As requested, here is our configuration. I added the helo restrictions
after seeing the relay problem, but it didn't help.
******* main.cf *******
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = no
# TLS parameters
smtpd_tls_loglevel = 1
##smtpd_tls_cert_file = /etc/ssl/certs/mailarchiva.com.crt
##smtpd_tls_key_file = /etc/ssl/private/mailarchiva.key
#smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem
##smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtpd_tls_cert_file = /root/certs/archiva.pem
smtpd_tls_key_file = /root/certs/mailarchiva.key
smtpd_tls_CAfile = /root/certs/rootcerts.pem
smtpd_tls_mandatory_protocols = SSLv3, TLSv1
smtpd_tls_mandatory_ciphers = medium, high
smtpd_recipient_restrictions =
permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = no
smtpd_use_tls=no
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
myhostname = serve.stimulussoft.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = $mydomain, $myhostname, serve.mailarchiva.com,
serve.stimulussoft.com, localhost.stimulussoft.com, localhost,
mailarchiva.com
relaydomain = $mydomain
relayhost =
#mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_command =
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
home_mailbox = Maildir/
#disable_dns_lookups = yes
smtp_tls_security_level = may
smtpd_tls_security_level = may
smtp_tls_note_starttls_offer = yes
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
header_checks = pcre:/etc/postfix/header_checks
#content_filter = scan:127.0.0.1:10025
#receive_override_options = no_address_mappings
smtpd_tls_req_ccert = no
smtp_tls_req_ccert = no
virtual_alias_domains = hash:/etc/postfix/mydomains
virtual_alias_maps = hash:/etc/postfix/virtual
content_filter = smtp-amavis:[127.0.0.1]:10024
#transport_maps = hash:/etc/postfix/transport
smtp_host_lookup = dns, native
#milter_default_action = tempfail
#smtpd_milters = inet:127.0.0.1:8092
smtpd_helo_required = yes
smtpd_helo_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_invalid_hostname
reject_non_fqdn_hostname
****** master.cf ********
#
# Postfix master process configuration file. For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - y - - smtpd
# 26 inet n - y - - smtpd
#submission inet n - - - - smtpd
# -o smtpd_tls_security_level=encrypt
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
#smtps inet n - - - - smtpd
# -o smtpd_tls_wrappermode=yes
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
# -o milter_macro_daemon_name=ORIGINATING
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
-o content_filter=
-o receive_override_options=no_header_body_checks
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - - 300 1 oqmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - - - - smtp
-o smtp_fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
($recipient)
#
# Other external delivery methods.
#
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender
$recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}
smtp-amavis unix - - - - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
-o max_use=20
127.0.0.1:10025 inet n - - - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_delay_reject=no
-o smtpd_client_restrictions=permit_mynetworks,reject
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o smtpd_data_restrictions=reject_unauth_pipelining
-o smtpd_end_of_data_restrictions=
-o mynetworks=127.0.0.0/8
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o smtpd_client_connection_count_limit=0
-o smtpd_client_connection_rate_limit=0
-o
receive_override_options=no_header_body_checks,no_unknown_recipient_checks
***** mail.log *****
Feb 23 07:25:15 serve postfix/smtpd[29014]: connect from
