Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Postfix - antispam and relay package

    pfSense Packages
    136
    855
    887.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Sensible
      last edited by

      Hi,

      at first thank you for this postfix-package!

      I updated the postfix-package from v.2.3.3_1  to v.2.3.4.
      After update each client could only sent to email-domains which was included in the "Domains to Forward". No mails to other domains  was possibility. The error-message is 571 Relay denied.
      I looked in the main.cf and found the different to the v.2.3.3_1:
      v.2.3.3_1
      smtpd_client_restrictions = check_client_access pcre:/usr/local/etc/postfix/cal_pcre,
                                      check_client_access cidr:/usr/local/etc/postfix/cal_cidr,
                                      permit

      v.2.3.4
      smtpd_client_restrictions = reject_unauth_destination,
                                      check_sender_access hash:/usr/local/etc/postfix/sender_access,
                                      check_client_access pcre:/usr/local/etc/postfix/cal_pcre,
                                      check_client_access cidr:/usr/local/etc/postfix/cal_cidr
                                      permit

      After i added permit_mynetworks to smtpd_client_restrictions and restarted postfix on the commandline our clients could send Mails again.

      Is this a bug in the v.2.3.4 or a feature, or forgot i to enter something in a new web-field? I yet added in "Access-List -> Client Access List -> MyNetworks 192.168.0.0/16 in the v.2.3.3-1, is there now a addional field in the webinterface to insert this to? I can't found any new fields.

      To edit some  fields with the webinterface and not lose the change for smtpd_client_restrictions, i added  permit_my_networks in the /usr/local/pkg/postfix.inc

      smtpd_client_restrictions = permit_mynetworks, reject_unauth_destination,
                                      check_sender_access hash:/usr/local/etc/postfix/sender_access,
                                      check_client_access pcre:/usr/local/etc/postfix/cal_pcre,
                                      check_client_access cidr:/usr/local/etc/postfix/cal_cidr
                                      RBLRBLRBL
      Regards
      Gerd

      P.S. Sorry for my bad english!

      1 Reply Last reply Reply Quote 0
      • marcellocM
        marcelloc
        last edited by

        Sensible,

        Thanks for your detailed feedback,

        I'll check it as soon as possible.

        att,
        Marcello Coutinho

        Treinamentos de Elite: http://sys-squad.com

        Help a community developer! ;D

        1 Reply Last reply Reply Quote 0
        • S
          Sensible
          last edited by

          Hi,

          there is an other little mistake in the postfix-Package.

          In the tab "Recioients" is something wrong with the field "Frequency".
          If I add 5m (for five minutes) and look in the crontab, there is the following entry:

          *  *  *  */5  *  root  /usr/local/bin/php -q /usr/local/www/postfix_recipients.php

          but it should be

          */5  *  *  *  *  root  /usr/local/bin/php -q /usr/local/www/postfix_recipients.php

          Please, can you check this too?
          Thanks
          Gerd

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            pkg v.2.3.4_1 is out with:

            • fixes on schedule checks

            • fixes on sender_client_restrictions

            • include more memory checks on amd64 to avoid php memory limit errors

            Gerd,

            Check if with this version, you have a working system without open relay or missing features.

            att,
            Marcello Coutinho

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • S
              Sensible
              last edited by

              Marcello,

              thanks for the new package.

              I have tested it, and it looks good.

              Gerd

              1 Reply Last reply Reply Quote 0
              • L
                LinuxTracker
                last edited by

                I'm preparing to move email services, from a hosting company to on site.
                (The MX records currently point to the hosting company.)

                Current config:
                Our pfSense+Postfix box is the LAN gateway for the mail server = x.x.1.199

                (The rest of LAN uses a SonicWall gateway = x.x.1.1)

                I have confirmed Postfix receives mail and forwards it to our email server.

                There will be one email server; a Win2k8 box running MailEnable = x.x.1.29

                I can securely relay off-site email clients through the email server - over port 587 - via the pfSense gateway.

                My Problem:
                We have users in the field, whose email clients relayed through the existing SMTP server - via Port 25.
                It will take time to round up those users and change their configs.

                Since Port 25 is pointed at the loopback, I can't figure out how to setup a Port 25 relay for them.

