From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Thu May 08 2008 - 10:01:02 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, May 08, 2008 at 03:47:12PM +0100, Wojtek Bogusz wrote:

> virtual_alias_maps = ldap:/etc/postfix/ldap-aliases.cf

This applies to all recipient addresses, not just those in your domain.

> $ cat /etc/postfix/ldap-aliases.cf
> server_host = localhost
> search_base = ou=EmailAliases,dc=frontline
> query_filter = (&(objectClass=inetOrgPerson)(sn=%u))
> result_attribute = cn
> bind = no
> version = 3

This ignores the domain part without restricting it. The result is that
you rewrite <localpart><any.domain> provided the local part is the "sn"
of one of your users. A terrible idea.

> output from
>
> $ sudo postmap -q wojtekboguszfrontlinedefenders.org
> ldap:/etc/postfix/ldap-aliases.cf
> $ sudo postmap -q wojtekbogusz ldap:/etc/postfix/ldap-aliases.cf
>
> is nothing...

Good. Are these expected to match anything?

> and smtp still rejects the address (any address admin,
> adminfrontlinedefenders.org, wojtekbogusz,
> wojtekboguszfrontlinedefenders.org, etc.)

Do show the relevant ": reject: " log entries and explain why you expect
these to be accepted.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]