status=bounced (mail for ... loops back to myself)

2015-08-02 Thread michalr0
Hello i have two instance of postfix
one for incoming (p:25) and one for outgoing (p:587)

I use this configuration because in this way i may check DNS and MX records. I 
have some virtual domains. When I send email to client which changing mail 
server (from me to other ISP) I sending emails to me server (old) not to new 
server

and I have one trouble
when I sended email from my server to outside server i working great
when I received mail from outside server is working great

but when i sended from me to me I have many errors
NOQUEUE: reject_warning: RCPT from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 
ad...@mydomain.dd: Sender address rejected: unverified address: mail for 
mydomain.dd loops back to myself; from=ad...@mydomain.dd 
to=t...@mydomain.dd proto=ESMTP helo=[192.168.1.140]
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 351E9406A0: 
to=ad...@mydomain.dd, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.08, 
delays=0/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops back 
to myself)

-- from log --
Aug  2 13:20:45 node1 postfix-out/smtpd[13643]: connect from 
1-2-3-4.dynamic.xx[1.2.3.4]
Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: NOQUEUE: reject_warning: RCPT 
from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 ad...@mydomain.dd: Sender address 
rejected: unverified address: mail for mydomain.dd loops back to myself; 
from=ad...@mydomain.dd to=t...@mydomain.dd proto=ESMTP 
helo=[192.168.1.140]
Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: 18BF74067D: 
client=1-2-3-4.dynamic.xx[1.2.3.4], sasl_method=PLAIN, 
sasl_username=ad...@mydomain.dd
Aug  2 13:20:46 node1 postfix-out/cleanup[13649]: 18BF74067D: 
message-id=55bdfcfd.7050...@mydomain.dd
Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 18BF74067D: 
from=ad...@mydomain.dd, size=563, nrcpt=1 (queue active)
Aug  2 13:20:46 node1 postfix/smtpd[13652]: connect from 
mail.mydomain.dd[6.7.8.9]
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 18BF74067D: 
to=t...@mydomain.dd, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.15, 
delays=0.07/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops 
back to myself)
Aug  2 13:20:46 node1 postfix/smtpd[13652]: disconnect from 
mail.mydomain.dd[6.7.8.9] ehlo=1 quit=1 commands=2
Aug  2 13:20:46 node1 postfix-out/cleanup[13649]: 351E9406A0: 
message-id=20150802112046.351e940...@node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/bounce[13654]: 18BF74067D: sender 
non-delivery notification: 351E9406A0
Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 351E9406A0: from=, size=2339, 
nrcpt=1 (queue active)
Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 18BF74067D: removed
Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: disconnect from 
1-2-3-4.dynamic.xx[1.2.3.4] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 
quit=1 commands=8
Aug  2 13:20:46 node1 postfix/smtpd[13652]: connect from 
mail.mydomain.dd[6.7.8.9]
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
node25.myserver.ss
Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 351E9406A0: 
to=ad...@mydomain.dd, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.08, 
delays=0/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops back 
to myself)
Aug  2 13:20:46 node1 postfix/smtpd[13652]: disconnect from 
mail.mydomain.dd[6.7.8.9] ehlo=1 quit=1 commands=2
Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 351E9406A0: removed
-- from log --


Thanks for help
Michael Rybnik




Re: status=bounced (mail for ... loops back to myself)

2015-08-02 Thread wilfried.es...@essignetz.de
Hello,


mail.mydomain.dd[6.7.8.9] is the machine running your two instances?

Looks like your outgoing postfix himself thinks, he is the one for
domain mydomain.dd. Maybe you could give him a transport-table entry like :

mydomain.dd smtp:[1.2.3.4]:25

(Remember to run postmap)


If that doesn't help, please send master.cf and main.cf of both instances.