                If I bring relay traffic through the x.x.1.1 gateway; the email server gets it but is pointed at the wrong gateway to reply properly.

                I'm uncertain how to proceed. Can someone point me in the right direction?

                Thanks.

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  @LinuxTracker:

                  Since Port 25 is pointed at the loopback, I can't figure out how to setup a Port 25 relay for them.

                  use a port forward from psense external/internal ip to loopback.
                  I use these config to listen postfix on virtual/carp ips

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • Z
                    zlyzwy
                    last edited by

                    Hi Marcelloc,

                    I upgraded the pkg to latest version, then I tried to reboot the system.

                    however the postfix doesn't start properly.

                    Here is the system log output about postfix.

                    May 16 23:33:18	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:33:18	postfix/postfix-script[9984]: fatal: the Postfix mail system is not running
May 16 23:33:18	php: : Stopping postfix
May 16 23:33:17	php: : Writing rc_file
May 16 23:33:15	php: : Writing out configuration
May 16 23:33:15	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:33:15	postfix/postfix-script[2109]: fatal: the Postfix mail system is not running
May 16 23:33:14	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:33:13	syslogd: exiting on signal 15
May 16 23:33:13	check_reload_status: Syncing firewall
May 16 23:33:11	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:33:11	postfix/postfix-script[42209]: fatal: the Postfix mail system is not running
May 16 23:33:11	php: : Stopping postfix
May 16 23:33:10	php: : Writing rc_file
May 16 23:33:08	php: : Writing out configuration
May 16 23:33:08	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:33:08	postfix/postfix-script[39471]: fatal: the Postfix mail system is not running
May 16 23:33:08	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:33:08	syslogd: exiting on signal 15
May 16 23:33:08	check_reload_status: Syncing firewall
May 16 23:33:05	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:33:05	postfix/postfix-script[32222]: fatal: the Postfix mail system is not running
May 16 23:33:05	php: : Stopping postfix
May 16 23:33:04	php: : Writing rc_file
May 16 23:33:02	php: : Writing out configuration
May 16 23:33:02	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:33:02	postfix/postfix-script[28641]: fatal: the Postfix mail system is not running
May 16 23:33:02	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:33:02	syslogd: exiting on signal 15
May 16 23:33:01	check_reload_status: Syncing firewall
May 16 23:32:59	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:32:59	postfix/postfix-script[19574]: fatal: the Postfix mail system is not running
May 16 23:32:59	php: : Stopping postfix
May 16 23:32:58	php: : Writing rc_file
May 16 23:32:56	php: : Writing out configuration
May 16 23:32:56	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:32:56	postfix/postfix-script[10197]: fatal: the Postfix mail system is not running
May 16 23:32:56	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:32:55	syslogd: exiting on signal 15
May 16 23:32:55	check_reload_status: Syncing firewall
May 16 23:32:52	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:32:52	postfix/postfix-script[59889]: fatal: the Postfix mail system is not running
May 16 23:32:52	php: : Stopping postfix
May 16 23:32:50	php: : Writing rc_file
May 16 23:32:48	php: : Writing out configuration
May 16 23:32:48	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:32:48	postfix/postfix-script[45738]: fatal: the Postfix mail system is not running
May 16 23:32:46	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:32:45	syslogd: exiting on signal 15
May 16 23:32:44	check_reload_status: Syncing firewall
May 16 23:32:38	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:32:38	postfix/postfix-script[24906]: fatal: the Postfix mail system is not running
May 16 23:32:37	php: : Stopping postfix
May 16 23:32:36	php: : Writing rc_file
May 16 23:32:33	php: : Writing out configuration
May 16 23:32:32	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:32:32	postfix/postfix-script[11313]: fatal: the Postfix mail system is not running
May 16 23:32:31	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:32:30	syslogd: exiting on signal 15
May 16 23:32:28	check_reload_status: Syncing firewall
May 16 23:31:44	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:31:43	php: : Reload mailscanner
May 16 23:31:42	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:31:39	check_reload_status: Reloading filter
May 16 23:31:38	sshlockout[28940]: sshlockout/webConfigurator v3.0 starting up
May 16 23:31:37	check_reload_status: Syncing firewall
May 16 23:31:37	login: login on ttyv0 as root
May 16 23:31:37	php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
May 16 23:31:36	kernel: VMware memory control driver initialized
May 16 23:31:32	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:31:32	postfix/postfix-script[16854]: fatal: the Postfix mail system is not running
May 16 23:31:32	php: : Stopping postfix
May 16 23:31:31	php: : Writing rc_file
May 16 23:31:29	php: : Writing out configuration
May 16 23:31:29	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:31:29	postfix/postfix-script[13014]: fatal: the Postfix mail system is not running
May 16 23:31:29	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:31:29	syslogd: exiting on signal 15
May 16 23:31:27	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:31:27	postfix/postfix-script[6934]: fatal: the Postfix mail system is not running
May 16 23:31:27	php: : Stopping postfix
May 16 23:31:27	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:31:26	php: : Writing rc_file
May 16 23:31:26	php: : Reload mailscanner
