Re: status=bounced (mail for ... loops back to myself)

2015-08-02 Thread Viktor Dukhovni
On Sun, Aug 02, 2015 at 01:53:14PM +0200, michalr0 wrote:

> NOQUEUE: reject_warning: RCPT from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 
> : Sender address rejected: unverified address: mail for 
> mydomain.dd loops back to myself; from= 
> to= proto=ESMTP helo=<[192.168.1.140]>

Don't forward mail to port 25 on the same host.  Your recipient
verification probes are incorrectly forwarded via SMTP to the
outbound MTA even when the recipient domain is local.

-- 
Viktor.


Re: status=bounced (mail for ... loops back to myself)

2015-08-02 Thread Matthew McGehrin

Hello.

I would also recommend having unique hostnames as well, so that postfix 
can keep track. It's perfectly fine to have the same IP.


IE: mail.mydomain.com, mail2.mydomain.com etc

Also, it might not be necessary to have two instances, you can probably 
do it with one, as SMTPD is for incoming and SMTP is for outbound in 
master.cf


You can specify customer ports in master.cf as well, for example, I have:

My default inbound which has amavis filtering, and I have a second 
listener on 127.0.0.2 for internal relay mail.


smtpinet  n   -   n   - 25  smtpd
 -o content_filter=smtp-amavis:[127.0.0.1]:10024

127.0.0.2:25  inet n-   n   -   25  smtpd
   -o smtp_bind_address=$smtp_bind_override



michalr0 wrote:

Hello i have two instance of postfix
one for incoming (p:25) and one for outgoing (p:587)

I use this configuration because in this way i may check DNS and MX records. I 
have some virtual domains. When I send email to client which changing mail 
server (from me to other ISP) I sending emails to me server (old) not to new 
server

and I have one trouble
when I sended email from my server to outside server i working great
when I received mail from outside server is working great

but when i sended from me to me I have many errors
NOQUEUE: reject_warning: RCPT from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 : 
Sender address rejected: unverified address: mail for mydomain.dd loops back to myself; 
from= to= proto=ESMTP helo=<[192.168.1.140]>

  


Re: check_policy_service not working - need a 4eye method or..

2015-08-02 Thread Viktor Dukhovni
On Sun, Aug 02, 2015 at 10:53:35PM +0200, Istvan Prosinger wrote:

> smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10031
> smtpd_recipient_restrictions = check_policy_service inet:127.0.0.1:10031,
>   permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination

With the above configuration, either you never accept any SMTP
email, master.cf contains an override of smtpd_recipient_restrictions
and smtpd_end_of_data_restrictions, or the policy service *is*
used, whether you can convince yourself of that or not.

> smtpd_tls_mandatory_ciphers = high
> smtpd_tls_mandatory_protocols = SSLv3, TLSv1
> smtpd_use_tls = yes

Better:

smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_security_level = may

-- 
Viktor.


Re: check_policy_service not working - need a 4eye method or..

2015-08-02 Thread Istvan Prosinger

Hi Viktor,

I think I have attached postconf -n at start (at least that was the 
master plan). Sorry if I missed it


Here goes, unaltered

[root@top ~]# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_percent_hack = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd 
$daemon_directory/$process_name $process_id & sleep 5

home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailbox_command = /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
meta_directory = /etc/postfix
mydestination = $myhostname, localhost.$mydomain, localhost, top.tesspot.com
mydomain = tesspot.com
myhostname = top.tesspot.com
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES
sample_directory = /usr/share/doc/postfix-2.10.1/samples
sender_bcc_maps = hash:/etc/postfix/bcc
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
shlib_directory = no
smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10031
smtpd_recipient_restrictions = check_policy_service 
inet:127.0.0.1:10031, permit_mynetworks, permit_sasl_authenticated, 
reject_unauth_destination

smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/postfix.ca.pem
smtpd_tls_cert_file = /etc/postfix/postfix.cert.pem
smtpd_tls_key_file = /etc/postfix/postfix.key.pem
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_protocols = SSLv3, TLSv1
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/virtual