Willi



Am 02.08.2015 um 13:53 schrieb michalr0:
 Hello i have two instance of postfix
 one for incoming (p:25) and one for outgoing (p:587)
 
 I use this configuration because in this way i may check DNS and MX records. 
 I have some virtual domains. When I send email to client which changing mail 
 server (from me to other ISP) I sending emails to me server (old) not to new 
 server
 
 and I have one trouble
 when I sended email from my server to outside server i working great
 when I received mail from outside server is working great
 
 but when i sended from me to me I have many errors
 NOQUEUE: reject_warning: RCPT from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 
 ad...@mydomain.dd: Sender address rejected: unverified address: mail for 
 mydomain.dd loops back to myself; from=ad...@mydomain.dd 
 to=t...@mydomain.dd proto=ESMTP helo=[192.168.1.140]
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
 mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname 
 node25.myserver.ss
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
 mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
 node25.myserver.ss
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 351E9406A0: 
 to=ad...@mydomain.dd, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.08, 
 delays=0/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops back 
 to myself)
 
 -- from log --
 Aug  2 13:20:45 node1 postfix-out/smtpd[13643]: connect from 
 1-2-3-4.dynamic.xx[1.2.3.4]
 Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: NOQUEUE: reject_warning: RCPT 
 from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 ad...@mydomain.dd: Sender 
 address rejected: unverified address: mail for mydomain.dd loops back to 
 myself; from=ad...@mydomain.dd to=t...@mydomain.dd proto=ESMTP 
 helo=[192.168.1.140]
 Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: 18BF74067D: 
 client=1-2-3-4.dynamic.xx[1.2.3.4], sasl_method=PLAIN, 
 sasl_username=ad...@mydomain.dd
 Aug  2 13:20:46 node1 postfix-out/cleanup[13649]: 18BF74067D: 
 message-id=55bdfcfd.7050...@mydomain.dd
 Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 18BF74067D: 
 from=ad...@mydomain.dd, size=563, nrcpt=1 (queue active)
 Aug  2 13:20:46 node1 postfix/smtpd[13652]: connect from 
 mail.mydomain.dd[6.7.8.9]
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
 mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname 
 node25.myserver.ss
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
 mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
 node25.myserver.ss
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 18BF74067D: 
 to=t...@mydomain.dd, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.15, 
 delays=0.07/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops 
 back to myself)
 Aug  2 13:20:46 node1 postfix/smtpd[13652]: disconnect from 
 mail.mydomain.dd[6.7.8.9] ehlo=1 quit=1 commands=2
 Aug  2 13:20:46 node1 postfix-out/cleanup[13649]: 351E9406A0: 
 message-id=20150802112046.351e940...@node25.myserver.ss
 Aug  2 13:20:46 node1 postfix-out/bounce[13654]: 18BF74067D: sender 
 non-delivery notification: 351E9406A0
 Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 351E9406A0: from=, 
 size=2339, nrcpt=1 (queue active)
 Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 18BF74067D: removed
 Aug  2 13:20:46 node1 postfix-out/smtpd[13643]: disconnect from 
 1-2-3-4.dynamic.xx[1.2.3.4] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 
 quit=1 commands=8
 Aug  2 13:20:46 node1 postfix/smtpd[13652]: connect from 
 mail.mydomain.dd[6.7.8.9]
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
 mail.mydomain.dd[6.7.8.9]:25 greeted me with my own hostname 
 node25.myserver.ss
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: warning: host 
 mail.mydomain.dd[6.7.8.9]:25 replied to HELO/EHLO with my own hostname 
 node25.myserver.ss
 Aug  2 13:20:46 node1 postfix-out/smtp[13651]: 351E9406A0: 
 to=ad...@mydomain.dd, relay=mail.mydomain.dd[6.7.8.9]:25, delay=0.08, 
 delays=0/0/0.08/0, dsn=5.4.6, status=bounced (mail for mydomain.dd loops back 
 to myself)
 Aug  2 13:20:46 node1 postfix/smtpd[13652]: disconnect from 
 mail.mydomain.dd[6.7.8.9] ehlo=1 quit=1 commands=2
 Aug  2 13:20:46 node1 postfix-out/qmgr[12600]: 351E9406A0: removed
 -- from log --
 
 
 Thanks for help
 Michael Rybnik
 
 



Re: check_policy_service not working - need a 4eye method or..

2015-08-02 Thread Viktor Dukhovni
On Sun, Aug 02, 2015 at 10:53:35PM +0200, Istvan Prosinger wrote:

 smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10031
 smtpd_recipient_restrictions = check_policy_service inet:127.0.0.1:10031,
   permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination

With the above configuration, either you never accept any SMTP
email, master.cf contains an override of smtpd_recipient_restrictions
and smtpd_end_of_data_restrictions, or the policy service *is*
used, whether you can convince yourself of that or not.

 smtpd_tls_mandatory_ciphers = high
 smtpd_tls_mandatory_protocols = SSLv3, TLSv1
 smtpd_use_tls = yes

Better:

smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_security_level = may

-- 
Viktor.


