On 05-18-2021 11:17 am, Matus UHLAR - fantomas wrote:
So, you want postfix X to deliver mail to whatever server is MX for the
recipient domain.
On 18.05.21 11:45, post...@ptld.com wrote:
Yes, and postfix X is not the MX server for the recipient domain.
no mailservers I know care about MX servers for a domain, if that domain is
configured locally as the destination domain. They all deliver mail for
their domains locally, postfix is not an exception.
It you have configured mailserver to deliver mail for particular domain
locally, you should not blame postfix for delivering it locally.
configure server X to use different destination domain locally (e.g.
postfixX.example.com), and all other domains (including example.com) will be
delivered according to MX resolution.
If
you didn't get the beginning of this thread, the purpose of postfix X
is to be only a submission service for dovecot/imap. I wouldn't even
use postfix if possible and let dovecot do the submission:587 service
however dovecot has no mechanisms for reject_sender_login_mismatch. So
i need postfix in the loop unless i want to allow people to send
spoofed from addresses.
you can configure smtpd_sender_login_maps and use
reject_known_sender_login_mismatch in postfix X without telling postfix X to
deliver domain locally.
However, you should look at submission service definition, because it
usually contains lines like:
submission inet n - y - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_reject_unlisted_recipient=no
-o smtpd_client_restrictions=$mua_client_restrictions
-o smtpd_helo_restrictions=$mua_helo_restrictions
-o smtpd_sender_restrictions=$mua_sender_restrictions
-o smtpd_recipient_restrictions=
-o smtpd_relay_restrictions=permit_sasl_authenticated,reject
-o milter_macro_daemon_name=ORIGINATING
you'll want to put reject_known_sender_login_mismatch to the
"-o smtpd_sender_restrictions=" line
... or maybe this is your whole problem?
postfix can do the same checks on submission and smtps(submissions) ports,
you just have to carefully configure that.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Due to unexpected conditions Windows 2000 will be released
in first quarter of year 1901
