On Mon, Aug 08, 2011 at 04:46:13PM -0700, Christopher Adams wrote: [snip] > readme_directory = /usr/share/doc/postfix-2.0.16/README_FILES
If this is really 2.0.16, you should consider upgrading! Postfix 2.4 has been EOL'ed as of March. 2.8 is current as of January. > 3) Logs > > This is a mailman subscribe.log that shows a subscription being > approved by a mail administrator > > Aug 08 09:24:50 2011 (21056) lhdaccreditation: new > albina.rit...@apotmail.com, via admin approval That's tangential to the Postfix issue, but since it really appears to be a Mailman issue, you need to look at why your list manager is approving subscribers that you do not want to have on the list! > This is from the maillog that shows the message for the pending > subscription request being sent back to the sender. > > Aug 8 09:24:52 swiki postfix/smtp[20686]: 2B075199855F: > to=<albina.rit...@apotmail.com>, The "to=" is the recipient address. Sounds like Mailman was the sender. Your check_sender_access solution was looking at the sender address, not the recipient address. The proper solution to this problem would be in Mailman list owner configuration, ban_list : http://list.org/mailman-admin/node21.html > relay=mail.apotmail.com[209.190.19.68]:25, delay=0.9, > delays=0.01/0/0.75/0.14, dsn=2.0.0, status=sent (250 OK > id=1QqTB1-0005jv-1K) I'm sure your check_sender_access is working fine; if for example this new subscriber tried to post to the list, that mail would be rejected. You could, but probably should not, place check_recipient_access lookups in front of Mailman's submission. Ask the Mailman folks; I don't think Mailman will be very happy with that. Please review Ansgar's instructions: > > To show evidence. Please post > > > > a) output of "postconf -n" > > b) output of "postmap -q apotmail.org hash:/etc/postfix/sender_access" > > c) a log excerpt demonstrating the issue (from submission to delivery of > > the mail in question) The single smtp(8) log line you shared does not include the sender address, so it was not adequate. I'm just guessing based on other information you provided. You should show the ENTIRE non-verbose logging of a message from when it enters Postfix until final disposition thereof. -- Offlist mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header