check_recipient_access seltsame Verhaltensweise

[Waschl]

Hallo zusammen,

vielleicht kann mir hier jemand helfen. Nach Umstieg auf einen neuen Mailser
(Debian Stretch - vorher Jessie)
mit gleicher Konfiguration, verhält sich check_recipient_access in den
smtpd_recipient_restrictions komisch.

smtpd_recipient_restrictions =
        reject_unknown_recipient_domain
        reject_non_fqdn_recipient
        reject_unlisted_recipient
        check_policy_service inet:127.0.0.1:10023
        check_recipient_access hash:/etc/postfix/verify_domains_recipient
        check_policy_service inet:127.0.0.1:7777
        permit_mynetworks
        permit_sasl_authenticated
        reject_unauth_destination

verify_domains_receipient:
bspa.de reject_unverified_recipient
bs2pa.de reject_unverified_recipient
bsvpa.de reject_unverified_recipient
itbspa.de reject_unverified_recipient

Wenn eine Mail von der itbspa.de Domäne zu einer Adresse in der bspa.de
Domäne geschickt wird, was ja dann alles auf dem gleichen Server passiert,
habe ich folgende seltsame Verhaltensweise:

1. Postfix macht die address verification und der Empfänger wird als
deliverable eingestuft
2. Postfix gibt den Fehler "Recipient address rejected: unverified address"
zurück

Hier noch das Log:

Jul 27 08:37:30 mail postfix/postscreen[24195]: CONNECT from
[192.168.116.200]:29698 to [192.168.118.14]:25
Jul 27 08:37:30 mail postfix/postscreen[24195]: WHITELISTED
[192.168.116.200]:29698
Jul 27 08:37:30 mail postfix/smtpd[24206]: connect from
itexchange16.itbspa.local[192.168.116.200]
Jul 27 08:37:30 mail postfix/smtpd[24206]: Anonymous TLS connection
established from itexchange16.itbspa.local[192.168.116.200]: TLSv1.2 with
cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Jul 27 08:37:30 mail postgrey[3585]: action=pass, reason=client whitelist,
client_name=itexchange16.itbspa.local, client_address=192.168.116.200,
sender=xxx at itbspa.de, recipient=xxx at bspa.de
Jul 27 08:37:30 mail postfix/cleanup[24211]: 3xJ2Mt5PVgz10vD:
message-id=<3xJ2Mt5PVgz10vD at mail.itbspa.de>
Jul 27 08:37:30 mail postfix/qmgr[24190]: 3xJ2Mt5PVgz10vD:
from=<double-bounce at itbspa.de>, size=223, nrcpt=1 (queue active)
Jul 27 08:37:30 mail postfix/smtp[24212]: Untrusted TLS connection
established to 172.18.1.11[172.18.1.11]:25: TLSv1.2 with cipher
ECDHE-RSA-AES256-SHA384 (256/256 bits)
Jul 27 08:37:35 mail postfix/smtp[24212]: 3xJ2Mt5PVgz10vD: to=<xxx at bspa.de>,
relay=172.18.1.11[172.18.1.11]:25, delay=5.1, delays=0/0/0.09/5, dsn=2.1.5,
status=deliverable (250 2.1.5 Recipient OK)
Jul 27 08:37:35 mail postfix/qmgr[24190]: 3xJ2Mt5PVgz10vD: removed
Jul 27 08:37:36 mail postfix/smtpd[24206]: NOQUEUE: reject: RCPT from
itexchange16.itbspa.local[192.168.116.200]: 450 4.1.1 <xxx at bspa.de>:
Recipient address rejected: unverified address: User unknown;
from=<xxx at itbspa.de> to=<xxx at bspa.de> proto=ESMTP helo=<webmail.itbspa.de>
Jul 27 08:37:36 mail postfix/smtpd[24206]: disconnect from
itexchange16.itbspa.local[192.168.116.200] ehlo=2 starttls=1 mail=1 rcpt=0/1
quit=1 commands=5/6



--
View this message in context: http://postfix.1071664.n5.nabble.com/check-recipient-access-seltsame-Verhaltensweise-tp91548.html
Sent from the Germany Postfixbuch mailing list archive at Nabble.com.