[Postfixbuch-users] Mails an nicht-existente Subdomains abweisen

[Torben]

Hallo Liste,

bin seit ein paar Tagen dabei, einen Mailserver fuer derzeit zwei  
Domains (example1.com und example2.com) aufzusetzten. Bisher lief  
auch alles ganz gut ... die User liegen in einem LDAP-Verzeichnis und  
laesst sich wunderbar pflegen. Sende ich nun eine eMail an kein-ldap- 
user at example1.com, wird diese auch ordentlich abgewiesen (zumindest  
hab ich den Eindruck):

# /var/log/mail.log

Feb  6 15:08:41 hxxxxxx postfix/smtpd[11456]: disconnect from mein- 
isp.tld[xxx.xxx.xxx.xxx]
Feb  6 15:08:41 hxxxxxx postfix/smtpd[11528]: connect from mail- 
provider.tld[yyy.yyy.yyy.yyy]
Feb  6 15:08:41 hxxxxxx postgrey[11901]: action=pass, reason=client  
AWL, client_name=mail-provider.tld, client_address=yyy.yyy.yyy.yyy,  
sender=sender at mail-provider.tld, recipient=kein-ldap-user at example1.com
Feb  6 15:08:41 hxxxxxx postfix/cleanup[11461]: A60EA22FA73A: message- 
id=<20090206140841.A60EA22FA73A at hxxxxxx.serverkompetenz.net>
Feb  6 15:08:41 hxxxxxx postfix/qmgr[1816]: A60EA22FA73A:  
from=<double-bounce at hxxxxxx.serverkompetenz.net>, size=307, nrcpt=1  
(queue active)
Feb  6 15:08:41 hxxxxxx postfix/pipe[11462]: A60EA22FA73A: to=<kein- 
ldap-user at example1.com>, relay=dovecot, delay=0.03,  
delays=0.03/0/0/0, dsn=2.0.0, status=deliverable (delivers to  
command: /usr/lib/dovecot/deliver)
Feb  6 15:08:41 hxxxxxx postfix/qmgr[1816]: A60EA22FA73A: removed
Feb  6 15:08:42 hxxxxxx dovecot: imap-login: Login:  
user=<torben at example1.com>, method=PLAIN, rip=xxx.xxx.xxx.xxx,  
lip=zzz.zzz.zzz.zzz
Feb  6 15:08:43 hxxxxxx dovecot: IMAP(torben at example1.com):  
Disconnected: Logged out
Feb  6 15:08:44 hxxxxxx postfix/smtpd[11528]: A765F22FA73A:  
client=mail-provider.tld[yyy.yyy.yyy.yyy]
Feb  6 15:08:44 hxxxxxx postfix/cleanup[11461]: A765F22FA73A: message- 
id=<D94B5EC8-2F91-4E0D-AB89-6C2C4E3777DC at mail-provider.tld>
Feb  6 15:08:44 hxxxxxx postfix/qmgr[1816]: A765F22FA73A:  
from=<sender at mail-provider.tld>, size=1325, nrcpt=1 (queue active)
Feb  6 15:08:44 hxxxxxx postfix/smtpd[11528]: disconnect from mail- 
provider.tld[yyy.yyy.yyy.yyy]
Feb  6 15:08:44 hxxxxxx dovecot: auth(default): ldap(kein-ldap- 
user at example1.com): Authenticated user not found
Feb  6 15:08:44 hxxxxxx postfix/pipe[11462]: A765F22FA73A: to=<kein- 
ldap-user at example1.com>, relay=dovecot, delay=3.6,  
delays=3.6/0/0/0.01, dsn=5.1.1, status=bounced (user unknown)
Feb  6 15:08:44 hxxxxxx postfix/cleanup[11461]: B31C822FA73E: message- 
id=<20090206140844.B31C822FA73E at hxxxxxx.serverkompetenz.net>
Feb  6 15:08:44 hxxxxxx postfix/qmgr[1816]: B31C822FA73E: from=<>,  
size=3267, nrcpt=1 (queue active)
Feb  6 15:08:44 hxxxxxx postfix/bounce[11468]: A765F22FA73A: sender  
non-delivery notification: B31C822FA73E
Feb  6 15:08:44 hxxxxxx postfix/qmgr[1816]: A765F22FA73A: removed
Feb  6 15:08:45 hxxxxxx postfix/smtp[11541]: B31C822FA73E:  
to=<sender at mail-provider.tld>, relay=mail-provider.tld 
[yyy.yyy.yyy.yyy]:25, delay=0.51, delays=0.01/0.01/0.28/0.21,  
dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 231F324023A8)
Feb  6 15:08:45 hxxxxxx postfix/qmgr[1816]: B31C822FA73E: removed




