Am 23.10.2014 um 21:52 schrieb Sebastian Wiesinger:
I have a few users that insist on using catch-all domains. Not
surprising they get spam to some address. Now they're asking if they
can reject mail for *some* of the addresses of the catch-all domain.

They can create aliases themselves via postfixadmin and they want to
do this the same way.

I tried to implement this by using a check_recipient_access pcre_table
like this:

/etc/postfix# cat recipient_access.pcre
/^postfix-reject-address@.+$/   REJECT

smtpd_recipient_restrictions =
     check_recipient_access pcre:$config_directory/recipient_access.pcre,
     ...

And telling them to add an alias to
postfix-reject-address@$THEIR_DOMAIN

But this doesn't work as postfix will produce bounces (backscatter)
like this:

<reject-postfix-addr...@karotte.org> (expanded from <reject-t...@karotte.org>):
     user unknown

In the log I see that postfix tries to deliver the message with the
default virtual transport (dovecot) which then returns the user
unknown.

It there a way to acomplish this?

smtpd_recipient_restrictions with REJECT do NOT backscatter
a proper REJECT in the MTA never send a bounce

if it touchs the virtual transport the REJECT never got triggered

i do not see "postconf -n" output nor a full log example for such a message, so it's impossible to know what happens on your setup

anyways, somebody insisting in a catch-all in 2014 has to suck the spam or give up that completly broken idea - it even did not made sense 15 years ago - if somebody don't know my address he can#t send a mail to me - so what - would you extend that to @internet - no - so why to @domain?

Reply via email to