On Tue, Aug 06, 2024 at 09:05:20PM +0300, Dāvis Mosāns via Postfix-users wrote:
> That's the issue, transport map I have:
> transport_maps = lmdb:/etc/postfix/transport
> with:
> * smtp:internal.example.org
Wildcard transport overrides are best avoided.
> It's used for both cases.
Which is not what you want.
> I want forward/relay all incoming mail for all domains not just few.
Not *all* domains, rather just the domains for which you accept mail,
presumably in this case "relay_domains", for example, any bounces to
external senders should presumably go out to the appropriate responsible
external SMTP servers.
> But even with this approach it doesn't work as in mail from
> submissions port is still forwarded which is not what I want.
> I tried:
> transport_maps = lmdb:/etc/postfix/transport
> relay_domains = $mydestination lmdb:/etc/postfix/relay
> relay_recipient_maps =
> relay_transport = relay
Instead:
relay_transport = relay:internal.example.org
and a comprehensive table of valid recipients for
"relay_recipient_maps", because without recipient validation you're
going be a source of backscatter that will harm your IP reputation, and
annoy joe-job attack victims.
If you're unable to construct the table, you may need to resort to
dynamic recipient verification:
https://www.postfix.org/ADDRESS_VERIFICATION_README.html
--
Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
