On Thu, Nov 08, 2012 at 04:47:43PM +0200, Nikolaos Milas wrote:
> On 8/11/2012 3:46 μμ, Ralf Hildebrandt wrote:
> >"User unknown in virtual mailbox table"
> >involves no "reject_unverified_recipient", since Postfix doesn'T 
> >have to verify the recipient - it simply looks into the virtual 
> >mailbox table
> 
> Then, under which circumstances should we expect to see a
> postfix/verify with our settings? I don't see any
> "postfix/verify" instances in the logs of this server.

Right. As Wietse pointed out, you would not.

> I repeat current settings:
> smtpd_recipient_restrictions = check_recipient_access
> hash:/etc/postfix/protected_destinations,

Bad form, if that includes any permit actions (as the filename 
implies it might.) A "permit_auth_destination" would be safe.

http://www.postfix.org/SMTPD_ACCESS_README.html#danger

> permit_mynetworks, permit_sasl_authenticated,

Either of these might have permitted the mail below also.

> reject_unauth_destination,
> check_policy_service inet:127.0.0.1:10040,

So might have this policy service.

> reject_unknown_recipient_domain,

Useless at this point. Any unknown domain, by definition, is also 
going to hit reject_unauth_destination. (Postfix won't look up its 
own domains in DNS.)

> reject_unverified_recipient
> 
> An undeliverable address attempted through this server, isn't
> expected to be cached? For example:

Show the ENTIRE logs for this message. Was the sending client in 
$mynetworks? Did the client use AUTH? Was the recipient address in 
/etc/postfix/protected_destinations with a permit action?

> Nov  8 16:15:59 vmail postfix/qmgr[15927]: B8660C4D0E8:
> from=<nmi...@noa.gr>, size=753, nrcpt=1 (queue active)
> Nov  8 16:16:01 vmail postfix/smtp[26218]: B8660C4D0E8:
> to=<nonexist...@eurobjects.com>,
> relay=eurobjects.com[50.22.194.94]:25, delay=2.1,
> delays=0.16/0.002/0.82/1.2, dsn=5.0.0, status=bounced (host
> eurobjects.com[50.22.194.94] said: 550 No Such User Here" (in
> reply to RCPT TO command))
> 
> In this example, no postfix/verify process occurs.

And we don't have enough information to say why not.
-- 
  http://rob0.nodns4.us/ -- system administration and consulting
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:

Reply via email to