May 16 23:31:25	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:31:24	php: : Writing out configuration
May 16 23:31:24	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:31:24	postfix/postfix-script[61012]: fatal: the Postfix mail system is not running
May 16 23:31:23	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:31:23	syslogd: exiting on signal 15
May 16 23:31:23	check_reload_status: Syncing firewall
May 16 23:31:22	check_reload_status: Syncing firewall
May 16 23:31:17	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:31:17	postfix/postfix-script[53921]: fatal: the Postfix mail system is not running
May 16 23:31:17	php: : Stopping postfix
May 16 23:31:16	php: : Writing rc_file
May 16 23:31:15	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:31:14	php: : Writing out configuration
May 16 23:31:14	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:31:14	postfix/postfix-script[44179]: fatal: the Postfix mail system is not running
May 16 23:31:13	php: : Reload mailscanner
May 16 23:31:13	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:31:12	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:31:08	syslogd: exiting on signal 15
May 16 23:31:07	check_reload_status: Syncing firewall
May 16 23:31:06	check_reload_status: Syncing firewall
May 16 23:31:03	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:31:03	postfix/postfix-script[15989]: fatal: the Postfix mail system is not running
May 16 23:31:03	php: : Stopping postfix
May 16 23:31:02	php: : Writing rc_file
May 16 23:31:00	php: : Writing out configuration
May 16 23:30:59	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:30:59	postfix/postfix-script[5918]: fatal: the Postfix mail system is not running
May 16 23:30:59	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:30:59	syslogd: exiting on signal 15
May 16 23:30:59	check_reload_status: Syncing firewall
May 16 23:30:57	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:30:57	postfix/postfix-script[60750]: fatal: the Postfix mail system is not running
May 16 23:30:57	php: : Stopping postfix
May 16 23:30:56	php: : Writing rc_file
May 16 23:30:54	php: : Writing out configuration
May 16 23:30:54	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:30:54	postfix/postfix-script[57897]: fatal: the Postfix mail system is not running
May 16 23:30:54	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:30:54	syslogd: exiting on signal 15
May 16 23:30:53	check_reload_status: Syncing firewall
May 16 23:30:49	php: : The command '/usr/local/etc/rc.d/postfix.sh stop' returned exit code '1', the output was ''
May 16 23:30:49	postfix/postfix-script[39943]: fatal: the Postfix mail system is not running
May 16 23:30:49	php: : Stopping postfix
May 16 23:30:48	php: : Writing rc_file
May 16 23:30:47	php: : Reload mailscanner
May 16 23:30:45	php: : Writing out configuration
May 16 23:30:45	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:30:44	php: : The command '/usr/local/sbin/postfix reload' returned exit code '1', the output was ''
May 16 23:30:44	postfix/postfix-script[28765]: fatal: the Postfix mail system is not running
May 16 23:30:42	syslogd: kernel boot file is /boot/kernel/kernel
May 16 23:30:41	syslogd: exiting on signal 15
May 16 23:30:40	check_reload_status: Syncing firewall
May 16 23:30:35	check_reload_status: Syncing firewall
May 16 23:30:04	php: : Reload mailscanner
May 16 23:30:04	php: : The command '/usr/local/etc/rc.d/clamav-clamd stop' returned exit code '1', the output was 'mkdir: /var/run/clamav: File exists clamav_clamd not running?'
May 16 23:30:02	php: : Reload mailscanner
May 16 23:30:02	check_reload_status: Syncing firewall
May 16 23:29:58	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:29:52	php: : Reload mailscanner
May 16 23:29:51	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:29:50	check_reload_status: Syncing firewall
May 16 23:29:50	check_reload_status: Syncing firewall
May 16 23:29:31	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:29:31	php: : Reload mailscanner
May 16 23:29:31	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:29:30	check_reload_status: Syncing firewall
May 16 23:29:20	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:29:19	php: : Reload mailscanner
May 16 23:29:19	php: : Reload mailscanner
May 16 23:29:19	php: : The command '/usr/local/etc/rc.d/clamav-clamd stop' returned exit code '1', the output was 'mkdir: /var/run/clamav: File exists clamav_clamd not running?'
May 16 23:29:17	check_reload_status: Syncing firewall
May 16 23:29:15	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:29:08	php: : Reload mailscanner
May 16 23:29:08	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:29:04	check_reload_status: Syncing firewall
May 16 23:29:03	check_reload_status: Syncing firewall
May 16 23:28:42	php: : Reload mailscanner
May 16 23:28:41	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:28:39	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:28:38	check_reload_status: Syncing firewall
May 16 23:28:34	php: : Reload mailscanner
May 16 23:28:32	php: : The command '/usr/local/etc/rc.d/clamav-clamd stop' returned exit code '1', the output was 'mkdir: /var/run/clamav: File exists Stopping clamav_clamd. kill: 10995: No such process'
May 16 23:28:31	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:28:31	php: : Reload mailscanner
May 16 23:28:30	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:28:28	check_reload_status: Syncing firewall
May 16 23:28:22	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:28:22	php: : Reload mailscanner
May 16 23:28:21	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:28:17	check_reload_status: Syncing firewall
May 16 23:28:16	check_reload_status: Syncing firewall
May 16 23:28:04	root: /usr/local/etc/rc.d/clamav-clamd: WARNING: failed to start clamav_clamd
May 16 23:28:04	php: : The command '/usr/local/etc/rc.d/mailscanner stop' returned exit code '1', the output was 'mailscanner not running? (check /var/run/MailScanner.pid).'
May 16 23:28:04	php: : Reload mailscanner