On 7/31/2015 4:37 PM, Viktor Dukhovni wrote:

On Fri, Jul 31, 2015 at 02:28:35PM +0200, Istvan Prosinger wrote:


On 2015-07-30 17:23, wie...@porcupine.org wrote:

Istvan Prosinger:

Hello everyone,

I have this im main.cf (I'ts actually an attempt to implement
cluebringer/policyd)

smtpd_recipient_restrictions = check_policy_service
inet:127.0.0.1:10031,
  permit_mynetworks,
  permit_sasl_authenticated,
  reject_unauth_destination


You say that's what it is set to, but show no hard evidence.

Try:

 postconf -n | mail -s "postconf -n output" ""

Then forward the body of that email to the list (as untouched as
possible, do not rewrap lines, avoid Outlook and HTML, ...).



Re: status=bounced (mail for ... loops back to myself)

2015-08-02 Thread wilfried.es...@essignetz.de
Hello,


mail.mydomain.dd[6.7.8.9] is the machine running your two instances?

Looks like your outgoing postfix himself thinks, he is the one for
domain mydomain.dd. Maybe you could give him a transport-table entry like :

mydomain.dd smtp:[1.2.3.4]:25

(Remember to run postmap)


If that doesn't help, please send master.cf and main.cf of both instances.


Willi



Am 02.08.2015 um 13:53 schrieb michalr0:
> Hello i have two instance of postfix
> one for incoming (p:25) and one for outgoing (p:587)
> 
> I use this configuration because in this way i may check DNS and MX records. 
> I have some virtual domains. When I send email to client which changing mail 
> server (from me to other ISP) I sending emails to me server (old) not to new 
> server
> 
> and I have one trouble
> when I sended email from my server to outside server i working great
> when I received mail from outside server is working great
> 
> but when i sended from me to me I have many errors
> NOQUEUE: reject_warning: RCPT from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 
> : Sender address rejected: unverified address: mail for 
> mydomain.dd loops back to myself; from= 
> to= proto=ESMTP helo=<[192.168.1.140]>
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
> mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname 
> node25.myserver.ss
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
> mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
> node25.myserver.ss
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 351E9406A0: 
> to=, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.08, 
> delays=0/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops back 
> to myself)
> 
> -- from log --
> Aug  2 13:20:45 node1 postfix-out/smtpd[13643]: connect from 
> 1-2-3-4.dynamic.xx[1.2.3.4]
> Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: NOQUEUE: reject_warning: RCPT 
> from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 : Sender 
> address rejected: unverified address: mail for mydomain.dd loops back to 
> myself; from= to= proto=ESMTP 
> helo=<[192.168.1.140]>
> Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: 18BF74067D: 
> client=1-2-3-4.dynamic.xx[1.2.3.4], sasl_method=PLAIN, 
> sasl_username=ad...@mydomain.dd
> Aug  2 13:20:46 node1 postfix-out/cleanup[13649]: 18BF74067D: 
> message-id=<55bdfcfd.7050...@mydomain.dd>
> Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 18BF74067D: 
> from=, size=563, nrcpt=1 (queue active)
> Aug  2 13:20:46 node1 postfix/smtpd[13652]: connect from 
> mail.mydomain.dd[6.7.8.9]
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
> mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname 
> node25.myserver.ss
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
> mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
> node25.myserver.ss
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 18BF74067D: 
> to=, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.15, 
> delays=0.07/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops 
> back to myself)
> Aug  2 13:20:46 node1 postfix/smtpd[13652]: disconnect from 
> mail.mydomain.dd[6.7.8.9] ehlo=1 quit=1 commands=2
> Aug  2 13:20:46 node1 postfix-out/cleanup[13649]: 351E9406A0: 
> message-id=<20150802112046.351e940...@node25.myserver.ss>
> Aug  2 13:20:46 node1 postfix-out/bounce[13654]: 18BF74067D: sender 
> non-delivery notification: 351E9406A0
> Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 351E9406A0: from=<>, 
> size=2339, nrcpt=1 (queue active)
> Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 18BF74067D: removed
> Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: disconnect from 
> 1-2-3-4.dynamic.xx[1.2.3.4] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 
> quit=1 commands=8
> Aug  2 13:20:46 node1 postfix/smtpd[13652]: connect from 
> mail.mydomain.dd[6.7.8.9]
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
> mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname 
> node25.myserver.ss
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
> mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
> node25.myserver.ss
> Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 351E9406A0: 
> to=, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.08, 
> delays=0/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops back 
> to myself)
> Aug  2 13:20:46 node1 postfix/smtpd[13652]: disconnect from 
> mail.mydomain.dd[6.7.8.9] ehlo=1 quit=1 commands=2
> Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 351E9406A0: removed
> -- from log --
> 
> 
> Thanks for help
> Michael Rybnik
> 
> 



