Hi all,
I have been looking for a solution to this in the forums, lists, etc but
unfortunately I could not find an answer... I also know that the subject has
been discussed several times so please bear with me...
The environment:
--
# rpm -q postfix
postfix-2.3.3-2.3.el5_6
--
The symptoms:
--
Feb 21 14:20:44 smtp2 postfix/smtpd[20600]: connect from unknown[1.2.3.4]
Feb 21 14:20:44 smtp2 postfix/smtpd[20600]: NOQUEUE: reject: RCPT from
unknown[1.2.3.4]: 554 5.7.1 <x...@domain1.tld>: Relay access denied;
from=<y...@domain2.tld> to=<x...@domain1.tld> proto=ESMTP helo=<mypc>
Feb 21 14:20:47 smtp2 postfix/smtpd[20600]: disconnect from unknown[1.2.3.4]
--
The IP range is allowed
--
# postmap -q 1.2.3 /etc/postfix/network_table
OK
--
The relevant main.cf parts:
--
inet_interfaces = all
mydestination = $myhostname, localhost.$mydomain, localhost
unknown_local_recipient_reject_code = 550
mynetworks_style = host
smtpd_helo_required = yes
disable_vrfy_command = yes
smtpd_helo_restrictions =
permit_mynetworks
smtpd_client_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unknown_recipient_domain,
check_client_access hash:/etc/postfix/client_access
permit_auth_destination
smtpd_sender_restrictions =
permit_mynetworks,
permit_auth_destination,
permit_sasl_authenticated,
permit_auth_destination,
reject_unknown_sender_domain,
permit
smtpd_recipient_restrictions =
permit_mynetworks,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_unknown_sender_domain,
reject_unauth_destination,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client sbl.spamhaus.org,
reject_rbl_client pbl.spamhaus.org
permit
smtpd_data_restrictions =
reject_unauth_pipelining,
permit
mynetworks = hash:/etc/postfix/network_table
relay_domains =
relayhost = [a.b.c.d]
smtpd_sasl_type = cyrus
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes
smtpd_sasl_path = smtpd
--
Am I overseeing the obvious? :-/ Please let me know if you need further infos
on this.
Thanks in advance!
Regards,
Martin
