We have a host with a catchall address on a subdomain: @sub.domain.tld => firstname.lastname@example.org.
In addition, there are aliases routing mail to different mailboxes, e.g. email@example.com => firstname.lastname@example.org and email@example.com => firstname.lastname@example.org. Some aliases have multiple recipients.
The email@example.com has the ability to edit aliases at @sub.domain.tld but cannot edit global filter maps.
Now comes the catch: the aliases change from time to time and need to be rejected (not nulled but 554′d) once they’ve fulfilled their purpose.
The easiest would be to remove the aliases and add the addresses to global_rcpt_blacklist.map in global filters (works and tested) but this is inconvenient since it requires admin interference with access to global filters.
We then thought to create a specific reject address firstname.lastname@example.org in global filters map and subsequently add aliases that need to be decommissioned as e g. email@example.com => firstname.lastname@example.org. This however gets routed to the catchall for sub.domain.tld since global mail filter global_rcpt_blacklist.map is bypassed by the still existing and therefore valid alias.
So I guess the question is: does anyone have an idea how can we reject an existing alias address without removing the catchall and recurring to global filters?
System: running mailcow-dockerized 2022-09a