smtpd_recipient_restrictions - Is PERMIT at the end advisable ?

[Klaus Engelmann]

I would like to know if it is advisable to keep a final PERMIT at the
end of the smtpd_recipient_restrictions.

Below is the configuration used at my POSTFIX SMTP Server.

Thanks for any suggestion.

smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
check_client_access
hash:/etc/postfix/whitelist/rbl_whitelist,
check_sender_access
hash:/etc/postfix/whitelist/user_restrictions,
reject_non_fqdn_helo_hostname,
reject_invalid_helo_hostname,
check_helo_access
regexp:/etc/postfix/helo-blacklist/smtp_helo_blacklist,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_non_fqdn_recipient,
reject_unauth_destination,
reject_unlisted_recipient,
reject_unknown_recipient_domain,
reject_rbl_client dnsbl.njabl.org,
reject_rbl_client dul.dnsbl.sorbs.net,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client ix.dnsbl.manitu.net,
reject_rbl_client combined.rbl.msrbl.net,
reject_rbl_client b.barracudacentral.org,
check_policy_service unix:private/spfpolicy,
check_policy_service inet:127.0.0.1:2501,
permit


--
Klaus Engelmann
CCNA CCDA - CSCO10971632
LPIC-1 - LPI000138061

[Brian Evans - Postfix List]

Post by Klaus Engelmann
I would like to know if it is advisable to keep a final PERMIT at the
end of the smtpd_recipient_restrictions.

A permit is implied at the end of each restriction class.
So adding or removing an explicit permit from the end has no noticeable
effect.

Brian

[Klaus Engelmann]

Thanks Brian.


--
Klaus Engelmann
CCNA CCDA - CSCO10971632
LPIC-1 - LPI000138061



On Fri, May 28, 2010 at 3:34 PM, Brian Evans - Postfix List

Post by Brian Evans - Postfix List

Post by Klaus Engelmann
I would like to know if it is advisable to keep a final PERMIT at the
end of the smtpd_recipient_restrictions.

A permit is implied at the end of each restriction class.
So adding or removing an explicit permit from the end has no noticeable
effect.
Brian