Discussion:
554 5.7.1 Recipient address rejected: Access denied For Internal Aliases
(too old to reply)
j***@gmail.com
2014-09-12 16:07:06 UTC
Permalink
My email server is setup to reject outsiders from using our internal aliases (email distribution lists) via the following line in my main.cf:

check_recipient_access hash:/etc/postfix/protect_internal_aliases

This file contains something like the following:

list1@ permit_mynetworks, reject
list2@ permit_mynetworks, reject
list3@ permit_mynetworks, reject

The problem is that I do need to allow a certain domain (outlook.com) access to these lists, but because outlook has a ton of email servers with different IPs that change all the time, is there another syntax to allow them access to my internal aliases without adding every outlook.com IP to my $mynetworks?
j***@gmail.com
2014-09-15 16:00:36 UTC
Permalink
Post by j***@gmail.com
check_recipient_access hash:/etc/postfix/protect_internal_aliases
The problem is that I do need to allow a certain domain (outlook.com) access to these lists, but because outlook has a ton of email servers with different IPs that change all the time, is there another syntax to allow them access to my internal aliases without adding every outlook.com IP to my $mynetworks?
check_recipient_access hash:/etc/postfix/protect_internal_aliases
The problem is that I do need to allow a certain domain (outlook.com) access to these lists, but because outlook has a ton of email servers with different IPs that change all the time, is there another syntax to allow them access to my internal aliases without adding every outlook.com IP to my $mynetworks?
check_recipient_access hash:/etc/postfix/protect_internal_aliases
The problem is that I do need to allow a certain domain (outlook.com) access to these lists, but because outlook has a ton of email servers with different IPs that change all the time, is there another syntax to allow them access to my internal aliases without adding every outlook.com IP to my $mynetworks?
Solution was to add the domain to a whitelist via:

check_sender_access hash:/etc/postfix/sender_access

Then create that file to look like:

@whitelisteddomain.com OK

Important things to note.
1) Don't forget to postmap sender_access
2) Restart postfix
3) Order matters in the smtod_recipient_restrictions I put this near the top
Loading...