OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 451 server configuration error when receiving incoming e-mails from mail.gmx.de only on Postfix 1.1.11

From: Carsten Kuckuk (ckkuckuk.com)
Date: Tue Dec 07 2004 - 12:02:22 CST


Wietse Venema wrote:

> Carsten Kuckuk:
>
>>Dear List members,
>>
>>I've run my Linux server with Postfix as MTA on it for well over a year
>>in the same configuration (only changes to an ip whitelist so that
>>important mail doesn't get blocked by RBLs) without any real problems. A
>>few weeks ago I started noticing problems receiving e-mail from GMX.
>>Here's what I see in my logs:
>>
>>
>>Dec 7 17:03:34 p15120109 postfix/smtpd[23922]: connect from
>>mail.gmx.de[213.165.64.20]
>>Dec 7 17:03:34 p15120109 postfix/smtpd[23922]: 87F5734C03B:
>>client=mail.gmx.de[213.165.64.20]
>>Dec 7 17:03:34 p15120109 postfix/smtpd[23922]: warning: unknown smtpd
>>restriction: "OK"
>
>
> Wietse Venema wrote:
>
>>Please, pay attention to the above line.
>
>
> Carsten Kuckuk:
>
>>Wietse,
>>
>>Thank you for this pointer. My file "clientwhitelist" ends with
>>
>> >>>>>
>>fmmailgate06.web.de OK
>>mail.gmx.de OK
>>
>> om-verisign.rgc3.net OK
>><<<<<
>>
>>(notice the leading blank in the last line). Could this be enough to
>>make Postfix interpret this as a continuation to the "mail.gmx.de OK"
>>line and turning this into "mail.gmx.de OK om-verisign.rgc3.net" which
>>would then cause the problem? Anyway, I have removed the leading blank.
>>
>
>
> Please report configuration information as requested in this
> mailing list's welcome message.
>
> You can also find that information at
> http://www.postfix.org/DEBUG_README.html#mail
>
> Wietse
> Wietse

Here's the requested configuration information:

p15120109:/etc/postfix # postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
default_privs = nobody
fast_flush_domains = $relay_domains
in_flow_delay = 0
inet_interfaces = all
local_recipient_maps = $alias_maps unix:passwd.byname
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_size_limit = 100000000
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains = bl.spamcop.net, relays.ordb.org, dnsbl.ahbl.org,
dnsbl.sorbs.net, sbl.spamhaus.org,dnsbl.njabl.org,cbl.abuseat.org,
list.dsbl.org, opm.blitzed.org, , blackholes.five-ten-sg.com
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains = carstenkuckuk.de
masquerade_exceptions = root
mydestination = $myhostname, localhost.$mydomain, $mydomain,
smtp.$mydomain, /etc/postfix/mydestination
mydomain = carstenkuckuk.de
myhostname = p15120109.pureserver.info
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/sbin/sendmail
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relocated_maps = hash:/etc/postfix/relocated
resolve_dequoted_address = no
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions =
smtpd_recipient_restrictions = reject_invalid_hostname,
reject_non_fqdn_recipient, reject_unknown_sender_domain,
reject_unknown_recipient_domain, reject_unauth_pipelining,
permit_sasl_authenticated, reject_unauth_destination,
check_client_access hash:/etc/postfix/clientwhitelist, reject_maps_rbl
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_cert_file = /etc/postfix/cert.pem
smtpd_tls_key_file = /etc/postfix/key.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
strict_rfc821_envelopes = no
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
virtual_maps = hash:/etc/postfix/virtual,
hash:/etc/postfix/confixx_virtualUsers,
hash:/etc/postfix/confixx_localDomains
p15120109:/etc/postfix #