On 5/10/22 16:47, Wietse Venema wrote:
With this setting, mail will be ACCEPTED when the recipient
address:

Sorry, that is incorrect.

Postfix features of the form "reject_<predicate>" cannot promise
that a recipient (or sender, client, helo) will be accepted when
their predicate is false.

They can't promise that, because there may be a different
"reject_<predicate>" instance whose predicate is true.

The only thing that a "reject_<predicate>" feature can promise is
that it will reject a recipient (or sender, etc) when the predicate
is true.

As that is why the text for reject_unlisted_recipient describes
under what conditions it will reject, not accept, a recipient.


Ah!  On reflection, yes, of course.  Thanks for that.

Hmm, hmm - really, the subject of the statement, "mail will be", was the problem here.  
"mail" is not the proper subject.

The proper subject is "The smtpd_reject_unlisted_recipient configuration 
option", which is the narrow focus of the description.

Then, leaving out the DeMorgan transform, and beginning again with your 
original format, how about:

----
(revised part)
The smtpd_reject_unlisted_recipient configuration option:
1) will NOT REJECT mail when:
  i) ( the recipient address matches a virtual(5) alias table ), OR
 ii) ( the recipient address matches a canonical(5) table ), AND
2) will REJECT mail when:
  i) ( the recipient address is NOT listed in the table ) AND
 ii) ( the recipient domain ( matches any of:
   A) ( the $virtual_alias_domains table ), OR
   B) ( IF the $virtual_mailbox_maps table is not null, THEN the 
$virtual_mailbox_domains table ), OR
   C) ( IF the $relay_recipient_maps table is not null, THEN the $relay_domains 
table ), OR
   D) ( IF the $local_recipient_maps table is not null, THEN any of:
      ( the $mydestination table, OR
        the $inet_interfaces table, OR
        the $proxy_interfaces table ) )   ) ).

Note that when the recipient domain matches the $virtual_alias_domains table, then the 
recipient *must* be listed in the $virtual_alias_domains table, to avoid having their 
mail rejected as "unknown recipient address".
----

        Wietse

James

Reply via email to