Relay Auth Problem mit Postfix+Dovecot+MySQL auf Debian Lenny

S

steffomio

New Member
Das Mailen zum eigenen Server funktioniert hervorragend, nur das Senden zu externen Mailadressen gestaltet sich schwierig.
Besonders ärgerlich ist, dass ich schon mal eine funtionierende Conf mit arcor.de hatte. Leider mussten wir den Server platt machen, weil ein anderer "Admin" meinte, Passwörter übers http zu versenden.
Jetzt stehe ich hier völlig Ratlos und nix will mehr funktionieren?!

Versuche mit hotmail(smtp.live.com) und googlemail(smtp.googlemail.com) sind im wesentlichen identisch fehlgeschlagen.

Anbei:
- postconf -n
- sasl_transport
- master.cf
- syslog
- aptitude search smtp


Also hier erst mal die
postconf -n
Code: 
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
debug_peer_list = mail.arcor.de
inet_interfaces = all
mailbox_size_limit = 0
mydestination = localhost
myhostname = subdomain.serverhost.de
mynetworks = 127.0.0.0/8
myorigin = serverhost.de
recipient_delimiter = +
relayhost = [mail.arcor.de]
smtp_always_send_ehlo = yes
smtp_sasl_password_maps = /etc/postfix/sasl_transport
smtp_sasl_security_options = 
smtp_sasl_tls_security_options = noanonymous
smtp_tls_security_level = may
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks = $mynetworks
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/ssl/postfix/mail-cert.pem
smtpd_tls_key_file = /etc/ssl/postfix/mail-key.pem
smtpd_tls_loglevel = 0
smtpd_tls_received_header = no
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:/var/spool/postfix/smtpd_tls_session_cache
soft_bounce = yes
tls_random_source = dev:/dev/urandom
virtual_alias_maps = proxy:mysql:$config_directory/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:8
virtual_mailbox_base = /var/vmail
virtual_mailbox_domains = proxy:mysql:$config_directory/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = proxy:mysql:$config_directory/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 150
virtual_transport = dovecot
virtual_uid_maps = static:150

Die Passworttabelle, ertsellt mit
postmap hash:/etc/postfix/sasl_transport
(username ohne @arcor.de)
Code: 
mail.arcor.de username:password

Die master.cf
/etc/postfix/master.cf:
Code: 
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
smtp      inet  n       -       -       -       -       smtpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
        -o smtp_fallback_relay=
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}
dovecot   unix  -       n       n       -       -       pipe 
  flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -d $(recipient)

