Re: Challenges of an internal relay server

2013-06-02 Thread Peter
On 06/03/2013 12:44 PM, Peter wrote: What you want instead is to move permit_mynetworks to the end of the list and follow it by reject: smtpd_recipient_restrictions = reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_recipient_domain, check_recipient_access = hash:/

Re: Challenges of an internal relay server

2013-06-02 Thread Peter
On 06/01/2013 08:53 AM, Jason Price wrote: #smtpd_recipient_restrictions = permit_mynetworks, # reject_unauth_pipelining, # reject_non_fqdn_recipient, # reject_unknown_recipient_domain, #

Re: Challenges of an internal relay server

2013-06-01 Thread Jason Price
On Sat, Jun 1, 2013 at 9:50 AM, Jeroen Geilman wrote: > > On 05/31/2013 10:53 PM, Jason Price wrote: >> >> Background: Internal Mail Relay server. Connections from the internet are >> not possible. The vast majority of messages are going to Google Apps. >> >> Problem one: How to properly 'blac

Re: Challenges of an internal relay server

2013-06-01 Thread Jeroen Geilman
On 05/31/2013 10:53 PM, Jason Price wrote: Background: Internal Mail Relay server. Connections from the internet are not possible. The vast majority of messages are going to Google Apps. Problem one: How to properly 'blacklist' certain To: addresses. With a blacklist in the form of a chec

Re: Challenges of an internal relay server

2013-05-31 Thread Jason Price
On Friday, May 31, 2013, Noel Jones wrote: > > > Please don't top-post. > > When postfix logs "delivery temporarily suspended", it means no > attempt was made to deliver this message. The destination has been > marked as down due to multiple prior failures. > > > > -- Noel Jones > > Thank you.

Re: Challenges of an internal relay server

2013-05-31 Thread Noel Jones
On 5/31/2013 4:54 PM, Jason Price wrote: > I've reviewed the pcap file, looking for "ip.addr == 173.194.65.27" > for all times between 12:31:39 (when postfix received the message), > and 12:48:22 (when it was successfully delivered), and there are no > frames that mention 'acrespo' at all (except t

Re: Challenges of an internal relay server

2013-05-31 Thread Jason Price
I've reviewed the pcap file, looking for "ip.addr == 173.194.65.27" for all times between 12:31:39 (when postfix received the message), and 12:48:22 (when it was successfully delivered), and there are no frames that mention 'acrespo' at all (except the initial reception, and the final delivery). Th

Re: Challenges of an internal relay server

2013-05-31 Thread Wietse Venema
Jason Price: > > *May 30 12:38:23 rmail3b01 postfix/error[6485]: DD01F7B0: > > to=, relay=none, delay=403, delays=0.01/403/0/0, > > dsn=4.4.2, status=deferred (delivery temporarily suspended: conversation > > However, while watching tcpdump output very carefully, I can find no > evidence that post

Challenges of an internal relay server

2013-05-31 Thread Jason Price
Background: Internal Mail Relay server. Connections from the internet are not possible. The vast majority of messages are going to Google Apps. Problem one: How to properly 'blacklist' certain To: addresses. I am currently using: header_checks = pcre:/etc/postfix/header_checks where header_c