Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Postfix forwarder on 2.1_x64

    pfSense Packages
    3
    18
    6.1k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      louis-m
      last edited by

      it's a bog standard install. 2 domains configured and that is it. postfix appears to be running but it just rejects every external mail with "relay access denied"

      1 Reply Last reply Reply Quote 0
      • T
        tritron
        last edited by

        Did you look in your config files to make sure you have list of users that are allowed. I had to edit postfix files by hand toget it working.

        1 Reply Last reply Reply Quote 0
        • L
          louis-m
          last edited by

          Well, I've got past the sticking point on the cli by pkg_delete postfix and then manually deleting remaining files etc.
          Everything looks fine. However, as before postfix is rejecting everything even though:

          Domains are specified and confirmed in config.
          Recipients are specified in custom recipient list (just to test as I didn't need this before)

          It still rejects with "relay access denied" and no other log

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            what do you got on maillog? any configuration warning?

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • L
              louis-m
              last edited by

              nothing really. here is a typical email (added asterisks and changed domain for posting security):

              connect from eg02.emailgency.com[91...121]
              Jun 22 16:43:33 gateway postfix/smtpd[15750]: disconnect from eg02.emailgency.com[91...121]
              Jun 22 16:43:41 gateway postfix/smtpd[15750]: connect from smtp1.email.giffgaff.com[95.131.216.170]
              Jun 22 16:43:41 gateway postfix/smtpd[15750]: NOQUEUE: reject: RCPT from smtp1.email.giffgaff.com[95.131.216.170]: 554 5.7.1 me@mydomainname.co.uk: Relay access denied; from= email@email.giffgaff.comto= me@mydomainname.co.ukproto=ESMTP helo= <smtp2.email.giffgaff.com>Jun 22 16:43:41 gateway postfix/smtpd[15750]: disconnect from smtp1.email.giffgaff.com[95.131.216.170]
              Jun 22 16:47:01 gateway postfix/anvil[25948]: statistics: max connection rate 1/60s for (smtp:91...121) at Jun 22 16:43:33
              Jun 22 16:47:01 gateway postfix/anvil[25948]: statistics: max connection count 1 for (smtp:91...121) at Jun 22 16:43:33
              Jun 22 16:47:01 gateway postfix/anvil[25948]: statistics: max cache size 2 at Jun 22 16:43:41</smtp2.email.giffgaff.com>/me@mydomainname.co.uk/email@email.giffgaff.com/me@mydomainname.co.uk

              1 Reply Last reply Reply Quote 0
              • L
                louis-m
                last edited by

                should it be looking at this config file?

                daemon started – version 2.9.3, configuration /usr/pbi/postfix-amd64/etc/postfix

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @louis-m:

                  should it be looking at this config file?

                  daemon started – version 2.9.3, configuration /usr/pbi/postfix-amd64/etc/postfix

                  copy /usr/local/etc/postfix files to /usr/pbi/postfix-amd64/etc/postfix and test again

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • L
                    louis-m
                    last edited by

                    Yes, I looked at that and did it a few hours ago. I now get:

                    Jun 22 21:54:05 gateway postfix/smtpd[13510]: connect from mail-yx0-f179.google.com[209.85.213.179]
                    Jun 22 21:54:06 gateway postfix/smtpd[13510]: warning: unknown smtpd restriction: "reject_spf_invalid_sender"
                    Jun 22 21:54:06 gateway postfix/smtpd[13510]: NOQUEUE: reject: RCPT from mail-yx0-f179.google.com[209.85.213.179]: 451 4.3.5 Server configuration error; from= mygmailaccount@gmail.comto= mymailaccount@mydomain.co.ukproto=ESMTP helo= <mail-yx0-f179.google.com>Jun 22 21:54:06 gateway postfix/cleanup[13796]: 2C3861E41B: message-id=20120622205406.2C3861E41B@gateway.mydomain.co.uk
                    Jun 22 21:54:06 gateway postfix/smtpd[13510]: disconnect from mail-yx0-f179.google.com[209.85.213.179]
                    Jun 22 21:54:06 gateway postfix/qmgr[52676]: 2C3861E41B: from=double-bounce@gateway.mydomain.co.uk, size=927, nrcpt=1 (queue active)
                    Jun 22 21:54:06 gateway postfix/smtp[14106]: 2C3861E41B: to=postmaster@gateway.mydomain.co.uk, orig_to=<postmaster>, relay=none, delay=0.04, delays=0.01/0.01/0.02/0, dsn=5.4.6, status=bounced (mail for gateway.mydomain.co.uk loops back to myself)
                    Jun 22 21:54:06 gateway postfix/bounce[14392]: warning: 2C3861E41B: undeliverable postmaster notification discarded
                    Jun 22 21:54:06 gateway postfix/qmgr[52676]: 2C3861E41B: removed
                    Jun 22 21:57:26 gateway postfix/anvil[44263]: statistics: max connection rate 1/60s for (smtpd:209.85.213.179) at Jun 22 21:48:32
                    Jun 22 21:57:26 gateway postfix/anvil[44263]: statistics: max connection count 1 for (smtpd:209.85.213.179) at Jun 22 21:48:32
                    Jun 22 21:57:26 gateway postfix/anvil[44263]: statistics: max cache size 1 at Jun 22 21:48:32</postmaster>/postmaster@gateway.mydomain.co.uk/double-bounce@gateway.mydomain.co.uk</mail-yx0-f179.google.com>/mymailaccount@mydomain.co.uk/mygmailaccount@gmail.com

                    1 Reply Last reply Reply Quote 0
                    • L
                      louis-m
                      last edited by

                      Got it going although I'm not sure it's the way to go.

                      1. Copied /usr/local/etc/postfix to /usr/pbi/postfix-amd64/etc/postfix
                      2. Once I put 2,6s into the greet wait time under antispam, it seemed to work

                      Only problem I have now is that any firmware upgrade will overwrite the original directory as it appears to take the config from /usr/pbi/postfix-amd64 instead of /usr/local/etc/postfix

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        @louis-m:

                        Got it going although I'm not sure it's the way to go.

                        1. Copied /usr/local/etc/postfix to /usr/pbi/postfix-amd64/etc/postfix
                        2. Once I put 2,6s into the greet wait time under antispam, it seemed to work

                        Only problem I have now is that any firmware upgrade will overwrite the original directory as it appears to take the config from /usr/pbi/postfix-amd64 instead of /usr/local/etc/postfix

                        I'll fix the code this week(if I have time).

                        Some packages will need this version/folder check.

                        Thank's for your feedback.

                        att,
                        Marcello Coutinho

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • L
                          louis-m
                          last edited by

                          Hi Marcello,
                          did you manage to find the time to include the version check in your code yet?

                          regards,
                          louis

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            @louis-m:

                            did you manage to find the time to include the version check in your code yet?

                            Not yet, I'm finishing apache+modsecurity new gui version.  :(

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • L
                              louis-m
                              last edited by

                              Cheers, I'll hold off my next firmware upgrade until it's done. Thanks for you efforts, most appreciated.

                              1 Reply Last reply Reply Quote 0
                              • L
                                louis-m
                                last edited by

                                Hi Marcelloc,
                                sorry to nag….. did you manage to get this fixed yet? i want to do my next firmware upgrade and don't want to break postfix.

                                louis

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.