                    Thanks a lot:)
                    Zlyzwy

                    ===============================================
                    Update:

                    I can go to Services –> postfix and recheck the Enable Postfix to start the postfix.
                    It seems to be fine.

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      zlyzwy,

                      I'm not getting this error, but I'll try it on a clean install on vm.

                      Are you using pfsense 32 or 64 bits

                      att,
                      Marcello Coutinho

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • Z
                        zlyzwy
                        last edited by

                        @marcelloc:

                        zlyzwy,

                        I'm not getting this error, but I'll try it on a clean install on vm.

                        Are you using pfsense 32 or 64 bits

                        att,
                        Marcello Coutinho

                        Hi Marcello,
                        Version:

                        2.0.1-RELEASE (i386) 
built on Mon Dec 12 18:24:17 EST 2011

                        I have some other pkgs installed:
                        freeradius2
                        Pfblocker
                        Unbound
                        bandwidthd

                        Thanks.
                        Zlyzwy

                        1 Reply Last reply Reply Quote 0
                        • R
                          RobinGill
                          last edited by

                          Hi Marcello,

                          Many thanks for this package - great addition to pfSense.

                          I've just set a box up that I was hoping to set this box up using LDAP to import list of users. The two issues I have are:

                          1. I tried running /usr/sbin/pkg_add -r p5-perl-ldap but I get the error unable to fetch ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-8.1-release/Latest/p5-perl-ldap.tbz. In fact it appears the whole packages-8.1-release directory has been depreciated.

                          2. If it is possible to get this running, is there any way to import user information using LDAP from multiple servers?

                          Also I was wondering if there are plans to add SMTP authentication in the future?

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            @RobinGill:

                            1. I tried running /usr/sbin/pkg_add -r p5-perl-ldap but I get the error unable to fetch ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-8.1-release/Latest/p5-perl-ldap.tbz. In fact it appears the whole packages-8.1-release directory has been depreciated.

