Magnus Bäck wrote:
> On Monday, May 25, 2009 at 23:13 CEST,
>      Per olof Ljungmark <p...@bsdlabs.com> wrote:
> 
>> Magnus Bäck wrote:
>>
>>>> May 20 09:59:24 <host> postfix/smtpd[77250]: NOQUEUE: reject:
>>>> RCPT from <sender>[IP.HERE]: 550 5.1.1 <f...@address>: Recipient
>>>> address rejected: User unknown; from=<from> to=<t...@address>
>>>> proto=ESMTP helo=<lap02le>
>>> "postconf -n" output, please. And which address class is this?
>> It is "relay domain".
> 
> Hmm. Let's see proof of that -- disable the show_user_unknown_table_name
> option that you've set and post a new log snippet so we'll see Postfix'
> opinion.
> 
> [...]

May 26 08:13:41 terrapin postfix/smtpd[79633]: NOQUEUE: reject: RCPT
from sender.server[1.2.3.4]: 550 5.1.1 <recipi...@domain.com>: Recipient
address rejected: User unknown in relay recipient table;
from=<sen...@domain.com> to=<recipi...@domain.com> proto=ESMTP
helo=<sender.server>

May 26 08:23:06 terrapin postfix/smtpd[79805]: NOQUEUE: reject: RCPT
from sender.server[5.6.7.8]: 550 5.1.1 <recipi...@domain.com>: Recipient
address rejected: User unknown in relay recipient table;
from=<sen...@domain.com> to=<recipi...@domain.com> proto=ESMTP
helo=<sender.server>

etc.

But I think we're wandering away from the original question anyhow? And
if it is wrong that Postfix responds with "user unknown" when the
directory is unavailable, what SHOULD it be? "Don't know"?

In our view Postfix should not respond with 5xx when it cannot contact
the LDAP servers. This is not a fault with Postfix at all, it is us that
want to avoid Postfix sending a permanent error when in fact the problem
is transient but Postfix cannot possibly know that unless we explicitly
tells it.

We could,

- Shut down the SMTP server until the LDAP connection is restored
or
- Respond with a transient error
or
- As others suggested, dump the directory to a local file
 for better redundancy.

If the above is totally wrong just let us know and we will act accordingly.

Thanks,

--
per

Reply via email to