Alias continues to deliver after disabling

[Zegorax]

Ciao,

Hope you're doing well!

I have a self-hosted instance of Anonaddy tied to a custom wildcard domain. When disabling an alias, emails coming to it are still forwarded instead of being blocked.

The "forwards' counts also increments.

What could be possibly causing this ?

Thanks a lot in advance.

Version : 1.3.1

[willbrowningme]

Did you make sure to add the access policy in /etc/postfix/master.cf:

# addy.io access policy
policy  unix  -       n       n       -       0       spawn
  user=johndoe argv=php /var/www/anonaddy/postfix/AccessPolicy.php

and in /etc/postfix/main.cf:

smtpd_recipient_restrictions =
   permit_mynetworks,
   reject_unauth_destination,
   check_policy_service unix:private/policy,
   reject_rhsbl_helo dbl.spamhaus.org,
   reject_rhsbl_reverse_client dbl.spamhaus.org,
   reject_rhsbl_sender dbl.spamhaus.org,
   reject_rbl_client zen.spamhaus.org

[Zegorax]

Ciao Will,

I'm using the Dockerized version. Would I need to add this configuration as well or should it come built-in ?

[willbrowningme]

It should all come built in with the Docker version. I am not familiar with Docker myself so won't be able to assist much.

[Zegorax]

I've inspected the container, here are the relevant sections in the current version of main.cf :

smtpd_recipient_restrictions =
    permit_mynetworks,
    reject_unauth_destination,
    check_policy_service unix:private/policy,
    reject_rbl_client zen.spamhaus.org=127.0.0.[2..11],
    reject_rhsbl_sender dbl.spamhaus.org=127.0.1.[2..99],
    reject_rhsbl_helo dbl.spamhaus.org=127.0.1.[2..99],
    reject_rhsbl_reverse_client dbl.spamhaus.org=127.0.1.[2..99],
    warn_if_reject reject_rbl_client zen.spamhaus.org=127.255.255.[1..255],

And master.cf :

anonaddy unix - n n - - pipe
  flags=F user=anonaddy argv=php /var/www/anonaddy/artisan anonaddy:receive-email --sender=${sender} --recipient=${recipient} --local_part=${user} --extension=${extension} --domain=${domain} --size=${size}

policy  unix  -       n       n       -       0       spawn
  user=anonaddy argv=php /var/www/anonaddy/postfix/AccessPolicy.php

[willbrowningme]

Are you sending the emails to the alias from the same server or a local network that would fall under permit_mynetworks?

[RichyHBM]

Just came to add I'm seeing this too, I have some minor tweaks to my local install as if not it seems to be an open relay which I initially thought was the issue, but seeing this makes me think it isnt that. And the emails are coming from 3rd party services, sao shouldnt fall under that allow rule, though happy to check logs if there is somewhere to look?

[Zegorax]

@willbrowningme The emails are sent from external servers