<header>Restrictions on recipient addresses</header>
<center><tt translate="no">smtpd_recipient_restrictions</tt></center>
<hr>
This parameter specifies restrictions on recipient addresses that SMTP clients
can send in RCPT TO commands.
<p>
<include relay_rules>
These destinations do not need to be listed in
<a href=opt_relay_domains><tt translate="no">$relay_domains</tt></a>.
<p>
The following restrictions are available (* is part of default setting):
<ul>
<li> <tt translate="no">*permit_mynetworks:</tt> permit if the client address matches
<a href=opt_mynetworks><tt translate="no">$mynetworks</tt></a>.
<li> <tt translate="no">reject_unknown_client:</tt> reject the request if the client hostname is unknown.
<li> <tt translate="no">reject_maps_rbl:</tt> reject if the client is listed under
<a href=opt_maps_rbl_domains><tt translate="no">$maps_rbl_domains</tt></a>.
<li> <tt translate="no">reject_invalid_hostname:</tt> reject HELO hostname with bad syntax.
<li> <tt translate="no">reject_unknown_hostname:</tt> reject HELO hostname without DNS A or MX record.
<li> <tt translate="no">reject_unknown_sender_domain:</tt> reject sender domain without A or MX record.
<li> <tt translate="no">*check_relay_domains:</tt> permit only mail:
<ul>
<li> to destinations matching
<a href=opt_inet_interfaces><tt translate="no">$inet_interfaces</tt></a>,
<a href=opt_mydestination><tt translate="no">$mydestination</tt></a>,
or <a href=opt_virtual_maps><tt translate="no">$virtual_maps</tt></a>,
<li> from trusted clients matching
<a href=opt_relay_domains><tt translate="no">$relay_domains</tt></a> or subdomain
thereof,
<li> from untrusted clients to destinations matching
<a href=opt_relay_domains><tt translate="no">$relay_domains</tt></a> or
subdomain thereof (except addresses with sender-specified routing).
</ul>
Reject anything else.
<li> <tt translate="no">permit_auth_destination:</tt> permit mail:
<ul>
<li> to destinations matching
<a href=opt_inet_interfaces><tt translate="no">$inet_interfaces</tt></a>,
<a href=opt_mydestination><tt translate="no">$mydestination</tt></a>,
or <a href=opt_virtual_maps><tt translate="no">$virtual_maps</tt></a>,
<li> to destinations matching
<a href=opt_relay_domains><tt translate="no">$relay_domains</tt></a> or subdomain
thereof, except for addresses with sender-specified routing.
</ul>
<li> <tt translate="no">reject_unauth_destination:</tt> reject mail unless it is sent
<ul>
<li> to destinations matching
<a href=opt_inet_interfaces><tt translate="no">$inet_interfaces</tt></a>,
<a href=opt_mydestination><tt translate="no">$mydestination</tt></a>,
or <a href=opt_virtual_maps><tt translate="no">$virtual_maps</tt></a>,
<li> to destinations matching
<a href=opt_relay_domains><tt translate="no">$relay_domains</tt></a> or subdomain
thereof, except for addresses with sender-specified routing.
</ul>
<li> <tt translate="no">reject_unauth_pipelining:</tt> reject mail from improperly pipelining spamware
<li> <tt translate="no">permit_mx_backup:</tt> accept mail for sites that list me as MX host.
<li> <tt translate="no">reject_unknown_recipient_domain:</tt> reject domains without A or MX record.
<li> <tt translate="no">check_recipient_access maptype:mapname:</tt> look up recipient address, parent domain, or localpart@.
Reject if result is REJECT or "[45]xx text".
Permit otherwise.
<li> <tt translate="no">check_client_access maptype:mapname:</tt> see
<a href=opt_smtpd_client_restrictions>smtpd_client_restrictions</a>.
<li> <tt translate="no">check_helo_access maptype:mapname:</tt> see
<a href=opt_smtpd_helo_restrictions>smtpd_helo_restrictions</a>.
<li> <tt translate="no">check_sender_access maptype:mapname:</tt> see
<a href=opt_smtpd_sender_restrictions>smtpd_sender_restrictions</a>.
<li> <tt translate="no">reject_non_fqdn_hostname:</tt> reject HELO hostname that is not in FQDN form.
<li> <tt translate="no">reject_non_fqdn_sender:</tt> reject sender address that is not in FQDN form.
<li> <tt translate="no">reject_non_fqdn_recipient:</tt> reject recipient address that is not in FQDN form.
<li> <tt translate="no">reject:</tt> reject the request. Place this at the end of a restriction.
<li> <tt translate="no">permit:</tt> permit the request. Place this at the end of a restriction.
</ul>
Restrictions are applied in the order as specified; the first
restriction that matches wins.
<p>
Specify a list of restrictions, separated by commas and/or whitespace.
Continue long lines by starting the next line with whitespace.
<p>
NOTE: YOU MUST SPECIFY AT LEAST ONE OF THE FOLLOWING RESTRICTIONS
OTHERWISE POSTFIX REFUSES TO RECEIVE MAIL:
<br>
<tt translate="no">reject, check_relay_domains, reject_unauth_destination</tt>
<hr>
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`
