxy_read_maps and am looking for more
> clarity on what exactly this does. Documentation simply states, "The
> lookup tables that the proxymap(8) server is allowed to access for the
> read-only service", are there security concerns or other trade-offs with
> adding lookup tables to do this?
I think that addding smtpd_sender_login_maps should be safe.
Unfortunately there is no 'allow only maps specified in main.cf or
master.cf' feature (it would be incomplete, just like the default
proxymap setting is incomplete today).
Wietse