[Postfixbuch-users] Relaying mit web.de

[Olaf Sakowski]

Hallo liebe Postfixer,

bei den Tests meines neuen Mailservers ist mir ein seltsames Problem 
aufgefallen. Ich habe Postfix mit mysql, courier-imap und amavisd-new 
laufen, angelehnt an den Webmailer im Postfixbuch. Mails versenden und 
empfangen für/von virtuellen Domains funktionert, nur beim Weiterleiten 
ist mir etwas aufgefallen. Wenn ich z.B. von meiner Web.deadresse eine 
Mail an den Server sende, der wiederrum für die entsprechende virtuelle 
Domain die  Mail annimmt und direkt auf die Absendeadresse von web.de 
relayed, bekomme ich vom web.de Server ein reject.

Bei anderen Adressen bekomme ich kein reject des Web.de-Servers.

---Ausschnitt aus dem Mailheader der rejecten Mail---

Betreff:
test von web.de
Von:
Olaf Sakowski <o.sakowski at web.de>
Datum:
Mon, 12 Jul 2004 17:51:05 +0200
An:
mail at geonat.de
Received:
from localhost (localhost [127.0.0.1]) by mx1.em2d.de (Postfix) with 
ESMTP id 7381810DE2 for <o.sakowski at web.de>; Mon, 12 Jul 2004 17:45:01 
+0200 (CEST)
Received:
from mx1.em2d.de ([127.0.0.1]) by localhost (odin [127.0.0.1]) 
(amavisd-new, port 10024) with ESMTP id 16973-01 for 
<o.sakowski at web.de>; Mon, 12 Jul 2004 17:45:01 +0200 (CEST)
Received:
from smtp08.web.de (smtp08.web.de [217.72.192.226]) by mx1.em2d.de 
(Postfix) with ESMTP id 1AB8110DBD for <mail at geonat.de>; Mon, 12 Jul 
2004 17:45:00 +0200 (CEST)
Received:
from pd9540a2a.dip.t-dialin.net ([217.84.10.42] helo=web.de) by 
smtp08.web.de with asmtp (TLSv1:RC4-MD5:128) (WEB.DE 4.101 #44) id 
1Bk2yx-0007sC-00 for mail at geonat.de; Mon, 12 Jul 2004 17:44:43 +0200
Nachricht-ID:
<40F2B369.8000006 at web.de>
User-Agent:
Mozilla Thunderbird 0.5 (Windows/20040207)
X-Accept-Language:
de-de, de-at, de, en-us, en
MIME-Version:
1.0
Content-Type:
text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding:
7bit
Absender:
o.sakowski at web.de
X-Virus-Scanned:
by amavisd-new at emedia2d.de

