HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)
-   -   Postfix reject connections (http://www.howtoforge.com/forums/showthread.php?t=9744)

gabrix 12th January 2007 08:41

Postfix reject connections
 
Postfix allow logins but rejects extra lan connections for 2 diferent reasons looking at logs,first log a connection from gmail me sending a test mail:
Code:

Jan 12 06:39:04 mail postfix/smtpd[10109]: connect from ug-out-1314.google.com[66.249.92.175]
Jan 12 06:39:12 mail postfix/smtpd[10109]: NOQUEUE: reject: RCPT from ug-out-1314.google.com[66.249.92.175]: 554 <gabrix@gabrix.ath.cx>: Relay access denied; from=<sickuser@gmail.com> to=<gabrix@gabrix.ath.cx> proto=ESMTP helo=<ug-out-1314.google.com>
Jan 12 06:39:14 mail postfix/smtpd[10109]: disconnect from ug-out-1314.google.com[66.249.92.175]

the other kind of reject:
Code:

Jan 12 07:21:36 mail postfix/smtp[10968]: 962EF1BF80: to=<gabrix@gabrix.ath.cx>, relay=none, delay=1879, status=deferred (connect to gabrix.ath.cx[82.61.94.18]: Connection refused
I'm not using any kind of fancy configuration option keeping configuration as minimum as possible this is a postconf -n:
Code:

root@mail:~# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
delay_warning_time = 4h
home_mailbox = Maildir/
inet_interfaces = all
mailbox_size_limit = 0
mydestination = mail.gabrix.ath.cx, localhost.gabrix.ath.cx, argo, localhost
myhostname = mail.gabrix.ath.cx
mynetworks = 192.168.1.1/32,192.168.1.0/24,192.168.0.0/24,127.0.0.1/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtpd_banner = $myhostname ESMTP $mail_name

Thanks for help !

gabrix 12th January 2007 23:18

I got my mail system working this is the main.cf
Quote:

root@mail:~# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
delay_warning_time = 4h
home_mailbox = Maildir/
inet_interfaces = all
mailbox_size_limit = 0
mydestination = $mydomain, mail.gabrix.ath.cx, localhost.gabrix.ath.cx, argo, localhost
mydomain = gabrix.ath.cx
myhostname = mail.gabrix.ath.cx
mynetworks = 192.168.1.1/32,192.168.1.0/24,192.168.0.0/24,127.0.0.1/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtpd_banner = $myhostname ESMTP $mail_name

gabrix 13th January 2007 09:13

False allarm ! Maybe i hoped it was sorted but never say cat if it's not in the sac ... ? whatever ... Looking at logs the error is always a name resolution for interfaces i suppose , that smtpd_peer_init !
Quote:

Jan 13 01:12:04 mail postfix/smtpd[9522]: warning: smtpd_peer_init: 208.67.35.129: address not listed for hostname router.xaverian.org
Jan 13 04:01:22 mail postfix/smtpd[7470]: warning: smtpd_peer_init: 192.168.1.1: address not listed for hostname argo
Jan 13 04:01:22 mail postfix/smtpd[7470]: warning: smtpd_peer_init: 192.168.1.1: address not listed for hostname argo
The main.cf is the one you see in the previous post above do you want me to post the /etc/hosts of the mail server or the gateway machine ?They are basically the same:
Quote:

127.0.0.1 localhost.localdomain localhost
192.168.0.1 netgear router
192.168.0.2 argo.gabrix.ath.cx argo
192.168.1.1 argo
192.168.1.4 www.gabrix.ath.cx ftp.gabrix.ath.cx obefpldcq2yrz76y.onion irc.gabrix.$
192.168.1.6 mail.gabrix.ath.cx tor.gabrix.ath.cx cilentomalia.gabrix.ath.cx printer.gabrix.ath.cx m$
192.168.1.3 win WIN gabrix
192.168.1.2 makintoxik mac

martinfst 13th January 2007 12:15

Did you setup a DNS server for your local lan 192.168.*.*? Looks like the name resolving and Reverse Name resolving is causing you problems.

Personally, I use a local DNS server to manage a xxxx.loc domain on a 172.16 IP range. It also serves rDNS requests to keep several packages happy that "require" valid responses to a rDNS request. I believe the smtpd deamon of postfix is such a program.

gabrix 13th January 2007 12:22

Sure i do use dnsmasq ... serving names on the lan interface ...

falko 13th January 2007 16:10

Please try this:
Code:

postconf -e 'disable_dns_lookups = yes'
and restart Postfix.

gabrix 13th January 2007 17:57

Great falko ... i was right thinking to something like that i will let you know if it worked !

gabrix 15th January 2007 19:02

Bad news still same error ... dns are set and i'm generally suffering of slow internet even browsing.
Quote:

root@mail:~# tail -f /var/log/mail/warn
Jan 15 15:02:56 mail postfix/smtpd[21649]: warning: smtpd_peer_init: 192.168.1.1: address not listed for hostname argo
There is a problem apart from postfix i think:
Quote:

Jan 15 15:11:09 mail postfix/smtp[21742]: B41C81BFD3: to=<gabryfor@alice.it>, relay=none, delay=58882, status=deferred (connect to alice.it[217.169.121.251]: Connection timed out)
Jan 15 15:11:37 mail postfix/smtp[21734]: connect to gmail.com[64.233.161.83]: Connection timed out (port 25)
Jan 15 15:12:07 mail postfix/smtp[21734]: connect to gmail.com[216.239.57.83]: Connection timed out (port 25)
Jan 15 15:12:07 mail postfix/smtp[21734]: 006451BFD0: to=<sickuser@gmail.com>, relay=none, delay=59779, status=deferred (connect to gmail.com[216.239.57.83]: Connection timed out)
I'm using as dns the opendns service could it be the cause ?

falko 16th January 2007 16:31

Please check if your server is blacklisted: http://www.mxtoolbox.com/blacklists.aspx

gabrix 16th January 2007 20:02

No it's not ... !
I have set opendns as my main dnsservers and they are located in london and i'm south italy.That's for privacy reasons they garantee don't record dns queries and anyway are in an another country , different laws and all that! They have powerfull computers but offcourse alice dnses are closer and my browsing is faster when i'm on alice dns.For my inside lan computers in /etc/resolv.conf file i have set my dnsmasq as first dns which is listening on eth1 gateway machine and opendsnes after .The gateway machine has opendns as first in resolv.conf.I have been changing the order too many times what do you think would be the right order ? What do you think of opendns ?


All times are GMT +2. The time now is 09:05.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.