Am 20. Oktober 2016 07:57:58 MESZ, schrieb Ross Naheedy <lsl...@gmail.com>:
>I am having a peculiar issue in not being able to lock down my postfix
>2.10. This is on a server that is on the Internet and must receive
>emails
>and relay email for authenticated users. My main.cf relevant portions
>look
>like this:
>
>myhostname=example.com
>mydomain=example.com
>smtpd_sasl_auth_enable = yes
>smtpd_sasl_security_options = noanonymous
>smtpd_recipient_restrictions = permit_sasl_authenticated,
>permit_mynetworks, reject_unauth_destination
>smtpd_relay_restrictions = permit_sasl_authenticated,
>permit_mynetworks,
>reject_unauth_destination
>
>Looking at my maillog, it looks like the server is being used to a
>relay,
>although I'm not sure why. I checked some of the messages
>to /var/spool/postfix/defer and here's one of them (with my domain
>being
>example.com)
>
>
><8467-6900600747-824-sales=example....@mail.gretofrr.us>: connect to
>mail.gretofrr.us[2400:cb00:2048:1::681b:8eb4]:25: Connection timed out
>recipient=8467-6900600747-824-sales=example....@mail.gretofrr.us
>offset=707
>dsn_orig_rcpt=rfc822;8467-6900600747-824-sales=example....@mail.gretofrr.us
>status=4.4.1
>action=delayed
>reason=connect to mail.gretofrr.us[2400:cb00:2048:1::681b:8eb4]:25:
>Connection timed out
>
>It looks to me that postfix accepted a message destined to
>8467-6900600747-824-sales=example....@mail.gretofrr.us and is
>attempting to
>deliver it. Looks to me a different form of sender-specified routing
>based
>on what I've read <a href="
>http://www.postfix.org/postconf.5.html#reject_unauth_destination";>here</a>.
>
>I must be doing something wrong, but for the life of me I cannot figure
>it
>out.
Please post postconf -n and of you have logs for one of those messages entering
your system
>
>Thanks,
>Ross.
--
Christian Kivalo
