I have read and re-read the documentation regarding transport(5) here:
https://www.postfix.org/transport.5.html

First, the docs for things like say "sender_dependent_relayhost_maps" say:

"This information is overruled with... the transport(5) table."

but what the heck is "the transport(5) table"?  Looking at the transport(5)
docs there is not a single table!!?

Then, in transport(5) the doc for "relay_transport" says "This  is  the
default for remote delivery to domains listed with relay_domains. In order
of decreasing  precedence,  the  nexthop destination   is   taken   from
 relay_transport,  sender_dependent_relayhost_maps, relayhost, or from the
recipient domain."

But "sender_dependent_relayhost_maps" indicates that it can be overruled by
"sender_dependent_default_transport_maps" so there is apparently some
relationship between relay_transport and default_transport or at least
between the sender_dependent files amongst themselves?????

The transport(5) docs contain examples that indicate domains are searched
without the @ sign, but in other places and in examples I find online it
appears the @ sign is included in the sender_dependent...* searches??!!

Ultimately, I cannot get postfix to honor "discard" filters I've created.
My setup involves an inbound mail relay running postfix that relays via
smtp to the domains it accepts for.

relay_domains = domain1.com domain2.com domain3.com
transport_maps = hash:/etc/postfix/transport
sender_dependent_relayhost_maps = hash:/etc/postfix/sender_transport_maps

the /etc/postfix/transport map contains entries for each of the domain1.com
etc.:
domain1.com smtp:[domain1.mail.handler.com]:2000
domain2.com smtp:[domain2.mail.handler.com]:2020
etc...


the sender_transport_maps contains:
@filtered_domain.com DISCARD

I of course update the .db files with postmap and postfix start/stop
between changes. However, mail from users at @filtered_domain.com still
gets through! I've tried with and without the @. I've tried setting
sender_dependent_default_transport_maps instead. I've tried everything I
can think of.

There seems to be no easy way to test this except to send examples via some
other working domain and during the time I'm running tests all mail for
that other domain might end up blocked. If there's an easier way to test
whether mail from a certain domain will successfully get blocked that'd be
great. I have DKIM and other filters enabled so it's not straight-forward
to spoof MAIL FROM. Or maybe it is and I don't know the trick...

heeeeelp :)
Thanks in advance.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to