hi. since some days I'm having problems receiving from gmail. What I see in
logs is:
Dec 1 14:12:53 posta postfix/smtpd[29874]: connect from
mail-wm0-f42.google.com[74.125.82.42]
Dec 1 14:12:53 posta postfix/smtpd[29874]: setting up TLS connection from
mail-wm0-f42.google.com[74.125.82.42]
Dec 1 14:12:53 posta postfix/smtpd[29874]: Anonymous TLS connection
established from mail-wm0-f42.google.com[74.125.82.42]: TLSv1 with cipher
RC4-SHA (128/128 bits)
Dec 1 14:12:54 posta postfix/smtpd[29874]: NOQUEUE: reject: RCPT from
mail-wm0-f42.google.com[74.125.82.42]: 450 4.7.1 <b...@domain.it>: Recipient
address rejected: Access denied; from=<i...@gmail.com> to=<b...@domain.it>
proto=ESMTP helo=<mail-wm0-f42.google.com>
Dec 1 14:12:54 posta postfix/smtpd[29874]: disconnect from
mail-wm0-f42.google.com[74.125.82.42]
this is a Zimbra7 server running postfix postfix-2.7.10. I have enabled
greylisting, but it's that causing the issue because I clearly see those reject
are different. And in fact I first receive a connection which gets greylisted,
then the second one is rejected with that message.
What I cannot understand is this "Access denied", I don't get what is causing
postfix to reject the connection.
I can normally receive mails from other mailservers (like my own zimbra, and
hotmail/outlook), even TLS based if can matter.
I don't understand what's going on here, any direction would be appreciated.
thanks
relevant config snippet from main.cf:
smtpd_recipient_restrictions = check_policy_service inet:127.0.0.1:10031,
reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks,
reject_unauth_destination, reject_unlisted_recipient, permit
smtpd_reject_unlisted_recipient = no
master.cf:
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - n - - smtpd
465 inet n - n - - smtpd
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
submission inet n - n - - smtpd
-o smtpd_etrn_restrictions=reject
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o smtpd_tls_security_level=may
--
Lorenzo Milesi - lorenzo.mil...@yetopen.it
YetOpen S.r.l. - http://www.yetopen.it/
