Thanks for the clarifications. I've compiled virtual and progress is being made.
As we receive around 100 000 mails a day, I assume that doesn't fall into the category of "low volume", so I don't think reject_unverified_recipient would be suitable, nor is maintaining a list of valid e-mail addresses in postfix manually. So at this point I'll see to setup a method for queering AD, and I see the HOWTO section has a couple of articles which cover this. My only concern would be the risks in opening up communications to AD from the DMZ. Paul Cocker -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of mouss Sent: 06 October 2008 16:30 To: postfix-users@postfix.org Subject: {Spam?} Re: My first config - unable to telnet to port 25, virtual.db missing Paul Cocker a écrit : > I have a CentOS 5.2 machine running postfix 2.3.3 install via yum and > am setting up for the first time, having been a sendmail user previously. > > I have been configuring it based around 'Postfix email firewall/gateway' > setup in the postfix documentation as this machine will be acting as > the primary mail server for outgoing mail and the second MX entry for > incoming. > > The server has hosts.deny set to ALL:ALL but smtp in hosts.allow is > also set to ALL. > hosts.* are irrelevant. postfix doesn't use tcpwrappers. > [snip] > relay_domains = domain1.co.uk, domain2.co.uk, domain3.co.uk > As Brian said, list the relay users in relay_recipient_maps. otherwise use reject_unverified_recipient (with a check_recipient_access). > sample_directory = /usr/share/doc/postfix-2.3.3/samples > sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop > unknown_local_recipient_reject_code = 550 virtual_alias_maps = > hash:/etc/postfix/virtual > > I do /usr/sbin/postfix check, which results in no errors, followed by > /usr/sbin/postfix start. I can see master running in my process list. > > However, attempts to connect to port 25 on this machine from within > the > 100.243.0.0/22 network timeout with 'Connect failed' messages. > > My maillog is filled with the following: > > Oct 6 14:57:20 merlin postfix/postfix-script: starting the Postfix > mail system Oct 6 14:57:20 merlin postfix/master[13470]: daemon > started -- version 2.3.3, configuration /etc/postfix Oct 6 14:57:20 > merlin postfix/qmgr[13472]: CDF481F80062: > from=<[EMAIL PROTECTED]>, size=971, nrcpt=1 (queue active) ... > Oct 6 14:57:21 merlin postfix/trivial-rewrite[13474]: fatal: open > database /etc/postfix/virtual.db: No such file or directory > you forgot to "compile" the virtual map: # postmap hash:/etc/postfix/virtual Please read: http://www.postfix.org/DATABASE_README.html > Oct 6 14:57:21 merlin postfix/cleanup[13473]: fatal: open database > /etc/postfix/virtual.db: No such file or directory Oct 6 14:57:22 > merlin postfix/master[13470]: warning: process > /usr/libexec/postfix/cleanup pid 13473 exit status 1 Oct 6 14:57:22 > merlin postfix/master[13470]: warning: > /usr/libexec/postfix/cleanup: bad command startup -- throttling Oct 6 > 14:57:22 merlin postfix/master[13470]: warning: process > /usr/libexec/postfix/trivial-rewrite pid 13474 exit status 1 Oct 6 > 14:57:22 merlin postfix/master[13470]: warning: > /usr/libexec/postfix/trivial-rewrite: bad command startup -- > throttling ... > > Do I need to manually create virtual.db (and should I run a > set-permissions from postconf if I do?), or is that incidental to the > other errors? Are these errors the reason it won't accept connections > on port 25, or is there an error in the config above? > > Paul Cocker > > > > > TNT Post is the trading name for TNT Post UK Ltd (company number: 04417047), > TNT Post (Doordrop Media) Ltd (00613278), TNT Post Scotland Ltd (05695897), > TNT Post North Ltd (05701709), TNT Post South West Ltd (05983401), TNT Post > Midlands Limited (6458167)and TNT Post London Limited (6493826). Emma's Diary > and Lifecycle are trading names for Lifecycle Marketing (Mother and Baby) Ltd > (02556692). All companies are registered in England and Wales; registered > address: 1 Globeside Business Park, Fieldhouse Lane, Marlow, Buckinghamshire, > SL7 1HY. > > TNT Post is the trading name for TNT Post UK Ltd (company number: 04417047), TNT Post (Doordrop Media) Ltd (00613278), TNT Post Scotland Ltd (05695897), TNT Post North Ltd (05701709), TNT Post South West Ltd (05983401), TNT Post Midlands Limited (6458167)and TNT Post London Limited (6493826). Emma's Diary and Lifecycle are trading names for Lifecycle Marketing (Mother and Baby) Ltd (02556692). All companies are registered in England and Wales; registered address: 1 Globeside Business Park, Fieldhouse Lane, Marlow, Buckinghamshire, SL7 1HY.
