OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: relay_recipients_maps (ldap)

From: Bolke de Bruin (bdbruinaub.nl)
Date: Sat Dec 02 2006 - 07:32:46 CST


Ralf Hildebrandt wrote:
> * Bolke de Bruin <bdbruinaub.nl>:
>
>> Hello,
>>
>> I have build a relay server with the attached configuration (postfix 2.2.10). In order to avoid backscatter I would like to activate relay_recipient_maps. However if I do so, postfix starts puging over:
>>
>> Dec 2 12:48:41 smtp postfix/smtp[28686]: warning: dict_ldap_lookup: Search error -1: Can't contact LDAP server
>> Dec 2 12:48:41 smtp postfix/smtp[28686]: fatal: ldap:/etc/postfix/ldap-domains.cf(0,100): table lookup probLem
>>
>
> smtp is for sending out, not for receiving
>
>
Config is with amavis in the mix (postfix -> amavis:10023 ->
postfix:10025).

Dec 2 12:48:41 smtp postfix/smtp[28686]: EC344F249ED:
to=<ogoneaub.nl>, relay=127.0.0.1[127.0.0.1], delay=
3, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.1.0 Failed,
id=28249-06, from MTA([127.0.0.1]:1002
5): 451 <ogoneaub.nl>: Temporary lookup failure (in reply to end of
DATA command))
Dec 2 12:48:41 smtp postfix/smtp[28686]: warning: dict_ldap_lookup:
Search error -1: Can't contact LDAP ser
ver
Dec 2 12:48:41 smtp postfix/smtp[28686]: fatal:
ldap:/etc/postfix/ldap-domains.cf(0,100): table lookup prob
lem

>> Note that it has an issue with "ldap-domains.cf". This is not part
>> of the relay_recipient_maps configuration line but rather part of
>> relay_domains.
>>
>
> Show "postconf -n" output!
>
>

I did actually attach it to the previous message, but I case it did not
arrive:

command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavis:[127.0.0.1]:10023
daemon_directory = /usr/lib/postfix
default_privs = nobody
disable_vrfy_command = yes
inet_interfaces = all
mail_owner = postfix
mydestination =
myhostname = smtp.aub.nl
mynetworks = 10.80.100.0/24, 10.70.100.0/24, XX.XX.XX.XX
myorigin = $myhostname
queue_directory = /var/spool/postfix
relay_domains = ldap:/etc/postfix/ldap-domains.cf
relay_recipient_maps =
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_data_restrictions = reject_unauth_pipelining, permit
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, check_client_access

hash:/etc/postfix/helo_client_exceptions
regexp:/etc/postfix/helo.regexp, permit
smtpd_recipient_restrictions = check_client_access
hash:/etc/postfix/helo_client_exceptions,
check_recipient_access hash:/etc/postfix/blocked-recipients,
reject_non_fqdn_hostname,
reject_non_fqdn_sender, reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unknown_recipient_domain, permit_mynetworks,
reject_unauth_destination,
reject_rbl_client cbl.abuseat.org, reject_rbl_client
sbl-xbl.spamhaus.org, reject_rbl_client
bl.spamcop.net, reject_rhsbl_sender dsn.rfc-ignorant.org, permit

smtpd_sender_restrictions = reject_unknown_sender_domain,
reject_rhsbl_sender sbl-xbl.spamhaus.org
strict_rfc821_envelopes = yes
transport_maps = ldap:/etc/postfix/ldap-transports.cf
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554