My config for relay control looks like this:

[...]

alias_maps = hash:/etc/postfix/aliases
alias_database = hash:/etc/postfix/aliases
relay_domains = /etc/postfix/mxlist

[...]

smtpd_client_restrictions =
smtpd_helo_restrictions =
smtpd_sender_restrictions =

smtpd_recipient_restrictions =
        reject_non_fqdn_sender,
        reject_non_fqdn_recipient,
        reject_unknown_sender_domain,
       reject_unknown_recipient_domain,
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_unauth_destination,
        check_client_access hash:/etc/postfix/access
        check_recipient_access hash:/etc/postfix/rblexceptions
        reject_maps_rbl,
        reject_unauth_pipelining,
        permit

Is there a reason to add:

check_relay_domains to make sure the only mail we MX and
relay for (in addition to mynetworks and sasl clients) comes
from my mxlist file?

Is relay_domains = /etc/postfix/mxlist enough?

Thanks
-
To unsubscribe, send mail to majordomopostfix.org with content
(not subject): unsubscribe postfix-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]