On Tue, 1 Apr 2008 20:42:34 +0200
Alexei Troussov <[EMAIL PROTECTED]> wrote:

> > Hi,
> 
> > Your mailbox_transport in main.cf probably
> > has the precedence. Try to undefine it and define
> > a virtual_transport. Probably
> > you should also play with virtual_mailbox_domains and
> > virtual_alias_maps, but let's try first to manage to
> > deliver the mail from postfix to dspam. After that you can
> > concentrate on the deliver from dspam to cyrus.
> 
> 
> I 've just checked these lines
>       mailbox_transport = cyrus
>       cyrus_destination_recipient_limit = 1
> are before
>       smtpd_recipient_restrictions = ...

Heh, order is not relevant here. It is relevant inside eg.
smtpd_recipient_restrictions.

> Anyway, I tried to change the order just in case - no luck.
> 
> BTW, "hash:/usr/local/etc/postfix/access," thing was a mess indeed and  
> I deleted it.
> It gave no effect...
> 
> Here is my postfix config:
> --------- begin ---------
> #postconf -n
> alias_database = hash:/usr/local/etc/postfix/aliases
> alias_maps = hash:/usr/local/etc/postfix/aliases
> broken_sasl_auth_clients = yes
> command_directory = /usr/local/sbin
> config_directory = /usr/local/etc/postfix
> daemon_directory = /usr/local/libexec/postfix
> data_directory = /var/db/postfix
> debug_peer_level = 2
> default_privs = nobody
> disable_vrfy_command = yes
> html_directory = no
> in_flow_delay = 10
> inet_interfaces = all
> local_recipient_maps = $alias_maps unix:passwd.byname
> mail_owner = postfix
> mail_spool_directory = /var/mail
> mailbox_transport = cyrus
> mailq_path = /usr/local/bin/mailq
> manpage_directory = /usr/local/man
> mydestination = $myhostname, localhost.$mydomain, $mydomain
> mydomain = MYDOMAIN.NAME.HERE
> myhostname = mail.MYDOMAIN.NAME.HERE

Generally speaking, when you give someone config files or log snippets
don't do this; you don't gain much security-wise, but you can change by
mistake something relevant to the problem being debugged.

> mynetworks = 192.168.0.0/16 127.0.0.0/8
> myorigin = $mydomain
> newaliases_path = /usr/local/bin/newaliases
> queue_directory = /var/spool/postfix
> readme_directory = no
> relayhost = smtp.free.fr
> sample_directory = /usr/local/etc/postfix
> sendmail_path = /usr/local/sbin/sendmail
> setgid_group = maildrop
> show_user_unknown_table_name = no
> smtp_always_send_ehlo = yes
> smtp_generic_maps = hash:/usr/local/etc/postfix/generic
> smtpd_banner = $myhostname ESMTP $mail_name
> smtpd_etrn_restrictions = reject
> smtpd_hard_error_limit = 8
> smtpd_helo_required = yes
> smtpd_recipient_restrictions = permit_sasl_authenticated,  
> permit_mynetworks,
>   reject_unauth_pipelining, reject_non_fqdn_recipient,
>   reject_unknown_recipient_domain, permit_sasl_authenticated,
                                    ^^^^^^^^^^^^^^^^^
This is useless, since it's also the first.
>   reject_unauth_destination, permit_auth_destination,  

Delete permit_auth_destination.

> reject_non_fqdn_hostname,
>   reject_non_fqdn_sender, 
> reject_invalid_hostname,

Add reject_unlisted_recipient (kinda' to replace the permit deleted
above; it's useful only for virtual mailboxes).

>   check_client_access pcre:/usr/local/etc/postfix/filter_access
> smtpd_reject_unlisted_sender = yes
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_local_domain =
> smtpd_sasl_security_options = noanonymous
> strict_rfc821_envelopes = yes
> unknown_local_recipient_reject_code = 550
> -------- end --------


And try again.

-- 
IOnut - Un^d^dregistered ;) FreeBSD "user"
  "Intellectual Property" is   nowhere near as valuable   as "Intellect"
FreeBSD committer -> [EMAIL PROTECTED], PGP Key ID 057E9F8B493A297B

Attachment: signature.asc
Description: PGP signature

Reply via email to