OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Accept recipients in an access map, reject the rest

From: Rob Foehl (rwfloonybin.net)
Date: Mon May 03 2004 - 08:58:36 CDT


On Mon, 3 May 2004, David Landgren wrote:

> At the appropriate point in my smtpd_recipient_restrictions list (i.e.
> long after relaying checks et al.), send anything destined for that
> domain to a new smtp_restriction_class which looks like the following
>
> recipient_checks:
> other_company.com other_company_restriction
>
> main.cf:
> other_company_restriction =
> check_recipient_access hash:/etc/postfix/list_of_other_users
> reject
>
> I just have to transform the list into an access map suitable for
> Postfix and I'll refuse anything that isn't a legitimate address. A poor
> man's LDAP if you will. It seems too simple... am I missing anything?

On the contrary, the above is more complex than necessary.. Your best bet
would be to just add another map containing the valid users to
{local,relay}_recipient_maps (depending on need).. Otherwise, you can
stick with an access map and rely on the query order, like this:

domain.com REJECT
user1domain.com DUNNO
user2domain.com DUNNO
...

See access(5) for more details.

-Rob