OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Address re-write for NDR

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Fri Mar 07 2008 - 09:19:56 CST


On Fri, Mar 07, 2008 at 12:35:57AM -0600, Maier,Chris wrote:

> I have a couple of Postfix smart hosts (postfix 2.4.3) that handle most
> of my internal and external relaying. There are NO local mailboxes on
> the smart hosts. All of my companies *NIX systems have either Sendmail
> or submit configured to use the postfix smart hosts as their next hop.
> This means that I have HELO commands that look like "serverOne.heb.com"
> and from addresses like "userAserverOne.heb.com". The smart hosts are
> doing domain masquerading for "heb.com", and rewrite works exactly as
> expected for email that can be successfully delivered.
>
> As is the case anywhere, I have messages that are not deliverable due to
> bad addresses etc.
>
> (host names and IP's have been masked)
>
> Based on the email/host information above, how do I get the from address
> rewritten prior to generating an NDR so that instead of trying to return
> the message to the email address "userAserverOne.heb.com" on the
> "serverOne.heb.com" host, the NDR message is instead re-routed and
> delivered to "userAheb.com" where the "real" mailbox exists?
>
> Sample log entry:
> Feb 6 06:59:50 {relay-server} postfix/smtpd[29026]: NOQUEUE:
> reject: RCPT from serverOne.heb.com[10.1.1.217]: 450 4.1.2
> <Ecerrillonot-deliverable.com>: Recipient address rejected: Domain not
> found; from=<userAserverOne.heb.com> to=<Ecerrillonot-deliverable.com>
> proto=ESMTP helo=<serverOne.heb.com>

You can't rewrite a message that you reject. It is the remote server that
is submitting the NDR.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.