On Sun, 23 Feb 2014, Rony wrote:

I make postfix relay recipient via ldap and I want an exception email addresses can not look up but have not been successful, my configuration

server_host = 1.1.1.1.1 ldap_search_base = o = example, c = com bind = no query_filter = (| (mail =% s) (mailAlternateAddress =% s)) (! (mail = group@example.com))) result_attribute = mail

I want group@example.com can not look up, but have not been successful, how correct configuration?

For one thing, actually posting some logs/error messages/etc. would be helpful, there's no reason for mind reading if there's data available (and this looks like a situation where there would be.)

With that said, I'm pretty sure you've got an invalid filter, and if I'm interpreting your desires correctly it would be something closer to

(&(|(uid=richton)(cn=richton))(!(uid=root)))

Of course s/uid/mail. If you have any follow-ups please post some error messages and logs (ideally both from postfix and slapd; slapd should probably be at debug level "stats trace acl" or greater in this case.)