Re: address_verify_relayhost and relay_domains

15 msg	Header for message size?
3 msg	address rewriting

address_verify_relayhost and relay_domains
\ Thomas Kofler (20 Sep 2007)
. \ (Wietse Venema) (20 Sep 2007)

5 msg	pflogsumm reports
11 msg	Changing Queue IDs
3 msg	another authentication failure( with sasl)
2 msg	Bypass Spam checks for certain destinations
11 msg	Postfix 'too nice' with content_filter
7 msg	profiling a milter (dkim in particular)
7 msg	spammers tacking on headers how to block?
7 msg	[Fwd: Re: RFC 821]
1 msg	Re:
4 msg	(No Subject)
2 msg	RFC 821
7 msg	Suspending mail delievery to a specific user
2 msg	Re: OT - massive newsletter
12 msg	List management issue: possibly Off Topic
2 msg	bad protocol error Testing SASL configuration
2 msg	warning: smtpd_sasl_auth_enable is true, but SA...
1 msg	Quota Problem

Subject:	Re: address_verify_relayhost and relay_domains
Group:	Postfix-users
From:	(Wietse Venema)
Date:	20 Sep 2007

Thomas Kofler:
> Hi,
>
> we have a postfix mailgateway (Anti-Virus/-Spam) which uses?
> address_verify to the backend-system (also Postfix).
>
> So far it works fine, but we have to enter the relay_domains both -
> on?
> the mailgateway and the backend-system.
>
> Is there any way so that we dont have to configure the postfix?
> mailgatway for every new domain?

No. You MUST inform Postfix with an explicit list of every domain
that it receives mail for. Otherwise your MTA will be abused and
blacklisted as an open relay. It does not matter that your local
infrastructure involves multiple steps of delivery.

> Can address_verify_relayhost be configured in such a way, that it?
> "overwrites" relay_domains? Only emails which are verfied this way?

No. relayhost specifies where to DELIVER mail, while relay_domains
specifies what domains to RECEIVE. These fundamentally different
functions must not be mixed up.

Wietse

> should be allowed to be forwarded to the backendsystem (independent
> of?
> relay_domains)
>
> Any help is really welcome,
> Thanks,
> Thomas
>
> "main.cf"
>
> relay_domains = hash:/etc/postfix/mydestinationmap
>
> address_verify_relayhost = [192.168.x.xx]
>
> smtpd_recipient_restrictions =
> ? ? ? ? ?permit_mynetworks
> ? ? ? ? ?reject_unauth_destination
> ? ? ? ? ?reject_unknown_recipient_domain
> ? ? ? ? ?reject_unverified_recipient
> ? ? ? ? ?check_helo_access hash:/etc/postfix/helo_checks
> ? ? ? ? ?reject_rbl_client psbl.surriel.com
> ? ? ? ? ?reject_rbl_client ix.dnsbl.manitu.net
>
>
>