OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: bounce notification of relayhost

From: mouss (mlist.onlyfree.fr)
Date: Fri Jul 20 2007 - 03:33:24 CDT


Uwe Dippel wrote:
> mouss wrote:
>
>
>
>> The remote host does not handle mail for docu1.... .edu.my, so it
>> rejects it. If that host should handle such mail, you need to
>> configure it to do so (in postfix, add the domain to mydestination or
>> other domain classes).
>
> No, it shouldn't. I wrote that it was a crappy hack, since postfix
> wants to return the bounce to the original domain, which cannot be
> accessed from the relayhost, because it is in the LAN, while the
> relayhost [172.16.0.2] is in the DMZ.

do you mean you forbid traffic from the inside box to the dmz box? you
could allow this (may need a static route, depending on your network
architecture, but this should not be too hard) or do you have security
concerns here?
>
> > if the host does not handle such mail, then you should not
>> send this mail to that host.
>
> Very true ! - But then: how do I redirect bounce messages for mail
> originating from docu1.coit.uniten.edu.my (only) to postmaster,
> instead of back to the unreachable intranet URL
> docu1.coit.uniten.edu.my ?
> Is it possible that the solution is included within your text ?
> Then it would be to add docu1.coit.uniten.edu.my to mydestination.
you could do that indeed. or you could instead list this as a
virtual_alias_domain and use virtual aliases to redirect mail for this
domain to wherever you want. you can use a wildcard virtual alias if you
don't have an issue of recipient validation (domain is internal and not
reachable by spammers).

>
>> PS. do you know what "coit" means in french?
>
> Yes. Do you know the COIT tower in San Francisco ?

excellent!