On Tue, Nov 25, 2008 at 02:30:22PM -0800, Quanah Gibson-Mount wrote:

> --On Tuesday, November 25, 2008 5:21 PM -0500 Victor Duchovni 
> <[EMAIL PROTECTED]> wrote:
> 
> >>What's the correct action to take if the account doesn't exist?
> >>Currently  I have "defer_if_permit Service temporarily unavailable".
> >
> >A hard "REJECT" seems more reasonable for invalid recipient addresses.
> >
> >     REJECT 5.1.1 Mailbox unavailable
> 
> Ok, I changed it to:
> 
>        return "reject 5.1.1 Mailbox unavailable";
> 
> thanks!
> 
> 
> >>Finally, although I can test the script just fine from the command line,
> >>I'm not 100% sure postfix is actually executing it.  I added to
> >>master.cf:
> >
> >Your script can syslog its activities. The script will only be called for
> >senders that don't match "mynetworks" and don't have SASL credentials.
> >
> >You are probably sending from "mynetworks". The script is spawned on
> >demand (first call to the policy service).
> 
> Ok, that would definitely be the issue.  My box is firewalled, so I can 
> only connect to it from the host itself.  Thanks again for all your help!

To test it, move the policy check above "permit_mynetworks", but make
sure that the script ignores domains you are not responsible for or
is triggered via a restriction class:

validate_alias_domains:
    alias-domain.example.com    check_alias_domain_recipient

main.cf:

    smtpd_recipient_restrictions =
            check_recipient_access hash:/etc/postfix/validate_alias_domains
            ...

    smtpd_restriction_classes = check_alias_domain_recipient

    check_alias_domain_recipient =
        check_policy_service unix:private/policy_socket_name

-- 
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[EMAIL PROTECTED]>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

Reply via email to