OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: reject_unknown_recipient_domain

From: mouss (moussnetoyen.net)
Date: Thu May 29 2008 - 11:32:21 CDT


Rod G wrote:
> Hello. In main.cf I have the following configured for recipient
> restrictions. My Internet connection went down for about 5 minutes
> yesterday and some mail sent within that down time was rejected with
> "Recipient address rejected: Domain not found", as expected with the
> "reject_unknown_recipient_domain" parameter in the configuration. In
> normal operation I would like mail for domains that do not exist
> (typos) to be rejected so the user knows immediately that there was a
> problem. However, I wouldn't like this to happen if and when the
> Internet connection drops out and the server is unable to resolve MX
> records. Is there a different way to do this?
>
> Thanks,
> Rod
>
>
> smtpd_recipient_restrictions =
> reject_unknown_recipient_domain
> permit_mynetworks
> reject_non_fqdn_recipient
> check_client_access hash:/var/lib/pop-before-smtp/hosts
> check_policy_service inet:127.0.0.1:60000
> reject_unauth_destination
>

when you subscribed to this list, you got a welcome message that you
should have read. if you missed it, then please read
     http://www.postfix.org/DEBUG_README.html#mail

In short:
- do not speculate.
- post relevant logs
- post the output of 'postconf -n'

reject_unknown_*_domain works as it should. if you want an example, here
is one:

May 29 00:01:55 imlil postfix/smtpd[77513]: NOQUEUE: reject: RCPT from
irc.pp.ru[212.96.97.122]: 450 4.1.8 <ericsandraloden.com>: Sender
address rejected: Domain not found; from=<ericsandraloden.com>
to=<victimexample.com> proto=ESMTP helo=<irc.pp.ru>

do you see the 450?