LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 04-29-2010, 09:55 AM   #1
SteveInTallyFL
Member
 
Registered: May 2008
Location: Tallahassee, FL
Distribution: RHEL4, RHEL 5, OEL4, OEL5
Posts: 65

Rep: Reputation: 17
Question Postfix + sasl relay rejections


I finally gave up on sendmail for relay to smtp external MTA and installed postfix. Still have not figured out how to reliably configure so the relay host will accept the message and send on.

My test message is a simple
Quote:
echo "blah blah"|mailx -s Server_Test me@my_mail_destination
The log for the test looks like this:
Quote:
Apr 29 10:00:12 bog-sas-02 postfix/cleanup[6564]: DE64B5AA28: message-id=<20100429140012.DE64B5AA28@bog-sas-02.here.org>
Apr 29 10:00:12 bog-sas-02 postfix/qmgr[21393]: DE64B5AA28: from=<sas_do_not_reply@here.net>, size=365, nrcpt=1 (queue active)
Apr 29 10:00:13 bog-sas-02 postfix/smtp[6566]: DE64B5AA28: to=<me@my_mail_destination>, relay=smtp.emailsrvr.com[98.129.185.2], delay=1, status=bounced (host smtp.emailsrvr.com[98.129.185.2] said: 554 5.7.1 <sas_do_not_reply@here.net>: Sender address rejected: Access denied (in reply to RCPT TO command))
Apr 29 10:00:13 bog-sas-02 postfix/qmgr[21393]: DE64B5AA28: removed
The user sending the message is "sas"
The postfix configuration has a canonical.db:
Quote:
sas@bog-sas-02.here.org sas_do_not_reply@here.net
sas@here.org sas_do_not_reply@here.net
sas sas_do_not_reply
There is a sasl_passwd.db file that is correct.
The postfix configuration includes:
Quote:
sender_canonical_maps = hash:/etc/postfix/canonical
myhostname = bog-sas-02.here.org
mydomain = here.org
myorigin = $mydomain
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
relayhost = smtp.emailsrvr.com
smtp_sasl__auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
The relay mail support folks tell me:
Quote:
My best guess is that during the SMTP transaction the postfix server is using something else when sending.

During the SMTP transaction the server will issue the following command.

mail from:<user@address.tld>

This is the address that our servers check against. If the script is running as root it's most likely coming from root@ or apache@ or something along those lines. I would add those as aliases in our system so that when your server connects and issues the mail from command it's not being bounced.

What you are telling postfix to do is to send as an address and it would change the FROM: "Name here <user@domain.tld>" Which will make the display, and reply to change in most email clients. However our system runs strictly off of the "mail from:<user@domain.tld>" command during telnet.
Which I do not understand!
Can anyone explain what I am missing here and what I should do differently?

Thanks.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Postfix/SASL/MySQL "SASL LOGIN authentication failed" Temujin_12 Linux - Server 8 10-04-2008 10:37 PM
Postfix Relay Getting Spammed Bad -- But no open relay... ihod2008 Linux - Server 1 07-26-2008 08:24 PM
postfix relay problems with SASL authentication & TLS climbingmerlin Linux - Software 0 04-05-2006 08:55 AM
Postfix as a mail relay (getting relay access denied) hypexr Linux - Software 3 09-13-2005 07:15 PM
sasl/postfix smtp relay problems 5teve-o Red Hat 0 04-02-2005 03:50 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 01:15 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration