Mike Robinson a écrit :
> Hi Magnus,
> 
> Thanks for replying. 
> 
>> If that is the case, why isn't mydestination empty? You have emptied
>> local_recipient_maps, but this means that all addresses are accepted
>> (and then possibly bounced, which is bad).
>>
> 
> Because I was getting messages in the logs like this, and 
> /var/spool/clientmqueue/ was filling up, even though I have an alias to a 
> real 
> email address set up for emails to root:
> 
> to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, 
> pri=30372, relay=[127.0.0.1] [127.0.0.1], dsn=4.1.1, stat=Deferred: 450 4.1.1 
> <r...@server.domain>: Recipient address rejected: undeliverable address: mail 
> for server.domain loops back to myself
> 

maybe be because you forgot to put that domain under relay_domains.

>> Just make sure 127.0.0.1/32 (or 127.0.0.0/8) is listed in mynetworks.
> 
> I had tried that, and it doesn't work. If there is no server defined in 
> /etc/postfix/transport for the recipient's domain, it won't relay:
> 
> Jun  7 06:35:04 servername postgrey[2392]: action=pass, reason=client AWL, 
> client_name=localhost.localdomain, client_address=127.0.0.1, 
> sender=ad...@server.domain, recipient=exter...@email.address 
> Jun  7 06:35:04 servername postfix/smtp[28011]: 1F9033BE46: 
> to=<exter...@email.address>, relay=external.relay.server[xxx.xxx.xxx.xxx]:25, 
> delay=0.3, delays=0.01/0.01/0.16/0.12, dsn=2.0.0, status=deliverable (250 
> <exter...@email.address> ok)
> Jun  7 06:35:07 spam1 postfix/smtpd[28007]: NOQUEUE: reject: RCPT from 
> localhost.localdomain[127.0.0.1]: 554 5.7.1 <exter...@email.address>: Relay 
> access denied; from=<ad...@server.domain> to=<exter...@email.address> 
> proto=ESMTP helo=<server.domain>
> 
> Here's postconf -n:
> 
> [snip]
> relay_domains = $transport_maps

oh no. do not "reuse" maps.

> sample_directory = /usr/share/doc/postfix-2.3.3/samples
> sendmail_path = /usr/sbin/sendmail
> setgid_group = postdrop
> smtpd_client_restrictions = check_client_access 
> hash:/etc/postfix/client_access, reject_rbl_client bl.spamcop.net, 
> reject_rbl_client dnsbl.njabl.org, reject_rbl_client cbl.abuseat.org
> smtpd_data_restrictions = reject_unauth_pipelining
> smtpd_helo_required = yes
> smtpd_helo_restrictions = check_helo_access hash:/etc/postfix/helo_access, 
> reject_invalid_hostname
> smtpd_recipient_restrictions = check_policy_service inet:127.0.0.1:60000, 
> reject_non_fqdn_recipient, reject_unverified_recipient, 
> reject_unknown_recipient_domain, reject_unauth_destination

you don't have permit_mynetworks here. and btw, the order of your checks
is dubious.

smtpd_recipient_restrictions =
        reject_non_fqdn_recipient
        reject_unknown_recipient_domain
        permit_mynetworks
        reject_unauth_destination
        reject_unverified_recipient
        check_policy_service inet:127.0.0.1:60000



> smtpd_sender_restrictions = check_sender_access 
> hash:/etc/postfix/sender_access, reject_non_fqdn_sender, 
> reject_unknown_sender_domain
> transport_maps = hash:/etc/postfix/transport
> virtual_alias_maps = hash:/etc/postfix/virtual
> 
> 

Reply via email to