Hello. I see a thread for "double-bounce check applied to itself" from February 2021, but it does not exactly fit this bill (i think):
Mar 11 01:10:36 postfix/smtpd[2936]: connect from AWS-OUTLOOK.TOP[85.31.45.162] Mar 11 01:10:37 postfix/smtpd[2936]: Anonymous TLS connection established from aws-outlook.top[85.31.45.162]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 Mar 11 01:10:42 postfix/smtpd[2936]: NOQUEUE: reject: RCPT from AWS-OUTLOOK.TOP[85.31.45.162]: 450 4.1.7 <ad...@sdaoden.eu>: Sender address rejected: unverified address: unknown user: "admin"; from=<ad...@sdaoden.eu> to=<stef...@sdaoden.eu> proto=ESMTP helo=<mail0.aws-outlook.top> Mar 11 01:10:42 postfix/cleanup[2945]: A333C1605C: message-id=<20230311001042.a333c16...@sdaoden.eu> Mar 11 01:10:43 postfix/smtpd[2936]: disconnect from AWS-OUTLOOK.TOP[85.31.45.162] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6 Mar 11 01:10:43 postfix/qmgr[2779]: A333C1605C: from=<double-bou...@sdaoden.eu>, size=219, nrcpt=1 (queue active) Mar 11 01:10:44 postfix/local[2946]: A333C1605C: to=<ad...@sdaoden.eu>, relay=local, delay=1.4, delays=1.2/0.02/0/0.27, dsn=5.1.1, status=undeliverable (unknown user: "admin") Mar 11 01:10:44 postfix/qmgr[2779]: A333C1605C: removed Is there an easy (non-DNS etc) way to say that @sdaoden.eu (or even @(.+\.)?sdaoden\.eu MUST NOT come from the outside, so i could put that check_policy_service unix:private/postgray, .. in here .. reject_unverified_sender, permit of my smtpd_sender_restrictions? --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt) _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org