OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: "554 Recipient address rejected: Relay access denied" problems

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Sat May 12 2007 - 04:16:39 CDT


On Saturday 12 May 2007 09:22, Postfix Support Mail wrote:

> ## >> Mac, you should read
> ## >> http://www.postfix.org/DEBUG_README.html to know how to
> ## >> debug when you have problems, and how to report problems
> ## >> to this list.
> ## >> Without information about your configuration, people is
> ## >> not able to help you.
> ## >>
> ## >> Pablo
>
> i've read that document. i've done as many of the things on there as i
> can. i've got postfinger, saslfinger, and i have run them. i'm not sure
> what i'm supposed to be looking for. i'm very frustrated, and looking at
> that document isn't really helping me, maybe i just don't understand what
> i'm looking at.
>
> i used /usr/sbin/sendmail -bv address, and received this error:

> May 12 03:53:12 lanlp01 postfix/trivial-rewrite[30346]: warning: do not
> list domain localdomain.com in BOTH virtual_alias_domains and
> virtual_mailbox_domains

Fix this.

> May 12 03:53:12 lanlp01 postfix/error[30352]: 6360F8D411B:
> to=<rootlocaldomain.com>, relay=none, delay=0, status=bounced (User
> unknown in virtual alias table)

What is the right Domain-Class of "localdomain.com"? I have to ask, because
you list it in both virtual_alias_domains and virtual_mailbox_domains.

Read this: http://www.postfix.org/ADDRESS_CLASS_README.html and make a
decision. Then make sure "rootlocaldomain.com" is in the right
virtual_*_maps.

> additionally, when i uncomment "#smtpd_sasl_auth_enable = yes", then the
> error "fatal: SASL per-process initialization failed" appears.

> -- content of /usr/lib/sasl2/smtpd.conf --
> #pwcheck_method: saslauthd
> pwcheck_method: auxprop
> #pwcheck_method:authdaemond
> auxprop_plugin = sql

This is the reason, why you see the error after enabling sasl. The right
syntax in this file is:

option: value

No "=" is allowed.

> mech_list: plain login

Are the Passwords crypted or cleartext in the SQL-DB?

> #allow_plaintext = true
> sql_verbose: yes
> sql_engine: mysql
> sql_hostnames: 127.0.0.1
> sql_user: --- replaced ---
> sql_passwd: --- replaced ---
> sql_database: postfix
> sql_select: SELECT password FROM mailbox WHERE username = '%u%r'

--
        Andreas