On Thu, Nov 08, 2012 at 04:47:43PM +0200, Nikolaos Milas wrote: > On 8/11/2012 3:46 μμ, Ralf Hildebrandt wrote: > >"User unknown in virtual mailbox table" > >involves no "reject_unverified_recipient", since Postfix doesn'T > >have to verify the recipient - it simply looks into the virtual > >mailbox table > > Then, under which circumstances should we expect to see a > postfix/verify with our settings? I don't see any > "postfix/verify" instances in the logs of this server.
Right. As Wietse pointed out, you would not. > I repeat current settings: > smtpd_recipient_restrictions = check_recipient_access > hash:/etc/postfix/protected_destinations, Bad form, if that includes any permit actions (as the filename implies it might.) A "permit_auth_destination" would be safe. http://www.postfix.org/SMTPD_ACCESS_README.html#danger > permit_mynetworks, permit_sasl_authenticated, Either of these might have permitted the mail below also. > reject_unauth_destination, > check_policy_service inet:127.0.0.1:10040, So might have this policy service. > reject_unknown_recipient_domain, Useless at this point. Any unknown domain, by definition, is also going to hit reject_unauth_destination. (Postfix won't look up its own domains in DNS.) > reject_unverified_recipient > > An undeliverable address attempted through this server, isn't > expected to be cached? For example: Show the ENTIRE logs for this message. Was the sending client in $mynetworks? Did the client use AUTH? Was the recipient address in /etc/postfix/protected_destinations with a permit action? > Nov 8 16:15:59 vmail postfix/qmgr[15927]: B8660C4D0E8: > from=<nmi...@noa.gr>, size=753, nrcpt=1 (queue active) > Nov 8 16:16:01 vmail postfix/smtp[26218]: B8660C4D0E8: > to=<nonexist...@eurobjects.com>, > relay=eurobjects.com[50.22.194.94]:25, delay=2.1, > delays=0.16/0.002/0.82/1.2, dsn=5.0.0, status=bounced (host > eurobjects.com[50.22.194.94] said: 550 No Such User Here" (in > reply to RCPT TO command)) > > In this example, no postfix/verify process occurs. And we don't have enough information to say why not. -- http://rob0.nodns4.us/ -- system administration and consulting Offlist GMX mail is seen only if "/dev/rob0" is in the Subject: