postfix relay access denied

Discussion in 'Server Operation' started by blocker, Sep 11, 2008.

  1. blocker

    blocker Member

    Hello,

    i have a new mailserver based on postfix.
    A little problem occurs. Existing users get "relay access denied" when sending mails from outside, when using localhost (webmail) there is no problem. If i add users IP in mynetworks it works also from outside, but this is not a comfortable solution for me. I would like my users to be able to send mails using my smtp from all over the world.
    Here is my main.conf

    Code:
    alias_database = hash:/etc/aliases
    alias_maps = hash:/etc/aliases
    append_dot_mydomain = no
    biff = no
    broken_sasl_auth_clients = yes
    config_directory = /etc/postfix
    inet_interfaces = all
    mailbox_command = procmail -a "$EXTENSION"
    mailbox_size_limit = 0
    message_size_limit = 20480000
    mydestination = server.domain.com, localhost.domain.com, localhost
    mydomain = server.domain.com
    myhostname = server.domain.com
    mynetworks = 127.0.0.0/8
    myorigin = server.domain.com
    recipient_delimiter = +
    relay_domains = proxy:mysql:/etc/postfix/mysql_relay_domains_maps.cf
    relayhost = 
    smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
    smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
    smtpd_data_restrictions = reject_unauth_pipelining
    smtpd_hard_error_limit = 10
    smtpd_helo_required = yes
    smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_hostname
    smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unlisted_recipient, check_recipient_access hash:/etc/postfix/reject_over_quota, check_sender_access hash:/etc/postfix/rbl_sender_exceptions, check_client_access hash:/etc/postfix/rbl_client_exceptions, check_recipient_access hash:/etc/postfix/rbl_recipient_exceptions, reject_rbl_client sbl-xbl.spamhaus.org, check_recipient_access hash:/etc/postfix/greylist_sender_exceptions, check_client_access cidr:/etc/postfix/cidr_greylist_network_exceptions, check_policy_service inet:127.0.0.1:12525, check_client_access pcre:/etc/postfix/check_client_fqdn
    smtpd_restriction_classes = check_greylist
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_authenticated_header = yes
    smtpd_sasl_local_domain = $myhostname
    smtpd_sasl_security_options = noanonymous
    smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/sender_access, reject_non_fqdn_sender, reject_unknown_sender_domain
    smtpd_soft_error_limit = 8
    smtpd_tls_CAfile = /etc/postfix/ssl/cacert.server.pem
    smtpd_tls_cert_file = /etc/postfix/ssl/cert.server.pem
    smtpd_tls_key_file = /etc/postfix/ssl/privkey.server.pem
    smtpd_tls_received_header = yes
    smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
    smtpd_use_tls = yes
    transport_maps = hash:/etc/postfix/transport
    virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf, hash:/etc/postfix/virtual
    virtual_gid_maps = static:6060
    virtual_mailbox_base = /var/vmail/
    virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
    virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
    virtual_minimum_uid = 6060
    virtual_transport = maildrop
    virtual_uid_maps = static:6060
    
    any ideas what i am missing?

    Thanks!
     
    Last edited: Sep 12, 2008
  2. falko

    falko Super Moderator Howtoforge Staff

    You must enable "Server requires authentication" in your email client.
     
  3. blocker

    blocker Member

    Hi Falko,

    thanks for your reply, enabling authentification in my mail client was the first thing i have done. I myself am using mozilla thunderbird under linux - under "Edit" / "Account Settings" / "Outgoing Server" i have added the mailserver and checked the "Use name and password" - of course i have added an existing username... but when trying to send mail using this smtp server i get "Relay access denied".... users using outlook are reporting the same problem...
    I suppose i am missing some option in the postfix config. Adding the client's IP to mynetworks is doing the job...

    Thanks
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    You will have to configure sasl so that it authenticaes against your mysql database. For the details, have a look at falkos postfix virtual user setup howto. He has written the howto for several linux distributions.
     
  5. _X_

    _X_ New Member

    if installed server was done with:
    The Perfect Server - Ubuntu Hardy Heron (Ubuntu 8.04 LTS Server)
    and ISPConfig after that
    do i need to do:
    Virtual Users And Domains With Postfix, Courier, MySQL And SquirrelMail (Ubuntu 8.04 LTS)
     
  6. blocker

    blocker Member

    no, ispconfig has its own mailsystem...

     
  7. falko

    falko Super Moderator Howtoforge Staff

    That setup is incompatible with ISPConfig.
     

Share This Page