Thanks mouss. I removed $mynetworks from relay_domains and added the
domains found in the transport map to relay_domains (while also keeping
them in the transport map). Relaying to those specific domains now works.
However, MX'd machines still suffer "relay access denied." I introduced
"relay_recipient_maps =" (both empty and with a file spec) to main.cf
and with the file specified, tried adding each of the following as an
entry to /etc/postfix/relay_recipients:
@whoi.edu x
@mxd-host.whoi.edu x
e...@mxd-host.whoi.edu x
None of those entry attempts had an effect on the relay problem. In
fact, the mere introduction of relay_recipient_maps re-broke the
just-fixed relaying. What config parameters and possible values should
I be looking at to try and resolve MX relay failures? It isn't an
option for me to specifically list all the MX hosts as there are
hundreds and that list is not always static. I'm certain Postfix must
be capable of performing MX lookups and directing the emails accordingly.
-Eric
mouss wrote:
Eric Cunningham a écrit :
Thanks Victor. Ok, so I:
- removed .$mydomain from $mydestination
- have set relay_domains = $mydestination, $mynetworks
do not do that. mydestination is for domains that should be delivered
locally. mynetworks have nothing to do with reception domains.
- have set parent_domain_matches_subdomains to it's default
- have added permit_mx_backup to smtpd_recipient_restrictions
- set permit_mx_backup_networks = $mynetworks
but I'm still unable to have email accepted for MX'ed hosts or those
hosts listed in my transport file due to "Relay access denied."
you must understand that transport_maps is for routing. this doesn't
make mail acceptable.
for postfix to accept mail for a domain (from anywhere), the domain
needs to be found in one (and only one of):
- mydestination (this is for mail delivered to a unix account)
- relay_domains (this is for mail passed to another MTA)
- virtual_mailbox_domains (this is for mail delivered to a "virtual" user)
- virtual_alias_domains (this is for mail rewritten to another address
in another domain)
