On Mon, Mar 23, 2009 at 09:41:14AM +0100, Sebastian Chociwski wrote:
> > On Fri, Mar 20, 2009 at 11:35:09PM +0100, Sebastian Chociwski wrote:
> >
> >> I am (almost ;) ) 100% sure that only mail could be delivered is in ONE
> >> mysql db.
> >
> > What in your Postfix configuration do you expect to reject mail not
> > listed in that MySQL table?
>
> I configured postfix to use one table to deliver mails to.
WHICH CONFIGURATION SETTINGS DO YOU EXPECT DO THIS?
Forget the SQL, focus on the Postfix feature that you are using, and
figure out whether it will or will not in fact restrict access to
unlisted addresses.
> And I just realized why it don't work ...
>
> virtual_alias_maps =
> proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf,
> mysql:/etc/postfix/mysql-virtual_email2email.cf
> virtual_mailbox_domains =
> proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
> virtual_mailbox_maps =
> proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
>
> All changes I made in ALIAS_MAPS. Adding condition to mailbox_maps file
> make it work.
This is exactly the point, you were too immersed in SQL tweaking to
notice that for mailbox domains the valid users are listed *primarily*
in the mailbox maps table.
While *not* being listed in the alias table does not make an address fail
"reject_unlisted_recipient", being listed in the alias table makes an
address pass "reject_unlisted_recipient", so if you really want to
reject an invalid address at SMTP time, you need to not list it in
either table.
Identity mappings (fixedu...@example.com -> fixedu...@example.com) are not
terribly useful unless you also have a catch-all address. Why do you have
these at all?
--
Viktor.
Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majord...@postfix.org?body=unsubscribe%20postfix-users>
If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
