Hello everyone,

I have a working multi-instance setup with Postfix version 3.8.4
What surprises me is that “recipient_canonical” works for some recipients
but not for all.
It seems that "recipient_canonical" works for orig_to recipients in
"mydomain", while it does not work for orig_to recipients in "other.domain".

Thanks in advance for any help on where to start
Peter


Here comes my setup:

# postconf -c /etc/postfix-common/ -nf
alias_maps = hash:/etc/aliases
append_at_myorigin = no
authorized_submit_users = root
bounce_queue_lifetime = 3d
compatibility_level = 2
config_directory = /etc/postfix-common
data_directory = /var/lib/postfix-common
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd
$daemon_directory/$process_name $process_id & sleep 5
delay_warning_time = 1h
enable_long_queue_ids = yes
header_checks = pcre:/etc/postfix-common/header_checks
inet_protocols = ipv4
internal_mail_filter_classes = bounce
local_header_rewrite_clients = permit_inet_interfaces permit_mynetworks
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_queue_lifetime = 3d
message_size_limit = 36700160
mime_header_checks = pcre:/etc/postfix-common/mime_header_checks
multi_instance_enable = yes
multi_instance_group = root
multi_instance_name = postfix-common
mynetworks = 127.0.0.0/8 10.127.0.0/28
newaliases_path = /usr/bin/newaliases.postfix
parent_domain_matches_subdomains =
debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains
queue_directory = /var/spool/postfix-common
readme_directory = /usr/share/doc/postfix/README_FILES
recipient_canonical_maps = pcre:/etc/postfix-common/recipient_canonical
sample_directory = /usr/share/doc/postfix/samples
sender_canonical_maps = hash:/etc/postfix-common/sender_canonical
sender_dependent_relayhost_maps =
pcre:/etc/postfix-common/sender_dependent_relayhost_map
sendmail_path = /usr/sbin/sendmail.postfix
smtp_helo_timeout = 30s
smtp_pix_workarounds =
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtp_tls_CApath = /etc/pki/tls/certs
smtp_tls_cert_file = $smtpd_tls_cert_file
smtp_tls_key_file = $smtpd_tls_key_file
smtp_tls_loglevel = 1
smtp_tls_mandatory_protocols = !SSLv2,!SSLv3,!TLSv1
smtp_tls_protocols = !SSLv2,!SSLv3,!TLSv1
smtp_tls_security_level = may
smtpd_forbid_bare_newline = yes
smtpd_forbid_bare_newline_exclusions = $mynetworks
smtpd_recipient_restrictions = check_recipient_access
hash:/etc/postfix-common/recipient_access, permit_mynetworks,
reject_unauth_destination
smtpd_sender_restrictions = hash:/etc/postfix-common/sender_access
smtpd_tls_cert_file = /etc/pki/tls/certs/star.mydomain.crt
smtpd_tls_key_file = /etc/pki/tls/private/decrypted.star.mydomain.de.key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,!TLSv1
smtpd_tls_protocols = !SSLv2,!SSLv3,!TLSv1
smtpd_tls_security_level = may
transport_maps = hash:/etc/postfix-common/transport


/etc/postfix-common/recipient_canonical
# below works
/recipient@host.mydomain/       recipient@subdomain.mydomain
# below works NOT
/recipient@other.domain/        recipient@subdomain.mydomain


/var/log/maillog
2024-05-13 11:05:46 smtp01 postfix-common/smtpd[2085384]: NOQUEUE: reject:
RCPT from unknown[10.127.0.14]: 554 5.7.1 <recipient@other.domain>:
Recipient address rejected: Access denied; from=<sender@subdomain.mydomain>
to=<recipient@other.domain> proto=SMTP helo=<10.127.0.14>
2024-05-13 11:05:46 smtp01 postfix-common/smtpd[2085384]: using
backwards-compatible default setting
smtpd_relay_before_recipient_restrictions=no to reject recipient
"recipient@other.domain" from client "unknown[10.127.0.14]"
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to