I have a problem..

My mail schema
(relay-server) <-> (mail-server) <-> (smtp-clients)

1) relay-server  processing mail traffic from Internet/mail-server and 
redirecting him to mail-server/Internet

2) mail-server take/give mail correspondence from/to smtp-client (with SASL)


Logs from relay server

Sep  2 11:44:50 relay postfix/smtpd[79298]: 45D75B9CF32: 
client=localhost[127.0.0.1]
Sep  2 11:44:50 relay postfix/cleanup[79534]: 45D75B9CF32: 
message-id=<[EMAIL PROTECTED]>
Sep  2 11:44:50 relay postfix/qmgr[78017]: 45D75B9CF32: 
from=<[EMAIL PROTECTED]>, size=2652, nrcpt=1 (queue active)
Sep  2 11:44:50 relay amavis[79358]: (79358-19) Passed SPAMMY, 
[123.212.114.97] [123.212.114.97] <[EMAIL PROTECTED]> -> 
<[EMAIL PROTECTED]>, Message-ID: <[EMAIL PROTECTED]>, 
mail_id: D9tIMrKt25pl, Hits: 6.351, size: 1990, queued_as: 45D75B9CF32, 4160 
ms
Sep  2 11:44:50 relay postfix/smtp[79727]: 2288CB9CDB4: to=<[EMAIL PROTECTED]>, 
relay=127.0.0.1[127.0.0.1]:10024, delay=5.2, delays=1/0/0/4.2, dsn=2.0.0, 
status=sent (250 2.0.0 Ok, id=79358-19, from MTA([127.0.0.1]:10025): 250 
2.0.0 Ok: queued as 45D75B9CF32)
Sep  2 11:44:50 relay postfix/smtp[79689]: 45D75B9CF32: to=<[EMAIL PROTECTED]>, 
relay=mail.sard.ru[8.25.25.25]:25, delay=0.06, delays=0.04/0/0.01/0.01, 
dsn=4.3.0, status=deferred (host mail.sard.ru[8.25.25.25] said: 451 4.3.0 
<[EMAIL PROTECTED]>: Temporary lookup failure (in reply to MAIL FROM 
command))

Logs from mail server

Sep  2 11:44:52 mail postfix/smtpd[17607]: connect from 
relay.sard.ru[8.25.25.24]
Sep  2 11:44:52 mail postfix/trivial-rewrite[17578]: warning: transport_maps 
lookup failure
Sep  2 11:44:52 mail postfix/smtpd[17607]: NOQUEUE: reject: MAIL from 
relay.sard.ru[8.25.25.24]: 451 4.3.0 <[EMAIL PROTECTED]>: Temporary 
lookup failure; from=<[EMAIL PROTECTED]> proto=ESMTP 
helo=<relay.sard.ru>
Sep  2 11:44:52 mail postfix/smtpd[17607]: too many errors after DATA (0 
bytes) from relay.sard.ru[8.25.25.24]
Sep  2 11:44:52 mail postfix/smtpd[17607]: disconnect from 
relay.sard.ru[8.25.25.24]


postconf -n from relay-server

address_verify_map = btree:/var/db/postfix/verified_sender
address_verify_positive_expire_time = 31d
address_verify_positive_refresh_time = 15d
address_verify_sender = <>
alias_database = hash:/etc/mail/aliases
alias_maps = hash:/etc/mail/aliases
bounce_queue_lifetime = 1d
command_directory = /usr/local/sbin
config_directory = /usr/local/etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/local/libexec/postfix
data_directory = /var/db/postfix
default_destination_recipient_limit = 10
default_privs = nobody
disable_vrfy_command = yes
html_directory = no
inet_interfaces = all
local_recipient_maps = $virtual_alias_maps, $alias_maps
mail_owner = postfix
mailq_path = /usr/local/bin/mailq
manpage_directory = /usr/local/man
maximal_backoff_time = 7200s
maximal_queue_lifetime = 2d
message_size_limit = 10240000
minimal_backoff_time = 1200s
mydestination = $mydomain
mydomain = sard.ru
myhostname = relay.sard.ru
mynetworks = 127.0.0.0/8, 8.25.25.25/32
myorigin = $mydomain
newaliases_path = /usr/local/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
relay_domains = $mydestination
sample_directory = /usr/local/etc/postfix
sendmail_path = /usr/local/sbin/sendmail
setgid_group = maildrop
show_user_unknown_table_name = no
smtp_always_send_ehlo = yes
smtp_helo_timeout = 30s
smtp_mail_timeout = 60s
smtp_rcpt_timeout = 90s
smtpd_banner = $myhostname ESMTP Postfix Rocks!
smtpd_client_restrictions = permit_mynetworks,        check_client_access 
regexp:$base/client_access,        reject_rbl_client bl.spamcop.net,        
reject_rbl_client xbl.spamhaus.org,        reject_rbl_client 
psbl.surriel.com,        reject_rbl_client combined.njabl.org,        
reject_rbl_client dnsbl.dronebl.org,        reject_rbl_client dul.ru,        
permit
smtpd_data_restrictions = check_client_access hash:$base/for-postfixadmin       
 
