[Postfixbuch-users] Mails an nicht-existente Subdomains abweisen

[Torben]

> Hallo Torben,
>
> Hast Du evtl. Überschneidungen bei mydestination und relay_domains?
>
> Grüße
> Klaus.


Hallo Klaus,

hatte bis zu diesem Zeitpunkt folgende Werte fuer relay_domains und  
mydestination:

# /etc/postfix/main.cf
mydomain = serverkompetenz.net
myhostname = hxxxxxxx.serverkompetenz.net
mydestination = $myhostname, $mydomain, localhost, localhost.$mydomain
relay_domains = $mydestination


hab danach relay_domains folgendermassen gesetzt:

# /etc/postfix/main.cf
relay_domains =


Das Ergebnis ist unveraendert: er nimmt die Mails an und schickt sie  
mit Fehlermeldung 450 an den Absender zurueck, dieser schickt nach 10  
Minuten erneut, Postfix weisst sie wieder mit 450 ab, ....

# /var/log/mail.log
Feb  9 11:13:32 hxxxxxxx postfix/smtpd[14314]: connect from mail- 
provider.tld[yyy.yyy.yyy.yyy]
Feb  9 11:13:33 hxxxxxxx postgrey[11901]: action=pass, reason=client  
AWL, client_name=mail-provider.tld, client_address=yyy.yyy.yyy.yyy,  
sender=sender at mail-provider.tld, recipient=kein-ldap- 
user at irgendwas.example1.com
Feb  9 11:13:33 hxxxxxxx postfix/cleanup[14319]: 405B722FA73A:  
message-id=<20090209101333.405B722FA73A at hxxxxxxx.serverkompetenz.net>
Feb  9 11:13:33 hxxxxxxx postfix/qmgr[14261]: 405B722FA73A:  
from=<double-bounce at hxxxxxxx.serverkompetenz.net>, size=307, nrcpt=1  
(queue active)
Feb  9 11:13:33 hxxxxxxx postfix/smtp[14320]: 405B722FA73A: to=<kein- 
ldap-user at irgendwas.example1.com>, relay=none, delay=0.25,  
delays=0.07/0.06/0.13/0, dsn=5.4.6, status=undeliverable (mail for  
irgendwas.example1.com loops back to myself)
Feb  9 11:13:33 hxxxxxxx postfix/qmgr[14261]: 405B722FA73A: removed
Feb  9 11:13:36 hxxxxxxx postfix/smtpd[14314]: NOQUEUE: reject: RCPT  
from mail-provider.tld[yyy.yyy.yyy.yyy]: 450 4.1.1 <kein-ldap- 
user at irgendwas.example1.com>: Recipient address rejected:  
undeliverable address: mail for irgendwas.example1.com loops back to  
myself; from=<sender at mail-provider.tld> to=<kein-ldap- 
user at irgendwas.example1.com> proto=ESMTP helo=<mail-provider.tld>
Feb  9 11:13:36 hxxxxxxx postfix/smtpd[14314]: disconnect from mail- 
provider.tld[yyy.yyy.yyy.yyy]


"Echte" Mail-Adressen werden via LDAP abgefragt:

# /etc/postfix/main.cf
virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains
virtual_uid_maps = static:5000
virtual_gid_maps = $virtual_uid_maps
virtual_mailbox_base = /home/vmail
virtual_mailbox_maps = ldap:/etc/postfix/virtual_mailbox_maps_ldap
virtual_alias_maps = ldap:/etc/postfix/virtual_alias_maps_ldap

# /etc/postfix/virtual_mailbox_domains
example1.com             create: 2009-01-25
example2.com             create: 2009-01-25

# /etc/postfix/virtual_mailbox_maps_ldap
bind = yes
server_host = localhost
server_port = 389
bind_dn = cn=admin,dc=my-domain,dc=org
bind_pw = geheim
search_base = ou=user,dc=my-domain,dc=org
version = 3
query_filter = (&(&(objectClass=qmailUser)(mail=%s)) 
(accountStatus=active))
result_attribute = mailMessageStore

# /etc/postfix/virtual_alias_maps_ldap
bind = yes
server_host = localhost
server_port = 389
bind_dn = cn=admin,dc=my-domain,dc=org
bind_pw = geheim
search_base = ou=user,dc=my-domain,dc=org
version = 3
query_filter = (&(&(objectClass=qmailUser)(mailForwardingAddress=%s)) 
(accountStatus=active))
result_attribute = mail


zu guter Letzt nochmal meine main.cf

# postconf -n
alias_maps =
config_directory = /etc/postfix
home_mailbox = Maildir/
inet_interfaces = all
mail_owner = postfix
mydestination = $myhostname, $mydomain, localhost, localhost.$mydomain
myhostname = hxxxxxxx.serverkompetenz.net
mynetworks = 127.0.0.0/8, <IP des Servers>
mynetworks_style = host
myorigin = $myhostname
relay_domain =
parent_domain_matches_subdomains =
  debug_peer_list,
  fast_flush_domains,
  mynetworks,
  permit_mx_backup_networks,
  qmqpd_authorized_clients,
  relay_domains
smtpd_banner = $myhostname ESMTP
smtpd_helo_required = yes
smtpd_recipient_restrictions =
  reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  reject_unknown_sender_domain,
  reject_unknown_recipient_domain,
  permit_sasl_authenticated,
  permit_mynetworks,
  reject_rbl_client zen.spamhaus.org,
  reject_rbl_client ix.dnsbl.manitu.net,
  reject_rbl_client bl.spamcop.net,
  reject_rbl_client dnsbl.njabl.org,
  reject_rbl_client list.dsbl.org,
  reject_rhsbl_client multi.uribl.com,
  reject_rhsbl_client blackhole.securitysage.com,
  check_policy_service inet:127.0.0.1:60000,
  reject_unverified_recipient,
  reject_unauth_destination,
  reject_unauth_pipelining,
  permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
soft_bounce = no
virtual_alias_maps = ldap:/etc/postfix/virtual_alias_maps_ldap
virtual_gid_maps = $virtual_uid_maps
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains
virtual_mailbox_maps = ldap:/etc/postfix/virtual_mailbox_maps_ldap
virtual_transport = dovecot
virtual_uid_maps = static:5000


Viele Gruesse, Torben