On 3/12/2012 11:10 AM, Charles Marcus wrote: > I hope someone here who has used Postini can suggest a way to > resolve this. > > One of my clients just switched from webroot's EMail SaaS (antispam > service) to Postini, and they do use postini (as they did webroot) > for outbound relaying/filtering. > > This change has broken mail forwarding via aliases for the accounts > that I had set up to forward all inbound mail to an outside account. > Aliases pointing to internal accounts continue to work as expected. > > It also broke the same thing with my sender_bcc maps when the > sender_bcc target is an external address... > > I get the following error in the logs (<u...@example.com> is a valid > user on our system): > > myhost : Mon Mar 12, 06:24:23 : ~ > # less /var/log/messages | grep C0F52760CFF > Mar 12 02:48:29 myhost postfix-25/smtpd[25932]: C0F52760CFF: > client=exprod6mx207.postini.com[64.18.1.107] > Mar 12 02:48:30 myhost postfix/cleanup[25937]: C0F52760CFF: > message-id=<1316900478.1331534907972.JavaMail.SYSTEM@sj-w-06cmp78> > Mar 12 02:48:30 myhost postfix/qmgr[20957]: C0F52760CFF: > from=<n...@external-example.com>, size=13599, nrcpt=2 (queue active) > Mar 12 02:48:30 myhost postfix/virtual[25940]: C0F52760CFF: > to=<u...@internal-example.com>, relay=virtual, delay=0.67, > delays=0.65/0.01/0/0.01, dsn=2.0.0, status=sent (delivered to maildir) > Mar 12 02:48:30 myhost postfix/smtp[25939]: C0F52760CFF: > to=<xyz.archived+user...@gmail.com>, > orig_to=<u...@internal-example.com>, > relay=outbounds6.obsmtp.com[64.18.5.12]:25, delay=1, > delays=0.65/0.01/0.27/0.07, dsn=5.0.0, status=bounced (host > outbounds6.obsmtp.com[64.18.5.12] said: 518 Sender not authorized > from this ip - psmtp (in reply to MAIL FROM command)) > Mar 12 02:48:30 myhost postfix/bounce[25942]: C0F52760CFF: sender > non-delivery notification: C12549589EE > Mar 12 02:48:30 myhost postfix/qmgr[20957]: C0F52760CFF: removed > myhost : Mon Mar 12, 06:25:09 : ~ > # > > I think that somehow postini is *interpreting* the aliased > *recipient* address as the *sender*, because this user has no > trouble sending messages directly/normally, and more importantly, > because of this text in the actual bounce that the sender got: > > <xyz.archived+user...@gmail.com> (expanded from > <u...@internal-example.com>): host outbounds6.obsmtp.com[64.18.5.12] > said: 518 Sender not authorized from this ip - psmtp (in reply to > MAIL FROM command) > > Note the 'expanded from...'
No, postini is saying n...@external-example.com -- the sender of the forwarded message -- is not allowed to send mail from your IP. > Has anyone ever dealt with postini using them for outbound > relay/filtering and aliases pointing to external addresses, or > otherwise have any insights how I might be able to fix this on my > end? Or is my only hope to do something on postini's side? Best to check with postini about how to handle this. To handle this in postfix you would need to rewrite the sender to something in your domain (aka. SRS), which is rather messy. -- Noel Jones
