OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
RE: Recipient validation

From: Rocco Scappatura (Rocco.Scappaturasttspa.it)
Date: Mon Dec 03 2007 - 04:11:21 CST


> > While with this settings in master.cf:
> >
> > localhost:10026 inet n - n - 70
> smtpd
> > -o smtpd_use_tls=no
> > -o content_filter=
> > -o smtpd_timeout=$imss_timeout
> > -o local_recipient_maps=
> > -o myhostname=IMSA
> > -o smtpd_client_restrictions=
> > -o smtpd_sender_restrictions=
> >
> > As you and Victor says, there some things to adjust.
> >
> > Really, I have noticed that with the latter settings my
> server tries to
> > verifies recipient als on the outgoing messages.
>
> Fix this. only do recipient verification on your domains. either use
> reject_unverified_recipients after reject_unauth_destination
> or replace
> it wth a check like this:
>
> check_recipient_access hash:/etc/postfix/verify_domains

Now, in main.cf I have:

smtpd_sender_restrictions =
        reject_unknown_sender_domain
        reject_unauth_destination
        reject_unverified_recipient

This should agree with what you said above.

> > And fails If set an
> > hostname that is not a fqdn:
> >
> > 'xxx_yyyjumpy.it' 29/11/2007 22.29
> >
> > 450 <xxx_yyyjumpy.it>: Recipient address rejected:
> > undeliverable address: host mx02.jumpy.it[213.215.144.92] said: 554
> > 5.1.8 <postmasterno.fqdn>: Sender address rejected: Domain
> not found
> > (in reply to RCPT TO command)
> >
>
> what is the "no.fqdn" thing? my server would reject this
> mail as well.
> use valid address.

Infact, sorry.

> > Moreover, if I telnet on port 25 a mail server like
> > mx02.jumpy.it[213.215.144.92], I get an high delay to get answer for
> > each SMTP command I send.
> >
>
> maybe this server is throttling you because you're abusing their
> resource by your recipient verification probes.

I will say you what will happens after I have applied the changes..

> > Are there any relationship between this oddity and the settings?
> >
>
> you need to see what is causing the delay: what happens to an
> email from
> the time it enters the system until it gets out.

OK.

thanks,

rocsca