Address verification questions

5 msg	postconf not displaying all options
3 msg	empty_address_recipient not mapped by virtual o...
5 msg	stop smtp from anyone unless sasl auth?
2 msg	'piped' aliases & DSNs
12 msg	Strange From: in headers
5 msg	Mail - Access Denied
4 msg	qpsmtpd support service for postfix
39 msg	pix workaround broken?
2 msg	X-Original-To after bcc contains wrong address
8 msg	/usr/lib/sendmail delivery status/message id's ...
23 msg	Recommended Filesystems?
8 msg	Mail going to backup server instead main server
3 msg	outgoing rate control
5 msg	mail forwarding loop: how do I prevent this?
5 msg	Server relaying existing virtual mailbox
1 msg	how can I rewrite the Mail From
3 msg	Constant connections from user unknown sending ...
2 msg	sporadic deferrals
8 msg	transport_maps: different behavior if discard o...

Address verification questions
\ Chris Horry (20 Jul 2007)
. \ Noel Jones (20 Jul 2007)
. \ (Wietse Venema) (20 Jul 2007)
. . \ Chris Horry (20 Jul 2007)

Subject:	Address verification questions
Group:	Postfix-users
From:	Chris Horry
Date:	20 Jul 2007

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I guess I'm a little confused about how address verification works.
What I'm trying to achieve is only have address verification for domains
in my $transport_maps - essentially to avoid certain backscatter attacks.

(I do smart MX hosting for several domains firewalled from the outside
world, I'm open to suggestions of a better way to do this but it works
well:-)).

Currently:

transport_maps = mysql:/etc/postfix/transport.cf (it's a MySQL database
of standard transport maps, nothing fancy).

If I'm reading the verification README right, I'm supposed to replace
this with address_verify_transport_maps. When I do this, however it
appears to be trying to deliver anything locally. Conclusion: I'm doing
it wrong.

What am I missing?

Chris

- --
Chris Horry KG4TSM "A conservative is a man with two perfectly
zerbey good legs who, however, has never learned how
http://www.wibble.co.uk to walk forward". -- Franklin D. Roosevelt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGoQTtnAAeGCtMZU4RApo4AJ9z6nLFP+KZSQM+SMWZJEoWvzszOwCeOcqB
vz64hLFcAf9U+vqCZiNJIWY=
=KhSm
-----END PGP SIGNATURE-----