From 425c79ad30740340c46770315b9b6c7b06a04347 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 16 Sep 2015 00:08:37 +0200
Subject: Fix address verification probes on the MSA.

Put all relay restrictions under smtpd_relay_restrictions and leave
smtpd_recipient_restrictions empty, since we don't do DNSBL.
---
 roles/MSA/templates/etc/postfix/main.cf.j2 | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

(limited to 'roles/MSA/templates')

diff --git a/roles/MSA/templates/etc/postfix/main.cf.j2 b/roles/MSA/templates/etc/postfix/main.cf.j2
index 6e13cff..efcebef 100644
--- a/roles/MSA/templates/etc/postfix/main.cf.j2
+++ b/roles/MSA/templates/etc/postfix/main.cf.j2
@@ -115,14 +115,12 @@ smtpd_sender_restrictions =
     reject_unknown_sender_domain
 
 smtpd_relay_restrictions =
-    permit_mynetworks
-    permit_sasl_authenticated
-    reject
-
-smtpd_recipient_restrictions =
     reject_non_fqdn_recipient
     reject_unknown_recipient_domain
     reject_unverified_recipient
+    permit_mynetworks
+    permit_sasl_authenticated
+    reject
 
 smtpd_data_restrictions =
     reject_unauth_pipelining
-- 
cgit v1.2.3