Unklar, warum E-Mail nicht gesendet werden kann
Jürgen Gmach
juergen.gmach at apis.de
Fr Dez 2 14:26:12 CET 2016
Hi,
vorab - ich hab nur das Dovecot-Buch, noch nicht das Postfix-Buch, hoffe
es geht trotzdem in Ordnung hier zu posten.
Eine Kollegin vom Vertrieb konnte mit einem prop. Windows-CRM (via SMTP)
eine E-Mail nicht versenden - sonst funktioniert das Setup.
Könnt ihr mir hier weiterhelfen und Licht ins Dunkel bringen? z.B.
verstehe ich nicht, woher die Adresse double-bounce at mail.apis.de kommt.
Falls Peer direkt mitliest - würde man Loganalyse beim Kurs "SICHERE
MAILSERVER MIT POSTFIX" lernen?
Vielen Dank und schönes Wochenend!
Logauszug (anonymisiert):
Dec 1 11:32:05 bliss01 amavis[6222]: (06222-17) ESMTP::10024
/tmp/amavis/amavis-20161201T103136-06222-72Y_Hw2S: <sales at apis.de> ->
<empfaenger at example.com> Received: from mail.apis.de ([127.0.0.1]) by
localhost (bliss01.gocept.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP for <empfaenger at example.com>; Thu, 1 Dec 2016 11:32:05 +0100
(CET)
Dec 1 11:32:05 bliss01 amavis[6222]: (06222-17) Checking: SFFapseg5orx
[our.ip.address] <sales at apis.de> -> <empfaenger at example.com>
Dec 1 11:32:05 bliss01 amavis[6222]: (06222-17) Open relay? Nonlocal
recips but not originating: empfaenger at example.com
Dec 1 11:32:06 bliss01 postfix/smtpd[15698]: connect from
localhost[127.0.0.1]
Dec 1 11:32:06 bliss01 postfix/smtpd[15698]: NOQUEUE: reject: RCPT from
localhost[127.0.0.1]: 550 5.1.1 <empfaenger at example.com>: Recipient
address rejected: undeliverable address: host
mx01.example.com[ip.address] said: 554 5.1.8
<double-bounce at mail.apis.de>: Sender address rejected: MX record not
found (in reply to RCPT TO command); from=<sales at apis.de>
to=<empfaenger at example.com> proto=ESMTP helo=<localhost>
Dec 1 11:32:06 bliss01 amavis[6222]: (06222-17) smtp resp to RCPT (pip)
(<empfaenger at example.com>): 550 5.1.1 <empfaenger at example.com>:
Recipient address rejected: undeliverable address: host
mx01.example.com[ip.address] said: 554 5.1.8
<double-bounce at mail.apis.de>: Sender address rejected: MX record not
found (in reply to RCPT TO command)\nFor assistance, call +49 9482 94 15
0 or write to info at apis.de
Dec 1 11:32:06 bliss01 amavis[6222]: (06222-17) Negative SMTP resp. to
DATA: 554 5.5.1 Error: no valid recipients\nFor assistance, call +49
9482 94 15 0 or write to info at apis.de
Dec 1 11:32:06 bliss01 postfix/smtpd[15698]: disconnect from
localhost[127.0.0.1]
Dec 1 11:32:06 bliss01 amavis[6222]: (06222-17) (!)FWD from
<sales at apis.de> -> <empfaenger at example.com>, 550 5.1.1 from
MTA(smtp:[127.0.0.1]:10025): 550 5.1.1 <empfaenger at example.com>:
Recipient address rejected: undeliverable address: host
mx01.example.com[ip.address] said: 554 5.1.8
<double-bounce at mail.apis.de>: Sender address rejected: MX record not
found (in reply to RCPT TO command)\nFor assistance, call +49 9482 94 15
0 or write to info at apis.de
Dec 1 11:32:06 bliss01 amavis[6222]: (06222-17) Blocked MTA-BLOCKED
{RejectedOpenRelay}, [our.ip.address]:51556 [our.ip.address]
<sales at apis.de> -> <empfaenger at example.com>, mail_id: SFFapseg5orx,
Hits: -2.369, size: 1315, 210 ms
Dec 1 11:32:06 bliss01 postfix/smtpd[15646]: proxy-reject:
END-OF-MESSAGE: 550-5.1.1 id=06222-17 - Rejected by next-hop MTA on
relaying, from MTA(smtp:[127.0.0.1]:10025): 550 5.1.1
<empfaenger at example.com>: Recipient address rejected: undeliverable
address: host mx01.example.com[ip.address] said: 554 5.1.8
<double-bounce at mail.apis.de>: Sender address rejected: MX record not
found (in reply to RCPT TO command)??550 5.1.1 For assistance, call +49
9482 94 15 0 or write to info at apis.de; from=<sales at apis.de>
to=<empfaenger at example.com> proto=ESMTP helo=<LIPIEN20-WIN7>
Dec 1 11:32:06 bliss01 postfix/smtpd[15646]: disconnect from
[our.ip.address]
postconf -n:
bliss01 ~ # postconf -n
address_verify_map = btree:/var/spool/postfix/data/verify
alias_database = btree:/etc/mail/local-aliases, btree:/etc/mail/aliases
alias_maps = $alias_database
bounce_queue_lifetime = 1d
bounce_template_file = /etc/postfix/bounce.cf