Das Log eines Mailversuchs nach gmail.com über Relay arcor.de
tail -f /var/log/syslog
mit conf main.cf:
debug_peer_list = mail.arcor.de
soft_bounce = yes
Code: 
Apr 19 07:28:54 subdomain postfix/master[10683]: terminating on signal 15
Apr 19 07:28:54 subdomain postfix/master[22289]: daemon started -- version 2.5.5, configuration /etc/postfix
Apr 19 07:29:42 subdomain postfix/smtpd[22314]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Apr 19 07:29:42 subdomain postfix/smtpd[22314]: connect from p5B042FCF.dip.t-dialin.net[91.4.47.207]
Apr 19 07:29:43 subdomain dovecot: auth-worker(default): mysql: Connected to localhost (postfix)
Apr 19 07:29:43 subdomain postfix/smtpd[22314]: 4072919FC5C1: client=p5B042FCF.dip.t-dialin.net[91.4.47.207], sasl_method=PLAIN, sasl_username=userfromserver@subdomain.serverhost.de
Apr 19 07:29:43 subdomain postfix/cleanup[22320]: 4072919FC5C1: message-id=<4DAD3A80.10205@subdomain.serverhost.de>
Apr 19 07:29:43 subdomain postfix/qmgr[22296]: 4072919FC5C1: from=<userfromserver@subdomain.serverhost.de>, size=629, nrcpt=1 (queue active)
Apr 19 07:29:43 subdomain postfix/smtpd[22314]: disconnect from p5B042FCF.dip.t-dialin.net[91.4.47.207]
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 220 mail-in-10.arcor-online.net ESMTP arcor.de Mailservices usermail
Apr 19 07:29:43 subdomain postfix/smtp[22321]: > mail.arcor.de[151.189.21.116]:25: EHLO subdomain.serverhost.de
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-mail-in-10.arcor-online.net
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-PIPELINING
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-SIZE 48000000
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-ETRN
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-STARTTLS
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-AUTH PLAIN LOGIN
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-AUTH=PLAIN LOGIN
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-ENHANCEDSTATUSCODES
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-8BITMIME
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250 DSN
Apr 19 07:29:43 subdomain postfix/smtp[22321]: server features: 0x901f size 48000000
Apr 19 07:29:43 subdomain postfix/smtp[22321]: Using ESMTP PIPELINING, TCP send buffer size is 4096
Apr 19 07:29:43 subdomain postfix/smtp[22321]: > mail.arcor.de[151.189.21.116]:25: STARTTLS
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 220 2.0.0 Ready to start TLS
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr request = seed
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr size = 32
Apr 19 07:29:43 subdomain postfix/smtp[22321]: private/tlsmgr: wanted attribute: status
Apr 19 07:29:43 subdomain postfix/smtp[22321]: input attribute name: status
Apr 19 07:29:43 subdomain postfix/smtp[22321]: input attribute value: 0
Apr 19 07:29:43 subdomain postfix/smtp[22321]: private/tlsmgr: wanted attribute: seed
Apr 19 07:29:43 subdomain postfix/smtp[22321]: input attribute name: seed
Apr 19 07:29:43 subdomain postfix/smtp[22321]: input attribute value: GoSdCnHeBltnYwB1K5RiZJOr+XP3+tiYOYBaN3Go0EA=
Apr 19 07:29:43 subdomain postfix/smtp[22321]: private/tlsmgr: wanted attribute: (list terminator)
Apr 19 07:29:43 subdomain postfix/smtp[22321]: input attribute name: (end)
Apr 19 07:29:43 subdomain postfix/smtp[22321]: > mail.arcor.de[151.189.21.116]:25: EHLO subdomain.serverhost.de
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-mail-in-10.arcor-online.net
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-PIPELINING
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-SIZE 48000000
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-ETRN
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-AUTH PLAIN LOGIN
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-AUTH=PLAIN LOGIN
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-ENHANCEDSTATUSCODES
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250-8BITMIME
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250 DSN
Apr 19 07:29:43 subdomain postfix/smtp[22321]: server features: 0x900f size 48000000
Apr 19 07:29:43 subdomain postfix/smtp[22321]: Using ESMTP PIPELINING, TCP send buffer size is 4096
Apr 19 07:29:43 subdomain postfix/smtp[22321]: > mail.arcor.de[151.189.21.116]:25: MAIL FROM:<userfromserver@subdomain.serverhost.de> SIZE=629
Apr 19 07:29:43 subdomain postfix/smtp[22321]: > mail.arcor.de[151.189.21.116]:25: RCPT TO:<externuser@gmail.com> ORCPT=rfc822;externuser@gmail.com
Apr 19 07:29:43 subdomain postfix/smtp[22321]: > mail.arcor.de[151.189.21.116]:25: DATA
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250 2.1.0 Ok
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 554 5.7.1 <externuser@gmail.com>: Recipient address rejected: Access denied
Apr 19 07:29:43 subdomain postfix/smtp[22321]: connect to subsystem private/defer
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr nrequest = 0
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr flags = 0
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr queue_id = 4072919FC5C1
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr original_recipient = externuser@gmail.com
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr recipient = externuser@gmail.com
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr offset = 706
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr dsn_orig_rcpt = rfc822;externuser@gmail.com
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr notify_flags = 0
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr status = 4.7.1
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr diag_type = smtp
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr diag_text = 554 5.7.1 <externuser@gmail.com>: Recipient address rejected: Access denied
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr mta_type = dns
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr mta_mname = mail.arcor.de
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr action = delayed
Apr 19 07:29:43 subdomain postfix/smtp[22321]: send attr reason = host mail.arcor.de[151.189.21.116] said: 554 5.7.1 <externuser@gmail.com>: Recipient address rejected: Access denied (in reply to RCPT TO command)
Apr 19 07:29:43 subdomain postfix/smtp[22321]: private/defer socket: wanted attribute: status
Apr 19 07:29:43 subdomain postfix/smtp[22321]: input attribute name: status
Apr 19 07:29:43 subdomain postfix/smtp[22321]: input attribute value: 0
Apr 19 07:29:43 subdomain postfix/smtp[22321]: private/defer socket: wanted attribute: (list terminator)
Apr 19 07:29:43 subdomain postfix/smtp[22321]: input attribute name: (end)
Apr 19 07:29:43 subdomain postfix/smtp[22321]: 4072919FC5C1: to=<externuser@gmail.com>, relay=mail.arcor.de[151.189.21.116]:25, delay=0.45, delays=0.2/0.01/0.17/0.07, dsn=4.7.1, status=SOFTBOUNCE (host mail.arcor.de[151.189.21.116] said: 554 5.7.1 <externuser@gmail.com>: Recipient address rejected: Access denied (in reply to RCPT TO command))
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 554 5.5.1 Error: no valid recipients
Apr 19 07:29:43 subdomain postfix/smtp[22321]: > mail.arcor.de[151.189.21.116]:25: RSET
Apr 19 07:29:43 subdomain postfix/smtp[22321]: > mail.arcor.de[151.189.21.116]:25: QUIT
Apr 19 07:29:43 subdomain postfix/smtp[22321]: < mail.arcor.de[151.189.21.116]:25: 250 2.0.0 Ok
Apr 19 07:29:43 subdomain postfix/smtp[22321]: name_mask: resource
Apr 19 07:29:43 subdomain postfix/smtp[22321]: name_mask: software

