Re: Cyrus LMTP socket from OpenSMTPd

Hi,

> # match !from src <ip> mail-from "@online.lt" for any reject
> match !from src <ip> mail-from "@on.lt" for any reject
> match !from local !for domain <domains> reject
> match from local !for local action "outbound"
> match from src <ip> !for domain <domains> action "outbound"
> match !from local for domain <domains> action "cyrus"
> match from local for local action "cyrus"

I am not an expert in OpenSMTPd but my interpretation is that, assuming the 
aliases rewrite happens before any of the match clauses are evaluated and 
that mail to postmaster is aliased to [email protected], then the 'match from 
local !for local action "outbound"' line matches before the cyrus lines. I 
assume this line matches because the address has been rewritten to a fully 
qualified email address rather than a username and is therefore "!for 
local".

... Have you tried moving the cyrus rules so that they are immediately 
after the reject rules?


PS: The 'match from src <ip> !for domain <domains> action "outbound"' might 
be an open relay? If the message comes from an IP address (i.e. not locally 
submitted) and isn't for any of the domains you handle then send it 
"outbound". It's probably a good idea to verify what that line does and 
remove it if it results in an open relay.



Best wishes,
@ndy

-- 
[email protected]
http://www.ashurst.eu.org/
0x7EBA75FF

------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T2b653f470e334203-Mb8ad97e9c608d1c090175efe
Delivery options: https://cyrus.topicbox.com/groups/info/subscription