Loading ...
Sorry, an error occurred while loading the content.

289435Client can't access through submission protocol

Expand Messages
  • Pierre-Gilles RAYNAUD
    Nov 12, 2012
    • 0 Attachment
      Hi Everyone,

      The submission port is setup like this
        submission inet n       -       n       -       -       smtpd
          -o smtpd_tls_security_level=encrypt
          -o smtpd_sasl_auth_enable=yes
          -o smtpd_sasl_security_options=noanonymous
          -o
      smtpd_sender_restrictions=reject_unknown_sender_domain,reject_non_fqdn_sender
          -o
      smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_non_fqdn_recipient,reject
          -o milter_macro_daemon_name=ORIGINATING

      and when the client application is outside the mynetwork definition,
      i.e.: domaingprs.tld (see below)
      we get this error,

         Nov 11 14:16:31 serv001 postfix/smtpd[30545]: connect from
      wn1nat29.domaingprs.tld[xxx.yyy.zzz.29]
         Nov 11 14:16:42 serv001 postfix/smtpd[30545]: NOQUEUE: reject: RCPT
      from wn1nat29.domaingprs.tld[xxx.yyy.zzz..29]: 454 4.7.1
      <wn1nat29.domaingprs.tld[xxx.yyy.zzz.29]>: Client host rejected: Access
      denied; from=<user@...> to=<someone@...> proto=ESMTP
      helo=<[10.224.148.220]>
        Nov 11 14:16:48 serv001 postfix/smtpd[30545]: disconnect from
      wn1nat29.domaingprs.tld[xxx.yyy.zzz.29]

      but when the client application is inside our network definition, the
      mail is correctly sent.

      We have tried to add a
         check_sender_access hash:/etc/postfix/client-access
      clause with
        /etc/postfix/client-access
        domaingprs.tld OK
      at
        smtpd_client_restrictions
      but the syntax
          -o smtpd_client_restrictions=permit_mynetworks,check_client_access
      hash:/etc/postfix/client-access,permit_sasl_authenticated,reject_non_fqdn_recipient,reject
      is incorrect

      Postfix Version: 2.7.1-1+squeeze1

      How to solve this issue?
      Thank you for your attention.

      Faifthfully
      --
      PGR
    • Show all 3 messages in this topic