Re: Address verification questions

5 msg	postconf not displaying all options
3 msg	empty_address_recipient not mapped by virtual o...
5 msg	stop smtp from anyone unless sasl auth?
2 msg	'piped' aliases & DSNs
12 msg	Strange From: in headers
5 msg	Mail - Access Denied
4 msg	qpsmtpd support service for postfix
39 msg	pix workaround broken?
2 msg	X-Original-To after bcc contains wrong address
8 msg	/usr/lib/sendmail delivery status/message id's ...
23 msg	Recommended Filesystems?
8 msg	Mail going to backup server instead main server
3 msg	outgoing rate control
5 msg	mail forwarding loop: how do I prevent this?
5 msg	Server relaying existing virtual mailbox
1 msg	how can I rewrite the Mail From
3 msg	Constant connections from user unknown sending ...
2 msg	sporadic deferrals
8 msg	transport_maps: different behavior if discard o...

Address verification questions
\ Chris Horry (20 Jul 2007)
. \ Noel Jones (20 Jul 2007)
. \ (Wietse Venema) (20 Jul 2007)
. . \ Chris Horry (20 Jul 2007)

Subject:	Re: Address verification questions
Group:	Postfix-users
From:	Chris Horry
Date:	20 Jul 2007

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Wietse Venema wrote:
> Chris Horry:
>> I guess I'm a little confused about how address verification works.
>> What I'm trying to achieve is only have address verification for domains
>> in my $transport_maps - essentially to avoid certain backscatter attacks.
>
> Don't muck with address verify transport maps.
>
> Put reject_unverified_whatever at the end of smtpd_recipient_restrictions,
> as described in the example in ADDRESS_VERIFICATION_README.
>
> It will apply only for mail that you're legitimate destination for,
> and not for outbound mail.

OK that's what I thought.

Thanks,

Chris

- --
Chris Horry KG4TSM "A conservative is a man with two perfectly
zerbey good legs who, however, has never learned how
http://www.wibble.co.uk to walk forward". -- Franklin D. Roosevelt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGoRj9nAAeGCtMZU4RArOoAKCtS0NCGizrhaSkfj84mHxlPdMhcgCggnNr
Lp4Cn+z/mWS7LZQrqo1ddmA=
=KG/B
-----END PGP SIGNATURE-----