Am 23.10.2014 um 21:52 schrieb Sebastian Wiesinger:
I have a few users that insist on using catch-all domains. Not
surprising they get spam to some address. Now they're asking if they
can reject mail for *some* of the addresses of the catch-all domain.
They can create aliases themselves via postfixadmin and they want to
do this the same way.
I tried to implement this by using a check_recipient_access pcre_table
like this:
/etc/postfix# cat recipient_access.pcre
/^postfix-reject-address@.+$/ REJECT
smtpd_recipient_restrictions =
check_recipient_access pcre:$config_directory/recipient_access.pcre,
...
And telling them to add an alias to
postfix-reject-address@$THEIR_DOMAIN
But this doesn't work as postfix will produce bounces (backscatter)
like this:
<reject-postfix-addr...@karotte.org> (expanded from <reject-t...@karotte.org>):
user unknown
In the log I see that postfix tries to deliver the message with the
default virtual transport (dovecot) which then returns the user
unknown.
It there a way to acomplish this?
smtpd_recipient_restrictions with REJECT do NOT backscatter
a proper REJECT in the MTA never send a bounce
if it touchs the virtual transport the REJECT never got triggered
i do not see "postconf -n" output nor a full log example for such a
message, so it's impossible to know what happens on your setup
anyways, somebody insisting in a catch-all in 2014 has to suck the spam
or give up that completly broken idea - it even did not made sense 15
years ago - if somebody don't know my address he can#t send a mail to me
- so what - would you extend that to @internet - no - so why to @domain?