Sende ich nun allerdings eine Mail an kein-ldap- 
user at irgendwas.example1.com, wobei diese Subdomain nicht existiert,  
erfolgt kein Bounce und die eMail wird auch nicht wirklich abgewiesen:

# /var/log/mail.log

Feb  6 15:02:55 hxxxxxx postfix/smtpd[9454]: connect from mail- 
provider.tld[yyy.yyy.yyy.yyy]
Feb  6 15:02:56 hxxxxxx postgrey[11901]: action=pass, reason=client  
AWL, client_name=mail-provider.tld, client_address=yyy.yyy.yyy.yyy,  
sender=sender at mail-provider.tld, recipient=kein-ldap- 
user at irgendwas.example1.com
Feb  6 15:02:56 hxxxxxx postfix/cleanup[9459]: C25CC22FA73A: message- 
id=<20090206140256.C25CC22FA73A at hxxxxxx.serverkompetenz.net>
Feb  6 15:02:56 hxxxxxx postfix/qmgr[1816]: C25CC22FA73A:  
from=<double-bounce at hxxxxxx.serverkompetenz.net>, size=307, nrcpt=1  
(queue active)
Feb  6 15:02:56 hxxxxxx postfix/smtp[9460]: C25CC22FA73A: to=<kein- 
ldap-user at irgendwas.example1.com>, relay=none, delay=0.12,  
delays=0.01/0.01/0.1/0, dsn=5.4.6, status=undeliverable (mail for  
irgendwas.example1.com loops back to myself)
Feb  6 15:02:56 hxxxxxx postfix/qmgr[1816]: C25CC22FA73A: removed
Feb  6 15:02:59 hxxxxxx postfix/smtpd[9454]: NOQUEUE: reject: RCPT  
from mail-provider.tld[yyy.yyy.yyy.yyy]: 450 4.1.1 <kein-ldap- 
user at irgendwas.example1.com>: Recipient address rejected:  
undeliverable address: mail for irgendwas.example1.com loops back to  
myself; from=<sender at mail-provider.tld> to=<kein-ldap- 
user at irgendwas.example1.com> proto=ESMTP helo=<mail-provider.tld>
Feb  6 15:02:59 hxxxxxx postfix/smtpd[9454]: disconnect from mail- 
provider.tld[yyy.yyy.yyy.yyy]




Wie kann ich nun erreichen, dass Mails an Subdomains, welche nicht  
existieren, ebenfalls direkt abgelehnt werden?

# postconf -n

alias_maps =
config_directory = /etc/postfix
home_mailbox = Maildir/
inet_interfaces = all
mail_owner = postfix
mydestination = $myhostname, $mydomain, localhost, localhost.$mydomain
myhostname = hxxxxxx.serverkompetenz.net
mynetworks = 127.0.0.0/8
mynetworks_style = host
myorigin = $myhostname
smtpd_banner = $myhostname ESMTP
smtpd_helo_required = yes
smtpd_recipient_restrictions =
  reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  reject_unknown_sender_domain,
  reject_unknown_recipient_domain,
  permit_sasl_authenticated,
  permit_mynetworks,
  reject_rbl_client zen.spamhaus.org,
  reject_rbl_client ix.dnsbl.manitu.net,
  reject_rbl_client bl.spamcop.net,
  reject_rbl_client dnsbl.njabl.org,
  reject_rbl_client list.dsbl.org,
  reject_rhsbl_client multi.uribl.com,
  reject_rhsbl_client blackhole.securitysage.com,
  check_policy_service inet:127.0.0.1:60000,
  reject_unverified_recipient,
  reject_unauth_destination,
  reject_unauth_pipelining,
  permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
soft_bounce = no
virtual_alias_maps = ldap:/etc/postfix/virtual_alias_maps_ldap
virtual_gid_maps = $virtual_uid_maps
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains
virtual_transport = dovecot
virtual_uid_maps = static:5000



Mit freundlichen Gruessen,

Torben