On 8/11/2012 6:23 μμ, Wietse Venema wrote:
Put reject_unverified_mumble FIRST not LAST.
OK, I did this and I also followed Robert's advice to manually touch the
cache file and now I hope things are working as expected:
Nov 8 18:41:31 vmail postfix/submission/smtpd[2071]: connect from
adminx.admin.noa.gr[195.251.204.xxx]
Nov 8 18:41:31 vmail postfix/submission/smtpd[2071]: Anonymous TLS
connection established from adminx.admin.noa.gr[195.251.204.xxx]: TLSv1
with cipher DHE-RSA-AES256-SHA (256/256 bits)
Nov 8 18:41:31 vmail postfix/cleanup[2055]: 5E732C4D1C9:
message-id=<20121108164131.5e732c4d...@vmail.noa.gr>
Nov 8 18:41:31 vmail postfix/qmgr[1999]: 5E732C4D1C9:
from=<double-bou...@noa.gr>, size=255, nrcpt=1 (queue active)
Nov 8 18:41:33 vmail postfix/smtp[2073]: 5E732C4D1C9:
to=<nonexist...@eurobjects.com>, relay=eurobjects.com[50.22.194.94]:25,
delay=1.8, delays=0.15/0.009/0.51/1.1, dsn=5.0.0, status=undeliverable
(host eurobjects.com[50.22.194.94] said: 550 No Such User Here" (in
reply to RCPT TO command))
Nov 8 18:41:33 vmail postfix/qmgr[1999]: 5E732C4D1C9: removed
Nov 8 18:41:34 vmail postfix/submission/smtpd[2071]: NOQUEUE: reject:
RCPT from adminx.admin.noa.gr[195.251.204.xxx]: 550 5.1.1
<nonexist...@eurobjects.com>: Recipient address rejected: undeliverable
address: host eurobjects.com[50.22.194.94] said: 550 No Such User Here"
(in reply to RCPT TO command); from=<nmi...@noa.gr>
to=<nonexist...@eurobjects.com> proto=ESMTP helo=<[195.251.204.xxx]>
And the newly created file got a non-zero length:
# ls -la /var/lib/postfix/
total 28
drwx------. 2 postfix root 4096 Sep 27 18:44 .
drwxr-xr-x. 28 root root 4096 Sep 26 15:40 ..
-rw-------. 1 postfix postfix 33 Oct 30 15:51 master.lock
-rw------- 1 postfix postfix 8192 Nov 8 17:58 postscreen_cache.db
-rw-r--r-- 1 postfix postfix 8192 Oct 8 18:07 verify_cache.db
I can't tell if both changes were really needed. (I might test later on
a test server which I noticed also has no verify_cache.db file.)
Current settings:
# postconf -n | grep reject_unverified
smtpd_recipient_restrictions = reject_unverified_recipient,
check_recipient_access hash:/etc/postfix/protected_destinations,
permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination,
check_policy_service inet:127.0.0.1:10040
Nick
