Re: How do I prevent this?

On Mon, May 23, 2005 at 09:35:41AM -0500, Tyler Nally wrote:

> smtpd_recipient_restrictions =
> permit_mynetworks,
+++ reject_unauth_destination,
> check_sender_access hash:/etc/postfix/check_clients
> check_recipient_access hash:/etc/postfix/relocated
> check_recipient_access hash:/etc/postfix/check_clients
> reject_rbl_client relays.ordb.org
> reject_rbl_client opm.blitzed.org
> reject_rbl_client list.dsbl.org
> reject_rbl_client sbl-xbl.spamhaus.org
> reject_rbl_client cbl.abuseat.org
> reject_rbl_client dul.dnsbl.sorbs.net
> reject_unauth_pipelining,
> reject_non_fqdn_sender,
> reject_non_fqdn_recipient,
--- reject_unauth_destination,
> permit

Move "reject_unauth_destination" to the top as indicated.

> May 23 05:19:17 neo postfix/smtpd[8637]: 45B0955F2E:
> client=mail7.giftdoc.com[205.244.40.47]
> May 23 05:19:17 neo postfix/cleanup[8639]: 45B0955F2E:
> message-id=<5993128.1116825550071.JavaMail.root@giftdoc.co m>
> May 23 05:19:17 neo postfix/nqmgr[11445]: 45B0955F2E:
> from=<bounce-eebehurrchurm@10.44.40.13>, size=6428, nrcpt=1 (queue active)

You accept undeliverable non-bounce (from != <>), fix your recipient
validation.

> May 23 05:19:18 neo postfix/cleanup[8570]: 16BA755F36:
> message-id=<20050523051918.16BA755F36@mail.yadler.com>
> May 23 05:19:18 neo postfix/nqmgr[11445]: 16BA755F36:
> from=<>, size=8154, nrcpt=1 (queue active)
> May 23 05:19:48 neo postfix/smtp[8693]: 16BA755F36:
> to=<bounce-eebehurrchurm@10.44.40.13>, relay=none, delay=30, status=deferred
> (connect to 10.44.40.13[10.44.40.13]: Connection timed out)
>

You generate a bounce because the recipient is invalid (or other local
failure).

--
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomo@postfix.org?body=unsubscribe%20p ostfix-users>