Hi Noel!

> Your error report is inconsistent with how postfix works, 
> which usually means the actual configuration isn't what you 
> think it is.
> 
> Please post "postconf -n" output, master.cf contents, and log 
> entries from the non-working system.  It's best if you post 
> unaltered entries, if you must alter entries, do so coherently.

Thank you for your answer!

You are right with your demands, of course!

Nevertheless it seems to be too costly to analyze a complete configuration for 
this limited problem, I think. - I would be happy about a hint where I should 
have to look for - please don't bother for 
a complete solution.


So I'll try to explain more easy:

official-IP --- postfix-server --- internal-IP (internal subnet) --- router --- 
other-internal-IP (other internal subnet)
                                                         |___ client with 
trouble                                           |____ client without trouble

I want to send mail via submission port with SMTP Auth (with SASL backend) only.

I've to add "permit_mynetworks" into master.cf at submission entry or to remove 
my internal private subnet (192.168.1.0/24) from $mynetworks in main.cf to 
avoid "554 5.7.1 <unknown[192.168.1.101]>: 
Client host rejected: Access denied; from= [...]" while sending attempts from 
internal subnet clients.

Sending from external clients and further internal subnets (which aren't 
directly connected to the internal NIC and not in $mynetworks) runs without 
problems.

------------------------------------------------------------------------------------
Postfix 2.3.8
With this submission smtpd_client_restrictions entry I'm not able to send mails 
to postfix from internal subnet clients (subnet which is directly connected to 
the internal postfix server NIC) - with 
Postfix 2.0.18 it worked:

master.cf
[...]
submission inet n - - - - smtpd
  [...]
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  [...]
-------------------------------------------------------------------------------------


Thanks,
   Hasso

Reply via email to