Hi Wietse

> Not possible. The Milter protocol implements the 'change sender'
> feature AFTER the entire message is received. That is long
> after the MAIL FROM and RCPT TO commands.

Ok, so if you activate reject_unverified_recipient it's not possible to
tell postfix not to call this function for local recipients, which
would anyway be rejected.

I did some further digging and found a posting of another user having
the problem, that he used reject_unverified_recipient but wanted to be
able to queue mails for a specific domain that is relayed through his
server in case the destination server is down.

Yes, sounds similar to my problem. He used check_recipient_access with
a hash map listing all recipients he wanted to queue.

This information and a google query if I could replace a hash map with
a regexp map later I had a working solution for my SRS problem:

smtpd_recipient_restrictions = 
        reject_unknown_sender_domain
        reject_unknown_recipient_domain
        check_recipient_access regexp:/etc/postfix/noverify
        reject_unverified_recipient

And in /etc/postfix/noverify

/^SRS\d{1}.*/      OK
        
Now I just have to check that I didn't open an unauthenticated relay
door.

Mit freundlichen Grüssen

-Benoît Panizzon-
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to