Robert Fitzpatrick wrote, at 09/11/2008 08:49 AM: > I have a domain getting hit this morning that is not being used any > longer, so I decided to just reject all mail to that domain. I put the > domain in my recipient_checks file as 'example.com REJECT', postmap'd > the file and did postfix reload. But still piling up in the logs with > address verification probes, I have my recipient_checks before address > verification in my smtpd_recipient_restrictions, can someone tell me > where else I need to reject the domain...thanks, Robert
Define "not being used any longer". If it's not used at all, delete its DNS record. If it doesn't resolve, they can't find your mail server. If you need to keep some hosts alive (such as www.example.com), but don't want to receive email, remove the MX record and don't give the parent domain, example.com, an A record. This is usually all it takes. Also be sure to remove example.com from your Postfix configuration (it should not be in $mydestination, $virtual_alias_domains, etc.). This will cause Postfix to reject the messages. The only ones left are likely to be from malware that caches IP addresses indefinitely (I've seen these last for years). You can change the IP address of your server to elude these, if you really care (probably not worth the effort).
