On Sun, Sep 20, 2020 at 08:53:36AM -0400, Alex wrote:
> > > smtpd_recipient_restrictions =
> > > permit_mynetworks,
> > > permit_sasl_authenticated,
> > > check_recipient_access pcre:/etc/postfix/local_recip_map,
> > > reject
>
> But this doesn't account for the catch-all for the vexample.com
> domain. Are you saying that because of the reject, the virtual map is
> never processed?
I don't know what you're finding surprising here. There's no magic, the
restrictions are evaluated *exactly* as written. There's no mention
of virtual here, so for remote senders, only recipients listed in
check_recipient_access pcre:/etc/postfix/local_recip_map,
are permitted and all others are rejected.
> For testing, I had the following in /etc/postfix/virtual:
>
> /etc/postfix/virtual:
> alext...@vexample.com alex
I don't see how that't relevant. Address-class-specific recpient
validation happens after recipient restrictons, and does not preëmpt
reject results.
--
Viktor.