Re: check_policy_service not working - need a 4eye method or..

2015-08-02 Thread Istvan Prosinger

Hi Viktor,

I think I have attached postconf -n at start (at least that was the 
master plan). Sorry if I missed it


Here goes, unaltered

[root@top ~]# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_percent_hack = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd 
$daemon_directory/$process_name $process_id  sleep 5

home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailbox_command = /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
meta_directory = /etc/postfix
mydestination = $myhostname, localhost.$mydomain, localhost, top.tesspot.com
mydomain = tesspot.com
myhostname = top.tesspot.com
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES
sample_directory = /usr/share/doc/postfix-2.10.1/samples
sender_bcc_maps = hash:/etc/postfix/bcc
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
shlib_directory = no
smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10031
smtpd_recipient_restrictions = check_policy_service 
inet:127.0.0.1:10031, permit_mynetworks, permit_sasl_authenticated, 
reject_unauth_destination

smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/postfix.ca.pem
smtpd_tls_cert_file = /etc/postfix/postfix.cert.pem
smtpd_tls_key_file = /etc/postfix/postfix.key.pem
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_protocols = SSLv3, TLSv1
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/virtual


On 7/31/2015 4:37 PM, Viktor Dukhovni wrote:

On Fri, Jul 31, 2015 at 02:28:35PM +0200, Istvan Prosinger wrote:


On 2015-07-30 17:23, wie...@porcupine.org wrote:

Istvan Prosinger:

Hello everyone,

I have this im main.cf (I'ts actually an attempt to implement
cluebringer/policyd)

smtpd_recipient_restrictions = check_policy_service
inet:127.0.0.1:10031,
  permit_mynetworks,
  permit_sasl_authenticated,
  reject_unauth_destination


You say that's what it is set to, but show no hard evidence.

Try:

 postconf -n | mail -s postconf -n output your-email-address

Then forward the body of that email to the list (as untouched as
possible, do not rewrap lines, avoid Outlook and HTML, ...).



Re: status=bounced (mail for ... loops back to myself)

2015-08-02 Thread Viktor Dukhovni
On Sun, Aug 02, 2015 at 01:53:14PM +0200, michalr0 wrote:

 NOQUEUE: reject_warning: RCPT from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 
 ad...@mydomain.dd: Sender address rejected: unverified address: mail for 
 mydomain.dd loops back to myself; from=ad...@mydomain.dd 
 to=t...@mydomain.dd proto=ESMTP helo=[192.168.1.140]

Don't forward mail to port 25 on the same host.  Your recipient
verification probes are incorrectly forwarded via SMTP to the
outbound MTA even when the recipient domain is local.

-- 
Viktor.


Re: status=bounced (mail for ... loops back to myself)

2015-08-02 Thread Matthew McGehrin

Hello.

I would also recommend having unique hostnames as well, so that postfix 
can keep track. It's perfectly fine to have the same IP.


IE: mail.mydomain.com, mail2.mydomain.com etc

Also, it might not be necessary to have two instances, you can probably 
do it with one, as SMTPD is for incoming and SMTP is for outbound in 
master.cf


You can specify customer ports in master.cf as well, for example, I have:

My default inbound which has amavis filtering, and I have a second 
listener on 127.0.0.2 for internal relay mail.


smtpinet  n   -   n   - 25  smtpd
 -o content_filter=smtp-amavis:[127.0.0.1]:10024

127.0.0.2:25  inet n-   n   -   25  smtpd
   -o smtp_bind_address=$smtp_bind_override



michalr0 wrote:

Hello i have two instance of postfix
one for incoming (p:25) and one for outgoing (p:587)

I use this configuration because in this way i may check DNS and MX records. I 
have some virtual domains. When I send email to client which changing mail 
server (from me to other ISP) I sending emails to me server (old) not to new 
server

and I have one trouble
when I sended email from my server to outside server i working great
when I received mail from outside server is working great

but when i sended from me to me I have many errors
NOQUEUE: reject_warning: RCPT from 1-2-3-4.dynamic.xx[1.2.3.4]: 450 4.1.7 ad...@mydomain.dd: 
Sender address rejected: unverified address: mail for mydomain.dd loops back to myself; 
from=ad...@mydomain.dd to=t...@mydomain.dd proto=ESMTP helo=[192.168.1.140]