Muss noch was installiert werden?
aptitude search smtp
Code: 
p   clamsmtp                                                                                       - virus-scanning SMTP proxy                                                                                
p   esmtp                                                                                          - User configurable relay-only MTA                                                                         
p   esmtp-run                                                                                      - User configurable relay-only MTA                                                                         
p   gambas2-gb-net-smtp                                                                            - Gambas component to use smtp protocol                                                                    
p   libesmtp-dev                                                                                   - LibESMTP SMTP client library development files                                                           
p   libesmtp5                                                                                      - LibESMTP SMTP client library                                                                             
p   libnet-smtp-server-perl                                                                        - A native Perl SMTP Server implementation for Perl                                                        
p   libnet-smtp-ssl-perl                                                                           - SSL support for Net::SMTP                                                                                
p   libnet-smtpauth-perl                                                                           - Perl module that provides SMTP authentication (Net::SMTP_auth)                                           
p   msmtp                                                                                          - light SMTP client with support for server profiles                                                       
p   msmtp-mta                                                                                      - light SMTP client with support for server profiles                                                       
p   php-net-smtp                                                                                   - PHP PEAR module implementing SMTP protocol                                                               
p   pop-before-smtp                                                                                - watch log for POP/IMAP auth, notify MTA to allow relay                                                   
p   proxsmtp                                                                                       - multi purpose SMTP Proxy                                                                                 
p   qpsmtpd                                                                                        - Flexible SMTP daemon for network-level spam detection                                                    
p   smtpfeed                                                                                       - SMTP feed -- SMTP Fast Exploding External Deliver for Sendmail                                           
p   ssmtp                                                                                          - extremely simple MTA to get mail off the system to a mail hub
 
Kaum hat man sich ausgeheult...

findet man den Fehler :D

fehlte in main.cf:
smtp_sasl_auth_enable = yes

und ebenfalls in main.cf statt:
smtp_sasl_password_maps = etc/postfix/sasl_transport

dieses:
smtp_sasl_password_maps = hash:/etc/postfix/sasl_transport

Dann
/etc/init.d/postfix restart
und -Zack- rieseln die ge-fail-ten Mails ins Postfach!

DANKE für euer allzeit offenes Ohr :) :) :) :)


Jetzt muss ich nur noch heraus finden, wir der Server Mails von außerhalb akzeptiert...
 
Die:
debug_peer_list = mail.arcor.de
soft_bounce = yes

in main.cf nehme ich jetzt lieber raus, um die Logs nich voll zu spammen.

#debug_peer_list = mail.arcor.de
#soft_bounce = yes
 
You must log in or register to reply here.
Back
Top