AND parameters of Postfix question ?

10 msg	My Virtual users can't send messages to their o...

AND parameters of Postfix question ?
\ Truong Tan Son (28 May 2007)
. \ Truong Tan Son (28 May 2007)
. . \ Rene van Hoek (28 May 2007)
. . \ Truong Tan Son (28 May 2007)
. . . \ Rene van Hoek (28 May 2007)
. . \ mouss (28 May 2007)
. . \ Truong Tan Son (30 May 2007)

2 msg	Px messing plain mail addresses, group members
4 msg	no logs
8 msg	myhostname
1 msg	how to manage destination status cache
2 msg	Temporary failure with Postfix and Cyrus
21 msg	/usr/lib/sasl2 failed to open directory
1 msg	Cyrus and Postfix
3 msg	reject_unknown_sender_domain problem
6 msg	Automatic message
14 msg	mailbox_command prepends a 'From ' ?
3 msg	virtual and lmtp for virtual hosting
10 msg	Still problems..
4 msg	Double transport
2 msg	MUA with SSL/TLS Client Certificate support (SO...
3 msg	Regarding S/MIME Messages
17 msg	address_verify_sender
10 msg	Question about Logs
9 msg	problem with bad syntax and Outlook 2007

Subject:	AND parameters of Postfix question ?
Group:	Postfix-users
From:	Truong Tan Son
Date:	28 May 2007

Dear Sir,

I hesitate when using parameters of Postfix.

smtpd_sender_restrictions = option1, option2

Check "option2" after passing "option1".
Result = option1 && option2.

==My scenario===

mynetworks = 127.0.0.1/8, 172.16.20.0/25, 172.16.30.0/25
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_reject_unlisted_recipient = yes
broken_sasl_auth_clients = yes

smtpd_sender_login_maps = hash:/etc/postfix/login_maps

smtpd_sender_restrictions =
check_sender_access hash:/etc/postfix/sender_access \
check_client_access cidr:/etc/postfix/client_access\
reject_unlisted_sender,reject_sender_login_mismatch \
reject_unauthenticated_sender_login_mismatch \
permit_sasl_authenticated

#/etc/postfix/sender_access
info permit_mynetwork, reject

ip address clients : 172.16.20.1
172.16.20.2

SASL Authen did not check logged in, not reject_sender_login_mismatch, ...It passes all senders in networks.

What is wrong and how to make SASL Authen work in this case ?

Thanks you and best regards,
--
Truong Tan Son.