Re: 554 <usermydomain.com>: Sender address rejected: Access denied

From: Noel Jones (njonesmegan.vbhcs.org)
Date: Mon Aug 28 2006 - 14:57:58 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

At 02:39 PM 8/28/2006, notinh notien wrote:
>Hi, all. We have a problem with a working installation of
>postfix server.
>My users could send email when they are on site and at the
>company, however, when they are off site and tried to send
>emails to people within the company problems would arise
>with that errors.
>
>So usermydomain.com send email to
>anotherusermydomain.com or himself, he would get this 554
>error. When the users are off site, their ISP would be
>Comcast or oversea ISPs in Taiwan, then this would occur
>again. Could someone here identify the problems with my
>configuration because I am really dumbfounded with this case?

The general answer is that external users must either be
listed in mynetworks if they have a static IP, or
authenticate themselves to your server before you can
accept their mail. Choices include smtp-auth SASL using
either cyrus or dovecot, TLS user certificates, and
pop-before-smtp.

Some reading material:
http://www.postfix.org/SMTPD_ACCESS_README.html#relay
http://www.postfix.org/SASL_README.html
http://www.postfix.org/TLS_README.html
http://www.postfix.org/addon.html

Frequently outside networks block access to port 25, so you
may need to set up an alternate port for remote users to
submit mail on. The RFC compliant choice is the
"submission" port, 587.

--
Noel Jones

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]