OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
accepting mail for postmaster, abuse

From: Andrew Long (fursinkgmail.com)
Date: Fri Dec 21 2007 - 09:08:27 CST


This server typically accepts no mail from the internet but is a
selective relay for relay-ip's. This led to problems with not
accepting abuse and postmaster. With help from group, I created
/etc/postfix/roleacount (and db) as follows:
  abusehost.domain.com OK
  postmasterhost.domain.com OK
  abusedomain.com OK
  postmasterdomain.com OK

When I do a DNS check on our domain, I get failure. Postfix is still
not accepting mail for postmasterdomain.com and abusedomain.com. We
have another MTX which accepts mail for *domain.com, but I also need
this MTX to accept it (or perhaps pass it on to our main MTX).

Dec 21 10:02:50 dev postfix/smtpd[19841]: NOQUEUE: reject: RCPT from
blue.dnsstuff.com[74.53.59.133]: 554 <postmasterdomain.com>: Relay
access denied; from=<> to=<postmasterdomain.com> proto=SMTP
helo=<test.DNSreport.com>
Dec 21 10:02:50 dev postfix/smtpd[19841]: NOQUEUE: reject: RCPT from
blue.dnsstuff.com[74.53.59.133]: 554 <abusedomain.com>: Relay access
denied; from=<> to=<abusedomain.com> proto=SMTP
helo=<test.DNSreport.com>
Dec 21 10:02:50 dev postfix/smtpd[19841]: NOQUEUE: reject: RCPT from
blue.dnsstuff.com[74.53.59.133]: 554 <postmaster[xx.xxx.xxx.xx]>:
Relay access denied; from=<> to=<postmaster[xx.xxx.xxx.xx]>
proto=SMTP helo=<test.DNSreport.com>
Dec 21 10:02:50 dev postfix/smtpd[19841]: NOQUEUE: reject: RCPT from
blue.dnsstuff.com[74.53.59.133]: 554
<Not.abuse.see.www.DNSreport.com.from.IP.xx.xxx.xxx.xDNSreport.com>:
Relay access denied; from=<>
to=<Not.abuse.see.www.DNSreport.com.from.IP.xx.xxx.xxx.xDNSreport.com>
proto=SMTP helo=<test.DNSreport.com>
Dec 21 10:02:50 dev postfix/smtpd[19841]: disconnect from
blue.dnsstuff.com[74.53.59.133]

# postconf -n
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
html_directory = no
local_recipient_maps =
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = localhost.localdomain, host.domain.com
mynetworks = 127.0.0.0/8, /etc/postfix/relay-ip
newaliases_path = /usr/bin/newaliases.postfix
readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES
relay_domains =
sample_directory = /usr/share/doc/postfix-2.2.10/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions = permit_mynetworks
smtpd_helo_required = yes
smtpd_recipient_restrictions =
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
permit_mynetworks,
reject_unauth_destination,
reject_rbl_client bl.spamcop.net,
check_recipient_access hash:/etc/postfix/roleaccount,
reject
smtpd_reject_unlisted_sender = yes
unknown_local_recipient_reject_code = 550

Thanks for any help,
Andrew Long