broken_sasl_auth_clients = yes
canonical_classes = envelope_sender, envelope_recipient
canonical_maps = btree:/etc/mail/canonical,
btree:/etc/mail/canonical-template, pcre:/etc/mail/canonical.pcre
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd
$daemon_directory/$process_name $process_id & sleep 5
delay_warning_time = 4h
home_mailbox = .maildir/
html_directory = no
in_flow_delay = 1s
inet_interfaces = $myhostname, localhost, bliss01.gocept.net
inet_protocols = all
lmtp_connect_timeout = 10m
local_header_rewrite_clients = permit_inet_interfaces,
permit_sasl_authenticated, permit_mynetworks
mail_owner = postfix
mailbox_command = procmail -f "$SENDER" -a "$EXTENSION" -d "$USER"
mailbox_size_limit = $message_size_limit
mailman_destination_recipient_limit = 1
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maximal_queue_lifetime = 3d
message_size_limit = 102400000
mydestination = $myhostname, localhost.$mydomain, localhost,
bliss01.gocept.net, bliss01
myhostname = mail.apis.de
mynetworks = /etc/mail/mynetworks, btree:/etc/mail/external-networks
newaliases_path = /usr/bin/newaliases
notify_classes = software, 2bounce, resource
queue_directory = /var/spool/postfix
rbl_reply_maps = btree:/etc/mail/rbl-reply
readme_directory = no
recipient_delimiter = +
relay_domains = /etc/mail/relay-domains
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_bind_address = 195.62.126.104
smtp_bind_address6 = 2a02:248:101:62::10d9
smtp_connect_timeout = 3m
smtp_defer_if_no_mx_address_found = yes
smtp_host_lookup = dns, native
smtp_sasl_security_options = noanonymous, noplaintext
smtp_sasl_tls_security_options = noanonymous
smtpd_client_connection_count_limit = 7
smtpd_client_connection_rate_limit = ${stress?10}${stress:100}
smtpd_client_message_rate_limit = ${stress?100}${stress:1000}
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_hard_error_limit = ${stress?4}${stress:20}
smtpd_helo_required = yes
smtpd_junk_command_limit = ${stress?5}${stress:100}
smtpd_policy_service_max_idle = 60s
smtpd_policy_service_timeout = 180s
smtpd_proxy_filter = inet:localhost:10024
smtpd_proxy_timeout = 10m
smtpd_recipient_restrictions = check_client_access
btree:/etc/mail/access-client, check_helo_access
btree:/etc/mail/access-helo, check_sender_access
btree:/etc/mail/access-sender, check_recipient_access
btree:/etc/mail/access-recipient, reject_non_fqdn_sender,
reject_non_fqdn_recipient, reject_unknown_sender_domain,
reject_unknown_recipient_domain, permit_sasl_authenticated,
permit_mynetworks, reject_invalid_helo_hostname, reject_rbl_client
zen.spamhaus.org=127.0.0.10, reject_rbl_client
zen.spamhaus.org=127.0.0.11, reject_rbl_client zen.spamhaus.org,
reject_rbl_client ix.dnsbl.manitu.net, check_policy_service
inet:127.0.0.1:12525, check_policy_service inet:127.0.0.1:10030,
reject_unverified_recipient, permit_mx_backup,
reject_unauth_destination, permit
smtpd_reject_footer = For assistance, call +49 9482 94 15 0 or write to
info at apis.de
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = no
smtpd_relay_restrictions =
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_soft_error_limit = ${stress?2}${stress:10}
smtpd_timeout = ${stress?10s}${stress:120s}
smtpd_tls_cert_file = /srv/bliss/deployment/work/ssl_mail/mail.crt
smtpd_tls_dh1024_param_file = /etc/ssl/dhparams.pem
smtpd_tls_key_file = /srv/bliss/deployment/work/ssl_mail/mail.key
smtpd_tls_mandatory_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4,
MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5,
CBC3-SHA
smtpd_use_tls = yes
strict_rfc821_envelopes = no
transport_maps = btree:/etc/mail/transport
unknown_local_recipient_reject_code = 550
unverified_recipient_reject_code = 550
virtual_alias_maps = btree:/etc/mail/virtual-aliases
virtual_mailbox_domains =
mysql:/srv/bliss/deployment/work/postfix/mysql-virtual-mailbox-domains.cf
virtual_mailbox_maps =
mysql:/srv/bliss/deployment/work/postfix/mysql-virtual-mailbox-maps.cf
virtual_transport = lmtp:unix:private/dovecot-lmtp
master.cf
# Managed by Puppet: do not edit this file directly. It will be
overwritten!
