efa-project.org

I've done small blog post:

http://blog.widmo.biz/postfix-check-use ... tory-ldap/

I think it's so easy to implement, maintain, configure, that should be included in project.

Cheers.

This is good and bad:

GOOD: no need to user relay_recipient map and thus the need to create a script to populate it
THE BAD: if someone tries to ddos your postfix gateway you have two side effects:
a) down of the postfix gateway
b) down of your internal ldap server flooded by the ldap query

MITIGATION: use proxymap on postfix gateway side.

c) comment line in postfix with queries to ldap.

your c) is supposed to be bad ?