Mail forwarding appears to be using DNS
I look through the mail log and I see that one of the domains we are filtering and forwarding for (this is a small ISP) seems to be grabbing MX records for relay out instead of using the SMTP entry in /etc/postfix/main.cf and in the /etc/postfix/transport
The log shows when forwarding the received email, the warning is that the host replied with our own name...
Jun 4 15:52:40 spam postfix/smtpd[26546]: connect from unknown[10.0.0.101]
Jun 4 15:52:40 spam postfix/smtp[26422]: warning: host mail.ksfuel.com[65.211.156.114]:25 greeted me with my own hostname spam.klinktech.net
Jun 4 15:52:40 spam postfix/smtp[26422]: warning: host mail.ksfuel.com[65.211.156.114]:25 replied to HELO/EHLO with my own hostname spam.klinktech.net
Jun 4 15:52:40 spam postfix/smtpd[26440]: connect from unknown[10.0.0.101]
Jun 4 15:52:40 spam postfix/smtp[26560]: warning: host mail.ksfuel.com[65.211.156.114]:25 greeted me with my own hostname spam.klinktech.net
Jun 4 15:52:40 spam postfix/smtp[26560]: warning: host mail.ksfuel.com[65.211.156.114]:25 replied to HELO/EHLO with my own hostname spam.klinktech.net
Jun 4 15:52:40 spam postfix/smtp[26422]: 69048394095: to=<jmakid@ksfuel.com>, relay=mail.ksfuel.com[65.211.156.114]:25, delay=12, delays=12/0/0.01/0, dsn=5.4.6, status=bounced (mail for ksfuel.com loops back to myself)
Jun 4 15:52:40 spam postfix/smtpd[26546]: disconnect from unknown[10.0.0.101]
Jun 4 15:52:40 spam postfix/smtp[26560]: D3A59394092: to=<jmakidd@ksfuel.com>, relay=mail.ksfuel.com[65.211.156.114]:25, delay=13, delays=13/0.01/0/0, dsn=5.4.6, status=bounced (mail for ksfuel.com loops back to myself)
Jun 4 15:52:40 spam postfix/smtpd[26440]: disconnect from unknown[10.0.0.101]
So...when relaying for these domains...it appears to be looking up MX records (mail.ksfuel.com) and getting our outside IP address of 65.211.156.114 instead of the entry I have in transport file of ksfuel.com smtp:[24.197.231.70]
|