OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
554 error

From: Matt Morgan (minxmertzmomogmail.com)
Date: Wed Jan 11 2006 - 15:10:20 CST


(I managed to fix the issue with aliases not working that I was having
earlier. This is a new topic. Thanks.)

I have postfix installed on Mac OS X 10.3.9. I'm trying to configure
postfix so that it

1) accepts smtp delivery only from a certain domain (which is a
spam-checking service, set up as the public MX for my domain)
2) accepts mail for non-existent local users, and just delivers
according to what's in /etc/aliases or the other alias files.

The server should not accept mail from any other domain, but it must
send directly to the addresses found in /etc/aliases.

I have delivery working correctly from the host itself, but it won't
accept mail from the spam-checking service. I get a 554 error, which
is my relay_domains_reject_code, so I guess I don't know how to set up
the relays_domain parameter correctly.

The two hosts (at the anti-spam service) that I want to accept mail from are

steve.museum.pri-mx.smtproutes.com
steve.museum.bak-mx.smtp-routes.com

It's fine with me (in fact, probably better) to accept mail from any
machine on that domain, so I have tried two different settings for
relay_domains:

relay_domains = $mydestination, smtproutes.com
and
relay_domains = $mydestination, steve.museum.pri-mx.smtproutes.com,
                         steve.museum.bak-mx.smtproutes.com

both result in a 554 error when I try to mail to any address
steve.museum. What am I doing wrong?

By the way, I've taken over for someone else here, and there are
probably parameters set that are not doing what I want, like

smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks,
         reject_unauth_destination,permit

Since the addresses are all aliases to addresses on other domains,
could reject_unauth_destination have something to do with it? I don't
want to just keep removing restrictions and end up with an open relay.

Thanks,
Matt