Quoting te...@cnysupport.com:
Does anybody have any idea why my postfix server accepted mail for
the non-existent user "<squir...@webmail.cnysupport.com>" (no alias
by that name either)?
I've narrowed it down to a problem with the way subdomains users are
validated.
badu...@cnysupport.com is properly rejected at the rcpt to: command,
while badu...@whatever.cnysupport.com is accepted, then causes an NDR.
Anybody have any ideas?
I have no valid subdomains, so simply rejecting anything sent to one
would be just fine.
Thanks,
Terry
postconf -n:
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavisfeed:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
default_rbl_reply = $rbl_code Service unavailable; $rbl_class
[$rbl_what] blocked using $rbl_domain.
disable_vrfy_command = yes
header_checks = regexp:/etc/postfix/header_checks
home_mailbox = Maildir/
html_directory = no
local_recipient_maps = unix:passwd.byname $alias_maps
mail_owner = postfix
mailbox_command = /usr/local/libexec/dovecot/deliver
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
message_size_limit = 102400000
mydestination = $myhostname, cnysupport.com, bupkis.org
mydomain = cnysupport.com
myhostname = smtp.cnysupport.com
mynetworks = 127.0.0.1
mynetworks_style = host
newaliases_path = /usr/bin/newaliases
owner_request_special = yes
queue_directory = /var/spool/postfix
readme_directory = no
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_client_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unauth_destination, reject_unlisted_recipient, hash:/etc/postfix/whitelist, cidr:/etc/postfix/blacklist_cidr
reject_unknown_reverse_client_hostname,
reject_unauth_pipelining, reject_non_fqdn_recipient,
reject_rbl_client zen.spamhaus.org
smtpd_delay_reject = yes
smtpd_recipient_restrictions = permit_mynetworks
permit_sasl_authenticated reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/CA/cert.pem
smtpd_tls_key_file = /etc/CA/key.pem
smtpd_tls_loglevel = 0
smtpd_use_tls = yes
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
