Andreas Thienemann: > Hi, > > On Wed, 20 Sep 2017, Wietse Venema wrote: > > > > > If you have a virtual alias that rewrites an address to the spam > > > > sink, specify that address in the SMTP daemon acces rules instead. > > > > > [,,,] > > > That would work. A bit of a hack though and I think it would only work > > > for > > > virtual aliases with one level of redirection but not for something like > > > i...@example.com -> i...@example.net -> spam-mails. > > > > Yes, you'd need one SMTP daemon acces rule for each 'top-level' alias. > > Thanks for clarifying that was what you meant. > > I think I'll skip putting one in for each top-level alias and only support > direct rewrites to the target address. I'll have something like 99.9% > coverage and for the guesstimated 5 accounts affected the error message > will be a bit inaccurate as the recipient validation is getting an error > about spam-mails not being deliverable through lmtp... > > I can live with that.
Please reconsider. You should reject mail at RCPT TO time, not after accepting the message into the queue. If you accept email first, and then return it as undeliverable. then you will be harassing lots of innocent people about email that they did not send, and your system may get blacklisted as being a backscatter source. Wietse