localhost.localdomain[127.0.0.1]
Feb 23 07:25:15 serve postfix/smtp[27570]: 3A79711415:
to=<ammy.kaus...@indiatimes.com>,
relay=rsmtp.indiatimes.com[223.165.24.41]:25, delay=409,
delays=103/2.3/303/0, dsn=4.4.2, status=deferred (conversation with
rsmtp.indiatimes.com[223.165.24.41] timed out while receiving the
initial server greeting)
Feb 23 07:25:15 serve postfix/smtp[25515]: 6733C10ECE:
to=<ajaykalv...@yahoo.co.in>,
relay=mx-apac.mail.gm0.yahoodns.net[106.10.166.54]:25, delay=2490,
delays=2487/1.3/1.1/0, dsn=4.7.0, status=deferred (host
mx-apac.mail.gm0.yahoodns.net[106.10.166.54] refused to talk to me: 421
4.7.0 [TS01] Messages from 71.6.200.51 temporarily deferred due to user
complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)
Feb 23 07:25:15 serve postfix/error[27873]: warning: DC83411407: defer
service failure
Feb 23 07:25:15 serve postfix/error[27873]: DC83411407:
to=<amitvpa...@yahoo.com>, relay=none, delay=445, delays=0.27/109/0/336,
dsn=4.7.0, status=deferred (delivery temporarily suspended: host
mta5.am0.yahoodns.net[66.94.237.139] refused to talk to me: 421 4.7.0
[TS01] Messages from 71.6.200.51 temporarily deferred due to user
complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)
Feb 23 07:25:15 serve postfix/error[28393]: warning: 38387113B5: defer
service failure
Feb 23 07:25:15 serve postfix/error[28393]: 38387113B5:
to=<amitsingh05...@yahoo.co.in>, relay=none, delay=448,
delays=1.1/357/0/91, dsn=4.7.0, status=deferred (delivery temporarily
suspended: host mx-apac.mail.gm0.yahoodns.net[106.10.166.52] refused to
talk to me: 421 4.7.0 [TS01] Messages from 71.6.200.51 temporarily
deferred due to user complaints - 4.16.55.1; see
http://postmaster.yahoo.com/421-ts01.html)
Feb 23 07:25:15 serve postfix/smtpd[28048]: connect from
50-193-39-214-static.hfc.comcastbusiness.net[50.193.39.214]
Feb 23 07:25:15 serve postfix/error[28025]: 3F7EA11051:
to=<amoghindar...@yahoo.co.in>, relay=none, delay=266,
delays=0.64/248/0/17, dsn=4.7.0, status=deferred (delivery temporarily
suspended: host mx-apac.mail.gm0.yahoodns.net[106.10.166.52] refused to
talk to me: 421 4.7.0 [TS01] Messages from 71.6.200.51 temporarily
deferred due to user complaints - 4.16.55.1; see
http://postmaster.yahoo.com/421-ts01.html)
Feb 23 07:25:15 serve postfix/smtp[27542]: 4978F11421:
to=<amol.kolhe1...@gmail.com>,
relay=gmail-smtp-in.l.google.com[173.194.79.27]:25, delay=267,
delays=0.62/249/3.2/14, dsn=2.0.0, status=sent (250 2.0.0 OK 1361632147
ns4si6000531pbc.80 - gsmtp)
Feb 23 07:25:15 serve postfix/smtpd[28050]: connect from
50-193-39-214-static.hfc.comcastbusiness.net[50.193.39.214]
Feb 23 07:25:15 serve amavis[28126]: (28126-01-11) (!)FWD via SMTP:
<quickloansguarr...@careceo.com> ->
<amol000w...@gmail.com>,<amol100...@gmail.com>,<amol11.phap...@gmail.com>,<amol1...@gmail.com>,<amol_shilim...@hotmail.com>,<amol_waghm...@hotmail.com>,<amol_uttar...@indiatimes.com>,<amol_suryawanshi3...@rediff.com>,<amol0...@rediffmail.com>,<amol0...@rediffmail.com>,<amol_puranik2...@rediffmail.com>,<amol_ratho...@rediffmail.com>,<amol_r...@rediffmail.com>,<amol_sa...@rediffmail.com>,<amol_sa...@rediffmail.com>,<amol_sawa...@rediffmail.com>,<amol_s...@rediffmail.com>,<amol_so...@rediffmail.com>,<amol_tal...@rediffmail.com>,<amol_tay...@rediffmail.com>,<amol_ti...@rediffmail.com>,<amol_u...@rediffmail.com>,<amol_zam...@rediffmail.com>,<amol_vir...@times.com>,<amol0...@yahoo.co.in>,<amol_san...@yahoo.co.in>,<amol_sat...@yahoo.co.in>,<amol_sat...@yahoo.co.in>,<amol_...@yahoo.co.in>,<amol_sisod...@yahoo.co.in>,<amol_soni...@yahoo.co.in>,<amol_so...@yahoo.co.in>,<amol_ughade4...@yahoo.co.in>,<amol_wa...
