OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Strange vhosts problem, possibly involving dash

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Tue Aug 03 2004 - 07:29:39 CDT


On Mon, Aug 02, 2004 at 11:00:21PM -0700, William Pietri wrote:

> On Mon, 2004-08-02 at 10:35, William Pietri wrote:
> > Hi! I'm using postfix-1.1.11-20020719, which has been working fine for
> > me and my array of virtual domains for the last couple of years. In
> > adding a few new virtual domains, though, I'm getting weird results. The
> > new domains deliver fine if I'm sending mail from a host in mynetworks,
> > but they are rejected with "Relay access denied" from non-trusted
> > senders.
>
> Ok, I've looked into this more. As I mentioned initially, the debugging
> output made me wonder if it had something to do with the dash, as there
> were log lines that looked like this:
>
> match_list_match: us-election.org: no match
> maps_find: us-election.org: not found
> maps_find: us: not found
>
> If I change "us-election.org" in my config files to "usxelection.org",
> it works fine. Also, if I add the entry "us: maildrop" to my vdomains
> file, it works fine. And if I switch back, it still doesn't work.

Yes, I looked more closely and you are right, permit_auth_destination
mishandles virtual_mailbox_domains with a "dash" when $recipient_delimiter
is "-". This problem was introduced in postfix-1.1.11-20020717 and was
fixed with the introduction of address classes.

Here's a patch for the snapshot, apply fix your system and then upgrade to
2.1.4 (after carefully reading the 2.0 *AND* 2.1 RELEASE_NOTES).

Index: src/smtpd/smtpd_check.c
--- src/smtpd/smtpd_check.c 30 Jul 2003 04:11:48 -0000 1.1.1.7
+++ src/smtpd/smtpd_check.c 2 Aug 2004 21:27:53 -0000
-765,7 +765,7
             msg_warn("list domain %s in only one of $%s and $%s",
                      domain, VAR_MYDEST, VAR_VIRTUAL_MAPS);
         if (*var_virt_mailbox_maps
- && checkv8_maps_find(state, reply_name, virt_mailbox_maps, domain))
+ && check_maps_find(state, reply_name, virt_mailbox_maps, domain))
             msg_warn("list domain %s in only one of $%s and $%s",
                      domain, VAR_MYDEST, VAR_VIRT_MAILBOX_MAPS);
         return (1);
-778,7 +778,7
 
     /* If virtual mailbox domain. */
     if (*var_virt_mailbox_maps
- && checkv8_maps_find(state, reply_name, virt_mailbox_maps, domain))
+ && check_maps_find(state, reply_name, virt_mailbox_maps, domain))
         return (1);
 
     return (0);

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>