status=bounced (mail for ... loops back to myself)

2015-08-02 Thread michalr0
Hello i have two instance of postfix
one for incoming (p:25) and one for outgoing (p:587)

I use this configuration because in this way i may check DNS and MX records. I 
have some virtual domains. When I send email to client which changing mail 
server (from me to other ISP) I sending emails to me server (old) not to new 
server

and I have one trouble
when I sended email from my server to outside server i working great
when I received mail from outside server is working great

but when i sended from me to me I have many errors
NOQUEUE: reject_warning: RCPT from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 
: Sender address rejected: unverified address: mail for 
mydomain.dd loops back to myself; from= 
to= proto=ESMTP helo=<[192.168.1.140]>
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 351E9406A0: 
to=, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.08, 
delays=0/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops back 
to myself)

-- from log --
Aug  2 13:20:45 node1 postfix-out/smtpd[13643]: connect from 
1-2-3-4.dynamic.xx[1.2.3.4]
Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: NOQUEUE: reject_warning: RCPT 
from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 : Sender address 
rejected: unverified address: mail for mydomain.dd loops back to myself; 
from= to= proto=ESMTP 
helo=<[192.168.1.140]>
Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: 18BF74067D: 
client=1-2-3-4.dynamic.xx[1.2.3.4], sasl_method=PLAIN, 
sasl_username=ad...@mydomain.dd
Aug  2 13:20:46 node1 postfix-out/cleanup[13649]: 18BF74067D: 
message-id=<55bdfcfd.7050...@mydomain.dd>
Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 18BF74067D: 
from=, size=563, nrcpt=1 (queue active)
Aug  2 13:20:46 node1 postfix/smtpd[13652]: connect from 
mail.mydomain.dd[6.7.8.9]
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 18BF74067D: 
to=, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.15, 
delays=0.07/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops 
back to myself)
Aug  2 13:20:46 node1 postfix/smtpd[13652]: disconnect from 
mail.mydomain.dd[6.7.8.9] ehlo=1 quit=1 commands=2
Aug  2 13:20:46 node1 postfix-out/cleanup[13649]: 351E9406A0: 
message-id=<20150802112046.351e940...@node25.myserver.ss>
Aug  2 13:20:46 node1 postfix-out/bounce[13654]: 18BF74067D: sender 
non-delivery notification: 351E9406A0
Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 351E9406A0: from=<>, size=2339, 
nrcpt=1 (queue active)
Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 18BF74067D: removed
Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: disconnect from 
1-2-3-4.dynamic.xx[1.2.3.4] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 
quit=1 commands=8
Aug  2 13:20:46 node1 postfix/smtpd[13652]: connect from 
mail.mydomain.dd[6.7.8.9]
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 351E9406A0: 
to=, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.08, 
delays=0/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops back 
to myself)
Aug  2 13:20:46 node1 postfix/smtpd[13652]: disconnect from 
mail.mydomain.dd[6.7.8.9] ehlo=1 quit=1 commands=2
Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 351E9406A0: removed
-- from log --


Thanks for help
Michael Rybnik