Tony Finch wrote: >
> Are you testing with email sent via SMTP or email sent from the local
> machine? In the latter case the ACLs are not checked so your
> restrictions will not be enforced.
There is the acl_not_smtp ACL if you want to protect local submission,
as well. You can either duplicate the relevent tests, or move them to a
separate ACL and reference them in both places using an acl condition.
