Re: double-bounce check applied to itself

2021-02-12 Thread Wietse Venema
Viktor Dukhovni: > > On Feb 12, 2021, at 12:29 PM, Eugene Podshivalov wrote: > > > > Another somewhat related question is: in order to probe the smtpd needs to > > resolve all virtual etc. mappings which is also done by the cleanup. Is > > this resolution done twice in this case? > > The smtpd

Re: double-bounce check applied to itself

2021-02-12 Thread Viktor Dukhovni
> On Feb 12, 2021, at 12:29 PM, Eugene Podshivalov wrote: > > Another somewhat related question is: in order to probe the smtpd needs to > resolve all virtual etc. mappings which is also done by the cleanup. Is this > resolution done twice in this case? The smtpd(8) process does not perform an

Re: double-bounce check applied to itself

2021-02-12 Thread Wietse Venema
Eugene Podshivalov: > > > > Wietse: > > smtpd does not resolve any mappings. > > If a sender address is mapped to some other virtual alias, how does it know > which address to probe then? The Postfix SMTP daemon generates a probe message for the address in the RCPT TO command. Inside Postfix, tha

Re: double-bounce check applied to itself

2021-02-12 Thread Eugene Podshivalov
Judging by the above log example the double-bounce message is processed by the cleanup as well. I guess that's the point where the resolving happens for the prob. Без вирусов. www.avast.ru

Re: double-bounce check applied to itself

2021-02-12 Thread Eugene Podshivalov
> > Wietse: > smtpd does not resolve any mappings. If a sender address is mapped to some other virtual alias, how does it know which address to probe then? Без вирусов. www.avast.ru

Re: double-bounce check applied to itself

2021-02-12 Thread Wietse Venema
Eugene Podshivalov: > Another somewhat related question is: in order to probe the smtpd needs to > resolve all virtual etc. mappings which is also done by the cleanup. Is > this resolution done twice in this case? smtpd does not resolve any mappings. Instead it makes a safe guess to reject most

Re: double-bounce check applied to itself

2021-02-12 Thread Eugene Podshivalov
Have read through the pickup(8) and cleanup(8) docs and understood the workflow as follows. When a local message is sent by sendmail it lands into the maildrop directory. The pickup daemon then feeds it into the cleanup one. The latter is responsible for all sorts of envelope and header transformat

Re: double-bounce check applied to itself

2021-02-11 Thread Wietse Venema
Eugene Podshivalov: > > > > Wietse: > > The address can be transformed > > with canonical_maps, virtual_alias_maps, it may be routed to a > > different system with transport_maps, and it may be aliased with > > /etc/aliases to some other local or remote address > > All these things apply to local

Re: double-bounce check applied to itself

2021-02-11 Thread Eugene Podshivalov
> > Wietse: The address can be transformed > with canonical_maps, virtual_alias_maps, it may be routed to a > different system with transport_maps, and it may be aliased with > /etc/aliases to some other local or remote address All these things apply to locally sent messages as well, don't they?

Re: double-bounce check applied to itself

2021-02-11 Thread Wietse Venema
Eugene Podshivalov: > Assume reject_unverified_sender is set and an email is sent > From:u...@mydomain.com. > When the email is sent directly from mail.mydomain.com there is no probe, > right? reject_unverified_recipient etc. do not care where mail comes from, or where it is being sent to. > But

Re: double-bounce check applied to itself

2021-02-11 Thread Viktor Dukhovni
> On Feb 11, 2021, at 6:29 PM, Eugene Podshivalov wrote: > > Assume reject_unverified_sender is set and an email is sent > From:u...@mydomain.com. This is an smtpd(8)/access(5) feature, and so only applies when email is received via SMTP and the restriction in question is applied to the messag

Re: double-bounce check applied to itself

2021-02-11 Thread Eugene Podshivalov
Assume reject_unverified_sender is set and an email is sent From:u...@mydomain.com. When the email is sent directly from mail.mydomain.com there is no probe, right? But when the message is sent from another server that uses mydomain.com as relay then the probe is done, in which case Postfix probes

Re: double-bounce check applied to itself

2021-02-11 Thread Wietse Venema
Eugene Podshivalov: > Let me put it this way: does Postfix do probe for outgoing mail? reject_unverified_recipient and reject_unverified_sender make no such distinction. That is a feature, not a bug. reject_unverified_recipient has been used on internet gateways that have no complete table of all

Re: double-bounce check applied to itself

2021-02-11 Thread Eugene Podshivalov
Let me put it this way: does Postfix do probe for outgoing mail? чт, 11 февр. 2021 г. в 21:35, Wietse Venema : > Eugene Podshivalov: > > I meant Postfix probes use a sender address even when it is a local one. > > Example from logs: > > > > > postfix/qmgr[20192]: 9AE7A3F56E: from=, > > > size=269

Re: double-bounce check applied to itself

2021-02-11 Thread Wietse Venema
Eugene Podshivalov: > I meant Postfix probes use a sender address even when it is a local one. > Example from logs: > > > postfix/qmgr[20192]: 9AE7A3F56E: from=, > > size=269, nrcpt=1 (queue active) > > postfix/local[20230]: 9AE7A3F56E: to=, *relay=local*, > > delay=0.02, delays=0.01/0.01/0/0, dsn

Re: double-bounce check applied to itself

2021-02-11 Thread Eugene Podshivalov
I meant Postfix probes use a sender address even when it is a local one. Example from logs: > postfix/qmgr[20192]: 9AE7A3F56E: from=, > size=269, nrcpt=1 (queue active) > postfix/local[20230]: 9AE7A3F56E: to=, *relay=local*, > delay=0.02, delays=0.01/0.01/0/0, dsn=2.0.0, status=deliverable (delive

Re: double-bounce check applied to itself

2021-02-11 Thread Wietse Venema
Eugene Podshivalov: > When reject_unverified_sender param is set and an email is sent on behalf > of the server the double-bounce check is still performed (i.e. sent to > itself). What is 'the double-bounce check'? Postfix probes use a sender address that does not receive email. There is even a f