[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Network is unreachable email error



On 12/12/07, Mihira Fernando <mihiratheace@gmail.com> wrote:
> hce wrote:
> >
> > $ /usr/sbin/postconf -n
> > alias_database = hash:/etc/aliases
> > alias_maps = hash:/etc/aliases
> > append_dot_mydomain = yes
> > biff = no
> > canonical_maps = hash:/etc/postfix/canonical
> > config_directory = /etc/postfix
> > inet_interfaces = loopback-only
> > inet_protocols = ipv4
> > mailbox_size_limit = 51200000
> > masquerade_domains = bizmail.com.au
> > mydestination = mail.bizmail.com.au
> > myhostname = debian
> > mynetworks = 127.0.0.0/8
> > myorigin = /etc/mailname
> > recipient_delimiter = +
> > relayhost =
> > smtp_sasl_auth_enable = yes
> > smtp_sasl_mechanism_filter = login
> > smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
> > smtp_sasl_security_options = noanonymous
> > smtp_sasl_type = cyrus
> > smtp_tls_CApath = /etc/ssl/certs
> > smtp_tls_security_level = may
> > smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
> > smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
> > smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
> > smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
> > smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
> > smtpd_use_tls = yes
> >
> > The bizmail.com.au is wrong, it was my old ISP, but I could not find
> > where the parameters get it from?
> Most likely this is in your main.cf
>
> >
> > I only use one file mailname and I have changed mailname to
> > smtp.gmail.com:587, but still got port 25:
> What is mailname ? are you referring to /etc/mailname ?
> Your postfix configuration doesnt seem to be using any file called mailname so
> changing that will not help you.
> >
> > Dec 11 22:07:47 debian postfix/smtp[5598]: connect to
> > mailc.microsoft.com[131.107.115.214]: Network is unreachable (port 25)
> Because you're not using a relayhost, Postfix is trying to send the mail
> directly to the recipient's mailserver and since your ISP is blocking port 25,
> Postfix cannot access it.
>
> >
> > That's correct. I've only got three files contains specific mail
> > information in postfix:
> >
> > 1. mailname: smtp.gmail.com:587
> Again, what is this file ? where is it located ?
> >
> > 2. canonical
> >
> > yh      webmail.hce@gmail.com
> > root        webmail.hce@gmail.com
> >
> > 3. sasl_passwd
> >
> > smtp.gmail.com  webmail.hce@gmail.com:mypassword
> >
> > That was working fine to my previous ISP bizmail.com.au, or may be
> > because the postfix config set to:
> >
> > masquerade_domains = bizmail.com.au
> > mydestination = mail.bizmail.com.au
> >
> > I could not find postfix.conf, and where I can change those parameers?
> /etc/postfix/main.cf is the place to change these parameters.
>
> If your postfix version is > 2.3 you can use the postconf -e command to edit the
> main.cf like this:
> postconf -e parameter_name=value
>
> Try the following (as root) :
>
> # postconf -e relayhost=[smtp.gmail.com]:587
>
> To remove the masquerades :
> # postconf -e masquerade_domains=
>
> Since you're not mail.bizmail.com.au, change mydestination to either your FQDN
> and/or simply localhost.
>
> # postconf -e mydestination=localhost
>
> Now reload Postfix:
>
> # postfix reload
>
> That should get things moving.

Almost, but it has following error for certificates, it seems that was
a ssl proglem, but I don't know how to fix it:

Dec 12 21:50:42 debian postfix/master[2740]: reload configuration /etc/postfix
Dec 12 21:50:42 debian postfix/qmgr[4881]: B7BFE62:
from=<webmail.hce@gmail.com>, size=455, nrcpt=1 (queue active)
Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=20:unable to get local issuer
certificate
Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=27:certificate not trusted
Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=21:unable to verify the first
certificate
Dec 12 21:50:46 debian postfix/smtp[4884]: warning: SASL
authentication failure: No worthy mechs found
Dec 12 21:50:46 debian postfix/smtp[4884]: B7BFE62: SASL
authentication failed; cannot authenticate to server
smtp.gmail.com[64.233.167.109]: no mechanism available
Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=20:unable to get local issuer
certificate
Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=27:certificate not trusted
Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=21:unable to verify the first
certificate
Dec 12 21:50:50 debian postfix/smtp[4884]: warning: SASL
authentication failure: No worthy mechs found
Dec 12 21:50:50 debian postfix/smtp[4884]: B7BFE62:
to=<webmail.hce@gmail.com>, relay=smtp.gmail.com[64.233.167.111]:587,
delay=1022, delays=1015/0.17/7.1/0, dsn=4.7.0, status=deferred (SASL
authentication failed; cannot authenticate to server
smtp.gmail.com[64.233.167.111]: no mechanism available)


I should clarify that my main.cf was copied from a friend's Ubuntu
machine. Not sure if something was missing? I did check that
/etc/ssl/certs/ssl-cert-snakeoil.pem and
/etc/ssl/private/ssl-cert-snakeoil.key did exist.

$ sudo /usr/sbin/postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = yes
biff = no
canonical_maps = hash:/etc/postfix/canonical
config_directory = /etc/postfix
inet_interfaces = loopback-only
inet_protocols = ipv4
mailbox_size_limit = 51200000
masquerade_domains = localhost
mydestination =
myhostname = debian
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost = smtp.gmail.com:587
smtp_sasl_auth_enable = yes
smtp_sasl_mechanism_filter = login
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_sasl_type = cyrus
smtp_tls_CApath = /etc/ssl/certs
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes


 How can I fix it?

Thank you.

Jim



Reply to: