Relay Access Denied, Postfix, RHEL5

baps123 · 04-19-2010, 02:26 AM

we having postfix installed as our smtp server in rhel5, but intermittently my users complaining of getting "Recipient address rejected: Relay access denied" message whenever they try to send mail to outside domains.

Due to unavoidable circumstances I don't know whether my mail server configuration has been changed or nor.

Please help me out in resolving the issue at the earliest

My maillog showing log as shown below

Quote:

Apr 19 11:27:30 smtp1 postfix/smtpd[25560]: NOQUEUE: reject: RCPT from unknown[59.99.50.252]: 554 5.7.1 <xyz@huge.in>: Recipient address rejected: Relay access denied; from=<prabin.bhatta@xyz.com> to=<akumar.cns@hughes.in> proto=ESMTP helo=<Prabin>
Apr 19 11:27:31 smtp1 postfix/smtpd[25560]: NOQUEUE: reject: RCPT from unknown[59.99.50.252]: 554 5.7.1 <xyz@huge.in>: Recipient address rejected: Relay access denied; from=<prabin.bhatta@xyz.com> to=<ayadav.cns@hughes.in> proto=ESMTP helo=<Prabin>

My /etc/postfix/main.cf is given below

Quote:

myhostname = smtp1.xyz.co.in
mydomain = xyz.co.in
local_recipient_maps = $virtual_mailbox_maps

virtual_mailbox_base = /home/vmail
virtual_mailbox_maps = ldap:/etc/postfix/ldap_usr.cf
virtual_uid_maps = static:1000
virtual_gid_maps = static:1000
virtual_minimum_uid = 100
virtual_result_attribute = mailMessageStore
virtual_maildir_extended = yes
mynetworks = 127.0.0.0/8, 192.168.10.0/24, 192.168.1.0/24, 192.168.3.0/25, 192.168.4.0/24, 172.21.10.0/24, 172.21.1.0/24, 172.21.15.0/24, 172.21.16.0/25
relay_domains = xyz.co.in, abc.com
message_size_limit = 15728640
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = hash:/etc/postfix/virtual
relay_recipient_maps = hash:/etc/postfix/relay_recipients
alias_maps = hash:/etc/aliases
smtpd_client_restrictions = check_client_access hash:/etc/postfix/client_access, permit_sasl_authenticated

smtpd_helo_required = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes

disable_vrfy_command = yes

smtpd_restriction_classes = only_allow_mail, permitted_senders_central_group, permitted_vle_all,permitted_statewise_vle_all, hrto_sabahat_block,permitted_up_
all

only_allow_mail =
check_sender_access hash:/etc/postfix/rest_access
reject

permitted_senders_central_group =

check_sender_access hash:/etc/postfix/permitted_senders_centalgroup
reject

permitted_vle_all =
check_sender_access hash:/etc/postfix/vle_all_access
reject

permitted_statewise_vle_all =
check_sender_access hash:/etc/postfix/statewise_vle_all_access
reject

hrto_sabahat_block =
check_sender_access hash:/etc/postfix/hr_sabahat_blockf
reject

permitted_up_all =
check_sender_access hash:/etc/postfix/permitted_up_all_corporate
reject

smtpd_recipient_restrictions =
hash:/etc/postfix/protected_recipients_central
hash:/etc/postfix/protected_destinations
hash:/etc/postfix/access_vle_all
hash:/etc/postfix/access_statewise_vle_all
hash:/etc/postfix/sabahat_destacl
hash:/etc/postfix/up_all_corporate
permit_mynetworks
check_relay_domains

unknown_client_reject_code = 550
unknown_local_recipient_reject_code = 550
smtpd_hard_error_limit = 3
smtp_connect_timeout = 60s

header_checks = regexp:/etc/postfix/header_checks2, regexp:/etc/postfix/header_checks_porn

sender_bcc_maps = hash:/etc/postfix/sender_bcc

smtpd_data_restrictions = reject_unauth_pipelining
smtp_connect_timeout=15s
smtp_helo_timeout=400s

readme_directory = no
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
html_directory = no
setgid_group = postdrop
command_directory = /usr/sbin
manpage_directory = /usr/local/man
daemon_directory = /usr/libexec/postfix
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
queue_directory = /var/spool/postfix
mail_owner = postfix

please

centosboy · 04-19-2010, 03:57 AM

Quote:

Originally Posted by baps123

we having postfix installed as our smtp server in rhel5, but intermittently my users complaining of getting "Recipient address rejected: Relay access denied" message whenever they try to send mail to outside domains.

Due to unavoidable circumstances I don't know whether my mail server configuration has been changed or nor.

Please help me out in resolving the issue at the earliest

My maillog showing log as shown below

My /etc/postfix/main.cf is given below

please

read this

Code:

# The mynetworks parameter specifies the list of "trusted" SMTP
# clients that have more privileges than "strangers".
#
# In particular, "trusted" SMTP clients are allowed to relay mail
# through Postfix.  See the smtpd_recipient_restrictions parameter
# in postconf(5).
#
# You can specify the list of "trusted" network addresses by hand
# or you can let Postfix do it for you (which is the default).

so in theory, you want to specify the addresses that are allowed to relay via this server.

add relevant ip(s) to here.

Code:

mynetworks = 127.0.0.0/8, 192.168.10.0/24, 192.168.1.0/24, 192.168.3.0/25, 192.168.4.0/24, 172.21.10.0/24, 172.21.1.0/24, 172.21.15.0/24, 172.21.16.0/25

restart postfix

baps123 · 04-19-2010, 05:30 AM

I am not getting you, what ip I should put there.

I tried using below line

Code:

mynetworks = 127.0.0.0/8, 192.168.10.0/24

But to no avail

Please elaborate on this

moimel · 04-19-2010, 07:53 AM

Do as followes if you want to permit all hosts to be relayed:

Edit main.cf, set relay_domains to:
relay_domains = regexp:/etc/postfix/relay_domains

in /etc/postfix/relay_domains:
/[A-Z0-9.-]+\.[A-Z]{2,4}/ OK

restart