Re: backscatter with virtual domain

2008-11-25 Thread Quanah Gibson-Mount
--On Tuesday, November 25, 2008 7:32 PM -0500 Victor Duchovni <[EMAIL PROTECTED]> wrote: To test it, move the policy check above "permit_mynetworks", but make sure that the script ignores domains you are not responsible for or is triggered via a restriction class: Great, thanks! I managed to

Re: backscatter with virtual domain

2008-11-25 Thread Victor Duchovni
On Tue, Nov 25, 2008 at 02:30:22PM -0800, Quanah Gibson-Mount wrote: > --On Tuesday, November 25, 2008 5:21 PM -0500 Victor Duchovni > <[EMAIL PROTECTED]> wrote: > > >>What's the correct action to take if the account doesn't exist? > >>Currently I have "defer_if_permit Service temporarily unava

Re: backscatter with virtual domain

2008-11-25 Thread Quanah Gibson-Mount
--On Tuesday, November 25, 2008 5:21 PM -0500 Victor Duchovni <[EMAIL PROTECTED]> wrote: What's the correct action to take if the account doesn't exist? Currently I have "defer_if_permit Service temporarily unavailable". A hard "REJECT" seems more reasonable for invalid recipient addresses.

Re: backscatter with virtual domain

2008-11-25 Thread Victor Duchovni
On Tue, Nov 25, 2008 at 02:14:10PM -0800, Quanah Gibson-Mount wrote: > --On Friday, November 21, 2008 7:49 PM -0800 Quanah Gibson-Mount > <[EMAIL PROTECTED]> wrote: > > >So, I'm guessing not breaking recipient validation means adding aliases, > >which I can't do, or the above bit about the domai

Re: backscatter with virtual domain

2008-11-25 Thread Quanah Gibson-Mount
--On Friday, November 21, 2008 7:49 PM -0800 Quanah Gibson-Mount <[EMAIL PROTECTED]> wrote: So, I'm guessing not breaking recipient validation means adding aliases, which I can't do, or the above bit about the domain and query, which I also apparently can't do. I'll look into a policy service,

Re: backscatter with virtual domain

2008-11-21 Thread Quanah Gibson-Mount
--On Friday, November 21, 2008 3:15 PM -0500 Victor Duchovni <[EMAIL PROTECTED]> wrote: On Fri, Nov 21, 2008 at 12:06:17PM -0800, Quanah Gibson-Mount wrote: [EMAIL PROTECTED] conf]$ grep ldap main.cf sender_canonical_maps = proxy:ldap:/opt/zimbra/conf/ldap-scm.cf Don't use sender_canonical_

Re: backscatter with virtual domain

2008-11-21 Thread Victor Duchovni
On Fri, Nov 21, 2008 at 12:06:17PM -0800, Quanah Gibson-Mount wrote: > [EMAIL PROTECTED] conf]$ grep ldap main.cf > sender_canonical_maps = proxy:ldap:/opt/zimbra/conf/ldap-scm.cf Don't use sender_canonical_maps. Use either canonical_maps or smtp_generic_maps as appropriate. Header recipients bec

backscatter with virtual domain

2008-11-21 Thread Quanah Gibson-Mount
Hi, First, sorry if this lacks some detail, dealing with email delivery is not my normal thing (I generally work more purely in code realms. :P ). However, I've been assigned to write a milter to deal with backscatter spam that can be generated by our virtual domain setup, and first I'd like t