Question on Virtual Users And Domains With Postfix, Courier And MySQL (Debian Etch)

[Horizon]

The message you have entered is too short. Please lengthen your message to at least 10 characters.

[falko]

You can use any email client (such as Thunderbird, Evolution, Outlook, etc.) for it. As SMTP- and POP3 server you can use any FQDN or IP address that's pointing to your server; the username is the email address, and then you need the password for that account. Don't forget to enable "Server requires authentication".

[Horizon]

Edit: the current situation is almost completely working! :D I got the virtual user logins and such checked out (just a note, maybe clarify the bit about mailbox setup in /home/vmail - I had to make the domain folder and the user folder, then send an email to the account so all the courier stuff got made)

Right now I have Thunderbird talking to them and retrieving emails just fine, however it seems that sending mail from inside Thunderbird doesn't work.

I'm guessing this has to do with the listening on local ports or something, is there a way I can open it up to allow me to send through thunderbird?

It just hangs for a minute or two, then gives me this message:
Sending of message failed.
The message could not be sent because connecting to the SMTP server scriptsamurai.com failed. [...]

[falko]

I had to make the domain folder and the user folder, then send an email to the account so all the courier stuff got made)The folders are created automatically when you send the first email to that account.

Right now I have Thunderbird talking to them and retrieving emails just fine, however it seems that sending mail from inside Thunderbird doesn't work.

I'm guessing this has to do with the listening on local ports or something, is there a way I can open it up to allow me to send through thunderbird?

It just hangs for a minute or two, then gives me this message:
Sending of message failed.
The message could not be sent because connecting to the SMTP server scriptsamurai.com failed. [...]What's the output of netstat -tap and iptables -L?

[Horizon]

Netstat at:
http://s3rve.com/netstat.txt

And the iptables output:

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

[falko]

The outputs look ok.
Is scriptsamurai.com pointing to the correct server? Have you tried to use the server's IP address in your email client instead of a domain name?

[Horizon]

No, I haven't. I'll try that now. Also, I just had a problem crop up - Clam AV would hang or something and crash hard, making all my mail not get delivered, so it just sat in queue. What I did to fix it was disable antivirus scanning and flush the queue. I'm going to re-enable antivirus scanning in a minute, but have you heard of this happening before?

Edit: Just tried with my server IP, still no dice on sending out. I should be setting up thunderbird to send out on port 25, right?

Edit: After some more tinkering, the issue with the Clam hang is still an issue. :D I've got it disabled right now (re-commented the antivirus line in /etc/amavis/conf.d/15-content_filter_mode) so mail is delivering properly and such, but I'd like to be able to enable scanning. It just hangs really bad and I get errors in /var/log/mail.log about "all antivirus scanners failed" and it taking longer than 315s to execute and will be killed. top shows a clam process or two that are really CPU-intensive, over 100% CPU usage. I thought maybe it was an issue with my mail queue - maybe a file got sent in that was too large or something? - so I cleared out the mail queue with postsuper. Going to try re-enabling it in a bit.

[falko]

Is your server in a local network, or is it connected directly to the internet?
If it's in a local network, have you tried the server private IP address or the public IP address of your router?

[Horizon]

It's a remote server connected to the internet in a datacenter. I've tried two domain names and the IP address. Everything else works fine, it's JUST the connecting to the server to send outgoing mail from within Thunderbird. If I'm on the server as a real user in SSH, I can send from mutt/mail fine, but it shows up as the default hostname for my @ address, not the virtual host I want.

[falko]

I can connect:
mh1:~# telnet scriptsamurai.com 25
Trying 67.207.134.15...
Connected to scriptsamurai.com.
Escape character is '^]'.
220 s3rve.com ESMTP Postfix (Debian/GNU)
ehlo localhost
250-s3rve.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
quit
221 2.0.0 Bye
Connection closed by foreign host.
mh1:~#Maybe it'S a problem with your local firewall? Have you tried to connect from another computer?

[Horizon]

That's weird. I've tried from two different computers, and I can get into everything else on the server just fine, it's just the port 25 for outgoing mail that seems to hang. Maybe it's something with Thunderbird. I'll look into it some more, thanks.

Edit: I just tried it from my work computer running Ubuntu 7.10, I do:
telnet scriptsamurai.com 25
it resolves the IP properly, then just hangs there indefinitely.

Same thing happens with my home computer running 7.10. My dev server at home running CentOS 5 gets:

[horizon@sisyphus ~]$ telnet scriptsamurai.com 25
Trying 67.207.134.15...
telnet: connect to address 67.207.134.15: Connection refused
telnet: Unable to connect to remote host: Connection refused

The windows XP machine I have at work also just hangs. Is there a way I can check on my server what's getting refused? It seems like a firewall issue on the server side, since it's from a few different computers. I have no idea why it would let you connect but not me. :/ I don't run a firewall on the server, and I run one on the desktop at home but not any of these other machines I've tried.

[falko]

I'm still able to connect, so I guess it's some kind of firewall problem on your client PCs. Do you use personal firewalls?
If you're using tools like DenyHosts or fail2ban, did you maybe lock yourself out?

[Horizon]

I use moblock on one, nothing on the other two, and I disabled moblock when I tried it. I don't think I'm using anything on the server that would've locked me out - I just followed the tutorials you had up. Any idea on how I can dump the firewall rules, maybe, and make sure? I can get into everything else on the server from all the machines I've tested, it just hangs trying to telnet port 25. SSH, HTTP/S, Icecast, all that still works fine. :S

Edit: Turns out my ISP blocks outgoing traffic on port 25 at the cable modem level. Fantastic. :D

Edit: Just to let you know, did get this resolved - set up an iptables port forward on the server to run :2525 to :25 and got around my ISP block that way. Thanks for all the help!