Yes, that's it.. When I connect with Stunnel & DBMAIL, stunnel throw my IP
and make connection with 127.0.0.1. But when I send mail, I connect to
Postfix with my IP.

Feb 18 18:01:21 [postfix/smtpd] DFA45201690A: client=unknown[81.30.x.x]

I need stunnel work transparent (like Proxy), but It works not (stunell -T),
I have proxy transparent in kernel like module, add this rule:

iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 995 -j DNAT
--to-destination 127.0.0.1:110

Nothing work :(


PS: Sorry for my english :)

--
Jan PAVLIK
[EMAIL PROTECTED], [EMAIL PROTECTED]
mobil +42 0777/555730
ICQ 6611951
ROOTSHELL.CZ - Make it easy and better!



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Jeff Brenton
Sent: Tuesday, February 18, 2003 5:56 PM
To: Jan Pavlík
Subject: Re[4]: [Dbmail] Reprise: POP-Before-SMTP and Postfix


Hello Jan,

JP> I try it for two days later... Can you help me what's wrong?

JP> mynetworks = 127.0.0.1, mysql:/etc/postfix/pbsp.cf 
JP> smtpd_sender_restrictions = permit_mynetworks, 
JP> permit_tls_all_clientcerts

OK, the next step is to find out WHY Postfix is refusing to relay. This is
best done with either the log, or (my preference) telling postfix to send a
message to postmaster for policy violations. I use the following in main.cf:

# what to tell postmaster about
notify_classes= resource
                software
                policy
                protocol
                2bounce
                bounce

The policy and protocol parameters will generate a message similar to this
when relaying is denied:

---
From: Mail Delivery System <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] (Postmaster)
Date: Tuesday, February 18, 2003, 8:30:40 AM
Subject: Postfix SMTP server: errors from unknown[218.49.187.136]

===8<==============Original message text=============== Transcript of
session follows.

 Out: 220 gateway.wmhlawonline.com ESMTP Postfix (Postfix-19991231)
     (Linux-Mandrake)
 In:  helo sting259
 Out: 250 gateway.wmhlawonline.com
 In:  mail from: [EMAIL PROTECTED]
 Out: 250 Ok
 In:  rcpt to: [EMAIL PROTECTED]
 Out: 554 <[EMAIL PROTECTED]>: Recipient address rejected: Relay access
     denied

Session aborted, reason: lost connection

===8<===========End of original message text===========

---

The important thing in this is what IP Postfix saw when the message was
presented to it. If it is 127.0.0.1, then stunnel is working, but Postfix is
not obeying $mynetworks.

If, however, it's coming from the "real" IP of the customer, then they're
not sending using stunnel, so the pbsp table is not correct. In this case,
they should either make sure their client is using stunnel for both send and
receive, OR switch to non-stunnel connections for POP3/IMAP4 (probably not a
desirable thing!).

-- 
Jeff Brenton
President,
Engineered Software Products, Inc
http://espi.com
Questionable web page: http://dididahdahdidit.com

Liberalism grants you the freedom to advocate any idea*.
 * Please see http://www.dididahdahdidit.com/except.php for a
   current list of exceptions

_______________________________________________
Dbmail mailing list
[email protected] https://mailman.fastxs.nl/mailman/listinfo/dbmail

Reply via email to