Re: untrusted routing

2022-10-25 Thread Damian
Wietse: There. And to repeat myself, it depends on the destination MTA how it delvers user%not-your-domain@your-domain. Viktor: You'll ideally let go of the goal, but if not, you'll need to allow untrusted routing, and regularly test carefully to make sure that it does not create

Re: untrusted routing

2022-10-25 Thread Wietse Venema
Damian: > Wietse: > > Postfix looks for @, % or ! in the address localpart, for example, > > user%not-your-domain@your-domain. > > > > There is no special resolver. > I believe, this is what I wrote. > > If Postfix finds any, like it would in user%not-your-domain@your-domain, > > and "allow_untrust

Re: untrusted routing

2022-10-25 Thread Viktor Dukhovni
On Tue, Oct 25, 2022 at 05:23:31PM +0200, Damian wrote: > > My advice is to redesign the system to avoid the need for messing around > > with the untrusted routing safety net.  If you need to turn that knob, > > you're asking for trouble, and probably doing something wrong

Re: untrusted routing

2022-10-25 Thread Damian
orward anywhere. --- Viktor: So one way in which untrusted routing could cause problems is when:     * The destination "your-domain" also Postfix Why "also"? In my scenario, there is only one Postfix I am in control of, and this Postfix is responsible for "your-d

Re: untrusted routing

2022-10-25 Thread Viktor Dukhovni
address class and as a preliminary rewrite before cleanup performs its various generally table-based rewrites. So one way in which untrusted routing could cause problems is when: * The destination "your-domain" also Postfix * It lists "your-domain" in $mydestination * It

Re: untrusted routing

2022-10-25 Thread Wietse Venema
Damian: > > Damian: > >> I am trying to understand "allow_untrusted_routing = yes" and the > >> circumstances where it is (un)safe. The documentation mentions an open > >> relay loophole in the context of backup MXes. Is untrusted routing safe, > >

Re: untrusted routing

2022-10-24 Thread Damian
Damian: I am trying to understand "allow_untrusted_routing = yes" and the circumstances where it is (un)safe. The documentation mentions an open relay loophole in the context of backup MXes. Is untrusted routing safe, if Postfix has no explicit *_mx_* configuration? This is a

Re: untrusted routing

2022-10-24 Thread Wietse Venema
Damian: > I am trying to understand "allow_untrusted_routing = yes" and the > circumstances where it is (un)safe. The documentation mentions an open > relay loophole in the context of backup MXes. Is untrusted routing safe, > if Postfix has no explicit *_mx_* configuration

untrusted routing

2022-10-24 Thread Damian
I am trying to understand "allow_untrusted_routing = yes" and the circumstances where it is (un)safe. The documentation mentions an open relay loophole in the context of backup MXes. Is untrusted routing safe, if Postfix has no explicit *_mx_* configuration? Consider the sa