On Wed, Dec 02, 2015 at 12:28:33PM -0500, Bill Cole wrote:
> >Questions:
> >1. Why is this message getting a 450 message? Is the outlook mail server
> >speaking out of turn here?
> 
> Since you didn't bother providing 'postconf -n' output, which would provide
> useful clues, we are left with making random guesses...
> 
> My random guess: you're doing sender verification. Don't. It's broken in
> concept and especially broken operationally if you want to communicate with
> people using MS products.


Hi Bill,

Thanks for your reply.  Attached is my postconf -n output. The only 
smtpd_sender_restrictions we have in place are:

"reject_unknown_sender_domain"

thanks,
Bryan

-- 
Bryan K. Walton                                           319-337-3877 
Linux Systems Administrator                 Leepfrog Technologies, Inc 
address_verify_cache_cleanup_interval = 7d
address_verify_map = hash:$data_directory/verify_cache
address_verify_negative_expire_time = 7d
address_verify_negative_refresh_time = 3h
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
biff = no
command_directory = /usr/sbin
compatibility_level = 2
content_filter = amavisfeed:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
delay_warning_time = 4h
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
local_recipient_maps =
mail_owner = postfix
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 0
meta_directory = /etc/postfix
mydestination = localhost, localhost.localdomain, shenandoah.leepfrog.com
myhostname = shenandoah.leepfrog.com
mynetworks = 10.1.88.51
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases
postscreen_access_list = permit_mynetworks, hash:/etc/postfix/postscreen_access
postscreen_bare_newline_action = ignore
postscreen_bare_newline_enable = yes
postscreen_dnsbl_action = enforce
postscreen_dnsbl_reply_map = pcre:/etc/postfix/postscreen_dnsbl_reply.pcre
postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 
b.barracudacentral.org*1 bl.mailspike.net*1 dnsbl.inps.de=127.0.0.2*1 
hostkarma.junkemailfilter.com=127.0.0.2*1 
hostkarma.junkemailfilter.com=127.0.0.4*1 list.dnswl.org=127.0.[0..255].0*-1 
list.dnswl.org=127.0.[0..255].1*-2 list.dnswl.org=127.0.[0..255].2*-3 
list.dnswl.org=127.0.[0..255].3*-4 wl.mailspike.net=127.0.0.[18;19;20]*-2 
hostkarma.junkemailfilter.com=127.0.0.1*-2
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_ttl = 1h
postscreen_dnsbl_whitelist_threshold = -2
postscreen_greet_action = enforce
postscreen_non_smtp_command_action = drop
postscreen_non_smtp_command_enable = yes
postscreen_pipelining_action = enforce
postscreen_pipelining_enable = yes
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-3.0.3/README_FILES
recipient_delimiter = +
relay_domains = hash:/etc/postfix/relaydomains
relayhost =
sample_directory = /usr/share/doc/postfix-3.0.3/samples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
shlib_directory = no
smtp_tls_CAfile = /etc/ssl/certs/ca-bundle.crt
smtp_tls_loglevel = 1
smtp_tls_mandatory_protocols = !SSLv2,!SSLv3
smtp_tls_note_starttls_offer = yes
smtp_tls_protocols = !SSLv2,!SSLv3
smtp_tls_security_level = may
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, reject_invalid_helo_hostname
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, 
reject_unauth_destination, reject_unknown_recipient_domain, 
check_recipient_access hash:/etc/postfix/access reject_unverified_recipient
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, 
reject_unauth_destination,
smtpd_sender_restrictions = reject_unknown_sender_domain
smtpd_tls_CAfile = /etc/ssl/certs/ca-bundle.crt
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/lfwildcard-combined.crt
smtpd_tls_dh1024_param_file = /etc/postfix/dh2048.pem
smtpd_tls_dh512_param_file = /etc/postfix/dh512.pem
smtpd_tls_eecdh_grade = strong
smtpd_tls_exclude_ciphers = aNULL, IDEA, eNULL, EXPORT, DES, RC4, MD5, PSK, 
aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA
smtpd_tls_key_file = /etc/ssl/certs/lfwildcard.key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3
smtpd_tls_protocols = !SSLv2,!SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
tls_preempt_cipherlist = yes
transport_maps = hash:/etc/postfix/transport
unverified_recipient_reject_code = 550

Reply via email to