Rene Bartsch wrote: > Hi, > > I have the following configuration in main.cf: > > > ---------------------------------------------- snip > -------------------------------------------------- > > local_recipient_maps = mysql:/etc/postfix/sql-recipients.cf > smtpd_recipient_restrictions > > ### Greylisting/restrictions > smtpd_recipient_restrictions = > permit_mynetworks, > reject_non_fqdn_sender, > reject_non_fqdn_recipient, > reject_unknown_sender_domain, > reject_unknown_recipient_domain, > reject_unauth_destination, > check_client_access cidr:/etc/postfix/dnswl/postfix-dnswl-header, > check_client_access cidr:/etc/postfix/dnswl/postfix-dnswl-permit, > check_policy_service inet:127.0.0.1:2525, > permit > > > As you can see Postfix gets the list of valid recipient adresses from a mysql > database > (local_recipient_maps). That way Postfix shall reject all mail for unknown > recipients. I want that > to happen before mail gets to the "check_*" statements in > "smtpd_recipient_restrictions" to keep > load on content filters low. > > But "reject_unauth_destination" only seems to check per domain, not per > complete address. > > How can I reject mail for unknown recipients BEFORE the "check" statements? > >
Try putting reject_unlisted_recipient after reject_unauth_destination. http://www.postfix.org/postconf.5.html#reject_unlisted_recipient Brian
