Victor.Duchovnimorganstanley.com
Date: Thu Apr 22 2004 - 01:02:17 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, 21 Apr 2004, Noel Jones wrote:

> > I want to stop any outside mail from coming to that alias and getting sent
> > to the list.
> >
>
> http://www.porcupine.org/postfix-mirror/newdoc/RESTRICTION_CLASS_README.html#internal
>

The access table entry:

        all permit_mynetworks, reject

is not likely to work AFAIK, since the access(5) table lookup keys don't
include bare users even for local domains (that is a virtual(5),
canonical(5), ... feature). The solution is to use:

        all permit_mynetworks, reject

If all domains accepted from untrusted clients are local. Otherwise one
needs to use:

        alldomain1.tld permit_mynetworks, reject
        alldomain2.tld -"-
        ...
        all[a.d.d.r1] -"-
        all[a.d.d.r2] -"-
        ...

Perhaps there should be a simpler way to restrict an address class say:

        all permit_mynetworks, reject_if_local
OR
        all permit_mynetworks, reject_if_virtual_alias

and so on.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]