Postfix Secure Email with ISPConfig

Discussion in 'Installation/Configuration' started by Brian_A, Apr 10, 2010.

  1. Brian_A

    Brian_A New Member

    Hi,

    We use email with an ISPConfig3 installation, up until now only on our local network and everything seems fine, but now we have clients who want to access their mail from outside our local network and they can send but not receive mail. These the postfix restrictions I have sent up in main.cf:

    ##Helo
    smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_hostname, reject_invalid_hostname, permit

    ##Sender
    smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, check_sender_access mysql:/etc/postfix/mysql-virtual_sender.cf, reject_non_fqdn_sender, reject_unknown_sender_domain, permit

    ##Recipient
    smtpd_recipient_restrictions = reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_rbl_client cbl.abuseat.org, reject_rbl_client sbl-xbl.spamhaus.org, permit

    ##Client
    smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access mysql:/etc/postfix/mysql-virtual_client.cf

    Is the problem here or should I look elsewhere? I can see nothing that indicates a problem in the ISPConfig mail logs.

    Any help or advice is very welcome.

    Brian
     
    Brian_A, Apr 10, 2010
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Which exact messages appear in the mail log when you send a email to the account.
     
    till, Apr 10, 2010
    #2
  3. Brian_A

    Brian_A New Member

    Hi

    I just sent one of our remote clients ([email protected]) a mail. This is from the mail log:-

    Apr 10 13:26:37 styleserver02 pop3d: LOGOUT, [email protected], ip=[::ffff:192.168.1.1], port=[2290], top=0, retr=2795, rcvd=40, sent=3032, time=0
    Apr 10 13:28:59 styleserver02 postfix/anvil[9761]: statistics: max connection rate 1/60s for (smtp:78.46.230.211) at Apr 10 13:21:38
    Apr 10 13:28:59 styleserver02 postfix/anvil[9761]: statistics: max connection count 1 for (smtp:78.46.230.211) at Apr 10 13:21:38
    Apr 10 13:28:59 styleserver02 postfix/anvil[9761]: statistics: max cache size 2 at Apr 10 13:21:38
    Apr 10 13:29:06 styleserver02 postfix/smtpd[10602]: connect from unknown[192.168.1.1]
    Apr 10 13:29:06 styleserver02 postfix/smtpd[10602]: 1A21411A8A1C: client=unknown[192.168.1.1], sasl_method=LOGIN, [email protected]
    Apr 10 13:29:06 styleserver02 postfix/cleanup[10606]: 1A21411A8A1C: message-id=<[email protected]>
    Apr 10 13:29:06 styleserver02 postfix/qmgr[6500]: 1A21411A8A1C: from=, size=2484, nrcpt=1 (queue active)
    Apr 10 13:29:06 styleserver02 postfix/smtpd[10610]: connect from localhost.localdomain[127.0.0.1]
    Apr 10 13:29:06 styleserver02 postfix/smtpd[10610]: 47F5211A8A27: client=localhost.localdomain[127.0.0.1]
    Apr 10 13:29:06 styleserver02 postfix/cleanup[10606]: 47F5211A8A27: message-id=<[email protected]>
    Apr 10 13:29:06 styleserver02 postfix/qmgr[6500]: 47F5211A8A27: from=, size=2996, nrcpt=1 (queue active)
    Apr 10 13:29:06 styleserver02 postfix/smtpd[10610]: disconnect from localhost.localdomain[127.0.0.1]
    Apr 10 13:29:06 styleserver02 amavis[1627]: (01627-14) Passed CLEAN, LOCAL [192.168.1.1] [192.168.1.1] -> , Message-ID: <[email protected]>, mail_id: wDb79t+3BU8t, Hits: -1.917, size: 2484, queued_as: 47F5211A8A27, 170 ms
    Apr 10 13:29:06 styleserver02 postfix/smtp[10607]: 1A21411A8A1C: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=0.21, delays=0.03/0.01/0/0.17, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=01627-14, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 47F5211A8A27)
    Apr 10 13:29:06 styleserver02 postfix/qmgr[6500]: 1A21411A8A1C: removed
    Apr 10 13:29:06 styleserver02 postfix/pipe[10611]: 47F5211A8A27: to=, relay=maildrop, delay=0.05, delays=0.01/0.01/0/0.04, dsn=2.0.0, status=sent (delivered via maildrop service)
    Apr 10 13:29:06 styleserver02 postfix/qmgr[6500]: 47F5211A8A27: removed
    Apr 10 13:29:08 styleserver02 postfix/smtpd[10602]: disconnect from unknown[192.168.1.1]
    Apr 10 13:30:01 styleserver02 postfix/smtpd[10602]: connect from localhost.localdomain[127.0.0.1]
    Apr 10 13:30:01 styleserver02 postfix/smtpd[10602]: lost connection after CONNECT from localhost.localdomain[127.0.0.1]
    Apr 10 13:30:01 styleserver02 postfix/smtpd[10602]: disconnect from localhost.localdomain[127.0.0.1]
    Apr 10 13:30:01 styleserver02 pop3d: Connection, ip=[::1]
    Apr 10 13:30:01 styleserver02 pop3d: Disconnected, ip=[::1]

    Brian
     
    Brian_A, Apr 10, 2010
    #3
  4. Brian_A

    Brian_A New Member

    Hi,

    I found some problems elsewhere and solved them. Now we have everything working, so the smptd restrictions seem to be good. Next step for us is to try to implement greylisting so any advice on that from anyone whose already done it with IPSConfig3 would be a great help.

    Thanks
    Brian
     
    Brian_A, Apr 10, 2010
    #4

Share This Page