Thanks And please why this will receive as SPF Fail - not authorized. This email are realy important !!
May 13 18:42:43 nmail postfix/smtpd[15632]: NOQUEUE: reject: RCPT from ld4prd5.mx.csod.com[208.185.235.45]: 550 5.7.23 <name@domain>: Recipient address rejected: Message rejected due to: SPF fail - not authorized. Please see http://www.openspf.net/Why?s=mfrom;[email protected];ip=208.185.23 5.45;r=<UNKNOWN>; from=<name@domain> to=<name@domain> proto=ESMTP helo=<mail.ld4.csod.com> postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = yes biff = no broken_sasl_auth_clients = yes command_directory = /usr/sbin compatibility_level = 2 daemon_directory = /usr/lib/postfix/sbin data_directory = /var/lib/postfix debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 disable_vrfy_command = yes dovecot_destination_recipient_limit = 1 home_mailbox = Maildir/ html_directory = no inet_interfaces = all inet_protocols = ipv4 mailbox_size_limit = 0 mailq_path = /usr/bin/mailq message_size_limit = 25428800 milter_connect_macros = "i j {daemon_name} v {if_name} _" milter_default_action = accept milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer} milter_protocol = 6 mydestination = mydomain = caloro.ch myhostname = nmail.caloro.ch mynetworks = 127.0.0.0/8, 37.120.190.188/32, 151.248.128.0/17, 158.181.96.0/19, 185.42.244.0/22, 212.4.64.0/19, 82.136.87.212, 80.254.176.41 newaliases_path = /usr/bin/newaliases non_smtpd_milters = $smtpd_milters policyd-spf_time_limit = 3600 postscreen_access_list = permit_mynetworks, hash:/etc/postfix/senderdomain, hash:/etc/postfix/whitelistIP, cidr:/etc/postfix/whitelistCIDR postscreen_bare_newline_action = ignore postscreen_bare_newline_enable = yes postscreen_blacklist_action = drop postscreen_cache_cleanup_interval = 24h postscreen_cache_map = btree:/var/lib/postfix/postscreen_cache postscreen_dnsbl_action = enforce postscreen_dnsbl_reply_map = pcre:/etc/postfix/dnsbl_reply_map.pcre postscreen_dnsbl_sites = zen.spamhaus.org*3 b.barracudacentral.org*2 bl.spameatingmonkey.net*2 bl.spamcop.net dnsbl.sorbs.net psbl.surriel.com bl.mailspike.net list.dnswl.org=127.0.[0..255].0*-2 list.dnswl.org=127.0.[0..255].1*-3 list.dnswl.org=127.0.[0..255].[2..3]*-4 postscreen_dnsbl_threshold = 3 postscreen_dnsbl_whitelist_threshold = -1 postscreen_greet_action = enforce postscreen_greet_banner = 220-nmail.caloro.ch postscreen_greet_wait = 4s postscreen_non_smtp_command_action = drop postscreen_non_smtp_command_enable = yes postscreen_pipelining_action = enforce postscreen_pipelining_enable = yes postscreen_whitelist_interfaces = 37.120.190.188 static:all queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix relay_domains = $mydomain sample_directory = /usr/share/doc/postfix sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtp_address_preference = any smtp_dns_support_level = dnssec smtp_header_checks = regexp:/etc/postfix/header_checks smtp_host_lookup = dns smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtp_tls_cert_file = /etc/letsencrypt/live/nmail.caloro.ch/fullchain.pem smtp_tls_exclude_ciphers = aNULL, MD5 smtp_tls_key_file = /etc/letsencrypt/live/nmail.caloro.ch/privkey.pem smtp_tls_loglevel = 1 smtp_tls_mandatory_ciphers = high smtp_tls_mandatory_exclude_ciphers = aNULL, MD5 smtp_tls_mandatory_protocols = !SSLv2, !TLSv1, !TLSv1.1 smtp_tls_note_starttls_offer = yes smtp_tls_policy_maps = socketmap:inet:127.0.0.1:8461:postfix smtp_tls_protocols = !SSLv2, !TLSv1, !TLSv1.1 smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_tls_session_cache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_data_restrictions = reject_unauth_pipelining smtpd_delay_reject = yes smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_helo_hostname, smtpd_milters = unix:opendkim/opendkim.sock, unix:opendmarc/opendmarc.sock, unix:private/clamav/clamav-milter.ctl smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_rbl_client sbl.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dul.dnsbl.sorbs.net, check_policy_service inet:127.0.0.1:60000, check_policy_service unix:private/policyd-spf, permit smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_sender_login_maps = mysql:/etc/postfix/mysql-virtual_sender_permissions.cf smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_unknown_sender_domain, permit smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/letsencrypt/live/nmail.caloro.ch/fullchain.pem smtpd_tls_exclude_ciphers = aNULL, MD5 smtpd_tls_key_file = /etc/letsencrypt/live/nmail.caloro.ch/privkey.pem smtpd_tls_loglevel = 1 smtpd_tls_mandatory_ciphers = high smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5 smtpd_tls_mandatory_protocols = !SSLv2, !TLSv1, !TLSv1.1 smtpd_tls_protocols = !SSLv2, !TLSv1, !TLSv1.1 smtpd_tls_security_level = may smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_tls_session_cache smtpd_use_tls = yes submission_sender_checks = check_sender_access hash:/etc/postfix/reject_null_sender unknown_local_recipient_reject_code = 550 virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_mailbox_domains.cf virtual_mailbox_limit = 0 virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailbox_maps.cf virtual_transport = lmtp:unix:private/dovecot-lmtp -----Ursprüngliche Nachricht----- Von: Wietse Venema <[email protected]> Gesendet: Donnerstag, 13. Mai 2021 18:48 An: Maurizio Caloro <[email protected]> Cc: [email protected] Betreff: Re: domain.ch in BOTH virtual_mailbox_domains and relay_domains ? Maurizio Caloro: > [main.cf] Don't paste main.cf. use postconf -n output. TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html Thank you for using Postfix.
