On 09/14/17 22:06, Phil Stracchino wrote: > On 09/14/17 11:52, Msd wrote: >> Hello, >> >> Is it possible to prevent local delivery for unix accounts below 1000 >> (system accounts)? >> >> I have read http://www.postfix.org/LOCAL_RECIPIENT_README.html and >> http://www.postfix.org/postconf.5.html#local_recipient_maps without success. >> >> My problem is that spammers trie to deliver mails to system accounts >> like "www-data" with a usurped sender envelope and postfix bounces to >> the usurped address : the mailbox directory cannot be created. > > > I have an /etc/postfix/recipient_access file that looks like this: > > babcom.com 554 Bad spammer! You didn't use the MX record! > @babcom.com 554 Bad spammer! You didn't use the MX record! > a...@caerllewys.net 554 This user does not accept mail > a...@caerllewys.net 554 This user does not accept mail > b...@caerllewys.net 554 This user does not accept mail > dae...@caerllewys.net 554 This user does not accept mail > ... > > > However, although I know I *USED* to use this to deny mail to system > users, there is no longer any configuration rule in my main.cf to invoke > it, and I don't remember what it was. I'm guessing I used to have it in > smtpd_recipient_restrictions. Why it's no longer there, I have no idea. > Perhaps at some point I simply *accidentally deleted* the rule.
And looking at it again when I'm more awake, it is of course: smtpd_recipient_restrictions = ... ... check_recipient_access [hashtype]:/etc/postfix/recipient-access -- Phil Stracchino Babylon Communications ph...@caerllewys.net p...@co.ordinate.org Landline: +1.603.293.8485 Mobile: +1.603.998.6958
