On Thu, Oct 26, 2023 at 06:32:53PM -0400, Wietse Venema via Postfix-users wrote:
> > I'm trying to see if someone has a good app to connect to an exchange or > > O365 server either via LDAP or AD to grab all of the legitimate email > > accounts, forwarding accounts and Groups in order to build a > > transport_recipients file this way reject all invalid email prior to > > forwarding it to any destination. > > > > Im thinking there would be something open source out there, just not able > > to find it. > > I'm not familiar with AD, but on the Postfix side can use > reject_unverified_recipient to query a destination server if it > would accept mail for a recipient. Postfix maintains a cache > for positive and negative reject_unverified_recipient results. Why not just query AD via LDAP? Use the below as a basis for a "virtual_alias_maps" tables (not transport!): main.cf: ldap = proxy:ldap:${config_directory}/ virtual_alias_maps = ${ldap}valias.cf query = proxyAddresses=smtp:%s valias.cf: query = proxyAddresses=smtp:%s result_attribute = mail version = 3 scope = sub server_host = ... search_base = ... bind_dn = ... bind_pw = ... bind = yes This scales much better than per-user transport looks via LDAP, and avoids the need to extract tables, risk stale data, ... See ldap_table(5) and LDAP_README for more details. -- Viktor. _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org