OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 'map chains' - recursive address validation

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Tue Jul 18 2006 - 10:49:36 CDT


On Tue, Jul 18, 2006 at 11:44:55AM -0400, Wietse Venema wrote:

> It would have to implement not only the input address rewriting
> that is currently done in cleanup and trivial-rewrite, but also
> the output address rewriting that happens in, for example, the
> local delivery agent (to maintain consistency between virtual(5)
> and local(8) aliases).

Perhaps another reason why address validation should stop at the input
to virtual expansion, verifying the validity of that address, and not
its expanded value, but in any case, I agree that map chains would
solve a different problem (more flexible maps). For accurate recipient
verification it seems that Postfix would have to do the work internally
by doing at least the 1-to-1 (canonical and masquerade) expansion in
smtpd(8) and perhaps also virtual(5) and perhaps aliases(5), but here
is some diversity of opinion.

--
        Viktor.

P.S. Morgan Stanley is looking for a New York City based, Senior Unix
     system/email administrator to architect and sustain the Unix email
     environment. If you are interested, please drop me a note.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.