                            get it from my personal repo
                            http://e-sac.siteseguro.ws/packages/amd64/8/All/p5-perl-ldap-0.4300.tbz

                            @RobinGill:

                            2. If it is possible to get this running, is there any way to import user information using LDAP from multiple servers?

                            It's already on the package code, just click on "+" button to add the other servers.
                            Note that this ldap fetch code was fetched from postfix website to run with active directory, I did no teste with openldap.

                            @RobinGill:

                            Also I was wondering if there are plans to add SMTP authentication in the future?

                            Plans: yes, time to do it: almost none  :)

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • N
                              nahid
                              last edited by

                              Hay all,

                              I have a question related with WebClient of SMTP Server. I have configured postfix with pfsense as my spam filter. Everything is working well except when I want send email from webclient of my Mail server it gives me error with "SMTP Authenticaion Error" while I can send email from other webclient like mail2web.

                              Is there any config error from where I could give the access my webclient to send mails through email server?

                              Nahid

                              1 Reply Last reply Reply Quote 0
                              • N
                                nahid
                                last edited by

                                I figure out the problem that I am facing.

                                If I choose my mail server as local internal server ip 10.10.1.5 in outlook then it works with no problem. However, when I choose the External IP 94.55.x.x or the domain name of my mailserver from my home it is unable to connect with the server.

                                When I remove postfix it works but after putting the postfix it works only locally. How could I solve this problem?

                                1 Reply Last reply Reply Quote 0
                                • R
                                  RobinGill
                                  last edited by

                                  Many thanks for the help Marcello, I managed to install it using the link you provided  :)

                                  I noticed I was getting errors due to already having a version of Perl installed - I'm guessing Open VMware tools installed perl-5.10.1_3.

                                  Anyway, I wiped it and started again this time just pfSense and Postfix, p5-perl-ldap installed this time without errors.

                                  However I noticed once I configured a domain on the Domains tab which should correspond with the LDAP server, postfix would accept emails to invalid users at that domain. This didn't change if I added or removed @domain.com from Custom Valid recipients on the Recipients tab.

                                  Then I wiped it again and only installed pfSense and postfix and not p5-perl-ldap. Again once I've configured a domain, even without adding the domain to Custom Valid recipients, it accepts emails for any user at the configured domain. The relay_recipients file is empty.

                                  Checking this with another other install, if I configure a domain on the Domains tab but don't enter the domain under Custom Valid recipients, there I get 550 5.1.1 anyuser@domain.com: Recipient address rejected: User unknown in relay recipient table.

                                  The only difference I can think of is that the new installation is brand new installed today while the old one was installed a few months ago and only upgraded to latest version a few days ago.

                                  Any ideas on where to look for problems would be very much appreciated./anyuser@domain.com

                                  1 Reply Last reply Reply Quote 0
                                  • marcellocM
                                    marcelloc
                                    last edited by

                                    RobinGill,

                                    check the difference from postfix config file from old verison to this latest version.

                                    The Custom Valid recipients need an OK at end of email addresses.

                                    What antispam settings did you selected on both installs?

                                    This file should have all valid recipients fetched from ldap as well from custom field.
                                    /usr/local/etc/postfix/relay_recipients

                                    run /usr/local/bin/php -q /usr/local/www/postfix_recipients.php  on console/ssh and check if there are running erros.

                                    att,
                                    Marcello Coutinho

                                    Treinamentos de Elite: http://sys-squad.com

                                    Help a community developer! ;D

                                    1 Reply Last reply Reply Quote 0
                                    • N
                                      nahid
                                      last edited by

                                      This is the log that I getting while want to send emails through Webclient:

                                      May 21 13:00:33 pfsense postfix/postscreen[55796]: CONNECT from [127.0.0.1]:27215
                                      May 21 13:00:33 pfsense postfix/postscreen[55796]: PASS OLD [127.0.0.1]:27215
                                      May 21 13:00:33 pfsense postfix/smtpd[55803]: connect from localhost[127.0.0.1]
                                      May 21 13:00:33 pfsense postfix/smtpd[55803]: lost connection after AUTH from localhost[127.0.0.1]
                                      May 21 13:00:33 pfsense postfix/smtpd[55803]: disconnect from localhost[127.0.0.1]
                                      May 21 13:00:36 pfsense postfix/postscreen[55796]: CONNECT from [209.85.217.170]:64486
                                      May 21 13:00:36 pfsense postfix/postscreen[55796]: PASS OLD [209.85.217.170]:64486

                                      SMTP error is attached.

