On Tue, Nov 17, 2015 at 12:44:12PM +0000, Neil Smith wrote:
> Postfix seems to be ignoring the smtpd_recipient_restrictions =
> check_recipient_access instruction.
Yes, "seems". Postfix does not ignore its configuration. It does
exactly what it is configured to do. You really should choose a
better problem description.
Nov 8 17:48:07 pserver postfix/smtpd[15446]: connect from
mail-db3on0074.outbound.protection.outlook.com[157.55.234.74]
Nov 8 17:48:08 pserver postfix/smtpd[15446]: 0FC981C4:
client=mail-db3on0074.outbound.protection.outlook.com[157.55.234.74]
Nov 8 17:48:08 pserver postfix/cleanup[15451]: 0FC981C4:
message-id=<2020849.HWx7EOcjLU@desktop>
Nov 8 17:48:08 pserver postfix/qmgr[2638]: 0FC981C4:
from=<u...@gooddomain.org>, size=17198, nrcpt=1 (queue active)
Nov 8 17:48:08 pserver postfix/smtpd[15446]: disconnect from
mail-db3on0074.outbound.protection.outlook.com[157.55.234.74]
Nov 8 17:48:10 pserver postfix/smtp[15452]: 0FC981C4:
to=<user.ban...@example.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=2.2,
delays=0.16/0.01/0/2, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:
[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 286381DC)
Nov 8 17:48:10 pserver postfix/qmgr[2638]: 0FC981C4: removed
> root@pserver:/etc/postfix# postconf -nf
> mydestination = $myhostname localhost.$mydomain localhost
> mydomain = example.org
> myhostname = mail.$mydomain
> mynetworks = 127.0.0.0/8, 192.168.1.0/24
> myorigin = $mydomain
> permit_mx_backup_networks = backup.com backup2.com
> proxy_interfaces = 101.11.22.33
> recipient_delimiter = .
> smtpd_recipient_restrictions =
> permit_sasl_authenticated
> permit_mynetworks
> permit_mx_backup
> check_recipient_access hash:/etc/postfix/recipient_checks
> reject_unauth_destination
Notice that cute little "permit_mx_backup" in the restriction
list before "check_recipient_access"? :-)
>
> /etc/postfix/recipient_checks
> -----------------------------
>
> # Reject messages with these recipient addresses
> user.bann...@example.com REJECT
> user.ban...@example.com REJECT
> user.bann...@example.com REJECT
> user.bann...@example.com REJECT
> person.ban...@example.com REJECT
--
Viktor.
