<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi!,<div><br></div><div>Take a look to : <a href="http://postfixquotareject.ramattack.net/">http://postfixquotareject.ramattack.net/</a></div><div><br></div><div>Best regards,</div><div><br><div><div>El 05/08/2014, a las 08:22, Bron Gondwana <<a href="mailto:brong@fastmail.fm">brong@fastmail.fm</a>> escribió:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">On Mon, Aug 4, 2014, at 11:47 PM, Dan White wrote:<br><blockquote type="cite">On 08/04/14 11:42 +0200, Gabriele Bulfon wrote:<br><blockquote type="cite">Hi,<br>I've been using postfix-amavis-cyrus for years, with normal passwd+aliases mode.<br>We recently switched to virtual domains using ldap.<br>Because we don't want to mantain a virtual mailbox map for postfix, we decided to have<br>a vmailbox file like:<br>@domain1 allow<br>@domain2 allow<br>and have cyrus detect wrong destinations, via ldap.<br>What happens here, is that any quarantined mail by amavis (having very high score, that should<br>not even be reconsidered once qurantined) get back to postfix in some way, devliered to cyrus,<br>which in many cases is a wrong invented mailbox, so back to postfix wich sends back en error.<br>This was not happening before: a quarantined mail by amavis would be just quarantined.<br>No answer back. No delivery in the spam folder.<br>So first, my question is: why the mail is being delivered to postfix even if it's quarantined and<br>have a very high score?<br>Last question is about configuring vmailbox to lookup ldap.<br>I've seen many examples, but they all look for a single domain, while I have multiple domains<br>both in cyrus,ldap and postfix.<br>Exemples like this:<br>server_host = localhost<br>search_base = ou=Users,dc=example,dc=com<br>version = 3<br>scope = sub<br>query_filter = (mail=%s)<br>result_attribute = mail<br>are for just the <a href="http://example.com">example.com</a> domain<br>How should I write the vmailbox ldap file to query different domains?<br></blockquote><br>That approach, even if properly configured, may still lead to accepting and<br>queueing messages for mailboxes that are over quota.<br><br>A better approach is to use Postfix policy script which can query mailbox<br>state before accepting the message, such as by communicating with the smmap<br>socket.<br></blockquote><br>This is what we do at FastMail - quota rejects at the edge using smmapd lookups,<br>and noquota on the lmtp deliveries internally. Sure the user might accidentally get<br>over quota a bit, but it means we never generate bounce emails, so we can't be<br>used for backscatter in this way.<br><br>Bron.<br>--<span class="Apple-converted-space"> </span><br> Bron Gondwana<br> <a href="mailto:brong@fastmail.fm">brong@fastmail.fm</a><br>----<br>Cyrus Home Page:<span class="Apple-converted-space"> </span><a href="http://www.cyrusimap.org/">http://www.cyrusimap.org/</a><br>List Archives/Info:<span class="Apple-converted-space"> </span><a href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/">http://lists.andrew.cmu.edu/pipermail/info-cyrus/</a><br>To Unsubscribe:<br><a href="https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus">https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus</a></div></blockquote></div><br></div></body></html>