On Thu, Jan 06, 2022 at 08:13:11AM -0500, Jim Popovitch wrote:
> Setting compatibility_level=2 doesn't reproduce the error message.
As expected.
> Removing the compatibility_level entirely does reintroduce the error
> message (once per every inbound connection):
Well, the default compatibility level is 0, so smtpd_relay_restrictions
becomes empty.
> fatal: in parameter smtpd_relay_restrictions or
> smtpd_recipient_restrictions, specify at least one working
> instance of: reject_unauth_destination, defer_unauth_destination,
> reject, defer, defer_if_permit or check_relay_domains
>
> The message is accurate as I do not have any instance of those settings
> in smtpd_recipient_restrictions, however I do have
> permit_auth_destination set.
Your system is then an open relay, so all is as expected and documented.
For a working setup you need an explicit compatibility level >= 1.
Case closed I think...
--
Viktor.
