Postfix Authentication - Relay not allowed

[bschultz]

I followed the Postfix Virtual MySQL howto, and I'm having problems with sending mail. I get a relay not allowed in the mail log.

Here's my postfix.conf file

#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

append_dot_mydomain = no


smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_use_tls = yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache


myhostname = mail.brian-schultz.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = mail.brian-schultz.com, localhost, localhost.localdomain
relayhost =
mynetworks = 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
virtual_alias_domains =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
virtual_create_maildirsize = yes
virtual_mailbox_extended = yes
virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf
virtual_mailbox_limit_override = yes
virtual_maildir_limit_message = "The user you are trying to reach is over quota."
virtual_overquota_bounce = yes
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings

Yes, I do have the authentication turned on in my email client (using the same login info as receiving).

Any ideas? I've looked over nearly 15 pages of a search on the forums, but couldn't find an answer that seemed to fit my problem.

Thanks!

[bschultz]

I followed Falko's advice on another thread and removed the domain from mydestination, now I get this error:

Oct 2 13:02:44 mail postfix/smtpd[11443]: connect from unknown[192.168.1.1]
Oct 2 13:02:44 mail postfix/smtpd[11443]: warning: SASL authentication problem: unknown password verifier
Oct 2 13:02:44 mail postfix/smtpd[11443]: warning: unknown[192.168.1.1]: SASL LOGIN authentication failed: no mechanism available
Oct 2 13:02:44 mail postfix/smtpd[11443]: lost connection after AUTH from unknown[192.168.1.1]

Any ideas?

Thanks!

[falko]

Which distribution do you use? If it's Debian or Ubuntu, what's in /etc/postfix/sasl/smtpd.conf?

[bschultz]

Thanks for the reply Falko. I'm using Etch

pwcheck_method: saslauthd
mech_list: plain login
allow_plaintext: true
auxprop_plugin: mysql
sql_hostnames: 127.0.0.1
sql_user: mail_admin
sql_passwd: xxxxxxxxxx
sql_database: mail
sql_select: select password from users where email = '%u'pwcheck_method: saslauthd
mech_list: plain login

[falko]

It should read

pwcheck_method: saslauthd
mech_list: plain login
allow_plaintext: true
auxprop_plugin: mysql
sql_hostnames: 127.0.0.1
sql_user: mail_admin
sql_passwd: mail_admin_password
sql_database: mail
sql_select: select password from users where email = '%u'

instead.

[bschultz]

I changed the file (not sure how I got those other 2 entries in there) and rebooted the machine. It still didn't work. What other files do you want to see the settings in?

Thanks again, Falko!

[giganet]

I'm just curious...

Is the 'relay not allowed' in your log coming from your system or possibly your ISP?

I have found many mainstream ISP's don't allow relaying, so if you are trying to use a MSN account to send a piece of email from any email account other than one originating from MSN will not be allowed as that ISP has closed relaying in their email server.



Regards

[bschultz]

I've got a local ISP that I pay for a static address (which they only give to people who run their own servers), so that's not the issue.

Thanks, though!

[giganet]

If you are using your ISP's mail server as your outgoing SMTP it would cause the no relay issue if your ISP does not allow relaying though.


Not trying to be a pest

Regards

[bschultz]

I appreciate the help, but I'm not using my ISP for my outgoing server...and they do allow relaying if I were to do that.

Thanks again, though!