From: mouss (no email)
Date: Tue Jul 01 2008 - 05:04:53 EDT
Nicolas Letellier wrote:
> On Tue, 01 Jul 2008 10:41:10 +0200
> mouss <> wrote:
>
>>> Another question:
>>> I see that bounce mail could be problematic. Is it a good idea (and mainly, is it possible?) to disable bounce mail *only* for mail to relay?
>>>
>> you should make sure that you validate recipients during the smtp
>> transaction. so either have the list of relay recipients
>> (relay_recipient_maps) or use reject_unverified_recipient (but the
>> latter breaks the purpose of "backup" in backupMX :).
>>
> Yes, I use a recipient_maps. But if I receive a mail for a bas recipient, by
s/bas/bad ?
> postfix will send a bounce to the sender to notify the mail does not exist
If you have relay_recipient_maps set, then postfix will _reject_, not
bounce. it is the "previous" MTA that generates the bounce. This is why
you should reject on the first server that you manage and let others
bounce or do whatever they want.
> (and it can be problematic if the send address does not exist).
>
if the sender does not exist, there is not much problems. The real
problem is if the sender exists but did not send the message (spam
forges sender address) and when you as a victim get thousands of NDRs
for mail you never sent, you will hate the backscatter source...
|
|
|