Hello,
My postfix installation is having trouble accepting email from a
particular source to any recipients and I haven't been able to ascertain
the cause so I can address the problem. Here's a logfile extraction:
Oct 4 11:53:52 postal1 postfix/smtpd[19496]: connect from
fwall.fidcouns.com[207.109.19.34]
Oct 4 11:53:52 postal1 postfix/smtpd[19496]: setting up TLS connection
from fwall.fidcouns.com[207.109.19.34]
Oct 4 11:53:52 postal1 postfix/smtpd[19496]: Anonymous TLS connection
established from fwall.fidcouns.com[207.109.19.34]: SSLv3 with cipher
AES128-SHA (128/128 bits)
Oct 4 11:53:53 postal1 postfix/smtpd[19496]: NOQUEUE: reject: RCPT from
fwall.fidcouns.com[207.109.19.34]: 554 5.7.1 <e...@whoi.edu>: Recipient
address rejected: Access denied; from=<s...@fidcouns.com>
to=<e...@whoi.edu> proto=ESMTP helo=<STPAUL.FIDCOUNS.COM>
Oct 4 11:53:54 postal1 postfix/smtpd[19496]: disconnect from
fwall.fidcouns.com[207.109.19.34]
I've tried all manner of whitelisting the sender to no avail. Any
thoughts on how to try to correct this?
Here's my 'postconf -n' output.
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases, ldap:ldap
anvil_rate_time_unit = 60s
append_dot_mydomain = yes
body_checks = pcre:/etc/postfix/access/body_access
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
default_rbl_reply = $rbl_code Service unavailable; $rbl_class
[$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}.
Contact <postmas...@whoi.edu> if this is in error.
header_checks = pcre:/etc/postfix/access/header_access
html_directory = /usr/share/doc/postfix/html
mailbox_size_limit = 0
message_size_limit = 104857600
mydestination = $myhostname, $mydomain, postal2.$mydomain,
outbox.$mydomain, mail.$mydomain, localhost.$mydomain,
localhost.localdomain, localhost, beachcomberscompanion.net,
whoi.net, oceansites.org, interridge.org, cinar.org
myhostname = postal2.whoi.edu
mynetworks = 128.128.0.0/16, 127.0.0.0/8, 199.92.168.150, 172.16.8.0/24
myorigin = $mydomain
parent_domain_matches_subdomains =
permit_mx_backup_networks = $mynetworks
rbl_reply_maps = hash:/etc/postfix/access/dnsbl_replies
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relay_domains = hash:/etc/postfix/mx_host_relays,
oceanus.whoi.edu, atlantis.whoi.edu knorr.whoi.edu,
tioga.whoi.edu, bosun.whoi.edu, striker.whoi.edu,
striker2.whoi.edu, sssg1.whoi.edu, wbc.whoi.edu
relayhost =
relocated_maps = hash:/etc/postfix/relocated
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_connection_rate_limit = 60
smtpd_client_message_rate_limit = 250
smtpd_client_new_tls_session_rate_limit = 60
smtpd_client_recipient_rate_limit = 300
smtpd_client_restrictions = check_client_access
hash:/etc/postfix/access/connect_client_access
smtpd_error_sleep_time = 5s
smtpd_etrn_restrictions = permit_mynetworks, reject
smtpd_hard_error_limit = 20
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,
check_recipient_access pcre:/etc/postfix/access/final_recipient_access,
reject_unauth_pipelining, check_helo_access
pcre:/etc/postfix/access/final_helo_access, check_client_access
hash:/etc/postfix/access/final_client_access, check_sender_access
pcre:/etc/postfix/access/final_sender_access, permit_mynetworks,
reject_unknown_sender_domain, reject_unauth_destination,
check_helo_access pcre:/etc/postfix/access/suspect_helo,
reject_rbl_client b.barracudacentral.org, reject_rbl_client
zen.spamhaus.org, reject_rbl_client autospam.whoi.edu,
reject_rhsbl_sender dsn.rfc-ignorant.org, reject_rbl_client
dnsbl.ahbl.org, reject_rbl_client http.dnsbl.sorbs.net,
reject_rbl_client socks.dnsbl.sorbs.net, reject_rbl_client
misc.dnsbl.sorbs.net, reject_rbl_client web.dnsbl.sorbs.net,
reject_rbl_client dul.dnsbl.sorbs.net, reject_rbl_client
bl.spamcop.net, reject_rbl_client combined.njabl.org,
reject_rbl_client bhnc.njabl.org
smtpd_restriction_classes = require_reverse_dns
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_soft_error_limit = 10
smtpd_tls_CAfile = /etc/postfix/tls/DigiCertCA.crt
smtpd_tls_cert_file = /etc/postfix/tls/star_whoi_edu.crt
smtpd_tls_key_file = /etc/postfix/tls/private.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_domains = $virtual_alias_maps
virtual_alias_maps = hash:/etc/postfix/virtual, ldap:vldap
Thank you.
