View Single Post
  #8  
Old 4th June 2008, 23:35
Thomas_Powers Thomas_Powers is offline
Junior Member
 
Join Date: Jun 2008
Posts: 25
Thanks: 0
Thanked 0 Times in 0 Posts
Default Mail forwarding appears to be using DNS

I look through the mail log and I see that one of the domains we are filtering and forwarding for (this is a small ISP) seems to be grabbing MX records for relay out instead of using the SMTP entry in /etc/postfix/main.cf and in the /etc/postfix/transport

The log shows when forwarding the received email, the warning is that the host replied with our own name...

Jun 4 15:52:40 spam postfix/smtpd[26546]: connect from unknown[10.0.0.101]
Jun 4 15:52:40 spam postfix/smtp[26422]: warning: host mail.ksfuel.com[65.211.156.114]:25 greeted me with my own hostname spam.klinktech.net
Jun 4 15:52:40 spam postfix/smtp[26422]: warning: host mail.ksfuel.com[65.211.156.114]:25 replied to HELO/EHLO with my own hostname spam.klinktech.net
Jun 4 15:52:40 spam postfix/smtpd[26440]: connect from unknown[10.0.0.101]
Jun 4 15:52:40 spam postfix/smtp[26560]: warning: host mail.ksfuel.com[65.211.156.114]:25 greeted me with my own hostname spam.klinktech.net
Jun 4 15:52:40 spam postfix/smtp[26560]: warning: host mail.ksfuel.com[65.211.156.114]:25 replied to HELO/EHLO with my own hostname spam.klinktech.net
Jun 4 15:52:40 spam postfix/smtp[26422]: 69048394095: to=<jmakid@ksfuel.com>, relay=mail.ksfuel.com[65.211.156.114]:25, delay=12, delays=12/0/0.01/0, dsn=5.4.6, status=bounced (mail for ksfuel.com loops back to myself)
Jun 4 15:52:40 spam postfix/smtpd[26546]: disconnect from unknown[10.0.0.101]
Jun 4 15:52:40 spam postfix/smtp[26560]: D3A59394092: to=<jmakidd@ksfuel.com>, relay=mail.ksfuel.com[65.211.156.114]:25, delay=13, delays=13/0.01/0/0, dsn=5.4.6, status=bounced (mail for ksfuel.com loops back to myself)
Jun 4 15:52:40 spam postfix/smtpd[26440]: disconnect from unknown[10.0.0.101]



So...when relaying for these domains...it appears to be looking up MX records (mail.ksfuel.com) and getting our outside IP address of 65.211.156.114 instead of the entry I have in transport file of ksfuel.com smtp:[24.197.231.70]
Reply With Quote