diff --git a/tasks/configure_postfix.yml b/tasks/configure_postfix.yml
index 20a8af96286194a741320ff54936cc4fbd3e36ba..67ff4796876d0f33de409a0c2558b245f79a4041 100644
--- a/tasks/configure_postfix.yml
+++ b/tasks/configure_postfix.yml
@@ -8,4 +8,7 @@
     block: |
       # non-default
       mydomain = {{ ansible_domain if ansible_domain else 'localdomain' }}
+      smtpd_recipient_restrictions =
+      # smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination    # DEFAULT according to `man 5 postconf`
+      smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination
   notify: restart postfix