Debian9 postfix 3.1.4-7: Zertifikatsbasierendes Relaying defekt

[Friedemann Stoyan]

On 19.09.17 11:47, Stefan Förster wrote:

> Hast Du parallel dazu die für Relaying relevanten Restriktionen aus
> smtpd_recipient_restrictions entfernt?

Das war wohl der Fehler. Ich habe jetzt eine Konfiguration, die
zufriedenstellend läuft:

# Relay control (Postfix 2.10 and later): local clients and
# authenticated clients may specify any destination domain.
smtpd_relay_restrictions =
  permit_mynetworks
  check_ccert_access btree:/etc/postfix/relay_clientcerts
  permit_sasl_authenticated
  defer_unauth_destination

# Spam control: exclude local clients and authenticated clients
smtpd_recipient_restrictions =
  check_recipient_access btree:/etc/postfix/discards
  permit_mynetworks
  check_ccert_access btree:/etc/postfix/relay_clientcerts
  check_recipient_access btree:/etc/postfix/postmaster
  check_sender_access btree:/etc/postfix/sender_checks
  check_helo_access btree:/etc/postfix/helo_access
  reject_unknown_reverse_client_hostname
  reject_non_fqdn_recipient
  reject_non_fqdn_sender
  permit


Vielen Dank allen hefenden!

mfg Friedemann