From: Andrew Long (fursinkgmail.com)
Date: Mon Dec 17 2007 - 10:15:10 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Dec 17, 2007 10:21 AM, Wietse Venema <wietseporcupine.org> wrote:
> Andrew Long:
> [ Charset ISO-8859-1 unsupported, converting... ]
> > On Dec 17, 2007 9:53 AM, Ralf Hildebrandt <Ralf.Hildebrandtcharite.de> wrote:
> > > * Andrew Long <fursinkgmail.com>:
> > > > This morning I received several of the following to postmaster... I
> > > > have never seen these before.
> > > > Can someone tell me what I am seeing? The server is a very selective
> > > > relay and the ip's these are from are NOT among the allowed.
> > >
> > > Look into your logs
> > >
> >
> > Dec 16 23:54:34 dev postfix/smtpd[13952]: NOQUEUE: reject: RCPT from
> > spams.crous-amiens.fr[194.57.108.9]: 451 Server configuration error;
> > from=<> to=<MAILER-DAEMONdev.escapewire.com> proto=SMTP
> > helo=<serveur1.spams.crous-amiens.fr>
>
> Look in the logfile BEFORE this record.
>
> Wietse
>
> http://www.postfix.org/DEBUG_README.html#logging
>
> Postfix logs all failed and successful deliveries to a logfile.
> The file is usually called /var/log/maillog or /var/log/mail; the
> exact pathname is defined in the /etc/syslog.conf file.
>
> When Postfix does not receive or deliver mail, the first order of
> business is to look for errors that prevent Postfix from working
> properly:
>
> % egrep '(warning|error|fatal|panic):' /some/log/file | more
>

Here is what I'm unclear on. I have configured this server (with much
help from group) to reject forwarding from all but a select group of
ip's, When I look in the logs as Wiets suggested, I see many rejects
from unknown (unauth'd) ip's; however, in my deferred queue, I see
many messages from ip's which are rejected. If the ip is rejected, why
are messages clogging the queue?

alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
html_directory = no
local_recipient_maps =
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = localhost.localdomain, dev.escapewire.com
mynetworks = 127.0.0.0/8, /etc/postfix/relay-ip
newaliases_path = /usr/bin/newaliases.postfix
readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES
relay_domains =
sample_directory = /usr/share/doc/postfix-2.2.10/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions =
        permit_mynetworks,
        reject_invalid_hostname,
        reject_unknown_sender_domain,
        reject_non_fqdn_recipient,
        reject_rbl_client bl.spamcop.net,
        permit
smtpd_helo_required = yes
smtpd_recipient_restrictions =
        reject_non_fqdn_sender,
        reject_non_fqdn_recipient,
        reject_unknown_recipient_domain,
        permit_mynetworks,
        reject_unauth_destination
        check_recipient_access hash:/etc/postfix/roleaccount # permit these
recipients
        reject
smtpd_reject_unlisted_sender = yes
unknown_local_recipient_reject_code = 550

Andrew

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]