I can send mail apparently anywhere via the command line or a local telnet
session, but my squirrelmail seems to have an issue that I cannot identify. I
would not come here for squirrelmail issues, I believe this is a postfix config
issue that I just cannot see. There seems to be some kind of clean open relay
vs. relay access denied issue? Not sure.
Error
Here is my mail.log session and I will insert a few notes in parens:
rolf@www:/etc/postfix$ echo "test from my domain" | mail -s "Hello world 1349"
rolf2...@gmail.com && sudo tail -f /var/log/mail.log
(per the above from the command line, here we see success)
Jan 18 13:38:23 eee imapd: LOGOUT, user=r...@grimdar.com, ip=[::1], headers=0,
body=2252, rcvd=148, sent=3260, time=0
Jan 18 13:38:29 eee imapd: Connection, ip=[::1]
Jan 18 13:38:29 eee imapd: LOGIN, user=r...@grimdar.com, ip=[::1],
port=[48706], protocol=IMAP
Jan 18 13:38:29 eee imapd: LOGOUT, user=r...@grimdar.com, ip=[::1], headers=0,
body=2252, rcvd=148, sent=3238, time=0
Jan 18 13:38:36 eee postfix/smtpd[16044]: connect from localhost[::1]
Jan 18 13:38:36 eee postfix/smtpd[16044]: NOQUEUE: reject: RCPT from
localhost[::1]: 554 5.7.1 <rolf2...@gmail.com>: Relay access denied;
from=<r...@grimdar.com> to=<rolf2...@gmail.com> proto=ESMTP
helo=<www.grimdar.com>
Jan 18 13:38:36 eee postfix/smtpd[16044]: lost connection after RCPT from
localhost[::1]
Jan 18 13:38:36 eee postfix/smtpd[16044]: disconnect from localhost[::1]
Jan 18 13:39:44 eee postfix/pickup[16000]: D3C75B00C73: uid=1000
from=<r...@grimdar.com>
Jan 18 13:39:44 eee postfix/cleanup[16009]: D3C75B00C73:
message-id=<20140118183944.d3c75b00...@www.grimdar.com>
Jan 18 13:39:46 eee postfix/qmgr[16001]: D3C75B00C73: from=<r...@grimdar.com>,
size=368, nrcpt=1 (queue active)
Jan 18 13:39:52 eee postfix/smtpd[16021]: 3EEE6B00A99:
client=localhost.localdomain[127.0.0.1]
Jan 18 13:39:52 eee postfix/cleanup[16009]: 3EEE6B00A99:
message-id=<20140118183944.d3c75b00...@www.grimdar.com>
Jan 18 13:39:52 eee postfix/qmgr[16001]: 3EEE6B00A99: from=<r...@grimdar.com>,
size=825, nrcpt=1 (queue active)
Jan 18 13:39:52 eee postfix/smtpd[16021]: disconnect from
localhost.localdomain[127.0.0.1]
Jan 18 13:39:52 eee amavis[16024]: (16024-02) Passed CLEAN {RelayedOpenRelay},
<r...@grimdar.com> -> <rolf2...@gmail.com>, Message-ID:
<20140118183944.d3c75b00...@www.grimdar.com>, mail_id: cPSxQdZ4ht6d, Hits:
-0.001, size: 368, queued_as: 3EEE6B00A99, 6217 ms
Jan 18 13:39:52 eee postfix/smtp[16016]: D3C75B00C73: to=<rolf2...@gmail.com>,
relay=127.0.0.1[127.0.0.1]:10024, delay=7.8, delays=1.6/0/0.01/6.2, dsn=2.0.0,
status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued
as 3EEE6B00A99)
Jan 18 13:39:52 eee postfix/qmgr[16001]: D3C75B00C73: removed
Jan 18 13:39:53 eee postfix/smtp[16080]: 3EEE6B00A99: to=<rolf2...@gmail.com>,
relay=smtp.att.yahoo.com[98.139.221.42]:587, delay=1.2,
delays=0.09/0.07/0.8/0.27, dsn=2.0.0, status=sent (250 OK , completed)
Jan 18 13:39:53 eee postfix/qmgr[16001]: 3EEE6B00A99: removed
(now I have logged in at rolf2...@gmail.com and replied to the above message.
