OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Virtual domains and recipient maps

From: Michael Gale (mgaleutilitran.com)
Date: Fri Jan 02 2004 - 12:33:58 CST


On Fri, 2 Jan 2004 10:44:37 -0700
Michael Gale <mgaleutilitran.com> wrote:

> Hello,
>
> I am having trouble getting virtual domains to work with a access list :(
>
> Right now my mail server has the following setup.
>
> mydestination =
> relay_domains = $myhostname, $mydomain
> relay_recipient_maps = hash:/etc/postfix/ldapusers
> transport =... mail gets sent to our exchange server only for valid e-mail accounts that are not in a blacklist file.
>
> I then create a virtual file as follows.
> domain.us domain.com
> domain.net domain.com
>
> I all mail for userdomain.XXX to go to userdomain.com
>
> I then added the following to my main.cf
>
> virtual_alias_domains = domain.us, domain.net
> virtual_alias_maps = hash:/etc/postfix/virtual
>
> The mail does seem to go to the correct account on the exchange server, here are some logs:
>
> Jan 2 10:35:30 postfix postfix/smtp[1991]: E25AD67E43: to=<netopsdomain.com>, orig_to=<netopsdomain.us>, relay=10.10.7.3[10.10.7.3], delay=1, status=sent (250 2.6.0 <20040102173513.8A8AD67E42postfix.domain.com> Queued mail for delivery)
>
> But if I sent a message to "sjhfskdhfdomain.us" the message is accepted, I want mail for any virtual domain to have the recipient check against a access list.
>
> Do I have to create my virtual file in the following format:
> userdomain.us userdomain.com
>
> Because this would be a pain in the #$$ :(
>
>
> --
> Michael Gale
> Network Administrator
> Utilitran Corporation
>

        Ok .. for I believe I have found a solution. In order for my virtual domains to not accept mail for unknown users I have to add each user to my virtual file:
userdomain.us userdomain.com

But I have six domains :( and about 100 users. Now of course I will have script that does this but is there not a easier way ?

--
Michael Gale
Network Administrator
Utilitran Corporation