Postfix SMTP-Auth Server-Server-Problem
Ich habe zu Hause 1 Laptop ( Dualboot Debian/Windoofs) und einen kleinen
Server ( Debian stable)
Wenn ich auf dem Laptop einem Mailclient ( kmail,Evolution,Outlook) verwende
über mail.server.de versende, funtzt es einwandfrei.(Mailadressen egal, geht
immer)
Meldung=
Jun 29 15:53:58 www postfix/smtpd[12950]: E08AB7AE14:
client=unknown[217.232.254.189], sasl_method=LOGIN, sasl_username=kugel
Jun 29 15:53:59 www postfix/cleanup[12951]: E08AB7AE14:
message-id=<MCEBLKCDGFJOOHHHNCDPGEHBCAAA.kai@bausch-online.net>
Jun 29 15:53:59 www postfix/qmgr[699]: E08AB7AE14: from=<user@testhost.de>,
size=712, nrcpt=1 (queue active)
Jun 29 15:53:59 www postfix/smtpd[12950]: disconnect from
unknown[217.232.254.189]
Jun 29 15:53:59 www postfix/local[12952]: E08AB7AE14:
to=<kai@mail.server.de>, relay=local, delay=1, status=sent ("|procmail -a
"$EXTENSION"")
Mit den selben Sasl-Daten in der saslpasswd wirft der Live-Server in der
/var/log/mail.info wenn ich folgendes auf dem Homeserver.aufrufe
mail -s testforward kai@bausch-online.net < /etc/fstab
folgenden Fehler
Jun 29 15:49:41 www postfix/smtpd[12807]: reject: RCPT from
pD9E8FEBD.dip.t-dialin.net[217.232.254.189]: 554 <kai@bausch-online.net>:
Recipient address
rejected: Relay access denied; from=<root@router.home.lan>
to=<kai@bausch-online.net>
Kann mir jemand sagen was falsch mache??
Kai
Home-Serverpakete
ii postfix 1.1.11-0.woody2 A
high-performance mail transport agent
ii postfix-ldap 1.1.11-0.woody2 LDAP
map support for Postfix
ii postfix-pcre 1.1.11-0.woody2 PCRE
map support for Postfix
ii postfix-tls 1.1.11+tls0.7.15-0.woody1 TLS
and SASL support for Postfix
Live-Serverpakete
ii postfix 1.1.11-0.woody2 A
high-performance mail transport agent
ii postfix-ldap 1.1.11-0.woody2 LDAP
map support for Postfix
ii postfix-pcre 1.1.11-0.woody2 PCRE
map support for Postfix
ii postfix-tls 1.1.11+tls0.7.15-0.woody1 TLS
and SASL support for Postfix
/etc/postfix/main.cf Zu Hause
#------ schnip -----------------
# appending .domain is the MUA's job.
append_dot_mydomain = no
myhostname = itx.home.lan
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = router.home.lan, itx.home.lan, localhost.home.lan, localhost
mynetworks = 127.0.0.0/8 192.168.254.0/24
relayhost = [mail.server.de]
smtp_sasl_auth_enable = yes
smtp_sasl_security_options = noanonymous,noplaintext
smtp_sasl_password_maps = hash:/etc/postfix/saslpasswd
#----- schnapp --------
/etc/postfix/saslpasswd Zu Hause
#------ schnip -----------------
mail.server.de mein_login:mein_password
#----- schnapp --------
postmap /etc/postfix/saslpasswd und postfix reload ausgeführt
Soviel zu clientseite
Auf der Serverseite ist folgendes eingerichtet
/etc/postfix/main.cf Serverseite
#------ schnip -----------------
# appending .domain is the MUA's job.
append_dot_mydomain = no
myhostname = mail.server.de
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
virtual_maps = hash:/etc/postfix/virtual
sender_canonical_maps = hash:/etc/postfix/canonical
myorigin = /etc/mailname
mydestination = mail.server.de, server.de, localhost.server.de, localhost,
www.server.de
relayhost =
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
#SASL Parameter
smtpd_sasl_security_options = noanonymous
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
#SMTP over SSL-Parameter
smtpd_tls_cert_file = /etc/postfix/cert.pem
smtpd_tls_key_file = /etc/postfix/privkey.pem
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
tls_daemon_random_source = dev:/dev/urandom
default_privs = daemon
#Spamrestrictions
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_hostname
smtpd_sender_restrictions = permit_sasl_authenticated, check_sender_access
hash:/etc/postfix/access
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, check_relay_domains
#RegExp Checks
header_checks = regexp:/etc/postfix/header_checks
body_checks = regexp:/etc/postfix/body_checks
#----- schnapp --------
Reply to: