Am 09.03.2012 17:23, schrieb Nick Edwards: > On 3/10/12, Reindl Harald <h.rei...@thelounge.net> wrote: >> >> >> Am 09.03.2012 16:01, schrieb Nick Edwards: >>> Hi, >>> >>> I gave a secondary mx with 2 ipv4 and 2 ipv6 ip's. >>> I have dns'd one of each protocol for mx and ns >>> Trying to get postfix to play nice with mx on outbound. hostname, >>> mynetworks etc all setup right. >>> I have tried smtp_bind_address(6) but for some reason, although it >>> uses the correct IP, the relays are denied for spf failure on the >>> main server, even though they are all permitted in spf RR, ok, evident >>> by fact that if I remove the option, it works again, I even downed >>> that IP on the box, and it relayed fine (yeah go figure) so, moved on >>> to inet_interfaces included 127.0.0.1 ipv4 and ipv6 addresses for mx, >>> but this uses the wrong ipv4 address when connecting >> >> as long you are not providing logs showing your >> problem and "postconf -n" output nobody can help you >> >> logs from both -> your relay machine and the main-server for >> one specific message > > logs are no good because it simply says rejected (ip) spf -all method. > > all other settings wont help either since the two new settings smtp > bind address and inet_interfaces are simply IP's given, as in my OP
logs are good because they show the connection IP! also you SPF-records are important do you have different SPF views (WAN/LAN) are the SPF records on all views sane? "smtp -o smtp_bind_address=xx" in main.cf works for sure __________________________ what type of entries are you using in your SPF record? i found out that a/mx entries sometimes making troubles and since we changed our backend to use only ip and let the backend translate servernames automatically whle generating the zone-files i never saw a single spf-error the last 2 years thelounge.net. 86400 IN SPF "v=spf1 ip4:91.118.73.15 ip4:91.118.73.20 ip4:91.118.73.17 ip4:91.118.73.6 ip4:91.118.73.32 ip4:91.118.73.38 ip4:91.118.73.30 ip4:91.118.73.1 ip4:89.207.144.27 -all" thelounge.net. 86400 IN TXT "v=spf1 ip4:91.118.73.15 ip4:91.118.73.20 ip4:91.118.73.17 ip4:91.118.73.6 ip4:91.118.73.32 ip4:91.118.73.38 ip4:91.118.73.30 ip4:91.118.73.1 ip4:89.207.144.27 -all"
signature.asc
Description: OpenPGP digital signature
