> I have a Postfix/MailScanner front-end set up which works well, however
> I'm not sure I've configured it correctly (or in the best way)...
> 
> The box uses header_checks to place all incoming messages in the hold
> queue (standard stuff) and transport_maps define which mail server the
> mail gets forwarded onto after scanning, per domain.

So you are relaying to other MTAs.

> The difficulty I'm finding is maintaining a list of 'valid users' per
> domain, so I can reject invalid recipients at SMTP level rather than
> accepting all into the queue and being a potential source of backscatter.
> The solution I've come up with is using "virtual_alias_maps".
> The problem I'm finding is that I can not get it to work without having
> the remote domain in $mydestination too. I understand the docs suggest
> that you shouldn't have the remote domain in both $mydestination and
> $virtual_alias_domains?

What about using relay_domains and relay_recipient_maps. I am using this
to forward mail do an IMAP-server, but this doesn't matter.

Example modified from my config:

relay_domains =
    ${ldap}/relay_domains.cf

relay_recipient_maps =
    pcre:${map}/roleaccount.pcre,
    ${ldap}/relay_recipient_maps.cf

virtual_alias_maps =
    ${ldap}/relay_recipient_maps.cf

And do not add "it" to mydestination please.

Best wishes
Christian
-- 
Roessner-Network-Solutions
Bachelor of Science Informatik
50°34.725'N, 08°40.904'O, Nahrungsberg 81, 35390 Giessen
F: +49 641 5879091, M: +49 176 93118939
USt-IdNr.: DE225643613
http://www.roessner-network-solutions.com

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to