OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Unknown User

From: Donny Christiaan (dchristiaangmail.com)
Date: Tue Oct 02 2007 - 04:42:52 CDT


Hi Magnus,

Magnus Bäck wrote:
>> Why my postfix sometimes said that "unknown user" for the existing
>> user on my server.
>
>> <user01inssby.co.id> (expanded from <user01mydomain.com>): unknown
>> user: "user01"
>
> Always send logs and configuration information instead of bounce message
> excerpts.
>
> Is the domain local? If so, are the users stored in LDAP?
Yes, theris is domain local (inssby.co.id) and all user are not stored
in LDAP.

Here the main.cf:
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
unknown_local_recipient_reject_code = 550
debug_peer_level = 2
debugger_command =
          PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
          xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = maildrop
html_directory = /usr/share/doc/packages/postfix/html
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/packages/postfix/samples
readme_directory = /usr/share/doc/packages/postfix/README_FILES
inet_protocols = all
biff = no
mail_spool_directory = /var/mail
canonical_maps = hash:/etc/postfix/canonical
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_alias_domains = hash:/etc/postfix/virtual
relocated_maps = hash:/etc/postfix/relocated
transport_maps = hash:/etc/postfix/transport
sender_canonical_maps = hash:/etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
myhostname = $mydomain
program_directory = /usr/lib/postfix
masquerade_domains =
mydestination = $myhostname, localhost.$mydomain, $mydomain,
inserasby.co.id, mail.inssby.co.id
defer_transports =
disable_dns_lookups = no
mailbox_command = /usr/bin/procmail -a "$EXTENSION"
mailbox_transport =
strict_8bitmime = no
disable_mime_output_conversion = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_client_restrictions =
smtp_sasl_auth_enable = no
smtpd_sasl_auth_enable = yes
smtpd_use_tls = yes
smtp_use_tls = yes
alias_maps = hash:/etc/aliases
mailbox_size_limit = 0
#message_size_limit = 10240000
message_size_limit = 3072000
mydomain = inssby.co.id
mynetworks = 127.0.0.0/8, 10.0.1.8/32
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_tls_auth_only = no
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings

# SETTING PROCMAIL TIME OUT LIMIT
command_time_limit = 3600s

### Checks to remove badly formed email
smtpd_helo_required = yes
strict_rfc821_envelopes = yes
disable_vrfy_command = yes
unknown_address_reject_code = 554
unknown_hostname_reject_code = 554
unknown_client_reject_code = 554

smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname,
regexp:/etc/postfix/helo.regexp, permit

smtpd_recipient_restrictions =
         check_client_access hash:/etc/postfix/helo_client_exceptions
         check_sender_access hash:/etc/postfix/restricted_senders
         reject_invalid_hostname,
# reject_non_fqdn_hostname,
         reject_non_fqdn_sender,
         #reject_non_fqdn_recipient,
         reject_unknown_sender_domain,
         reject_unknown_recipient_domain,
         permit_mynetworks,
         permit_sasl_authenticated,
         reject_unauth_destination,
# check_client_access hash:/etc/postfix/rbl_client_exceptions,
         reject_rbl_client cbl.abuseat.org,
         reject_rbl_client sbl-xbl.spamhaus.org,
         reject_rbl_client bl.spamcop.net,
# reject_rbl_client relays.ordb.org,
         reject_rbl_client list.dsbl.org,
# reject_rbl_client opm.blitzed.org,
         reject_rbl_client dul.dnsbl.sorbs.net,
         reject_rhsbl_sender dsn.rfc-ignorant.org,
# howtoforge
         reject_rbl_client zen.spamhaus.org,
         reject_rhsbl_client blackhole.securitysage.com,
         reject_rhsbl_sender blackhole.securitysage.com,
# check_policy_service inet:127.0.0.1:60000
         permit
smtpd_restriction_classes = local_only
local_only = check_recipient_access hash:/etc/postfix/local_domains, reject
always_bcc = pakposinssby.co.id
# D~Net
relayhost = smtp.sby.dnet.net.id

--
Best Regards,
Donny Christiaan.
dchristiaangmail.com