#
# Postfix master process configuration file. For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# Do not forget to execute "postfix reload" after editing this file.
#
#
==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
#
==========================================================================
smtp inet n - n - 15 smtpd
submission inet n - n - - smtpd
-o smtpd_proxy_filter=
-o
smtpd_recipient_restrictions=check_client_access,btree:/etc/mail/access-client,check_helo_access,btree:/etc/mail/access-helo,check_recipient_access,btree:/etc/mail/access-recipient,che
ck_sender_access,btree:/etc/mail/access-sender,permit_sasl_authenticated,permit_mynetworks,reject
-o smtpd_etrn_restrictions=reject
127.0.0.1:10025 inet n - n - - smtpd
-o content_filter=
-o smtpd_proxy_filter=
-o smtpd_authorized_xforward_hosts=127.0.0.1
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o
smtpd_recipient_restrictions=check_sender_access,btree:/etc/mail/access-sender,check_recipient_access,btree:/etc/mail/access-recipient,reject_unverified_recipient,permit_mynetworks,rej
ect
-o smtpd_data_restrictions=
-o mynetworks=127.0.0.0/8
-o receive_override_options=no_unknown_recipient_checks
#628 inet n - n - - qmqpd
pickup unix n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr unix n - n 300 1 qmgr
#qmgr unix n - n 300 1 oqmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
# An IPv4 only version of smtp
smtp4 unix - - n - - smtp
-o inet_protocols=ipv4
# When relaying mail as backup MX, disable fallback_relay to avoid MX
loops
relay unix - - n - - smtp
-o smtp_fallback_relay=
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
#maildrop unix - n n - - pipe
# flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
#
# Specify in cyrus.conf:
# lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of the following:
# mailbox_transport = lmtp:inet:localhost
# virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus unix - n n - - pipe
# user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension}
${user}
#
# ====================================================================
#
# Old example of delivery via Cyrus.
#
#old-cyrus unix - n n - - pipe
# flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
#uucp unix - n n - - pipe
# flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
($recipient)
#
# ====================================================================
#
# Other external delivery methods.
#
#ifmail unix - n n - - pipe
# flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
#
#bsmtp unix - n n - - pipe
# flags=Fq. user=bsmtp argv=/usr/sbin/bsmtp -f $sender $nexthop
$recipient
#
#scalemail-backend unix - n n - 2 pipe
# flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
# ${nexthop} ${user} ${extension}
#
mailman unix - n n - - pipe
flags=FR user=mailman:mailman
argv=/usr/local/sbin/postfix-to-mailman ${nexthop} ${user}
# XXX deprecated: use lmtp:unix:private/dovecot-lmtp instead
dovecot unix - n n - - pipe
flags=DRhu user=vmail:vmail
argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient}
user-bliss unix - n n - - pipe
flags=Ruhq user=bliss directory=/srv/bliss
argv=/srv/bliss/bin/deliver -f $sender $nexthop $recipient
user-apisvcs unix - n n - - pipe
flags=Ruhq user=apisvcs directory=/srv/apisvcs
argv=/srv/apisvcs/bin/deliver -f $sender $nexthop $recipient
--
Jürgen Gmach . juergen.gmach at apis.de . +49 9482 941545
APIS Informationstechnologien GmbH . http://www.apis.de
Gewerbepark A 13, 93086 Wörth/Donau . Deutschland
Sitz der GmbH: Wörth/Donau, Amtsgericht Regensburg (HRB 6684)
Geschäftsführer: Julia Anna Dietz, Jürgen Eilers, Peter Rosenbeck
Mehr Informationen über die Mailingliste Postfixbuch-users