I keep staring at this

        Apr 19 14:48:31 mail01 postfix/vpn/smtp[21044]: connect to 
back.mail01.example.com[10.1.1.16]:25: Connection refused
        Apr 19 14:48:31 mail01 postfix/vpn/smtp[21044]: 3qqJYC3wYbz31Vm: 
to=<[email protected]>, relay=none, delay=0.1, delays=0/0.01/0.09/0, 
dsn=4.4.1, status=undeliverable (connect to 
back.mail01.example.com[10.1.1.16]:25: Connection refused)

That says to me

        postfix smtp instance 'vpn' is trying to connect (for some reason) to 
back.mail01.example.com[10.1.1.16]:25

port. 25.

The 'vpn' mail transport does not go to port 25.  It's set up to send mail to 
port 15003.

That port 25 connection has got to be an address-verify attempt, no?

If yes, then WHY is it trying?

Is it picking up the default =static: transport map from main.cf?

I'm back to, or stuck at, scratching my head over how/where to limit address 
verification to only one time on the frontend

Something in main.cf like

-       address_verify_transport_maps = static:vpn:[back.mail01.example.com]:25
+       address_verify_transport_maps = 
lmdb:/etc/postfix/address_verify_transports


        /etc/postfix/address_verify_transports
                <what do I put here?>   vpn:[back.mail01.example.com]:25
                * :

?  Or do I need to use

        -o address_verify_transport_maps=...

in master.cf, per instance?

Jason

Reply via email to