regarding rejected incoming mail - how to find out which "rule" is responsible

[Ovidiu]

hello,

here is the mail log for a legitimate mail that my server rejected:

Nov 15 13:48:12 h898552 postfix/smtpd[26215]: connect from mail.contiteves.com[213.69.169.147]
Nov 15 13:48:12 h898552 postfix/smtpd[26215]: NOQUEUE: reject: RCPT from mail.contiteves.com[213.69.169.147]: 554 5.7.1 <frgw002.contiteves.com>: Helo command rejected: Host not found; from=<Nicu.XXXXX@contiautomotive.com> to=<ovidiu@XXXXX.XX> proto=SMTP helo=<frgw002.contiteves.com>
Nov 15 13:48:12 h898552 postfix/smtpd[26215]: disconnect from mail.contiteves.com[213.69.169.147]
Nov 15 14:00:04 h898552 postfix/cleanup[3566]: BCD636283D4: message-id=<OF439858B4.2B14A7C9-ONC2257394.00471C2D-C2257394.004739A1@contiteves.com>

here is a an excerpt from my main.cf:

smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,
reject_unauth_destination,
reject_invalid_hostname,
reject_unknown_hostname,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_unauth_pipelining,
check_policy_service inet:127.0.0.1:60000
smtpd_data_restrictions = reject_unauth_pipelining,permit

###testing

smtpd_helo_restrictions = permit_tls_clientcerts,
permit_sasl_authenticated,
permit_mynetworks,
reject_invalid_hostname,
reject_non_fqdn_hostname,
reject_unauth_pipelining,
regexp:/etc/postfix/helo.regexp

smtp_client_restrictions = reject_unauth_destination,
reject_unauth_pipelining
smtp_sender_restrictions = reject_unauth_destination,
reject_unauth_pipelining,
reject_unknown_sender_domain,
reject_non_fqdn_sender
### Checks to remove badly formed email
smtpd_helo_required = yes
strict_rfc821_envelopes = yes
disable_vrfy_command = yes
unknown_address_reject_code = 554
unknown_hostname_reject_code = 554
unknown_client_reject_code = 554
##testend

is this line what causes the above mail to be rejected? unknown_hostname_reject_code = 554

anything else potentially dangerous? I have read about all these helo restrictions and that they are not really mandatory, so I am cleaning up my main.cf

[falko]

I think it's reject_unknown_hostname in your smtpd_recipient_restrictions.

[Ovidiu]

I took it out, restarted postfix, and will ask that guy to resend his email :-) to see it its ok now.

[Ovidiu]

you were right. that was the offending rule.