Hi again,
Even though my configuration does what I need it to do, it seems to have broken
something else that needs to still work.
Did I forget something or just did this wrong ?
Will this setting allow whitelisting something to help the issue
"smtpd_sender_restrictions"
I maybe just confusing the processing Postfix does AFA envelope TO and FROM
and header TO and FROM...?
Here is the test showing what is broken:
[root@mta5 ~]# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 mta5.uits.uconn.edu ESMTP Postfix (2.10.1)
ehlo listserv.uconn.edu
250-mta5.uits.uconn.edu
250-PIPELINING
250-SIZE 31457280
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:dailydig...@listserv.uconn.edu
250 2.1.0 Ok
rcpt to:uconn_employee...@listserv.uconn.edu
450 4.1.1 <uconn_employee...@listserv.uconn.edu>: Recipient address rejected:
unverified address: Address verification in progress
quit
221 2.0.0 Bye
Connection closed by foreign host.
Here is my current config in main.cf :
smtpd_recipient_restrictions = reject_unknown_recipient_domain,
reject_unverified_recipient, permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination
relay_recipient_maps = hash:/etc/postfix/files/sender_relay_domains,
mysql:/etc/postfix/files/mysql_pn.cf
[root@mta5 files]# more sender_relay_domains
@listserv.uconn.edu OK
Here is [most of] the headers of a real email that gets delivered to my
first.l...@uconn.edu address even though it does not appear anywhere in the
headers :
Received: from SN4PR0501MB3808.namprd05.prod.outlook.com
(2603:10b6:406:a8::38) by BN7PR05MB5859.namprd05.prod.outlook.com with HTTPS
via BN7PR11CA0025.NAMPRD11.PROD.OUTLOOK.COM; Fri, 16 Nov 2018 16:00:54 +0000
Received: from SN4PR0501CA0078.namprd05.prod.outlook.com
(2603:10b6:803:22::16) by SN4PR0501MB3808.namprd05.prod.outlook.com
(2603:10b6:803:49::22) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1339.11; Fri, 16 Nov
2018 16:00:52 +0000
Received: from SN1NAM01FT027.eop-nam01.prod.protection.outlook.com
(2a01:111:f400:7e40::206) by SN4PR0501CA0078.outlook.office365.com
(2603:10b6:803:22::16) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1339.14 via Frontend
Transport; Fri, 16 Nov 2018 16:00:51 +0000
Authentication-Results: spf=none (sender IP is 137.99.25.243)
smtp.mailfrom=LISTSERV.UCONN.EDU; uconn.mail.onmicrosoft.com; dkim=pass
(signature was verified)
header.d=mta4.uits.uconn.edu;uconn.mail.onmicrosoft.com; dmarc=bestguesspass
action=none header.from=LISTSERV.UCONN.EDU;
Received-SPF: None (protection.outlook.com: LISTSERV.UCONN.EDU does not
designate permitted sender hosts)
Received: from mta4.uits.uconn.edu (137.99.25.243) by
SN1NAM01FT027.mail.protection.outlook.com (10.152.65.58) with Microsoft SMTP
Server id 15.20.1339.10 via Frontend Transport; Fri, 16 Nov 2018 16:00:49
+0000
Received: from MSB-P-Listserv (MSB-P-Listserv.grove.ad.uconn.edu [137.99.30.25])
by mta4.uits.uconn.edu (Postfix) with ESMTP id 2A8B0180AC15;
Fri, 16 Nov 2018 11:00:47 -0500 (EST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mta4.uits.uconn.edu 2A8B0180AC15
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mta4.uits.uconn.edu;
s=dkim1; t=1542384047;
bh=23m3HvmPkkiL8AhD31WJX+Es7CXHECqjFcBk/2u1CNA=;
h=Date:Reply-To:From:Subject:To:List-Help:List-Unsubscribe:
List-Subscribe:List-Owner:List-Archive:From;
b=vqj2Xt564wl9mezVZt3B/Im27ZlxA1mAZD7NtBbxQXvOoQRhpFhhqHdCgKvLZ/Czv
mC1ETdTEpntS9dsNmt16ZXQcB0bk76C2TBz0Uso7sMiXtus5Gx/dn107ZIl1VF7mRM
krEhqkeI0hu9LAAbEbxvxFGOyyONuDqg+QdpeJa8=
Received: by LISTSERV.UCONN.EDU (LISTSERV-TCP/IP release 16.0) with spool id
18870947 for uconn_employee...@listserv.uconn.edu; Fri, 16 Nov 2018
11:00:07 -0500
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
Message-ID: <uconn_employees-l%201811161100078570.0...@listserv.uconn.edu>
Date: Fri, 16 Nov 2018 11:00:07 -0500
Reply-To: do-not-re...@listserv.uconn.edu
Sender: All UConn Employees and Graduate Students
<uconn_employee...@listserv.uconn.edu>
