PDA

View Full Version : Question on postfix with postgrey and DNS


schmidtedv
31st July 2008, 00:13
Well, i installed my new server and already configured my domain.de for it with info@domain.de and some aliases. I already get some mails on the server but some still reach the old server, too. I guess only some DNS-Servers have noticed the IP-changes for domain.de....however, my mail.log now gehts some maybe important greylistings:


Jul 30 13:34:42 000-00-000-00 postfix/smtpd[20835]: NOQUEUE: reject: RCPT from s15299956.rootmaster.info[213.165.86.132]: 450 4.7.1 <info@domain.de>: Recipient address rejected: Greylisted, see http://isg.ee.ethz.ch/tools/postgrey/help/domain.de.html; from=<oqalligator@austincpaac.com> to=<info@domain.de> proto=ESMTP helo=<s15299956.rootmaster.info>
Jul 30 13:34:42 000-00-000-00 postfix/smtpd[20835]: disconnect from s15299956.rootmaster.info[213.165.86.132]


I'm not shure how to understand this line. does it mean that my mailaddress info@domain.de is blocked or that the mail from 213.165.86.132 is paused but has a mail for info@domain.de???

As a tuning here i did some changes in main.cf that would be great if someone could take a view at, if these are ok for an PIII 733Mhz 256MB dealing probably only with my own domain (that for instance I used 100MB as MaxSize for a Mail...high but I might use it and nobody else will send mails except me...hopefully):


smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
append_dot_mydomain = no
smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_auth_only = no
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
tls_random_source = dev:/dev/urandom
qmgr_fudge_factor = 70
message_size_limit = 102400000
bounce_template_file = /etc/postfix/bounce.cf
delay_warning_time = 30m
bounce_queue_lifetime = 3d
maximal_queue_lifetime = 3d
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_helo_required = yes
disable_vrfy_command = yes
strict_rfc821_envelopes = yes
invalid_hostname_reject_code = 554
multi_recipient_bounce_reject_code = 554
non_fqdn_reject_code = 554
relay_domains_reject_code = 554
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_local_recipient_reject_code = 554
unknown_relay_recipient_reject_code = 554
unknown_sender_reject_code = 554
unknown_virtual_alias_reject_code = 554
unknown_virtual_mailbox_reject_code = 554
unverified_recipient_reject_code = 554
unverified_sender_reject_code = 554
smtpd_client_restrictions =
smtpd_helo_restrictions =
smtpd_sender_restrictions =
smtpd_recipient_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
check_policy_service inet:127.0.0.1:60000,
reject_unauth_pipelining,
reject_invalid_hostname,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
permit
myhostname = 000-00-000-00.internetserviceteam.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = /etc/postfix/local-host-names
relayhost =
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all
virtual_maps = hash:/etc/postfix/virtusertable

till
31st July 2008, 09:02
I understand this message as mail to info@domain.de is greylisted and thats the way I would expect it to work.

If your old server is still running, you might use e.g. postfix transports to forward all mail to the new server.