[Postfix] für reine E-Mail-Weiterleitungen nutzen

H4ndy

H4ndy

New Member
Hallo,

Ich sitze schon seit mehreren Stunden vor meinem neuen vServer mit Debian Lenny und will mein E-Mail-System neu aufsetzen. Das Monster vom alten vServer wollte ich nicht übernehmen (Exim4 + VExim + Courier), da der neue Server keine POP3/IMAP-Postfächer mehr bereithalten soll, sondern nur noch eine handvoll E-Mail-Weiterleitungen für seine Domains durchführen soll (z.B. an Google Mail).

Dazu bin ich auf viele Tutorials mit Postfix + Dovecot gestoßen. Postfix ist soweit auch dicht (was offene Relays angeht), allerdings bekomm ich keine einzige Weiterleitung hin, alles wird durch einen double-bounce quittiert mit anschließendem "451 4.3.5 Server configuration error" an den sendenen Server. Eingesetzt wird Postfix 2.5.5-1.1 und dovecot 1.0.15.

Meine überlegung:
- Alle Domains in virtual_mailbox_domains packen
- Keine Konten in virtual_mailbox_maps ablegen
- virtual_alias_maps mit meinen Weiterleitungen füllen (nach Schema user@domain.tld meinemail@googlemail.com)

Dies funktioniert aber leider nicht. Als ich mal eine Mailbox eingerichtet hatte, funktioniert es zumindest teilweise, aber nur mit der einen Domain.

meine main.cf:
Code: 
# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_use_tls=yes
smtpd_tls_security_level = may
smtpd_tls_auth_only = no
smtpd_tls_cert_file=/etc/ssl/certs/email_cert.pem
smtpd_tls_key_file=/etc/ssl/private/email_key.pem
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_tls_received_header = yes
tls_random_source = dev:/dev/urandom


# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = lvpsXX-XX-XX-XX.dedicated.hosteurope.de
mydomain = lvpsXX-XX-XX-XX.dedicated.hosteurope.de

alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = $mydomain
mydestination = localhost, $mydomain
relayhost = 
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

# Virtual Domains and Mail Boxes
virtual_mailbox_base = /var/mail/vhosts
virtual_mailbox_domains = /etc/postfix/virtual_domains
virtual_mailbox_maps = hash:/etc/postfix/virtual_mailbox

virtual_alias_domains = /etc/postfix/virtual_alias_domains
virtual_alias_maps = hash:/etc/postfix/virtual_alias

virtual_minimum_uid = 100
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000

virtual_transport = dovecot
dovecot_destination_recipient_limit = 1
mailbox_size_limit = 0

# SMTP AUTH
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $mydomain

# Sonstiges
smtpd_require_helo = yes
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, \
    reject_invalid_hostname,  reject_unknown_client, reject_rbl_client sbl-xbl.spamhaus.org \
    smtpd_sender_restrictions = permit_mynetworks, reject_unknown_address, \
    reject_unknown_sender_domain, reject_non_fqdn_sender
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, \
    reject_unauth_destination
smtpd_recipient_limit = 250

broken_sasl_auth_clients = yes
virtual_alias_domains ist eine leere Datei (hatte schon versucht die Domains dort statt in virtual_mailbox_domains zu packen)

/etc/postfix/virtual_domains
Code: 
domain1.de
domain2.de
domain3.com
domain4.com

/etc/postfix/virtual_mailbox - leer (wurde auch mit postmap gehasht)
/etc/postfix/virtual_alias_domains - leer

/etc/postfix/virtual_alias (ebenfalls frisch gehasht)
Code: 
telefon@domain1.de		meineadresse@googlemail.com
#
telefon@domain3.com	meineadresse@googlemail.com
#

Ich hatte es auch mit diesem Format probiert (wie hier beschrieben), ohne Erfolg:
Code: 
domain1.de		DOMAIN
telefon@domain1.de		meineadresse@googlemail.com
#
domain3.com			DOMAIN
telefon@domain3.com		meineadresse@googlemail.com
#

