[Greylist-users] restrictions order

[Greg Webster]

Hi all,

I'm currently seeing a lot of log entries that are like this:

Mar  7 12:36:19 marvin postfix/smtpd[24984]: NOQUEUE: reject: RCPT from
smtp.co.santa-cruz.ca.us[63.194.190.101]: 550
<Kailash at oneofourdomains.com>: Recipient address rejected: User unknown
in virtual alias table; from=<> to=<Kailash at oneofourdomains.com>
proto=SMTP helo=<sczas29.co.santa-cruz.ca.us>

...but really, that user doesn't exist on our server, so I'd expect them
to immediately get to this:

Mar  7 12:36:23 marvin postfix/smtpd[24982]: NOQUEUE: reject: RCPT from
host11.thisismyserver.com[209.239.45.15]: 550
<Sanna at oneofourdomains.com>: Recipient address rejected: User unknown in
virtual alias table; from=<rodgers at ssfta.com>
to=<Sanna at oneofourdomains.com> proto=ESMTP
helo=<host11.thisismyserver.com>

(ignore the fact that the person trying to spam us is using
'thisismyserver.com'; that's not something I typed, it's actually what
they are using)

Basically, I don't know why some attempts get the first result and some
attempts get the second, when both are unknown users for the domain.
Ideally, I'd like all unknown users to get the second result
immediately...there's no sense keeping the mail around for 300 seconds
if the user is unknown.

Here are the recipient restrictions I have in place right now. Should
the order of these be changed to make the above happen? Or am I missing
something else important?

smtpd_recipient_restrictions =
        permit_mynetworks,
        permit_sasl_authenticated,
        check_sender_access,
        hash:/etc/postfix/sender_access,
        reject_unauth_destination,
        check_policy_service inet:127.0.0.1:60000,
        reject_rbl_client sbl-xbl.spamhaus.org,
        check_relay_domains

Thanks in advance for your help!

Greg


-- 
Greg Webster  -  System Administrator
-------------------------------------
intouch.ca gastips.com epredictor.net