On 9/11/2012 4:33 PM, Wietse Venema wrote: > David J. Weller-Fahy: > -- Start of PGP signed section. >> * Noel Jones <njo...@megan.vbhcs.org> [2012-09-10 23:23 -0400]: >>> On 9/10/2012 9:20 PM, David J. Weller-Fahy wrote: >>>> 1) Am I correct that blocking recipient addresses which consist of >>>> an existing user with an extension not defined by that user (in a >>>> .forward-extension file) is not possible using Postfix using just >>>> the configuration options available in main.cf? > > Even if the local delivery agent rejected non-existent extensions, > Postfix would still have to stop "invalid" addresses at the SMTP > daemon to avoid becoming a backscatter source.
Yes, this discussion is about stopping unwanted extensions at the SMTP daemon. I fully agree stopping them after they've been accepted from the network (ie. bounce/DSN/discard them) is at best pointless, at worst will get you blacklisted. -- Noel Jones > > Therefore, YOU provide an SMTP server access table, or perhaps > better, a local_recipient_maps table that returns "notfound" for > all the addresses that are invalid. > > The SMTP daemon does not know what address extensions do or don't > match a user's .forward files. It does not grope around in user's > home directories. > > Wietse >