OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Outbound postfix routing issue

From: Jeremy Laurenson (jlaurenscisco.com)
Date: Wed May 07 2008 - 15:50:32 CDT


I have run the check, turned off all other verbose logging and still
only see:
...
May 7 16:43:34 wwwin postfix/smtpd[9866]: 0160 fa 57 7f 6c 6f b8 9a
40|cc c9 21 bb 55 30 3d d0 .W.lo.. ..!.U0=.
May 7 16:43:34 wwwin postfix/smtpd[9866]: 0170 1c da 25 56 3b 04 83
82|6c e7 27 79 bd bf 34 b9 ..%V;... l.'y..4.
May 7 16:43:34 wwwin postfix/smtpd[9866]: Read 351 chars: Message-Id:
<247795E1-1BAF-4074-8525-E9F
May 7 16:43:34 wwwin postfix/cleanup[9879]: 1ADBC87BAE: message-id=<247795E1-1BAF-4074-8525-E9FBEB6EEF77cisco.com
>
May 7 16:43:34 wwwin postfix/smtpd[9866]: Write 36 chars: 250 2.0.0
Ok: queued as 1ADBC87BAE??
May 7 16:43:34 wwwin postfix/smtpd[9866]: write to 08091A80
[080A39A0] (69 bytes => 69 (0x45))
May 7 16:43:34 wwwin postfix/smtpd[9866]: 0000 17 03 01 00 40 c5 76
88|4c c3 59 e0 9d 4b 94 ae .....v. L.Y..K..
May 7 16:43:34 wwwin postfix/smtpd[9866]: 0010 a5 a5 78 c1 5f 35 3d
d0|6c a8 fa a6 96 ec fa f7 ..x._5=. l.......
May 7 16:43:34 wwwin postfix/smtpd[9866]: 0020 1e 1e fb 06 46 5a 9e
df|c9 72 1b e0 10 ba 15 ca ....FZ.. .r......
May 7 16:43:34 wwwin postfix/smtpd[9866]: 0030 a7 29 22 50 87 34 ea
6a|c2 57 85 5e 73 eb 90 aa .)"P.4.j .W.^s...
May 7 16:43:34 wwwin postfix/smtpd[9866]: 0040 ab 2b 9a 9b
aa .+...
May 7 16:43:34 wwwin postfix/smtpd[9866]: read from 08091A80
[0809B190] (5 bytes => -1 (0xFFFFFFFF))
May 7 16:43:34 wwwin postfix/qmgr[9846]: 1ADBC87BAE: from=<jlaurenscisco.com
>, size=622, nrcpt=1 (queue active)
May 7 16:43:34 wwwin postfix/qmgr[9846]: warning: connect to
transport smtp: Connection refused
May 7 16:43:34 wwwin postfix/error[9882]: 1ADBC87BAE: to=<jlaurenscisco.com
>, relay=none, delay=0.08, delays=0.06/0.01/0/0.01, dsn=4.3.0,
status=deferred (mail transport unavailable)

I do not see an attempted SMTP connection outbound, so I do not know
why its thinking it gets refused.
All processes are not chrooting, so I dont think its a permissions
thing.

On May 7, 2008, at 4:13 PM, Noel Jones wrote:

> Jeremy Laurenson wrote:
>>>
>>> Good monring/noon/evening , all
>>>
>>>
>>> I have an issue getting my postfix system to deliver messages.
>>> (Enclosed is the syslog, and postconf -n output)
>>>
>>> The system is set up to:
>>> Receive inbound SMTP port 25 connections. Working
>>> Escalate to a TLS session Working
>>> Auth against LDAP using saslauth Working
>>> Accept the message into the queue Working
>>> Route all emails to a relay host Not working
>>>
>>> I captured a sniffer trace using tcpdump with no filters and never
>>> see an outbound connection.
>>>
>>>
>
> Turn off all the unnecessary verbose logging, and set tls_loglevel
> to 0 or 1. Then see:
> http://www.postfix.org/DEBUG_README.html#logging
>
> This will lead you to:
>
> May 7 09:32:57 wwwin postfix/qmgr[20819]: warning: connect to
> transport smtp: Connection refused
>
> which in turn causes:
>
> May 7 09:32:57 wwwin postfix/error[21378]: 9A02887BAE: to=<jeremytest.com
> >, relay=none, delay=0.2, delays=0.13/0.01/0/0.06, dsn=4.3.0,
> status=deferred (mail transport unavailable)
>
> Run "postfix check" to check file permissions. Turn off AppArmour
> or SELinux if running.
>
>
>
> --
> Noel Jones