From: UConn Daily Digest <dailydig...@listserv.uconn.edu>
Subject: [UCONN_EMPLOYEES-L] Faculty/Staff Daily Digest
To: uconn_employee...@listserv.uconn.edu
Precedence: list
List-Help: <https://ListServ.Uconn.edu/scripts/wa.exe?LIST=UCONN_EMPLOYEES-L>,
<mailto:lists...@listserv.uconn.edu?body=INFO%20UCONN_EMPLOYEES-L>
List-Unsubscribe:
<mailto:uconn_employees-l-unsubscribe-requ...@listserv.uconn.edu>
List-Subscribe: <mailto:uconn_employees-l-subscribe-requ...@listserv.uconn.edu>
List-Owner: <mailto:uconn_employees-l-requ...@listserv.uconn.edu>
List-Archive: <https://ListServ.Uconn.edu/scripts/wa.exe?LIST=UCONN_EMPLOYEES-L>
Return-Path: owner-uconn_employee...@listserv.uconn.edu
X-MS-Exchange-Organization-ExpirationStartTime: 16 Nov 2018 16:00:51.8366
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
0a4efb32-d35a-449f-e496-08d64bdcaee0
X-EOPAttributedMessage: 0
X-MS-Exchange-Organization-MessageDirectionality: Originating
X-Forefront-Antispam-Report:
CIP:137.99.25.243;IPV:CAL;SCL:-1;CTRY:US;EFV:NLI;SFV:SKN;SFS:;DIR:INB;SFP:;SCL:-1;SRVR:SN4PR0501MB3808;H:mta4.uits.uconn.edu;FPR:;SPF:None;LANG:en;
X-MS-Exchange-Organization-SCL: -1
X-Microsoft-Exchange-Diagnostics:
1;SN1NAM01FT027;1:PZzZoGAKUxBT9R17nn4wTMBrtIq5f1Sl3Tb4MN5cfhDVh+TdGNuPlSoWWxfnOmrZGMaAdheQeGzojD4hLrG0YknZbsf7Pl1IJT5+uxfpBLFnditOeRybjUThWSYiHeE4
X-MS-Exchange-Organization-AuthSource:
SN1NAM01FT027.eop-nam01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: uconn.onmicrosoft.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 0a4efb32-d35a-449f-e496-08d64bdcaee0
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4608076)(2017052603328)(7153060);SRVR:SN4PR0501MB3808;
X-Microsoft-Exchange-Diagnostics:
1;SN4PR0501MB3808;3:b1PemKe27pMQg+4aKjxrUsj4AvGHh49PJXVLiPX3avepFYwgnRdUHI3kM3/PB/YAIiUcHAn3f9YSZHPAOdYcbtK14uHE2IFapaE/OSW2KBeR33VZc7Bu9fODurUsJBb78D4q+wB8uknH5d+zPJj1gEwJ4iNaMLrvNNvEairCkRkhIZg+/tXa4nrK84bOfwFsY5xjCfN8ryoimSNiQdfXHN1TqazV85onjJsw5JTmkP7T+nGns9l1wfyvYh1xrJXaLMqh9HZGjvfNjHaD/2XE9s6ZlQIvHA+ol9qf51/O+0YE/4TGWJlXKupLNI8MJ+XsteRT3f14NIWwiyfZ+WkXCajqD/8edxmzctP/fxizD5E=;25:H+n/QpU3xz6XLZrIfa5TP4KtPq4sZx/nE3Q2iWxbH8EYxQw+iwBFvJun3QxUdqtKywpHUxr7ZuM/bFyK9OAs4JNCQTwYpWo/jxk5hdT56xkP6sTo5EXeBCYV9N5ZPZ3ylt33a7/4adSRhflJhnwVFV2L+A5+rtRnThnJMCNexVvcu3Uor24SXn6ulJVPK0WSz4iENeMbopsZzNVe0vDxWwVQA5Lu9QwrI2sjBKX+JC/tzLbi/DUtxcuY9T+gIpVADN0WRwk4HRyv+BXQ52a8yXmyQZcLTCKTT0gXIJ0fEbmy0/BMTTFCRN6GcgJ7nQ3hTafkQyNwhTxJ5Z98+3wMGQ==
X-MS-TrafficTypeDiagnostic: SN4PR0501MB3808:
X-MS-Exchange-AtpMessageProperties: sap=1;slp=1;
X-MS-Exchange-Safelinks-Url-KeyVer: 1
X-MS-Exchange-ATPSafeLinks-Stat: 1
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: SKN
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Nov 2018 16:00:49.1803
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id:
0a4efb32-d35a-449f-e496-08d64bdcaee0
X-MS-Exchange-CrossTenant-Id: 17f1a87e-2a25-4eaa-b9df-9d439034b080
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp:
TenantId=17f1a87e-2a25-4eaa-b9df-9d439034b080;Ip=[137.99.25.243];Helo=[mta4.uits.uconn.edu]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN4PR0501MB3808
X-MS-Exchange-Transport-EndToEndLatency: 00:00:05.1047330
X-MS-Exchange-Processed-By-BccFoldering: 15.20.1339.000
Thank you for any breadcrumbs to get this working without breaking existing
functionality.
-ANGELO FAZZINA
ITS Service Manager:
Spam and Virus Prevention
Mass Mailing
G Suite/Gmail
ang...@uconn.edu
University of Connecticut, ITS, SSG, Server Systems
860-486-9075
-----Original Message-----
From: owner-postfix-us...@postfix.org <owner-postfix-us...@postfix.org> On
Behalf Of Viktor Dukhovni
Sent: Tuesday, November 13, 2018 4:30 PM
To: Postfix users <postfix-users@postfix.org>
Subject: Re: looking for any options to better deal with mail looping
> On Nov 13, 2018, at 4:22 PM, Fazzina, Angelo <angelo.fazz...@uconn.edu> wrote:
>
> Is it as simple as changing this parameter in main.cf ?
> unverified_recipient_defer_code (default: 450)
Yes.
--
Viktor.
