On 8/28/2012 3:38 PM, Gábor Lénárt wrote: > On Tue, Aug 28, 2012 at 04:33:16PM -0400, Jon A. wrote: >> I'd like to immediately reject mail for all destinations with ONLY a >> fakemx.net record. While I could block these as I find them, I'd prefer to >> detect it if possible. >> One such: >> >> hitmail.com mail is handled by 0 mx.fakemx.net. > > I am not sure what you mean, but probably check_recipient_mx_access can > help with rejecting mails targeting RCPT addresses where MX is a given host > (here: fakemx's). > > http://www.postfix.org/postconf.5.html#check_recipient_mx_access >
Be aware the postfix built-in check_*_mx_access will match if ANY of the MX records match. To reject domains with ONLY fakemx MX records, you'll need to use an external policy service. http://www.postfix.org/SMTPD_POLICY_README.html -- Noel Jones
