Re: [AMaViS-user] Recipient Address validation problem with dualpostfix

Matthias Keller a =E9crit :
> Hi
>=20
> I know this would fit to a postfix list too, but since I guess a lot of
> you guys are running this setup I hope to find a solution here too...
> I'm running a dual postfix-2.2.5-5 setup with amavisd-new-2.3.3-5
>=20
> It all works fine except for something that occasionally catches my eye
> and is a bit disturbing.
> It seems the alias lookups are only done by the SECOND postfix and not
> by the first one, so sometimes mails get accepted even tough they do no=
t
> exist.
> For example: I've got a domain to domain alias (i actually only seen it
> here) from *@domain1 -> *@domain2
> So postfix accepts all mails to @domain1

wildcard addresses break recipient validation. so all addresses of the
form *@domain1 are considered valid, and will thus generate a bounce at
delivery time, which is bad.

This is a well-known issue.

Only generate aliases for existing addresses:
- if using hash or the like, use a script to collect all addresses in
domain2 and generate an alias entry for each.

- otherwise, use sql or ldap and tune the query so that it only returns
an alias if the "target" address really exists.

- another alternatve: use a policy service to do recipient validation by
recursively expanding aliases.



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=...486&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/