From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Mon Feb 06 2006 - 11:13:56 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Mon, Feb 06, 2006 at 11:09:33AM -0600, Bill Bradford wrote:

> On Mon, Feb 06, 2006 at 12:06:05PM -0500, Victor Duchovni wrote:
> > But, with permit_mx_backup this is rather non-trivial, because this
> > is the negation of the restriction one really wants:
> > - Old style: check_relay_domains or permit_auth_destination
> > This is a "final" relay rights check, and fundamentally aAll
> > UCE checks go into smtpd_client_restrictions, ...
> > that recipient restrictions is about relay control only!
> > - New style: reject_unauth_destination
> > This filters out unauthorized relaying and allows relay authorized
> > mail to be subjected to further scrutiny. This makes the "put
> > everything in one place" approach possible.
>
> So, in short, I should ditch permit_mx_backup, list all the domains I'm
> backup MX for in relay_domains, and use reject_unauth_destination?
>

Yes, and work to understand the meaning of the restriction language,
so you are freed from parroting other people's recipes out of context.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]