On Sat, 2012-04-14 at 12:17 -0500, Noel Jones wrote: > On 4/14/2012 2:49 AM, Raven wrote: > > > > > What I don't get is why was the message accepted for relay. > > "virtual_mailbox_domains" only lists "domain2.com", definitely not > > "mail.domain2.com". Also, "localu...@domain2.com" is valid but > > "localu...@mail.domain2.com <mailto:localu...@mail.domain2.com>" isn't. > > > > Any clues? > > > > > > postconf -n: > ... > > smtpd_recipient_restrictions = permit_mynetworks, > > permit_sasl_authenticated, > > reject_unauth_destination should go here unless you have a really > good reason. > http://www.postfix.org/SMTPD_ACCESS_README.html#danger >
Duly noted. Thanks. > > > check_client_access > > cidr:/etc/postfix/cidr_checks, check_recipient_access > > regexp:/etc/postfix/accounts_regex, check_recipient_access > > mysql:/etc/postfix/mysql-virtual_blocked.cf, check_policy_service > > inet:127.0.0.1:2501, > > Maybe one of these maps OKed either the client or recipient. > Spot on! Couple months ago I had whitelisted gmail's outbound ranges after they ended up on some rbl, and they were still there > > virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_forwardings.cf > > mysql:/etc/postfix/mysql-virtual_email2email.cf > > Maybe one of these maps matched the recipient. > > > virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains.cf > > Maybe this map inadvertently matched the recipient domain. > > > > Test your maps with > postmap -q u...@mail.example2.com maptype:/path/to/map > Check the documentation for the "search order" of each setting. > Some settings may also automatically check just "user" or the parent > domain "example2.com". > http://www.postfix.org/documentation.html > > Once again, thank you. -RV