Feb 23 07:25:15 serve amavis[28126]: (28126-01-11)
(!)...dikh...@yahoo.co.in>,<amol_y...@yahoo.co.in>,<amol_zulz...@yahoo.co.in>,<amol_puranik2...@yahoo.com>,<amol_ran...@yahoo.com>,<amol_rpa...@yahoo.com>,<amol_saga...@yahoo.com>,<amol_saman...@yahoo.com>,<amol_sawan...@yahoo.com>,<amol_somd...@yahoo.com>,<amol_sonu1...@yahoo.com>,<amol_...@yahoo.com>,<amol_sutar...@yahoo.com>,<amol_tibrew...@yahoo.com>,<amol_...@yahoo.com>,<amol_yeshw...@yahoo.com>,<amol_s...@ymail.com>,
451 4.5.0 From MTA([127.0.0.1]:10025) during fwd-connect (Negative
greeting: at (eval 84) line 442, <GEN29> line 642.): id=28126-01-11
Feb 23 07:25:15 serve postfix/error[28095]: F02E81139B:
to=<amitshirke1...@rediffmail.com>, relay=none, delay=450,
delays=0.97/366/0/83, dsn=4.4.2, status=deferred (delivery temporarily
suspended: lost connection with
mx.rediffmail.rediff.akadns.net[202.137.234.30] while sending RCPT TO)
Feb 23 07:25:15 serve postfix/error[27885]: A74281104C:
to=<aggarwalrajinder_2...@rediffmail.com>, relay=none, delay=3182,
delays=2716/384/0/83, dsn=4.4.2, status=deferred (delivery temporarily
suspended: lost connection with
mx.rediffmail.rediff.akadns.net[202.137.234.30] while sending RCPT TO)
Feb 23 07:25:15 serve postfix/smtp[27614]: 6D14A1130D:
to=<amar...@yahoo.co.in>,
relay=mx-apac.mail.gm0.yahoodns.net[106.10.166.54]:25, delay=502,
delays=500/0.76/1.1/0, dsn=4.7.0, status=deferred (host
mx-apac.mail.gm0.yahoodns.net[106.10.166.54] refused to talk to me: 421
4.7.0 [TS01] Messages from 71.6.200.51 temporarily deferred due to user
complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)
Feb 23 07:25:15 serve postfix/error[20811]: 8EA071116B:
to=<amitsharma....@rediffmail.com>, relay=none, delay=451,
delays=0.92/368/0/83, dsn=4.4.2, status=deferred (delivery temporarily
suspended: lost connection with
mx.rediffmail.rediff.akadns.net[202.137.234.30] while sending RCPT TO)
Feb 23 07:25:15 serve postfix/error[28095]: F02E81139B:
to=<amitshivap...@rediffmail.com>, relay=none, delay=451,
delays=0.97/366/0/84, dsn=4.4.2, status=deferred (delivery temporarily
suspended: lost connection with
mx.rediffmail.rediff.akadns.net[202.137.234.30] while sending RCPT TO)
Feb 23 07:25:15 serve postfix/error[20811]: 8EA071116B:
to=<amitsharm...@rediffmail.com>, relay=none, delay=452,
delays=0.92/368/0/84, dsn=4.4.2, status=deferred (delivery temporarily
suspended: lost connection with
mx.rediffmail.rediff.akadns.net[202.137.234.30] while sending RCPT TO)
Feb 23 07:25:15 serve postfix/smtp[27614]: 6D14A1130D:
to=<amargs...@yahoo.co.in>,
relay=mx-apac.mail.gm0.yahoodns.net[106.10.166.54]:25, delay=502,
delays=500/0.76/1.1/0, dsn=4.7.0, status=deferred (host
mx-apac.mail.gm0.yahoodns.net[106.10.166.54] refused to talk to me: 421
4.7.0 [TS01] Messages from 71.6.200.51 temporarily deferred due to user
complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)
Feb 23 07:25:15 serve postfix/smtp[27678]: 60ADB11385:
to=<amisha...@yahoo.co.in>,
relay=mx-apac.mail.gm0.yahoodns.net[106.10.166.52]:25, delay=468,
delays=464/3.8/1.1/0, dsn=4.7.0, status=deferred (host
mx-apac.mail.gm0.yahoodns.net[106.10.166.52] refused to talk to me: 421
4.7.0 [TS01] Messages from 71.6.200.51 temporarily deferred due to user
complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html)