Hi there,

First let me describe my postfix scenary. Is running on a server with 2
ethernet interfaces; one serving to internet, and the other to my internal
network.
I configured postfix to run personalized UCE control rules by IP. That's
why i have instead of smtpd_recipient_restrictions,
esmtpd_recipient_restrictions (for internet) and
ismtpd_recipient_restrictions (for internal network).

The problem is with esmtpd_recipient_restrictions, i have it like this[1].

My domain is example.com, and i have some subdomains (ie ldap.example.com).

So the problem is: If i send a message with RCPT TO [EMAIL PROTECTED],
check_recipient_access rules starts checking this subdomain, but since i
don't have this subdomain in my ldap lookup table and directory, it must
finish with a reject right?
I mean, checking this with a "postmap -q ldap.example.com
ldap:/etc/postfix/_e_recipientXXX.cf" , i get a NULL response for every of
the 4 XXX to check, so the next check is to REJECT right? ... this is not
working, i get always an ok to the RCPT TO and the message cross the
street :)

I discommented reject_unauth_destination thinking on about this
reading[2], maybe i will get a permit since .example.com is listed on my
relay_domains. BTW do i get a PERMIT if .example.com matches
reject_unauth_destination.

Note:
reject_non_fqdn_recipient
_e_norouting.regexp
_manuales

are not the cause of the problem.

Thanks in advance.

1-

esmtpd_recipient_restrictions =
  reject_non_fqdn_recipient,
  check_recipient_access regexp:/etc/postfix/_e_norouting.regexp,
  check_recipient_access hash:/etc/postfix/_manuales,
  check_recipient_access proxy:ldap:/etc/postfix/_e_recipientPROB.cf,
  check_recipient_access proxy:ldap:/etc/postfix/_e_recipientVIRTUAL.cf,
  check_recipient_access proxy:ldap:/etc/postfix/_e_recipientSMTP.cf,
  check_recipient_access proxy:ldap:/etc/postfix/_e_recv_nodom.cf,
  #reject_unauth_destination,
  reject

2- http://www.postfix.org/postconf.5.html#reject_unauth_destination


Reply via email to