so far all is well)
Jan 18 13:40:29 eee postfix/smtpd[16081]: connect from
mail-lb0-f178.google.com[209.85.217.178]
Jan 18 13:40:31 eee postfix/smtpd[16081]: 25C65B00A99:
client=mail-lb0-f178.google.com[209.85.217.178]
Jan 18 13:40:31 eee postfix/cleanup[16009]: 25C65B00A99:
message-id=<CAAX=n-tlpokfm-guy8ulooaje4akm3aadjjyvepjrte1num...@mail.gmail.com>
Jan 18 13:40:31 eee postfix/qmgr[16001]: 25C65B00A99:
from=<rolf2...@gmail.com>, size=2355, nrcpt=1 (queue active)
Jan 18 13:40:32 eee postfix/smtpd[16081]: disconnect from
mail-lb0-f178.google.com[209.85.217.178]
Jan 18 13:40:48 eee imapd: Connection, ip=[::1]
Jan 18 13:40:48 eee imapd: LOGIN, user=r...@grimdar.com, ip=[::1],
port=[48724], protocol=IMAP
Jan 18 13:40:48 eee postfix/smtpd[16052]: 6AB3BB00C73:
client=localhost.localdomain[127.0.0.1]
Jan 18 13:40:48 eee postfix/cleanup[16009]: 6AB3BB00C73:
message-id=<CAAX=n-tlpokfm-guy8ulooaje4akm3aadjjyvepjrte1num...@mail.gmail.com>
Jan 18 13:40:48 eee imapd: LOGOUT, user=r...@grimdar.com, ip=[::1],
headers=1750, body=0, rcvd=307, sent=4864, time=0
Jan 18 13:40:48 eee postfix/qmgr[16001]: 6AB3BB00C73:
from=<rolf2...@gmail.com>, size=2800, nrcpt=1 (queue active)
Jan 18 13:40:48 eee postfix/smtpd[16052]: disconnect from
localhost.localdomain[127.0.0.1]
Jan 18 13:40:48 eee amavis[16032]: (16032-02) Passed CLEAN {RelayedInbound},
[209.85.217.178]:36402 [209.85.217.178] <rolf2...@gmail.com> ->
<r...@grimdar.com>, Queue-ID: 25C65B00A99, Message-ID:
<CAAX=n-tlpokfm-guy8ulooaje4akm3aadjjyvepjrte1num...@mail.gmail.com>, mail_id:
nn1B9YAvftjj, Hits: -0.099, size: 2354, queued_as: 6AB3BB00C73, 16714 ms
Jan 18 13:40:48 eee postfix/smtp[16016]: 25C65B00A99: to=<r...@grimdar.com>,
relay=127.0.0.1[127.0.0.1]:10024, delay=18, delays=0.86/0/0.01/17, dsn=2.0.0,
status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued
as 6AB3BB00C73)
Jan 18 13:40:48 eee postfix/qmgr[16001]: 25C65B00A99: removed
Jan 18 13:40:48 eee postfix/virtual[16088]: 6AB3BB00C73: to=<r...@grimdar.com>,
relay=virtual, delay=0.21, delays=0.09/0.03/0/0.09, dsn=2.0.0, status=sent
(delivered to maildir)
Jan 18 13:40:48 eee postfix/qmgr[16001]: 6AB3BB00C73: removed
Jan 18 13:41:02 eee imapd: Connection, ip=[::1]
Jan 18 13:41:02 eee imapd: LOGIN, user=r...@grimdar.com, ip=[::1],
port=[48726], protocol=IMAP
Jan 18 13:41:02 eee imapd: LOGOUT, user=r...@grimdar.com, ip=[::1],
headers=1960, body=0, rcvd=310, sent=5297, time=0
(now i have gone into squirrelmail to reply to the above...note the 554 5.7.1
error)
Jan 18 13:41:09 eee imapd: Connection, ip=[::1]
Jan 18 13:41:09 eee imapd: LOGIN, user=r...@grimdar.com, ip=[::1],
port=[48727], protocol=IMAP
Jan 18 13:41:09 eee imapd: LOGOUT, user=r...@grimdar.com, ip=[::1], headers=0,
body=2252, rcvd=148, sent=3265, time=0
Jan 18 13:41:12 eee imapd: Connection, ip=[::1]
Jan 18 13:41:12 eee imapd: LOGIN, user=r...@grimdar.com, ip=[::1],
port=[48728], protocol=IMAP
Jan 18 13:41:12 eee imapd: LOGOUT, user=r...@grimdar.com, ip=[::1], headers=0,
body=2252, rcvd=148, sent=3242, time=0
Jan 18 13:41:23 eee postfix/smtpd[16081]: connect from localhost[::1]
Jan 18 13:41:23 eee postfix/smtpd[16081]: NOQUEUE: reject: RCPT from
localhost[::1]: 554 5.7.1 <rolf2...@gmail.com>: Relay access denied;
from=<r...@grimdar.com> to=<rolf2...@gmail.com> proto=ESMTP
helo=<www.grimdar.com>
Jan 18 13:41:23 eee postfix/smtpd[16081]: lost connection after RCPT from
localhost[::1]
Jan 18 13:41:23 eee postfix/smtpd[16081]: disconnect from localhost[::1]
====
Hostname info:
rolf@www:/etc/postfix$ hostname
