Hello,

I have a Postfix MTA which is configured to check recipients for a
domain listed in table "relay_domains", before to forward the message to
the appropriate post office.

All has worked fine, until the MTA has been configured as backup MX for
an external domain, say "extdomain.tld".

Since then, every time that a user (enabled to relay message trhough my
MTA) tries to send a message to the domain "extdomain.tld", get an
error:

Dec 12 16:55:33 av1 postfix/smtpd[25586]: NOQUEUE: reject: RCPT from
unknown[<IP Primary MX for "extdomain.tld">]: 550 5.1.1
<[email protected]>: Recipient address rejected: User unknown in relay
recipient table; from=<[email protected]> to=< [email protected]>
proto=ESMTP helo=<MYPC>

The Primary MX for "extdomain.tld" is a Postfix platform too (IMSS). How
do I do so that that MTA don't checks users locally but does recipient
validation on downstream Post-office server?

PS: I don't want taht the backup MX deliver mail directly to Postoffice
because on primary MX I can manage the quarantine, whereas on secondary
MX I couldn't.

PPS: Here the postconf -n

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = imss:localhost:10025
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
default_process_limit = 200
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, $mydomain
mydomain = ...
myhostname = <name>
mynetworks =
10.100.5.159/32,10.100.5.160/32,10.100.5.161/32,127.0.0.1/32,10.100.2.12
0/32,10.100.5.162/32,10.100.5.128/26,10.100.2.121/32
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.0.16/README_FILES
relay_domains = extdomain.tld
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_banner = ESMTP
smtpd_recipient_restrictions = permit_mynetworks, permit_mx_backup,
permit_sasl_authenticated, check_relay_domains
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = ....
smtpd_sasl_security_options = noanonymous
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 450
virtual_alias_maps = hash:/etc/postfix/mapdomain

tnx,

rocsca

Reply via email to