"Relay access denied" when I relay emails from a local mailserver to the main one

[voltron81]

Hi to everybody.
When I try to relay emails from a local mailserver to the main mailserver, I have a "Relay access denied" issue...

I've created the local mailserver using this howto: http://www.howtoforge.org/virtual_us...ix_debian_etch and adding as relayhost the main mailserver.

In the main mailserver, created with perfect server ISPConfig 3, I've this parameters of postfix:

smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destination

and of couse mynetworks is 127.0.0.0/8 [::1]/128
So I guess I need a sasl authenticated, or maybe I've to write some value in the database mail_access.

The local mailserver is not on a static Ip, so I can not just allow to use an IP (and in this case there will be more than one local mailserver, in different locations, that want to relay emails to the main mailserver.

Any suggestion?
Do I need to setup a SASL authentication between the local mailserver and the main mailserver? In this case, how to do it?

Thanks
Michele

[topdog]

this should help

http://www.postfix.org/SASL_README.html#client_sasl
http://www.topdog.za.net/tips#postfi...as_a_smarthost

[sjau]

that's how I setup email relay with a postfix server on a dyn ip:

http://www.simplylinux.ch/relay-emai...postfix-server

with google translate it shouldn't be a big deal to follow it.

I think I could add it also as little howto here.

[voltron81]

Ok thanks guys, i think I've solved.
Basically I've added in the main.cf this lines:

smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_type = cyrus
smtp_sasl_security_options = noanonymous

The strange thing is that in the sasl_passwd I've write the account details of just an email, like this:

[mail.domain.com]   test@domain.com:password

And now I can relay also the emails of the other emails of the same domain (like user@domain.com, user1@domain.com, etc...)

Is it normal?

Cheers
Michele

[topdog]

Of course that is normal, that is what "relaying" means, "transmitting mail which is not destined for the host running the mta"