OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
those pesky non-existent local users

From: Barry Berger (barrythisblueplanet.net)
Date: Thu Mar 02 2006 - 14:50:04 CST


I really hate to ask a question that I know has been asked before but
I'm somewhat new to this and have not been able to find a definitive
answer to this question...perhaps somebody can put me on the correct path.

I've now managed to configure two mail servers following roughly along
the howto at
www.tldp.org/HOWTO/Postfix-Cyrus-Web-cyradm-HOWTO/install.html. The
only problem I experienced with the first sever was that I was receving
mail from non-existent addresses within my own domain - such as
"salesmydomain.net". I wasn't able to stop this but as nobody else was
using the domain I could ignore it. I've now built a new machine and
will be hosting an additional virtual domain with many more people who
won't be so quick to ignore this junk.

Yes, I can stuff each non-existent address into the access.db as it is
used but it just seems that postfix should be able to reject any mail
that is being sent from a non-existent user in it's own domain(s)
without my having to manually update a file on a regular basis....or can
I just have a blanket REJECT for everything from my domains and then
ACCEPT valid users in the access.db?

Perhaps I'm getting confused by what affects local (real) accounts vs
virtual accounts or I have a conflict that is undoing what I'm trying to do.

The postconf output is:

postconf | grep reject

access_map_reject_code = 554
invalid_hostname_reject_code = 501
maps_rbl_reject_code = 554
multi_recipient_bounce_reject_code = 550
non_fqdn_reject_code = 504
reject_code = 554
relay_domains_reject_code = 554
smtpd_delay_reject = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks, reject_unauth_destination, check_sender_access
hash:/etc/postfix/access
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = yes
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 550
unknown_relay_recipient_reject_code = 550
unknown_virtual_alias_reject_code = 550
unknown_virtual_mailbox_reject_code = 550
unverified_recipient_reject_code = 450
unverified_sender_reject_code = 450

Thanks in advance for any advice you can give.