Postfix NOQUEUE: reject: RCPT error

NX-01 · 05-28-2009, 02:14 AM

I've got a bit of problem with my postfix server. I had it working once and now it's throwing NOQUEUE: reject: RCPT errors int /var/log/maillog. Here's the output of postconf -n:

Code:

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailbox_command = 
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = buttonhost.net
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = 
smtpd_sasl_security_options = noanonymous
unknown_local_recipient_reject_code = 550

I've Googled the error and tried a couple of fixes to no avail. This is a CentOS 5.3 VM. I've got another postfix server on another VM on the same machine that works fine, however, and this is a weird thing, if I email the VM with the borked postfix server from the one with the working postfix server the borked one returns an error saying "mail for buttonhost.net loops back to myself" even though two different TLDs point to each VM (and each have completely independent public facing static IPs). I could just be missing something stupid and easy ...

Thanks!

billymayday · 05-28-2009, 02:39 AM

What are the hostnames and domainnames for both servers, and what happens when you dig each hostname on each machine?

chitambira · 05-28-2009, 06:29 AM

post the full maillog, i want to see the domain for which RCPT is rejected.

NX-01 · 05-28-2009, 10:59 AM

Quote:

Originally Posted by chitambira

post the full maillog, i want to see the domain for which RCPT is rejected.

Here's a portion of the mailllog with a rejection in it:

Code:

May 28 03:00:34 webhost1 postfix/smtpd[4761]: connect from qw-out-2122.google.com[74.125.92.25]
May 28 03:00:34 webhost1 postfix/smtpd[4761]: NOQUEUE: reject: RCPT from qw-out-2122.google.com[74.125.92.25]: 554 5.7.1 <webadmin@buttonhost.net>: Relay access denied; from=<leanderhutton@gmail.com> to=<webadmin@buttonhost.net> proto=ESMTP helo=<qw-out-2122.google.com>
May 28 03:00:34 webhost1 postfix/smtpd[4761]: disconnect from qw-out-2122.google.com[74.125.92.25]

That's from me attempting to send it an email from my Gmail account.

NX-01 · 05-28-2009, 11:03 AM

Quote:

Originally Posted by billymayday

What are the hostnames and domainnames for both servers, and what happens when you dig each hostname on each machine?

The one with the busted postfix is buttonhost.net the one with the working postfix is one-button.org. Here's the output from a dig on my local machine:

Code:

$ dig buttonhost.net

; <<>> DiG 9.4.3-P1 <<>> buttonhost.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57724
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;buttonhost.net.			IN	A

;; ANSWER SECTION:
buttonhost.net.		28549	IN	A	74.81.191.68

;; AUTHORITY SECTION:
buttonhost.net.		28549	IN	NS	ns3.dnsexit.com.
buttonhost.net.		28549	IN	NS	ns1.dnsexit.com.
buttonhost.net.		28549	IN	NS	ns2.dnsexit.com.
buttonhost.net.		28549	IN	NS	ns4.dnsexit.com.

;; Query time: 2 msec
;; SERVER: 152.10.248.40#53(152.10.248.40)
;; WHEN: Thu May 28 11:58:44 2009
;; MSG SIZE  rcvd: 131

$ dig one-button.org

; <<>> DiG 9.4.3-P1 <<>> one-button.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63994
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 0

;; QUESTION SECTION:
;one-button.org.			IN	A

;; ANSWER SECTION:
one-button.org.		28800	IN	A	74.81.191.66

;; AUTHORITY SECTION:
one-button.org.		28800	IN	NS	ns1.dnsexit.com.
one-button.org.		28800	IN	NS	ns3.dnsexit.com.
one-button.org.		28800	IN	NS	ns2.dnsexit.com.
one-button.org.		28800	IN	NS	ns4.dnsexit.com.

;; Query time: 75 msec
;; SERVER: 152.10.248.40#53(152.10.248.40)
;; WHEN: Thu May 28 11:58:53 2009
;; MSG SIZE  rcvd: 131

The canoical hostnames are webhost1 (for buttonhost) and demoman (for one-button) but these aren't actually used in from the outside world.

chitambira · 05-28-2009, 11:40 AM

Quote:

mydestination = $myhostname, localhost.$mydomain, localhost

You should include $mydomain in your $mydestination to tell postfix that your domain is a local, allowed destination, so it should look like:

Quote:

mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain

NX-01 · 05-28-2009, 11:23 PM

Quote:

Originally Posted by chitambira

You should include $mydomain in your $mydestination to tell postfix that your domain is a local, allowed destination, so it should look like:

That fixed it, thanks!

billymayday · 05-28-2009, 11:43 PM

Yeah - good call. Missed that one.