Postfix - Keine ausgehenden Mails möglich

ppilz

New Member
Hallo zusammen,

auf einem Server habe ich das Problem, dass keine Mails nach außen möglich sind.

Der Server erhielt ein Upgrade von Debian 7 auf 8 und anschließend auf Debian 9.

Es läuft Plesk auf dem Server.

Mails untereinander gehen.

Anbei ein Log Auszug:
Code:
Nov 15 17:15:35 mail postfix/smtpd[31411]: connect from unknown[X.X.X.X]
Nov 15 17:15:35 mail postfix/smtpd[31411]: TLS SNI mail.blablabla.de from unknown[X.X.X.X] not matched, using default chain
Nov 15 17:15:35 mail postfix/smtpd[31411]: warning: X.X.X.X.zen.spamhaus.org: RBL lookup error: Host or domain name not found. Name service error for name=X.X.X.X.zen.spamhaus.org type=A: Host not found, try again
Nov 15 17:15:35 mail postfix/smtpd[31411]: NOQUEUE: reject: RCPT from unknown[X.X.X.X]: 554 5.7.1 <test@example.com>: Relay access denied; from=<test2@example.com> to=<test@example.com> proto=ESMTP helo=<BN0857>
Nov 15 17:15:38 mail postfix/smtpd[31411]: disconnect from unknown[X.X.X.X] helo=1 ehlo=1 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Nov 15 17:15:38 mail psa-pc-remote[29829]: Message aborted.
Nov 15 17:15:38 mail psa-pc-remote[29829]: Message aborted.

Hier die main.cf
Code:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = /usr/share/doc/postfix/README_FILES

# TLS parameters
smtpd_tls_cert_file = /etc/postfix/postfix.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_use_tls = yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = mail.example.com
alias_maps = hash:/etc/aliases, hash:/var/spool/postfix/plesk/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = localhost.example.com, localhost, localhost.localdomain
relayhost =
mynetworks =
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all
virtual_mailbox_domains = $virtual_mailbox_maps, hash:/var/spool/postfix/plesk/virtual_domains
virtual_alias_maps = $virtual_maps, hash:/var/spool/postfix/plesk/virtual
virtual_mailbox_maps = , hash:/var/spool/postfix/plesk/vmailbox
transport_maps = , hash:/var/spool/postfix/plesk/transport
smtpd_tls_security_level = may
smtp_tls_security_level = may
smtp_use_tls = no
smtpd_timeout = 3600s
smtpd_proxy_timeout = 3600s
disable_vrfy_command = yes
smtpd_sender_restrictions = check_sender_access hash:/var/spool/postfix/plesk/blacklists, permit_sasl_authenticated
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org
smtp_send_xforward_command = yes
smtpd_authorized_xforward_hosts = 127.0.0.0/8 [::1]/128
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
virtual_mailbox_base = /var/qmail/mailnames
virtual_uid_maps = static:30
virtual_gid_maps = static:31
smtpd_milters = , inet:127.0.0.1:12768
sender_dependent_default_transport_maps = hash:/var/spool/postfix/plesk/sdd_transport_maps
virtual_transport = plesk_virtual
plesk_virtual_destination_recipient_limit = 1
mailman_destination_recipient_limit = 1
virtual_mailbox_limit = 0
non_smtpd_milters =
smtpd_tls_mandatory_protocols = TLSv1 TLSv1.1 TLSv1.2
smtpd_tls_protocols = TLSv1 TLSv1.1 TLSv1.2
smtpd_tls_ciphers = medium
smtpd_tls_mandatory_ciphers = medium
tls_medium_cipherlist = EECDH+AESGCM+AES128:EECDH+AESGCM+AES256:EECDH+CHACHA20:EDH+AESGCM+AES128:EDH+AESGCM+AES256:EDH+CHACHA20:EECDH+SHA256+AES128:EECDH+SHA384+AES256:EDH+SHA256+AES128:EDH+SHA256+AES256:EECDH+SHA1+AES128:EECDH+SHA1+AES256:EDH+SHA1+AES128:EDH+SHA1+AES256:EECDH+HIGH:EDH+HIGH:AESGCM+AES128:AESGCM+AES256:CHACHA20:SHA256+AES128:SHA256+AES256:SHA1+AES128:SHA1+AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!aECDH
recipient_canonical_maps = tcp:127.0.0.1:12346
recipient_canonical_classes = envelope_recipient,header_recipient
message_size_limit = 10240000
daemon_directory = /usr/lib/postfix/sbin
queue_directory = /var/spool/postfix
meta_directory = /etc/postfix
setgid_group = postdrop
command_directory = /usr/sbin
sample_directory = /usr/share/doc/postfix/samples
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
sendmail_path = /usr/sbin/sendmail
mail_owner = postfix
manpage_directory = /usr/share/man
html_directory = no
data_directory = /var/lib/postfix
shlib_directory = no
authorized_flush_users =
authorized_mailq_users =
tls_server_sni_maps = hash:/var/spool/postfix/plesk/certs
tls_preempt_cipherlist = yes
compatibility_level = 2


Ich hoffe jemand kann mir hier weiterhelfen.

Liebe Grüße
 
Laut dem Logauszug sieht es danach aus, als wenn beim Senden der Mail keine Authentisierung stattgefunden hat. Wird im Client evtl. Port 25 zu Senden verwendet? Da sollte eigentlich Port 587 (Submission) eingestellt sein oder 465 (SMTPS)
 
Back
Top