reject_unauth_pipelining,        reject_non_fqdn_sender,        
reject_non_fqdn_recipient,        reject_unknown_recipient_domain,        
reject_unknown_sender_domain,        reject_multi_recipient_bounce,        
permit
smtpd_delay_reject = no
smtpd_etrn_restrictions = reject
smtpd_hard_error_limit = 3
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,        check_helo_access hash:
$base/helo_access,        reject_non_fqdn_helo_hostname,         permit
smtpd_recipient_restrictions = reject_unlisted_recipient,        
permit_mynetworks,        reject_unauth_destination,        
reject_unknown_recipient_domain,        reject_non_fqdn_recipient,        
permit
smtpd_reject_unlisted_sender = yes
smtpd_sender_login_maps = mysql:$base/maps/sender.conf
smtpd_sender_restrictions = permit_mynetworks,        
reject_unknown_sender_domain,        reject_unlisted_sender,        
reject_non_fqdn_sender,        reject_unverified_sender,        permit
smtpd_soft_error_limit = 5
smtpd_timeout = 120s
strict_rfc821_envelopes = yes
transport_maps = hash:$base/maps/transport
unknown_local_recipient_reject_code = 550
unverified_sender_reject_code = 550
virtual_alias_maps = mysql:$base/maps/alias.conf
virtual_gid_maps = static:2008
virtual_mailbox_limit_maps = mysql:$base/maps/quota.conf
virtual_mailbox_limit_override = yes
virtual_mailbox_maps = mysql:$base/maps/mailbox.conf
virtual_maildir_extended = yes
virtual_maildir_limit_message = "Sorry, the user's maildir has overdrawn his 
diskspace quota, please try again later or contact with Administrator"
virtual_minimum_uid = 1000
virtual_uid_maps = static:2008


postconf -n from mail-server

address_verify_map = btree:/var/db/postfix/verified_sender
address_verify_positive_expire_time = 31d
address_verify_positive_refresh_time = 15d
address_verify_sender = <>
alias_database = hash:/etc/mail/aliases
alias_maps = hash:/etc/mail/aliases
bounce_queue_lifetime = 1d
broken_sasl_auth_clients = yes
command_directory = /usr/local/sbin
config_directory = /usr/local/etc/postfix
daemon_directory = /usr/local/libexec/postfix
data_directory = /var/db/postfix
default_destination_recipient_limit = 10
default_privs = nobody
disable_vrfy_command = yes
html_directory = no
inet_interfaces = all
local_recipient_maps = $virtual_alias_maps, $alias_maps
mail_owner = postfix
mailq_path = /usr/local/bin/mailq
manpage_directory = /usr/local/man
maximal_backoff_time = 7200s
maximal_queue_lifetime = 2d
message_size_limit = 10240000
minimal_backoff_time = 1200s
mydestination = $mydomain
mydomain = sard.ru
myhostname = mail.sard.ru
mynetworks = 127.0.0.0/8
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/local/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
relay_domains = $mydestination
relayhost = [relay.sard.ru]
sample_directory = /usr/local/etc/postfix
sendmail_path = /usr/local/sbin/sendmail
setgid_group = maildrop
show_user_unknown_table_name = no
smtp_always_send_ehlo = yes
smtp_helo_timeout = 30s
smtp_mail_timeout = 60s
smtp_rcpt_timeout = 90s
smtp_tls_note_starttls_offer = yes
smtpd_banner = $myhostname ESMTP
smtpd_client_restrictions = permit_mynetworks,        
permit_sasl_authenticated,        check_client_access hash:$base/whitelistIP,   
     
check_client_access regexp:$base/client_access,        reject_rbl_client 
bl.spamcop.net,        reject_rbl_client xbl.spamhaus.org,        
reject_rbl_client psbl.surriel.com,        reject_rbl_client 
combined.njabl.org,        reject_rbl_client dnsbl.dronebl.org,        
reject_rbl_client dul.ru,        permit
smtpd_data_restrictions = check_client_access hash:$base/for-postfixadmin       
 
reject_unauth_pipelining,        reject_non_fqdn_sender,        
reject_non_fqdn_recipient,        reject_unknown_recipient_domain,        
reject_unknown_sender_domain,        reject_multi_recipient_bounce,        
permit
smtpd_delay_reject = no
smtpd_etrn_restrictions = reject
smtpd_hard_error_limit = 3
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,        check_helo_access hash:
$base/helo_access,        permit
smtpd_recipient_restrictions = reject_unlisted_recipient,         
permit_mynetworks,        permit_sasl_authenticated,        
reject_unauth_destination,        reject_unknown_recipient_domain,        
reject_non_fqdn_recipient,        permit
smtpd_reject_unlisted_sender = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous, noplaintext
smtpd_sasl_tls_security_options = noanonymous
smtpd_sender_login_maps = mysql:$base/maps/sender.conf
smtpd_sender_restrictions = permit_mynetworks,        
permit_sasl_authenticated,        reject_sender_login_mismatch,        
reject_unknown_sender_domain,        reject_unlisted_sender,        
reject_non_fqdn_sender,        reject_unverified_sender,        permit
smtpd_soft_error_limit = 5
smtpd_timeout = 120s
smtpd_tls_CAfile = $base/cacert.pem
smtpd_tls_cert_file = $base/mail-cert.pem
smtpd_tls_key_file = $base/mail-key.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = 
btree:/var/db/postfix/smtpd_tls_session_cache
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
transport_maps = mysql:$base/maps/transport.conf
unknown_local_recipient_reject_code = 550
unverified_sender_reject_code = 550
virtual_alias_maps = mysql:$base/maps/alias.conf
virtual_gid_maps = static:2008
virtual_mailbox_base = /var/spool/mail
virtual_mailbox_limit_maps = mysql:$base/maps/quota.conf
virtual_mailbox_limit_override = yes
virtual_mailbox_maps = mysql:$base/maps/mailbox.conf
virtual_maildir_extended = yes
virtual_maildir_limit_message = "Sorry, the user's maildir has overdrawn his 
diskspace quota, please try again later or contact with Administrator"
virtual_minimum_uid = 1000
virtual_uid_maps = static:2008
 
How I can fix this problem ?

Thanks a lot!

Reply via email to