greetings,
first, thanks to everyone who has tried to help me.
i still don't have it working. let me re-set the problem in case that helps.
i have an external mail server (ns4, here) running postfix.
i have an internal mail server (ns6, here) running postfix.
neither ns4 nor ns6 does local delivery.
i did not change ns4's configuration during my experiments.
i shouldn't need to touch ns4. (though one of my problems
is "too many hops" which i'll bet means the internal is
asking the external for help, and the external asks the internal).
i can get a complete list of legitimate users. i can't readily
get a complete list of machines that truly do local mail delivery,
and probably not at all. so i can't generate a list of
all legit.u...@local-deliver.arlut.utexas.edu legal addresses.
here's what isn't working for me: i need to deliver mail
to any machine in the domain arlut.utexas.edu; as a regular
expression user@*.arlut.utexas.edu. (i'm prepared to let
mail to legit.u...@nondelivery.arlut.utexas.edu fall off
a cliff, even silently if it comes to that -- letting
the sender take responsibility for knowing what will work
and what won't.)
i was reading ADDRESS_VERIFICATION_README.html under
Forced probe routing examples. here's the changes i made:
i added
smtpd_recipient_restrictions =
permit_mynetworks
reject_unauth_destination
reject_unknown_recipient_domain
check_recipient_access hash:/etc/postfix/relay_check
permit
where (deleting my own comments) relay_check is this:
arlut.utexas.edu reject_unverified_recipient
.arlut.utexas.edu reject_unverified_recipient
and i did do the postmap ... so the .db file is there.
i was told to turn off relay_recipient_maps since i was doing
recipient verification. So:
relay_recipient_maps =
but (per ADDRESS_VERIFICATION_README.html) i need this:
address_verify_relayhost =
i then mail to myself at a machine that i know will deliver mail
locally. it gets bounced to the postmaster (me), user unknown.
(FROM ns6, internal) postconf -n
address_verify_relayhost =
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = pmx:127.0.0.1:10025
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
html_directory = /opt/depot/postfix-2.7.1/html
inet_interfaces = all
local_recipient_maps =
local_transport = error:local mail delivery is disabled
mail_owner = postfix
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/local/man
masquerade_domains = $mydomain
masquerade_exceptions = adm amanda apache avahi beaglidx bin daemon dbus
distcache dovecot ejabberd exim flexlm ftp games gdm gopher haldaemon halt
hsqldb listen lp mail mailman mailnull mysql nagios named netdump news
nfsnobody noaccess nobody nobody4 nscd ntp nuucp nx operator otrs pcap
pegasus postfix postgres pvm root rpc rpcuser rpm sabayon shutdown smmsp
smtp squid sshd sweep sync sync sys tomcat utwww uucp vcsa webalizer
xfs zope
message_size_limit = 0
mydestination =
mydomain = arlut.utexas.edu
myhostname = ns6.arlut.utexas.edu
mynetworks = 127.0.0.0/8, 10.0.0.0/8
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /opt/depot/postfix-2.7.1/README
recipient_delimiter = +
relay_domains = arlut.utexas.edu
relay_recipient_maps =
relayhost = [ns4.arlut.utexas.edu]
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_generic_maps = hash:/etc/postfix/pfgenerics
smtpd_data_restrictions = reject_multi_recipient_bounce
smtpd_recipient_restrictions = permit_mynetworks
reject_unauth_destination reject_unknown_recipient_domain
check_recipient_access hash:/etc/postfix/relay_check permit
transport_maps = hash:/etc/postfix/pftransport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/pfmalias hash:/etc/aliases
okay, so i decided to try something else.
this is identical to the test above:
smtpd_recipient_restrictions =
permit_mynetworks
reject_unauth_destination
reject_unknown_recipient_domain
check_recipient_access hash:/etc/postfix/relay_check
permit
i do NOT set address_verify_relayhost, so it should be defaulted.
and i turn this back on:
relay_recipient_maps = hash:/etc/postfix/pfknown_users
regexp:/etc/postfix/regtry
where regtry is this:
/^gl@.*\.arlut\.utexas\.edu$/ OK
(since it's just a regular expression file i did not generate a .db file.)
this fails, but now the reason is "too many hops".
(which i take to mean it's asking the external machine and the external
machine asks the internal.)
(FROM ns6, internal) postconf -n
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = pmx:127.0.0.1:10025
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
html_directory = /opt/depot/postfix-2.7.1/html
inet_interfaces = all
local_recipient_maps =
local_transport = error:local mail delivery is disabled
mail_owner = postfix
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/local/man
masquerade_domains = $mydomain
masquerade_exceptions = adm amanda apache avahi beaglidx bin daemon dbus
distcache dovecot ejabberd exim flexlm ftp games gdm gopher haldaemon halt
hsqldb listen lp mail mailman mailnull mysql nagios named netdump news
nfsnobody noaccess nobody nobody4 nscd ntp nuucp nx operator otrs pcap
pegasus postfix postgres pvm root rpc rpcuser rpm sabayon shutdown smmsp
smtp squid sshd sweep sync sync sys tomcat utwww uucp vcsa webalizer
xfs zope
message_size_limit = 0
mydestination =
mydomain = arlut.utexas.edu
myhostname = ns6.arlut.utexas.edu
mynetworks = 127.0.0.0/8, 10.0.0.0/8
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /opt/depot/postfix-2.7.1/README
recipient_delimiter = +
relay_domains = arlut.utexas.edu
relay_recipient_maps = hash:/etc/postfix/pfknown_users
regexp:/etc/postfix/regtry
relayhost = [ns4.arlut.utexas.edu]
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_generic_maps = hash:/etc/postfix/pfgenerics
smtpd_data_restrictions = reject_multi_recipient_bounce
smtpd_recipient_restrictions = permit_mynetworks
reject_unauth_destination reject_unknown_recipient_domain
check_recipient_access hash:/etc/postfix/relay_check permit
transport_maps = hash:/etc/postfix/pftransport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/pfmalias hash:/etc/aliases
thanks again.
j.
--
Jay Scott 512-835-3553 g...@arlut.utexas.edu
Head of Sun Support, Sr. System Administrator
Applied Research Labs, Computer Science Div. S224
University of Texas at Austin