                                      SMTpError.png
                                      SMTpError.png_thumb

                                      1 Reply Last reply Reply Quote 0
                                      • N
                                        nahid
                                        last edited by

                                        But when I connect from other webclient like http://www.mail2web.com I got the following logs:

                                        May 21 13:17:09 pfsense postfix/postscreen[55796]: CONNECT from [168.144.250.170]:36591
                                        May 21 13:17:15 pfsense postfix/postscreen[55796]: NOQUEUE: reject: RCPT from [168.144.250.170]:36591: 450 4.3.2 Service currently unavailable; from=networkadmin@sesric.org, to=anhuda@sesric.org, proto=SMTP, helo= <xsmtp07.mail2web.com>May 21 13:17:16 pfsense postfix/postscreen[55796]: PASS NEW [168.144.250.170]:36591
                                        May 21 13:17:16 pfsense postfix/postscreen[55796]: DISCONNECT [168.144.250.170]:36591
                                        May 21 13:17:21 pfsense postfix/postscreen[55796]: CONNECT from [168.144.250.170]:36739
                                        May 21 13:17:21 pfsense postfix/postscreen[55796]: PASS OLD [168.144.250.170]:36739
                                        May 21 13:17:22 pfsense postfix/smtpd[55803]: connect from xsmtp07.mail2web.com[168.144.250.170]
                                        May 21 13:17:22 pfsense postfix/smtpd[55803]: 7E2BFBFEB82: client=xsmtp07.mail2web.com[168.144.250.170]
                                        May 21 13:17:22 pfsense postfix/cleanup[4869]: 7E2BFBFEB82: hold: header Received: from xsmtp07.mail2web.com (xsmtp07.mail2web.com [168.144.250.170])??by pfsense.localdomain (Postfix) with ESMTP id 7E2BFBFEB82??for anhuda@sesric.org; Mon, 21 May 2012 13:17:22 +0300 (EEST from xsmtp07.mail2web.com[168.144.250.170]; from= networkadmin@sesric.orgto= anhuda@sesric.orgproto=ESMTP helo= <xsmtp07.mail2web.com>May 21 13:17:22 pfsense postfix/cleanup[4869]: 7E2BFBFEB82: message-id=380-22012512110189682@M2W107.mail2web.com

                                        So the problem is when I want to send mail from my webclient it gives me the error with SMTP Authentication error. But I am not using any TLS/SASL protocol.</xsmtp07.mail2web.com>/anhuda@sesric.org/networkadmin@sesric.org/anhuda@sesric.org</xsmtp07.mail2web.com>/anhuda@sesric.org/networkadmin@sesric.org

                                        1 Reply Last reply Reply Quote 0
                                        • marcellocM
                                          marcelloc
                                          last edited by

                                          @nahid:

                                          But when I connect from other webclient like http://www.mail2web.com I got the following logs:

                                          This log means that you are using postscreen and he is doing his job, first connect of each ip after service start(on boot for example) will be rejected, next connections from this ip will be accepted.

                                          att,
                                          Marcello Coutinho

                                          Treinamentos de Elite: http://sys-squad.com

                                          Help a community developer! ;D

                                          1 Reply Last reply Reply Quote 0
                                          • marcellocM
                                            marcelloc
                                            last edited by

                                            @nahid:

                                            This is the log that I getting while want to send emails through Webclient:
                                            May 21 13:00:33 pfsense postfix/smtpd[55803]: lost connection after AUTH from localhost[127.0.0.1]

                                            I did not included any authentication feature to this package yet. If you have this config on other server, just paste postfix authentication options on custom field at gui.

                                            att,
                                            Marcello Coutinho

                                            Treinamentos de Elite: http://sys-squad.com

                                            Help a community developer! ;D

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post