Argh...gmail and mailing lists. Sent this response directly to Benny instead of the list, so here I go again:
Ian Evans skrev den 2013-11-05 00:03: > > Here's my main.cf [1]. Please let me know if there's more info you >> need. >> > > first question from me is, why do you mix virtual and local users ? > How am I mixing them? Still getting used to the postfix way of things, so if I'm mixing them I'm not even sure how. I don't have any mail accts that are also unix accts. The root acct is aliased to my personal mail. > > and show postfix logs to get more help with the bounces > I sent an email from this acct to a user that doesn't exist on my system. Nov 4 13:24:21 localhost postfix/smtpd[30584]: 4D6B221209: client= mail-la0-f41.google.com[209.85.215.41] Nov 4 13:24:21 localhost postgrey[9679]: 4D6B221209: action=pass, reason=client whitelist, client_name=mail-la0-f41.google.com, client_address=209.85.215.41, sender=dheianev...@gmail.com, recipient= z...@digitalhit.com Nov 4 13:24:21 localhost postfix/smtpd[30584]: 4D6B221209: reject: RCPT from mail-la0-f41.google.com[209.85.215.41]: 550 5.1.1 <z...@digitalhit.com>: Recipient address rejected: User unknown in virtual mailbox table; from=< dheianev...@gmail.com> to=<z...@digitalhit.com> proto=ESMTP helo=< mail-la0-f41.google.com> Nov 4 13:24:21 localhost postfix/cleanup[30592]: 4D6B221209: message-id=<CABiY0= j+amr8jq88psbmc9-9umm+z2chniercewpacgrpzs...@mail.gmail.com> However, I think I might have some egg on my face, potentially a lot of egg. To answer Venema's question, I went to get the "bounce" message. As I copied it, I realized it was coming from _Google's_ mailer daemon. "Delivery to the following recipient failed permanently: z...@digitalhit.com Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the server for the recipient domain digitalhit.com by mail.digitalhit.com. [162.243.65.187]. The error that the other server returned was: 550 5.1.1 <z...@digitalhit.com>: Recipient address rejected: User unknown in virtual mailbox table " So is I'm guessing it's safe to assume that I'm _not_ sending out bounce messages? However I still want to be sure I'm configured properly. If some bot sent out thousands of emails to non-existent users on my site using someone else's email, would that unsuspecting person get thousands of messages like that? Are there any other config changes you would recommend to lock this down further?