OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Mon Jul 02 2001 - 11:02:03 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I don't understand your response. Sorry... The proposal is to pair
    virt.dom.ain ("Sendmail style") with nosuchuser.virt.dom.ain ("Postfix
    style"). The "Postfix-style" domain bounces unknown (not listed in the
    virtual map) users in the "Sendmail style" domain:

        knownvirt.dom.ain -> known-virtuallocalhost DELIVER
        unknownvirt.dom.ain -> unknownnosuchuser.virt.dom.ain BOUNCE

    The only anomaly is that the bounce is "delayed". Instead of an SMTP 553
    reply, a bounce is sent to the envelope sender. This even allows one
    to implement virtual domains where some of the recipients addresses are
    left unchanged by the virtual rewrite:

        known1virt.dom.ain -> known1virt.dom.ain DELIVER
        known2virt.dom.ain -> known2real.dom.ain DELIVER
        unknownvirt.dom.ain -> unknownnosuchuser.virt.dom.ain BOUNCE

    Admittedly this is more about virtual domains, rather than virtual
    mailboxes.
    It is merely a patch free mechanism to allow bounces for users not listed in
    the virtual map when the output domain of the rewrite can be the same as
    the input domain.

    --
            Viktor.
    

    > Victor Duchovni wrote: > > > > There is a simple trick that solves the "how to reject" > problem without > > code changes. The recipients are rejected after the mail is > accepted rather > > than in smtpd. Some consider not rejecting invalid addresses > in SMTP to be > > a feature (makes it harder to fish for valid recipient addresses), I > > personally think that it is a tolerable misfeature of the approach. > > > > The basic idea is to structure the configuration as follows: > > > > /etc/postfix/main.cf: > > virtual_maps hash:/etc/postfix/virtual, > hash:/etc/postfix/nosuch > > > > /etc/postfix/virtual: > > nosuchuser.virtual.domain whatever > > user1virtual.domain user1-virtual > > user2virtual.domain user2-virtual > > > > /etc/postfix/nosuch: > > virtual.domain nosuchuser.virtual.domain > > > > Known users in virtual.domain get resolved to > appropriate local names. Non > > existent users get rewritten to > unknown.usernosuchuser.virtual.domain and > > this is bounced in qmgr/nqmgr. > > Oh ma, that *must* be done in qmgr anyway, instead of making this > ugly hack. > Qmgr *must* reject mail to non-exited user (or virtual delivery agent for > that matter), there should be no situation like "I don't know what to do > with this destination address" at all (address should either deliver or > bounce). > > Regards, > Michael. > - >

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users