When I added the lines to reject_unkown_* and reject_unauth*, it broke the
pop-before-smtp capability. Are there any potential problems with moving
the pop-*-smtp upward in the check order?

smtpd_recipient_restrictions =
   reject_non_fqdn_sender,
   reject_non_fqdn_recipient,
   reject_unknown_sender_domain,
   reject_unknown_recipient_domain,
   permit_mynetworks,
   reject_unauth_destination,
   check_client_access hash:/etc/postfix/pop-before-smtp,
   check_sender_access hash:/etc/postfix/access_list,
   check_recipient_access hash:/etc/postfix/access_list,
   reject_non_fqdn_hostname,
   reject_unknown_client,
   permit

Where is the recommended palcement for that line? I don't want to open the
system up for spammers nor relaying, but need to keep the pop-before-smtp
capability.

Thanks!

Larry

-
To unsubscribe, send mail to majordomopostfix.org with content
(not subject): unsubscribe postfix-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]