---------------------------------------

------Ausschnitt aus dem betreffenden Logfile------

Jul 12 18:05:56 odin postfix/smtpd[17288]: connect from 
mailgate4.cinetic.de[217.72.192.167]
Jul 12 18:05:57 odin postfix/smtpd[17288]: F41B310D65: 
client=mailgate4.cinetic.de[217.72.192.167]
Jul 12 18:05:57 odin postfix/cleanup[17294]: F41B310D65: 
message-id=<40F2AD44.7020403 at web.de>
Jul 12 18:05:57 odin postfix/oqmgr[17109]: F41B310D65: 
from=<o.sakowski at web.de>, size=1043, nrcpt=1 (queue active)
Jul 12 18:05:57 odin postfix/smtpd[17288]: disconnect from 
mailgate4.cinetic.de[217.72.192.167]
Jul 12 18:05:58 odin postfix/smtpd[17297]: connect from localhost[127.0.0.1]
Jul 12 18:05:58 odin postfix/smtpd[17297]: 7F8CE10DE5: 
client=localhost[127.0.0.1]
Jul 12 18:05:58 odin postfix/cleanup[17294]: 7F8CE10DE5: 
message-id=<40F2AD44.7020403 at web.de>
Jul 12 18:05:58 odin postfix/oqmgr[17109]: 7F8CE10DE5: 
from=<o.sakowski at web.de>, size=1450, nrcpt=1 (queue active)
Jul 12 18:05:58 odin postfix/smtpd[17297]: disconnect from 
localhost[127.0.0.1]
Jul 12 18:05:58 odin postfix/smtp[17296]: F41B310D65: 
to=<o.sakowski at web.de>, orig_to=<mail at geonat.de>, 
relay=127.0.0.1[127.0.0.1], delay=2, status=sent (250 2.6.0 Ok, 
id=16932-04, from MTA: 250 Ok: queued as 7F8CE10DE5)
Jul 12 18:05:58 odin postfix/oqmgr[17109]: F41B310D65: removed
Jul 12 18:05:58 odin postfix/smtp[17299]: 7F8CE10DE5: 
to=<o.sakowski at web.de>, relay=mx-ha01.web.de[217.72.192.149], delay=0, 
status=bounced (host mx-ha01.web.de[217.72.192.149] said: 550 rejected: 
Please see http://freemail.web.de/reject  (in reply to MAIL FROM command))
Jul 12 18:05:58 odin postfix/cleanup[17294]: B217B10DE6: 
message-id=<20040712160558.B217B10DE6 at mx1.em2d.de>
Jul 12 18:05:58 odin postfix/oqmgr[17109]: B217B10DE6: from=<>, 
size=3264, nrcpt=1 (queue active)
Jul 12 18:05:58 odin postfix/oqmgr[17109]: 7F8CE10DE5: removed
Jul 12 18:05:58 odin postfix/smtp[17299]: B217B10DE6: 
to=<o.sakowski at web.de>, relay=mx-ha01.web.de[217.72.192.149], delay=0, 
status=sent (250 OK id=1Bk3JG-0008LE-00)
Jul 12 18:05:58 odin postfix/oqmgr[17109]: B217B10DE6: removed

-----------------------------------------------------

Ich seh leider nicht warum web.de die Mail rejectet. Von anderen 
Absendeadressen funktioniert das, nur wenn Absendeadresse und 
Relayadresse gleich sind gibts nen reject. Ich hab auch schon auf der im 
Log angegebenen URL nachgesehen. Reverse-DNS-einträge stimmen auch.

Vielleicht sieht von Ruch jemand das Problem.

Vielen Dank für Eure Hilfe
Olaf Sakowski

P.s. postconf -n

------------------------------------
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
html_directory = no
inet_interfaces = all
local_recipient_maps = $alias_maps $virtual_mailbox_maps
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = default.em2d.de
myhostname = mx1.em2d.de
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relay_domains = $mydestination, $transport_maps
sample_directory = /usr/share/doc/packages/postfix/samples
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtpd_banner = $myhostname ESMTP
smtpd_client_restrictions = reject_unauth_pipelining, 
         reject_rbl_client sbl.spamhaus.org           reject_rbl_client 
xbl.spamhaus.org
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_hostname
smtpd_recipient_restrictions = check_client_access 
hash:/etc/postfix/pop-before-smtp, 
permit_mynetworks, 
reject_unknown_sender_domain, 
reject_unknown_recipient_domain,     reject_non_fqdn_sender, 
               reject_unauth_destination, 
reject_rbl_client relay.ordb.org, 
reject_rbl_client cbl.abuseat.org, 
reject_rbl_client list.dsbl.org, 
reject_rbl_client opm.blitzed.org, 
reject_rbl_client sbl.spamhaus.org, 
reject_rhsbl_client blackhole.securitysage.com, 
reject_rhsbl_sender blackhole.securitysage.com
smtpd_sender_restrictions = reject_non_fqdn_sender, 
         reject_unknown_sender_domain
transport_maps = mysql:/etc/postfix/mysql.transport
unknown_local_recipient_reject_code = 450
virtual_alias_maps = mysql:/etc/postfix/mysql.virtual_maps
virtual_gid_maps = mysql:/etc/postfix/mysql.ids
virtual_mailbox_base = /var/spool/maildirs
virtual_mailbox_maps = mysql:/etc/postfix/mysql.mailbox
virtual_minimum_uid = 5000
virtual_uid_maps = mysql:/etc/postfix/mysql.ids

-- 
---------------------------------
  Olaf Sakowski

  -------------------------------
  eMedia development & design GbR
  www.em2d.de || sakowski at em2d.de
  -------------------------------