On Wed, Oct 21, 2009 at 12:27:57PM -0500, Jim Rupprecht wrote:

> relay_recipient_maps = proxy:ldap:/postfix/etc/ldap_lookup.cf

Change to:

    relay_recipient_maps =
        proxy:ldap:/postfix/etc/ldap_lookup.cf,
        hash:/etc/postfix/non-ldap-relay-recipients

In that table:

    /etc/postfix/non-ldap-relay-recipients
        @example.edu    no recipient validation
        @example.net    no recipient validation
        ...

Then, if possible:

        smtpd_recipient_restrictions = 
            permit_mynetworks,
            reject_unauth_destination,
            check_recipient_access hash:/etc/postfix/rav-lookup,
            ...

    /etc/postfix/rav-lookup:
        example.edu     reject_unverified_recipient
        example.org     reject_unverified_recipient
        ...

Provided of course the nexthop relays for these domains do recipient
validation at SMTP time.

With some content filter configurations, you may need to mess around with
one or more of:

    address_verify_default_transport
    address_verify_local_transport
    address_verify_relay_transport
    address_verify_relayhost
    address_verify_sender_dependent_relayhost_maps
    address_verify_transport_maps
    address_verify_virtual_transport

-- 
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majord...@postfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

Reply via email to