I have recently moved my postfix smtp to a new server and configured it
tha same as the previous which is several years old. Masquerading of
hostnames in my domain was previously working fine, ie
hostname.mydomain.edu would always translate to mydomain .edu and be
delivered to my smtp server. This apparently no longer works as I have
messages in the queue to hostname.mydomain.edu which report
"(mail for hostname.mydomain.edu loops back to myself"
here is my main.cf (RHEL5 postfix-2.3.3-2.1.el5_2)
debug_peer_list = 127.0.0.1 192.aa.bbb.0/24
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
transport_maps = hash:/etc/postfix/transport
mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
#
myhostname = smtp.mydomain.edu
mydomain = mydomain.edu
myorigin = $mydomain
mydestination = $myhostname, localhost.$mydomain, lab.$mydomain, $mydomain
mynetworks = 192.aa.bbb.0/24 127.0.0.0/8
masquerade_domains = !mass.mydomain.edu
local_recipient_maps = $alias_maps
local_transport = local
queue_minfree = 75000000
message_size_limit = 50000000
content_filter = smtp-amavis:[127.0.0.1]:10024
max_use = 10
# sasl auth config
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sasl_local_domain =
# smtp restrictions to prevent UCE
smtpd_delay_reject = yes
smtpd_helo_required = yes
disable_vrfy_command = yes
smtpd_client_restrictions =
check_client_access hash:/etc/postfix/access,
permit
smtpd_helo_restrictions =
permit_mynetworks,
reject_invalid_hostname,
check_helo_access hash:/etc/postfix/helo_access,
permit
smtpd_recipient_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client psbl.surriel.com,
permit
smtpd_tls_security_level = may
smtpd_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtpd_tls_cert_file = /etc/pki/tls/certs/smtpdcert.pem
smtpd_tls_key_file = /etc/pki/tls/certs/smtpdkey.pem
smtpd_tls_loglevel = 2
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:/etc/postfix/smtpd.scache
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
soft_bounce = yes
Am I missing something or has masquerading changed?
thanks
SWaltz
