OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Postfix mail gateway not rejecting non-existant local / relay recipients

From: Wesley K. Joyce (wjoyceuvi.edu)
Date: Tue Jan 03 2006 - 00:44:38 CST


Greetings list. My postfix mail gateway (relay) is not rejecting non local / relay recipients. Instead it bounces them when the local process is fired off. The googling that I have done has revieled that I should be using local_recipient_maps and/or relay_recipient_maps, well I am using both and it doesn't work. Help.
 
Here is my postconf -n
 
alias_database = hash:/etc/aliases hash:/etc/postfix/aliases hash:/etc/postfix/pelican.aliases
alias_maps = hash:/etc/aliases hash:/etc/postfix/aliases hash:/etc/mailman/aliases hash:/etc/postfix/pelican.aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp:[127.0.0.1]:10025
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
disable_vrfy_command = yes
html_directory = no
inet_interfaces = $myhostname, localhost
local_recipient_maps = $alias_maps ldap:ldaprelays
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
masquerade_domains = !minibox.uvi.edu, !orca.uvi.edu, !astro.uvi.edu, uviedu
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = uvi.edu
myhostname = mahi.uvi.edu
mynetworks = 146.226.0.0/16, 127.0.0.0/8
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
owner_request_special = no
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES
recipient_delimiter = +
relay_domains = $mydestination, studentmail.uvi.edu, staffmail.uvi.edu
relay_recipient_maps = ldap:ldaprelays
sample_directory = /usr/share/doc/postfix-2.2.2/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, permit_sasl_authenticated, permit_mynetworks, reject_invalid_hostname, reject_non_fqdn_hostname, reject_unauth_destination, check_recipient_access pcre:/etc/postfix/recipient_checks.pcre, check_helo_access hash:/etc/postfix/helo_checks, check_client_access hash:/etc/postfix/client_checks, reject_rbl_client relays.ordb.org, reject_rbl_client bl.spamcop.net, reject_rhsbl_client blackhole.securitysage.com, reject_rhsbl_recipient blackhole.securitysage.com, reject_rhsbl_sender blackhole.securitysage.com, reject_rhsbl_sender block.rhs.mailpolice.com, reject_rhsbl_client block.rhs.mailpolice.com, reject_rhsbl_sender dynamic.rhs.mailpolice.com, reject_rhsbl_client dynamic.rhs.mailpolice.com, reject_rbl_client relays.ordb.org, reject_rbl_client list.dsbl.org, reject_rbl_client sbl-xbl.spamhaus.org, reject_rbl_client dul.dnsbl.sorbs.net, permit_auth_destination, reject
smtpd_sasl_application_name = smtpd
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_cert_file = /usr/share/ssl/certs/smtp-cert.pem
smtpd_tls_key_file = /usr/share/ssl/certs/smtp-key.pem
smtpd_tls_received_header = yes
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
transport_maps = ldap:ldaptransport
unknown_local_recipient_reject_code = 550