Hi all,
On a CentOS 6 box with postfix-2.6.6-2.1.el6_0 I'm trying to setup a
virtual_mailbox_domain that is fed into Zarafa (the Open Source Exchange
replacement). I can't seem to get past the helo_access and relay denied
errors. So clearly I am doing something wrong but the postfix book and
online docs have not been able to enlighten me. Could anyone please give
me a hint where I need to look?
Example helo_access error:
Sep 3 18:17:51 cronos postfix/smtpd[4962]: connect from localhost[::1]
Sep 3 18:17:51 cronos postfix/smtpd[4962]: NOQUEUE: reject: RCPT from
localhost[::1]: 554 5.7.1 <cronos.puzzled.xs4all.nl>: Helo command
rejected: You are not puzzled.xs4all.nl (helo_access);
from=<patr...@mailguard.nl> to=<patr...@gmail.com> proto=ESMTP
helo=<cronos.puzzled.xs4all.nl>
Sep 3 18:17:51 cronos postfix/smtpd[4962]: disconnect from localhost[::1]
Example relay_denied error:
Sep 3 17:53:11 cronos postfix/smtpd[4309]: connect from localhost[::1]
Sep 3 17:53:11 cronos postfix/smtpd[4309]: NOQUEUE: reject: RCPT from
localhost[::1]: 554 5.7.1 <patr...@gmail.com>: Relay access denied;
from=<patr...@mailguard.nl> to=<patr...@gmail.com> proto=ESMTP
helo=<cronos.puzzled.xs4all.nl>
Sep 3 17:53:11 cronos postfix/smtpd[4309]: disconnect from localhost[::1]
******************************************************
$ postconf -n
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
bounce_size_limit = 1024
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
disable_vrfy_command = yes
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 900000000
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = puzzled.xs4all.nl
myhostname = cronos.puzzled.xs4all.nl
mynetworks = 127.0.0.0/8, 10.0.0.0/24, 10.0.1.0/24
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases.postfix
proxy_interfaces = 83.163.53.136
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
sample_directory = /usr/share/doc/postfix-2.6.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
show_user_unknown_table_name = no
smtpd_client_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unknown_reverse_client_hostname,
check_client_access pcre:/etc/postfix/fqrdns.pcre
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unlisted_recipient,
reject_unauth_destination, reject_unknown_recipient_domain,
reject_non_fqdn_recipient, reject_rbl_client zen.spamhaus.org,
reject_rbl_client backscatter.spameatingmonkey.net, reject_rbl_client
bl.spameatingmonkey.net, reject_rhsbl_sender
fresh15.spameatingmonkey.net, reject_rhsbl_client
fresh15.spameatingmonkey.net, reject_rhsbl_sender
urired.spameatingmonkey.net, reject_rhsbl_client urired.spameatingmonkey.net
smtpd_sender_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unauth_destination,
reject_unknown_sender_domain, reject_non_fqdn_sender
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_local_recipient_reject_code = 550
unverified_recipient_reject_code = 550
unverified_sender_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_mailbox_domains = mailguard.nl
virtual_mailbox_maps = hash:/etc/postfix/vmailbox
virtual_transport = lmtp:127.0.0.1:2003
******************************************************
$ cat /etc/postfix/vmailbox
patr...@mailguard.nl whatever
******************************************************
$ cat /etc/postfix/virtual
<empty>
******************************************************
$ cat /etc/postfix/helo_access
puzzled.xs4all.nl REJECT You are not puzzled.xs4all.nl (helo_access)
83.163.53.136 REJECT You are not 83.163.53.136 (helo_access)
mailguard.nl REJECT You are not mailguard.nl (helo_access)
******************************************************
$ cat /etc/postfix/sender_access
puzzled.xs4all.nl REJECT You are not puzzled.xs4all.nl (sender_access)
83.163.53.136 REJECT You are not 83.163.53.136 (sender_access)
mailguard.nl REJECT You are not mailguard.nl (sender_access)
Thanks!
Patrick