grimdar.com
rolf@www:/etc/postfix$ hostname -f
www.grimdar.com
here is my postfinger dump, and below that the pertinent (i think) parts of
main.cf:
postfinger - postfix configuration on Sat Jan 18 13:48:29 EST 2014
version: 1.30
Warning: postfinger output may show private configuration information,
such as ip addresses and/or domain names which you do not want to show
to the public. If this is the case it is your responsibility to modify
the output to hide this private information. [Remove this warning with
the --nowarn option.]
--System Parameters--
mail_version = 2.9.6
hostname = grimdar.com
uname = Linux grimdar.com 3.2.0-4-686-pae #1 SMP Debian 3.2.51-1 i686 GNU/Linux
--Packaging information--
looks like this postfix comes from deb package: postfix-2.9.6-2
--main.cf non-default parameters--
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
content_filter = amavis:[127.0.0.1]:10024
html_directory = /usr/share/doc/postfix/html
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = www.grimdar.com, localhost, localhost.localdomain
myhostname = www.grimdar.com
mynetworks = 127.0.0.0/8, 192.168.1.80
myorigin = /etc/mailname
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps
$virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains
$relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps
$recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
receive_override_options = no_address_mappings
recipient_delimiter = +
relayhost = [smtp.att.yahoo.com]:587
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
smtp_sasl_auth_enable = yes
smtp_sasl_mechanism_filter = plain, login
smtp_sasl_password_maps = hash:/etc/postfix/sasl/passwd
smtp_sasl_security_options = noanonymous
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
virtual_alias_domains =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf,
mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_gid_maps = static:5000
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_uid_maps = static:5000
--master.cf--
smtp inet n - - - - smtpd
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop}
${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}
amavis unix - - - - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
127.0.0.1:10025 inet n - - - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o
receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-- end of postfinger output --
main.cf, if you want the whole thing I will post it:
myhostname = www.grimdar.com
mydomain = grimdar.com
#myhostname = localhost
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = www.grimdar.com, localhost, localhost.localdomain
#mydestination = localhost, localhost.localdomain
relayhost =
mynetworks = 127.0.0.0/8, 192.168.1.80
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
html_directory = /usr/share/doc/postfix/html
virtual_alias_domains =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf,
mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination
transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps
$virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains
$relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps
$recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings
#added for sending mail via att. 18-jan-2014
relayhost = [smtp.att.yahoo.com]:587
smtp_sasl_auth_enable = yes
smtp_tls_security_level = may
smtp_sasl_mechanism_filter = plain, login
smtp_sasl_security_options = noanonymous
smtp_sasl_password_maps = hash:/etc/postfix/sasl/passwd
-eom-
