OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
::dk:: postfix as backup relay for sendmail

From: Bbt Lists (mailinglistsbackbonetechnology.com)
Date: Fri Sep 15 2006 - 18:56:56 CDT


Hi there.

I have been following various instructions on how to configure a backup
MX for 2 domains. The primary MX is a sendmail server, the backup is a
postfix server.

Predominately from:

http://www.postfix.org/STANDARD_CONFIGURATION_README.html#backup

Now this machine is also configured to be a SMTP AUTH/TLS machine. that
aspect works great.

Now for some reason when sending to the backup MX (to a user on the
primary mx - but the primary mx is offline), I get the typical loop
error ( mail for [fqdn] loops back to itself ).

I double checked the mydestination - and all seems as it should. The
machine is not NAT'd either. Been googling this for some time today.

Below is the output of postconf - n:

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = dom.com
myhostname = mail2.dom.com
mynetworks_style = host
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.0.16/README_FILES
relay_domains = $mydestination
relay_recipient_maps = hash:/etc/postfix/relay_recipients
sample_directory = /usr/share/doc/postfix-2.0.16/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_error_sleep_time = 1s
smtpd_hard_error_limit = 20
smtpd_recipient_restrictions =
permit_sasl_authenticated,permit_mynetworks,check_relay_domains
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_soft_error_limit = 10
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_domains = dom2.com

The contents of my relay_recipients file is:

userdom.com x

The contents of my transport file is:

dom.com smtp:[mail2.dom.com]

The relevant error from my error log is:

Sep 15 19:24:13 mail2 postfix/smtp[16898]: 12E0418400B:
to=<userdom.com>, relay=mail2.dom.com[xxx.xxx.xxx.xxx, delay=0,
status=bounced (mail for [mail2.dom.com] loops back to myself)

Any ideas/tip/pointers?

--
dnk