|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: Gary V (mr88talent
hotmail.com)
Date: Thu Apr 10 2008 - 21:50:01 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
>> Apr 4 09:38:50 av4 postfix/smtp[9922]: C663D75059D:to=,
>> relay=10.30.32.7[10.30.32.7]:25, delay=0.25,delays=0.15/0/0.07/0.03,
>> dsn=5.0.0,
>> status=undeliverable (host10.30.32.7[10.30.32.7] said: 550
>> yyy
destination.it...
>> No such user (inreply to RCPT TO command))
>>
>> Notice "postfix/smtp". I think this domain does not have recipient
>> verification enabled. This message was likely relayed to 10.30.32.7 AFTER
>> it was scanned by amavisd-new - then subsequently rejected.
Because this particular domain _does_ have recipient verification enabled, I think this entry might be the result of sending a message from the local machine using the sendmail command. Don't test recipient verification this way. Test by sending a message to port 25 (smtpd listener).
> I have alread set explicitily:
>
> unverified_recipient_reject_code = 550
Good
>> Look at the query in mysql-check-recipient-access.cf. What field does it
>> return?
>
> query = select restriction from domain where domain='%s' and active='1'
>
> mysql> select distinct restriction from domain;
> +-----------------------------+
> | restriction |
> +-----------------------------+
> | NULL |
> | reject_unverified_recipient |
> +-----------------------------+
> 2 rows in set (0.02 sec)
>
> More precisely it returns 'reject_unverified_recipient' for downstream
> server which do address verification (Or at least, it should do address
> verification).
>
OK, this should work. All you really needed was to set unverified_recipient_reject_code to 550, and to ensure your domains were set up to use either recipient verification (reject_unverified_recipient) or relay_recipient_maps.
I also suggested the use of a disk based database:
address_verify_map = btree:/etc/postfix/verify
Do not use SQL for this, use btree as shown, there is nothing for you to maintain here. Just read the warnings:
http://www.postfix.org/ADDRESS_VERIFICATION_README.html#caching
Gary V
_________________________________________________________________
Going green? See the top 12 foods to eat organic.
http://green.msn.com/galleries/photos/photos.aspx?gid=164&ocid=T003MSN51N1653A
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]