OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
problems with virtual alias table

From: Albert Dengg (a_dgmx.at)
Date: Sun Jan 13 2008 - 20:06:51 CST


hi

i'm currently in the process of setting up a mailserver with multiple
virtual domains and there are currently 2 problems:
1) if i try to send a mail to any one of the virtual alias users i get an
"User unknown in virtual alias table" error
2) the mail is bounced instead of being rejected at smtp time

the system is a debian etch server with postfix debian package version
2.3.8-2+b1.

as for the first problem:
the strange thing is that i can look up the user in /etc/postfix/virtual
with "postmap -s" and "postmap -q user1vitual1.tld" without a
problem and get back the correct unix account, so in my opinion it
should work(?)...

for the second problem:
as you can see in the postconf -n output below, local_recipient_maps is
set to what for me looks like to be correct...

postconf -n output (the domains are real ones actually, inet_interfaces
= localhost is for testing because of the bounce problem):
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
debug_peer_list = 127.0.0.1
home_mailbox = Maildir/
inet_interfaces = localhost
local_recipient_maps = $alias_maps, $virtual_maps, unix:passwd.byname
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = localhost, localhost.localdomain, localhost
myhostname = virtual1.tld
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtp_sasl_auth_enable = no
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_restrictions = reject_invalid_hostname
smtpd_recipient_restrictions = reject_unknown_recipient_domain,
        permit_sasl_authenticated,
        reject_unauth_destination
smtpd_reject_unlisted_recipient = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = reject_unknown_address
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
virtual_alias_domains = virtual1.tld virtual2.tld virtual3.tld
virtual_alias_maps = hash:/etc/postfix/virtual

/etc/postfix/virtual:
postmastervirtual1.tld postmaster
postmastervirtual2.tld postmaster
postmastervirtual3.tld postmaster

abusevirtual1.tld abuse
abusevirtual2.tld abuse
abusevirtual3.tld abuse

alias1virtual1.tld alias1
alias1virtual2.tld alias1
alias1virtual3.tld alias1

alias2virtual1.tld alias2
alias2virtual2.tld alias2
alias2virtual3.tld alias2

user1virtual1.tld user1
user1virtual2.tld user1
user1virtual3.tld user1

user2virtual1.tld user2
user2virtual2.tld user2
user2virtual3.tld user2
user2alias1virtual1.tld user2
user2alias1virtual2.tld user2
user2alias1virtual3.tld user2

a logfile snippet from one of my trys is attached

most likely it's something trivial that i haven't thought about :)

thx for any advice

yours
albert

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQCVAwUBR4rDsiIMiEpzxsFKAQLMTQP/av6PEXHlszfU6dbYtu0I7+aAUTbCNo8Y
WGJkgU5a7rPKe4XvihLjPn2bg3KPIkzqLD0/ZadW7cxSD3HjsldJdm2o/aynfvHn
S/sfmVd1iU7MibEInonrZZQGIoYZukhxS55W+Te/86nVUoKdb+0ga49ctfYHYo3m
9k/m7ijYPS8=
=xNpo
-----END PGP SIGNATURE-----