OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Postfix mail gateway not rejecting non-existant local / relay recipients

From: Wesley K. Joyce (wjoyceuvi.edu)
Date: Tue Jan 03 2006 - 18:20:00 CST


I am running mailman locally on my mail gateway and it appears it will only work if I have local recipients and can be referenced by the aliases (local) daemon. So unfortunately I cannot get rid of $mydomain/$relay_domains in $mydestination. I added the parameters in bold, reject_unverified_recipient and unverified_recipient_reject_code = 550, which has forced postfix to reject emails to non existant recipients. So I would say I have accomplished my goal, but I am not fully sure what the full consequenses of this 'hybrid' setup is. Comments are appreciated.

smtpd_recipient_restrictions =
  reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  reject_unknown_sender_domain,
  reject_unknown_recipient_domain,
  permit_sasl_authenticated,
  permit_mynetworks,
  reject_invalid_hostname,
  reject_non_fqdn_hostname,
  reject_unauth_destination,
  reject_unverified_recipient,
..
  permit_auth_destination,
  reject
 
unknown_local_recipient_reject_code = 550
unverified_recipient_reject_code = 550

________________________________

From: owner-postfix-userspostfix.org on behalf of Magnus Bäck
Sent: Tue 1/3/2006 3:11 AM
To: postfix-userspostfix.org
Subject: Re: Postfix mail gateway not rejecting non-existant local / relay recipients

On Tuesday, January 03, 2006 at 07:44 CET,
     "Wesley K. Joyce" <wjoyceuvi.edu> wrote:

> Greetings list. My postfix mail gateway (relay) is not rejecting non
> local / relay recipients. Instead it bounces them when the local
> process is fired off. The googling that I have done has revieled that
> I should be using local_recipient_maps and/or relay_recipient_maps,
> well I am using both and it doesn't work. Help.

If it's a gateway, i.e. it just relays messages to some other server,
why does the messages even reach local(8)? Don't list relay domains in
mydestination, list them in relay_domains.

   http://www.postfix.org/STANDARD_CONFIGURATION_README.html#firewall
   http://www.postfix.org/ADDRESS_CLASS_README.html

Show complete logs of a message not being rejected.

[...]

--
Magnus Bäck
magnusdsek.lth.se