For users that have EFA between Exchange and Internet is very useful to enable postfix recipient verification
reject_unknown_recipient_domain, check_recipient_access hash:/etc/postfix/recipient_access, reject_unverified_recipient, check_policy_service inet:127.0.0.1:2501
When reject_unverified_recipient enabled postfix check Internal server making a RCPT TO while external server make RCPT TO to postfix and answer USER UNKNOWN if internal server answer so.
With Exchange 2016/2013 there is a problem, the FrontEnd connector doenst do this check, and bounce later
Solution is to enable Exchange "Recipient Filter Agent"
With "Recipient Filter Agent" we have
Hub Transport that receive at port 2525 that check mailbox exixstence at RCPT TO level
Frontend Transport that receive at port 25 that check mailbox exixstence at DATA level
Obviously postfix doesnt simulate at data level but only at rcpt to level
So we need to create an Hub Transport on port 2525 and we need that EFA in /etc/postfix/transport specify port 2525
is possible ?
Recipient Verification problem
- shawniverson
- Posts: 3649
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: Recipient Verification problem
This is doable.
You will need to simply edit the transport file directly and then issue the following command.
i.e
You will need to simply edit the transport file directly and then issue the following command.
i.e
Code: Select all
example.com smtp:[somehostip]:2525
Code: Select all
sudo postmap /etc/postfix/transport
-
- Posts: 389
- Joined: 23 Apr 2015 09:45
Re: Recipient Verification problem
Yes, but this will be overwritten by EFA-Configure I suppose ?
- shawniverson
- Posts: 3649
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: Recipient Verification problem
Hmm...not sure....
Nope
Nope
-
- Posts: 389
- Joined: 23 Apr 2015 09:45
Re: Recipient Verification problem
I tried but not work, i suppose that reject_unverified_recipient uses VRFY instead RCPT TO and Exchange 2016 doesnt have VRFY
-
- Posts: 33
- Joined: 08 May 2017 14:10
Re: Recipient Verification problem
any solution to this problem yet?