Want more features on Pastebin? Sign Up, it's FREE!
Public Pastes
Guest

Untitled

By: a guest on Nov 6th, 2011  |  syntax: None  |  size: 7.68 KB  |  views: 18  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
This paste has a previous version, view the difference. Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. this server hosts os-velten.de, schueler.os-velten.de and extern.os-velten.de
  2. Sending mails from a mail client to these subdomains (using an account from this server, e.g. jon.doe@extern.os-velten.de) works fine, but sending a mail from a local account to e.g. jon@doe.com doesn't "relay access denied).
  3.  
  4. User is successfully authenticated against SMTPd (see verbose log file link at the end of this post)
  5.  
  6. Funny: I have zarafa installed, and sending from the web interface to a foreign account works fine ....
  7.  
  8.  
  9.  
  10. POSTCONF
  11. ---cut---
  12.  
  13. [root@www etc]# postconf -n
  14. bash: postconf: command not found
  15. [root@www etc]# /usr/sbin/postc
  16. postcat   postconf  
  17. [root@www etc]# /usr/sbin/postconf -n
  18. alias_database = hash:/etc/aliases
  19. alias_maps = hash:/etc/aliases
  20. broken_sasl_auth_clients = yes
  21. command_directory = /usr/sbin
  22. config_directory = /etc/postfix
  23. daemon_directory = /usr/libexec/postfix
  24. debug_peer_level = 2
  25. disable_vrfy_command = yes
  26. html_directory = no
  27. mailq_path = /usr/bin/mailq.postfix
  28. manpage_directory = /usr/share/man
  29. mydestination = $myhostname, localhost.$mydomain, localhost
  30. mydomain = os-velten.de
  31. myhostname = www.os-velten.de
  32. myorigin = $mydomain
  33. newaliases_path = /usr/bin/newaliases.postfix
  34. readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
  35. recipient_delimiter = +
  36. relay_domains = $mydestination
  37. sample_directory = /usr/share/doc/postfix-2.3.3/samples
  38. sendmail_path = /usr/sbin/sendmail.postfix
  39. setgid_group = postdrop
  40. smtp_tls_loglevel = 1
  41. smtp_use_tls = yes
  42. smtpd_banner = $myhostname ESMTP $mail_name
  43. smtpd_sasl_auth_enable = yes
  44. smtpd_tls_CAfile = /etc/pki/postfix/certs/CAcert.pem
  45. smtpd_tls_cert_file = /etc/pki/postfix/certs/cert.pem
  46. smtpd_tls_key_file = /etc/pki/postfix/private/key.pem
  47. smtpd_tls_received_header = yes
  48. smtpd_use_tls = yes
  49. unknown_local_recipient_reject_code = 550
  50. virtual_alias_maps = ldap:/etc/postfix/ldapdistlist.cf
  51. virtual_mailbox_domains = os-velten.de, schueler.os-velten.de, extern.os-velten.de
  52. virtual_mailbox_maps = ldap:/etc/postfix/ldapvirtual.cf
  53. virtual_transport = lmtp:127.0.0.1:2003
  54. [root@www etc]#
  55. ---cut---
  56.  
  57.  
  58.  
  59. MASTER.CF
  60. ---cut---
  61. [root@www etc]# cat postfix/master.cf
  62. #
  63. # Postfix master process configuration file.  For details on the format
  64. # of the file, see the master(5) manual page (command: "man 5 master").
  65. #
  66. # ==========================================================================
  67. # service type  private unpriv  chroot  wakeup  maxproc command + args
  68. #               (yes)   (yes)   (yes)   (never) (100)
  69. # ==========================================================================
  70. smtp      inet  n       -       n       -       -       smtpd
  71.         -o smtpd_proxy_filter=127.0.0.1:10024
  72.         -o content_filter=
  73.  
  74. 127.0.0.1:10025 inet    n       -       n       -       -       smtpd
  75.         -o content_filter=
  76.         -o smtpd_proxy_filter=
  77.         -o smtpd_authorized_xforward_hosts=127.0.0.0/8
  78.         -o smtpd_client_restrictions=
  79.         -o smtpd_helo_restrictions=
  80.         -o smtpd_sender_restrictions=
  81.         -o smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
  82.         -o smtpd_data_restrictions=
  83.         -o mynetworks=0.0.0.0/32,127.0.0.0/8,192.168.0.0/24
  84.         -o recesive_override_options=no_unknown_recipient_checks
  85.  
  86. pickup    fifo  n       -       n       60      1       pickup
  87.         -o content_filter=smtp:[127.0.0.1]:10024
  88.  
