Postfix relay problem
 

I have a somewhat odd problem (I think)

I have two email servers.
One is a postfix, the other is a PGP Universal Server.

Both are in my DMZ.

All email leaving the protected network and entering it, is routed to the PGP server.

The PGP server sends all email outbound to the Postfix server.
The PGP server retrieves all inbound email from the Postfix server.

I believe you would call this a smarthost setup.

If I enter the IP of the PGP server into the postfix servers 'access' file and as a REJECT, and run postmap, zero mail can get sent into the domain. Everything get's rejected.

I am told this is because the PGP universal is a mail proxy, and checks with the Postfix server for who is allowed to do what. If the postfix server rejects, the universal rejects.

If I remove the PGP Universal server from the access table and run postmap, the entire world can relay through that pair of servers.

My postconf -n is below, with the real IP's and domain names obfuscated:

[root@ciobrrnf2 postfix]# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
home_mailbox = Maildir/
html_directory = no
inet_interfaces = $myhostname, $myhostname.$mydomain
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname localhost.$mydomain $mydomain
mydomain = somedomain.com
myhostname = somehost
mynetworks = 111.1.111.111/32,127.0.0.0/8
mynetworks_style = subnet
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
notify_classes = resource, software, bounce, delay, policy, protocol
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
relay_domains =
relayhost =
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
smtpd_client_restrictions = check_client_access hash:/etc/postfix/access
unknown_local_recipient_reject_code = 550


I am anxious for any assistance anyone can provide.

Thank-you,
Bruce D. Meyer