Enabling relaying for authenticated clients

If authentication has been successful, we just have to tell Postfix to allow relaying of messages for those who have been authenticated. This is done by editing main.cf and adding the permit_sasl_authenticated option to your list of restrictions in smtpd_recipient_restrictions like this:

smtpd_recipient_restrictions =
...
permit_sasl_authenticated
permit_mynetworks
reject_unauth_destination
...

Reload Postfix and start testing with a real mail client. If possible, ensure that its IP address is not part of mynetworks, as Postfix might be allowed to relay for that reason and not because SMTP AUTH worked out. You might want to limit relaying to the server only during the test. Change the mynetwork_classes ...

Get Linux E-mail now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.