OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Question about root/virtual/canonical
From: Matthias Andree (madt.e-technik.uni-dortmund.de)
Date: Fri Mar 03 2000 - 05:47:12 CST

Luis Melendez Aganzo wrote:
>
> Hello all.
> After some testing I have just completely installed Postfix in all
> our mail machines. It works very well. Now I have a question: in some
> of our machines, I have a .forward for root that redirects mail to
> rootothermachine.

Note that root mail is NOT delivered with root privileges, so
/wherever/you/put/aliases is the place to go.

> That othermachine collects mail for root's of several
> machines and saves them in per-machine folders for some automated processing.
> If I put 'root rootlocalhost' in virtual, as advised in the documentation,
> Postfix adds the header 'Delivered-To: rootlocalhost.$mydomain'
> When the mail is forwarded to othermachine, it tries to deliver
> locally but then sees that header, thinks it is a mail forwarding loop
> and bounces it.

Euhm. Ouch. We're having relayhost setups here, and while we normally
use canonical to masquerade our hosts behind our mail domain, we exempt
root from masquerading.

> Other solution is to put in canonical: root rootthismachine
> This works well, and has the advantage that all mails go with
> addresses 'rootmachine', and I think this is convenient in the case
> of root.

This is a good idea.

> So, is there any drawback with this approach? If not, why the documentation
> advises to use virtual instead for root?

Probably because it is not perfect. :-)