im mail.log findet sich dann das:
- Server meldet sich und quittiert MAIL FROM:<absender@googlemail.com> mit "250 2.1.0 Ok"
- Dann kommt RCPT TO:<telefon@domain1.de> und folgende Suche nach dem User inkl. Abbruch und double-bouce:
Code: 
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: extract_addr: input: <telefon@domain1.de>
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: smtpd_check_addr: addr=telefon@domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr request = rewrite
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr rule = local
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr address = telefon@domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: flags
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: flags
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: 0
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: address
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: address
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: telefon@domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: (list terminator)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: (end)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: rewrite_clnt: local: telefon@domain1.de -> telefon@domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr request = resolve
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr sender =
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr address = telefon@domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: flags
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: flags
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: 0
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: transport
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: transport
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: dovecot
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: nexthop
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: nexthop
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: recipient
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: recipient
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: telefon@domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: flags
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: flags
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: 1024
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: (list terminator)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: (end)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: resolve_clnt: `' -> `telefon@domain1.de' -> transp=`dovecot' host=`domain1.de' rcpt=`telefon@domain1.de' flags= class=virtual
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: ctable_locate: install entry key telefon@domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: extract_addr: in: <telefon@domain1.de>, result: telefon@domain1.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr request = rewrite
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr rule = local
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr address = double-bounce
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: flags
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: flags
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: 0
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: address
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: address
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: double-bounce@lvpsXX-XX-XX-XX.dedicated.hosteurope.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/rewrite socket: wanted attribute: (list terminator)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: (end)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: rewrite_clnt: local: double-bounce -> double-bounce@lvpsXX-XX-XX-XX.dedicated.hosteurope.de
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: >>> START Client host RESTRICTIONS <<<
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: generic_checks: name=permit_mynetworks
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: permit_mynetworks: mail-ew0-f43.google.com 209.85.215.43
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostname: mail-ew0-f43.google.com ~? 127.0.0.0/8
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostaddr: 209.85.215.43 ~? 127.0.0.0/8
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostname: mail-ew0-f43.google.com ~? [::ffff:127.0.0.0]/104
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostaddr: 209.85.215.43 ~? [::ffff:127.0.0.0]/104
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostname: mail-ew0-f43.google.com ~? [::1]/128
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostaddr: 209.85.215.43 ~? [::1]/128
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_list_match: mail-ew0-f43.google.com: no match
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_list_match: 209.85.215.43: no match
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: generic_checks: name=permit_mynetworks status=0
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: generic_checks: name=permit_sasl_authenticated
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: generic_checks: name=permit_sasl_authenticated status=0
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: generic_checks: name=\
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: warning: unknown smtpd restriction: "\"
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: NOQUEUE: reject: RCPT from mail-ew0-f43.google.com[209.85.215.43]: 451 4.3.5 Server configuration error; from=<manuel.kroeber@googlemail.com> to=<telefon@domain1.de> proto=ESMTP helo=<mail-ew0-f43.google.com>
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: > mail-ew0-f43.google.com[209.85.215.43]: 451 4.3.5 Server configuration error
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: < mail-ew0-f43.google.com[209.85.215.43]: QUIT
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: > mail-ew0-f43.google.com[209.85.215.43]: 221 2.0.0 Bye
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostname: mail-ew0-f43.google.com ~? 127.0.0.0/8
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostaddr: 209.85.215.43 ~? 127.0.0.0/8
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostname: mail-ew0-f43.google.com ~? [::ffff:127.0.0.0]/104
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostaddr: 209.85.215.43 ~? [::ffff:127.0.0.0]/104
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostname: mail-ew0-f43.google.com ~? [::1]/128
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_hostaddr: 209.85.215.43 ~? [::1]/128
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_list_match: mail-ew0-f43.google.com: no match
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: match_list_match: 209.85.215.43: no match
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr request = disconnect
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr ident = smtp:209.85.215.43
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/anvil: wanted attribute: status
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: status
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: 0
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: private/anvil: wanted attribute: (list terminator)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: (end)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: smtpd_chat_notify: notify postmaster
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: connect to subsystem public/cleanup
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: public/cleanup socket: wanted attribute: queue_id
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: queue_id
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: B5A41E8450A1
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: public/cleanup socket: wanted attribute: (list terminator)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: (end)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: send attr flags = 32
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/cleanup[15983]: B5A41E8450A1: message-id=<20100720165248.B5A41E8450A1@lvpsXX-XX-XX-XX.dedicated.hosteurope.de>
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: public/cleanup socket: wanted attribute: status
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: status
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: 0
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: public/cleanup socket: wanted attribute: (list terminator)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: reason
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute value: (end)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: public/cleanup socket: wanted attribute: (list terminator)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: input attribute name: (end)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: disconnect from mail-ew0-f43.google.com[209.85.215.43]
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: master_notify: status 1
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/smtpd[15978]: connection closed
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/qmgr[15927]: B5A41E8450A1: from=<double-bounce@lvpsXX-XX-XX-XX.dedicated.hosteurope.de>, size=1084, nrcpt=1 (queue active)
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/local[15984]: B5A41E8450A1: to=<root@lvpsXX-XX-XX-XX.dedicated.hosteurope.de>, orig_to=<postmaster>, relay=local, delay=0.01, delays=0.01/0/0/0, dsn=2.0.0, status=sent (delivered to command: procmail -a "$EXTENSION")
Jul 20 18:52:48 lvpsXX-XX-XX-XX postfix/qmgr[15927]: B5A41E8450A1: removed

Ich weiss langsam echt nicht mehr weiter. Zumal das Szenario nun wirklich sehr einfach ist bzw. sein sollte :(

// NACHTRAG
Durch einige Tests (echte Mailbox angelegt) konnte ich schonmal feststellen, dass ich mir selbst was schicken kann und dann auch die Weiterleitungen funktionieren (von innnen sozusagen), schicke ich aber von aussen was (z.B. von GMail aus oder Arcor), wird der double-bounce generiert und die 451 4.3.5 Server configuration error Meldung ausgegeben. Zumindest schonmal ein Fortschritt, leider weiss ich dann immer noch nicht, wo ich da in der Konfiguration ansetzen muss, da ich einfach nicht genau rausbekomme, warum jetzt der Fehler kommt.
 
Last edited by a moderator:
You must log in or register to reply here.
Back
Top