On Wed, Dec 07, 2005 at 04:12:16PM -0500, Brian T Glenn wrote:
> On Wed, Dec 07, 2005 at 11:42:41AM -0500, johnny yu may have written:
> > 
> > Putting the domains in control/locals is incorrect.  I removed all items 
> > from locals and now it contains no entires, which is fine with me as I 
> > don't want any local mail delivery as this is a for a smarthost.    Instead 
> > I have the domains my smarthost accepts mail for listed in 
> > control/rcpthosts and routes to the corospoding internal mailservers in 
> > control/smtproutes .  I believe this configuration is fine, but if anyone 
> > sees any glaring issues i hope they will point them out.
> 
> That is exactly the configuration to use for a mail relay. I don't see 
> any issues with that at all.
> 
> Thanks for bringing up this idea. I'm going to try to implement 
> something similar on my secondary MX to avoid traffic getting through 
> from spammers.
> 

The trick is to have a non qmail-ldap install extended with qmail-smtpd
and qmail-verify. In that case you can have a empty locals file for stock
qmail doing the smarthost forwarding but a full locals.cdb (generated from
rcpthosts) to trick qmail-smtpd to do a RCPTVERIFY.

At least that is how I see it.
-- 
:wq Claudio

Reply via email to