On Sat, Nov 20, 2010 at 06:49:52PM +0100, Ben wrote:
>>> I have a problem of relay access denied with postfix to deliver a mail
>>> to one domain (only one, all other domains are ok). I ran smtpd in
>>
>> Does the domain name match mydestination? If yes, show evidence.
>>
>> Does the domain name match virtual_alias_domains? If yes, show evidence.
>>
>> Does the domain name match virtual_mailbox_domains? If yes, show evidence.
>>
>> Does the domain name match relay_domains? If yes, show evidence.
>>
>> Wietse
>>
> Thank you for your reply. How can I show you evidence ? I've attached a log
> extract showing the process.
This is all covered in BASIC_CONFIGURATION_README.
http://www.postfix.org/BASIC_CONFIGURATION_README.html
The overly verbose logs are pointless. Mail is correctly rejected when
all of the below are true.
- The client IP address is not listed in $mynetworks. Hosts/subnets on
networks you manage, and you want to allow to send outbound email,
shuld be listed in $mynetworks.
- The SMTP client did not authenticate, or you did not add
permit_sasl_authenticated near permit_mynetworks at the top of
smtpd_recipient_restrictions.
- The recipient domain is not configured as a final or relay domain
on your system.
See http://www.postfix.org/ADDRESS_CLASS_README.html
See http://www.postfix.org/SMTPD_ACCESS_README.html
To show evidence of the last, you post the output of
postconf mydestination relay_domains \
virtual_alias_domains virtual_mailbox_domains
*AND* show output of "postmap -q key table" commands for the domain
in question and the relevant table.
As for "virtual_maps", the parameter is obsolete, but if you happen
to define it in main.cf, it is still used as a backwards-compatible
default for both $virtual_alias_maps and $virtual_alias_domains. You
are encouraged to set these explicitly and avoid the obsolete default.
With any problem report, post complete log entries, with only address
local-parts modified for privacy.
http://www.postfix.org/DEBUG_README.html
--
Viktor.