  89. #submission inet n       -       n       -       -       smtpd
  90. #  -o smtpd_enforce_tls=yes
  91. #  -o smtpd_sasl_auth_enable=yes
  92. #  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  93. smtps     inet  n       -       n       -       -       smtpd
  94.   -o smtpd_tls_wrappermode=yes
  95.   -o smtpd_sasl_auth_enable=yes
  96.   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  97.   -o smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
  98.   -o smtpd_help_required=yes
  99. #628      inet  n       -       n       -       -       qmqpd
  100. #pickup    fifo  n       -       n       60      1       pickup
  101. cleanup   unix  n       -       n       -       0       cleanup
  102. qmgr      fifo  n       -       n       300     1       qmgr
  103. #qmgr     fifo  n       -       n       300     1       oqmgr
  104. tlsmgr    unix  -       -       n       1000?   1       tlsmgr
  105. rewrite   unix  -       -       n       -       -       trivial-rewrite
  106. bounce    unix  -       -       n       -       0       bounce
  107. defer     unix  -       -       n       -       0       bounce
  108. trace     unix  -       -       n       -       0       bounce
  109. verify    unix  -       -       n       -       1       verify
  110. flush     unix  n       -       n       1000?   0       flush
  111. proxymap  unix  -       -       n       -       -       proxymap
  112. smtp      unix  -       -       n       -       -       smtp
  113. # When relaying mail as backup MX, disable fallback_relay to avoid MX loops
  114. relay     unix  -       -       n       -       -       smtp
  115.         -o fallback_relay=
  116. #       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
  117. showq     unix  n       -       n       -       -       showq
  118. error     unix  -       -       n       -       -       error
  119. discard   unix  -       -       n       -       -       discard
  120. local     unix  -       n       n       -       -       local
  121. virtual   unix  -       n       n       -       -       virtual
  122. lmtp      unix  -       -       n       -       -       lmtp
  123. anvil     unix  -       -       n       -       1       anvil
  124. scache    unix  -       -       n       -       1       scache
  125. #
  126. # ====================================================================
  127. # Interfaces to non-Postfix software. Be sure to examine the manual
  128. # pages of the non-Postfix software to find out what options it wants.
  129. #
  130. # Many of the following services use the Postfix pipe(8) delivery
  131. # agent.  See the pipe(8) man page for information about ${recipient}
  132. # and other message envelope options.
  133. # ====================================================================
  134. #
  135. # maildrop. See the Postfix MAILDROP_README file for details.
  136. # Also specify in main.cf: maildrop_destination_recipient_limit=1
  137. #
  138. maildrop  unix  -       n       n       -       -       pipe
  139.   flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
  140. #
  141. # The Cyrus deliver program has changed incompatibly, multiple times.
  142. #
  143. old-cyrus unix  -       n       n       -       -       pipe
  144.   flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
  145. # Cyrus 2.1.5 (Amos Gouaux)
  146. # Also specify in main.cf: cyrus_destination_recipient_limit=1
  147. cyrus     unix  -       n       n       -       -       pipe
  148.   user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
  149. #
  150. # See the Postfix UUCP_README file for configuration details.
  151. #
  152. uucp      unix  -       n       n       -       -       pipe
  153.   flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
  154. #
  155. # Other external delivery methods.
  156. #
  157. ifmail    unix  -       n       n       -       -       pipe
  158.   flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
  159. bsmtp     unix  -       n       n       -       -       pipe
  160.   flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
  161.  
  162. ---cut---
  163.  
  164.  
  165.  
  166. MAILLOG:
  167. ---cut---
  168.  
  169. Nov  6 17:22:44 www postfix/smtpd[15135]: connect from p5795B6D5.dip.t-dialin.net[87.149.182.213]
  170. Nov  6 17:22:44 www postfix/smtpd[15135]: NOQUEUE: reject: RCPT from p5795B6D5.dip.t-dialin.net[87.149.182.213]: 554 5.7.1 <andre@dieball.net>: Relay access denied; from=<andre.dieball@extern.os-velten.de> to=<andre@dieball.net> proto=ESMTP helo=<[192.168.100.102]>
  171. Nov  6 17:22:44 www postfix/smtpd[15135]: disconnect from p5795B6D5.dip.t-dialin.net[87.149.182.213]
  172. ---cut---
  173.  
  174.  
  175.  
  176. MAILLOG with verbose shows authentication: http://pastebin.com/W9YEMbn3
  177.  
  178.  
  179.  
clone this paste RAW Paste Data