Alex:
> Hi,
>
> On Sun, Sep 20, 2020 at 10:06 PM Viktor Dukhovni
> <[email protected]> wrote:
> >
> > On Sun, Sep 20, 2020 at 08:53:36AM -0400, Alex wrote:
> >
> > > > > smtpd_recipient_restrictions =
> > > > > permit_mynetworks,
> > > > > permit_sasl_authenticated,
> > > > > check_recipient_access pcre:/etc/postfix/local_recip_map,
> > > > > reject
> > >
> > > But this doesn't account for the catch-all for the vexample.com
> > > domain. Are you saying that because of the reject, the virtual map is
> > > never processed?
> >
> > I don't know what you're finding surprising here. There's no magic, the
> > restrictions are evaluated *exactly* as written. There's no mention
> > of virtual here, so for remote senders, only recipients listed in
> >
> > check_recipient_access pcre:/etc/postfix/local_recip_map,
> >
> > are permitted and all others are rejected.
>
> Okay, at the risk of sounding redundant and perhaps obtuse, there's no
> way to have a catch-all for one domain while having recipient
> restrictions for others?
Of course there is, you just add the domain wildcard to local_recip_map.
LHS RHS
=====================
example.com permit
> Can I add the /etc/postfix/virtual map as a check_recipient_access
> restriction and have it processed first?
No, the maps have different syntax (both LHS and RHS).
Wietse
