Kai Schaetzl:
[ Charset ISO-8859-1 converted... ]
> Addendum.
>
> Currently, I get client rejections with the setup shown in my last mail
> (despite the delay). I don't know if it hits *always*, though. I can't
> check if it didn't hit for some client where the name matches, there are
> too many entries.
>
> I expected it to carry out the helo checks before client checks.
> e.g. in a "natural" order of helo, client, sender, rcpt.
> Was this assumption wrong?
The order of evaluation is in
http://www.postfix.org/SMTPD_ACCESS_README.html
Postfix evaluates client restrictions before helo_restrictions
before sender restrictions before recipient restrictions.
HOWEVER, by default Postfix evaluates all of these at RCPT TO time.
Wietse