From d19c7d7942c87202f3d80461d5c93993cebb299c Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Mon, 12 Oct 2026 22:01:08 +1100 Subject: [PATCH] Stop relay_domains matching subdomains, refresh positive verify cache hourly --- apps/base/mail/smarthost/main.cf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/apps/base/mail/smarthost/main.cf b/apps/base/mail/smarthost/main.cf index dde1f78..865db83 100644 --- a/apps/base/mail/smarthost/main.cf +++ b/apps/base/mail/smarthost/main.cf @@ -13,6 +13,8 @@ message_size_limit = 52428800 mynetworks = cidr:/etc/postfix/mynetworks.cidr relay_domains = texthash:/etc/postfix/relay_domains +# Default minus relay_domains: subdomains are not delivered and would loop back out via the gateways. +parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,smtpd_access_maps transport_maps = texthash:/etc/postfix/transport relayhost = [mta1.edge.unkin.net]:25 smtp_fallback_relay = [mta2.edge.unkin.net]:25 @@ -25,6 +27,8 @@ unverified_recipient_reject_code = 550 unverified_recipient_tempfail_action = defer_if_permit address_verify_negative_refresh_time = 5m address_verify_negative_expire_time = 1h +address_verify_positive_refresh_time = 1h +address_verify_positive_expire_time = 1d milter_default_action = tempfail smtpd_milters =