meyer-jor...@t-online.de wrote:
Hi there!
Can someone give me a hint:
I've two postfix servers which both have two NICs, one with an official IP to
the internet, and one with a private IP to the internal LAN.
I want to permit SMTP from the outside via submission port with SMTP Auth. It runs like expected with the older 2.0.18 server (see master.cf snippet below) with internal and external clients. But
with the newer 2.3.8 server it only runs with external clients.
I get "554 5.7.1 <unknown[PRIVATE-IP]>: Client host rejected: Access denied; from=
[...]". (The client didn't reach SASL authentication state.)
I've to add "permit_mynetworks" as first item to smtpd_client_restrictions to send with internal clients. "permit_sasl_authenticated" should be enough, in my opinion - especially because it runs for
external internet clients which are not member of $mynetworks.
Where's my mistake?
Your error report is inconsistent with how postfix works,
which usually means the actual configuration isn't what you
think it is.
Please post "postconf -n" output, master.cf contents, and log
entries from the non-working system. It's best if you post
unaltered entries, if you must alter entries, do so coherently.
-- Noel Jones