RootForum Community

Guten Tag

ich habe mich nun damit beschäftigt, 2 Domains über Postfix zu steuern.

Meine erste Domain steht ganz normal unter:

myhostname
mydestination
mydomain

dann habe ich, wie im Postfix Buch als eine der Möglichkeiten, beschrieben steht gemacht:

virtual_alias_domains = 2domain.de

und

virtual_alias_maps = hash:/etc/postfix/virtual_alias


wo dann steht

info@2domain.de web1p1


Aber immer wenn ich an info@2domain.de sende bekomme ich ein Relay Access Denied.

Schicke ich aber von der ersten Domain eine Mail an die 2domain.de, funktioniert es, aber von allen anderen, nicht auf meinen Servern liegenden Domains geht es nicht.

Ich habe die Schritt ausgeführt so wieso im Postfix Buch von O´Reily stehen.

Noch eine Idee?

ich würde das so machen:

in /etc/postfix/main.cf :

virtual_alias_maps = hash:/etc/postfix/virtual

in /etc/postfix/virtual :

2domain.de dummy
info@2domain.de web1p1

danach noch:

~#postmap /etc/postfix/virtual
~#postfix reload

2domain.de dummy

habe ich aufgenommen

den Rest habe ich ja so...

oder soll ich virtual_alias_domains wieder rausnehmen? weil du das nun nicht erwähnt hast.

funzt leider nicht :-(

IP_does_not_like_recipient./Remote_host_said:_554_<info@2domain.de:_Relay_access_denied/Giving_up_on_IP./

dann liegt es wohl an den smtpd_***_restrictions in der main.cf

smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_helo_restrictions =


das habe ich für smtpd_*_restrictions

ist auch /etc/postfix/virtual_alias in virtua_maps?

virtual_maps = hash:/etc/postfix/virtual_alias

ist auch /etc/postfix/virtual_alias in virtual_maps?

virtual_maps = hash:/etc/postfix/virtual_alias

nein war es nicht..

habe nun aber:

virtual_maps = hash:/etc/postfix/virtual, hash:/etc/postfix/virtual_alias
virtual_alias_maps = hash:/etc/postfix/virtual_alias


postfix reload

Mail von GMX gesendet und gleiche Relay Access denied Meldung wie oben.

Hast du denn "2domain.de dummy" vor "info@2domain.de web1p1" in die /etc/postfix/virtual_alias hinzugefühgt und danach "postmap /etc/postfix/virtual_alias" und "postfix reload" gemacht?

falls ja, dann wüste ich im Moment auch nicht weiter.

ja ich habe das dummy davor gesetzt, wobei ich als Dummy wieder web1p1 genommen habe.

postmap und postfix reload habe ich gemacht :-/

habe mir auch noch mal das Postfix Buch vorgenommen, so stehts da auch drin, wie hier besprochen :-(

leider funzt es nicht

ich poste einfach mal meine ganze Main.cf in der Hoffnung das noch jemand eine Idee hat :-/

queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
mail_owner = postfix
myhostname=mail.1domain.de
mydomain = 1domain.de
myorigin = $mydomain
local_recipient_maps = $alias_maps unix:passwd.byname
unknown_local_recipient_reject_code = 450
debug_peer_level = 2
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = maildrop
manpage_directory = /usr/share/man
mail_spool_directory = /var/mail
canonical_maps = hash:/etc/postfix/canonical
virtual_maps = hash:/etc/postfix/virtual, hash:/etc/postfix/virtual_alias
virtual_alias_domains = 2dmoain.de, mail.2domain.de
virtual_alias_maps = hash:/etc/postfix/virtual_alias
relocated_maps = hash:/etc/postfix/relocated
transport_maps = hash:/etc/postfix/transport
sender_canonical_maps = hash:/etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
program_directory = /usr/lib/postfix
inet_interfaces = all
masquerade_domains = 1domain.de
mydestination = 1domain.de, mail.1domain.de
defer_transports =
disable_dns_lookups = no
content_filter =
mailbox_command =
mailbox_transport =
smtpd_sasl_application_name=smtpd
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_helo_required = no
smtpd_helo_restrictions =
strict_rfc821_envelopes = no
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_sasl_local_domain = mail.1domain.de
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access
smtpd_use_tls = yes
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_received_header = yes
tls_daemon_random_source = dev:/dev/urandom
tls_random_source = dev:/dev/urandom
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mailbox_size_limit = 0
message_size_limit = 10240000
header_checks = pcre:/etc/postfix/header_checks
body_checks = pcre:/etc/postfix/body_checks
mime_header_checks = regexp:/etc/postfix/mime_header_checks.regexp
maps_rbl_domains = dnsbl.njabl.org bl.spamcop.net cbl.abuseat.org relays.ordb.org

Sorry, ich muss es nochmal vorholen.....ich verzweifele langsam....

ich habe nun die einfachste Multi Hosting Variante unter Postfix: Shared Domains mit System Accounts...


also
mydomain = 1domain.de
mydestination = $myhostname, $mydomain, 2domain.de


Aber ich kann mich auf den Kopf stellen, sobald ich an die info@2domain.de sende, kommt immer relay access denied...

main.cf sieht nun so aus:

queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
mail_owner = postfix
myhostname=mail.1domain.de
mydomain = 1domain.de
myorigin = $mydomain
local_recipient_maps = $alias_maps unix:passwd.byname
unknown_local_recipient_reject_code = 450
debug_peer_level = 2
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = maildrop
manpage_directory = /usr/share/man
mail_spool_directory = /var/mail
canonical_maps = hash:/etc/postfix/canonical
virtual_maps = hash:/etc/postfix/virtual
relocated_maps = hash:/etc/postfix/relocated
transport_maps = hash:/etc/postfix/transport
sender_canonical_maps = hash:/etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
program_directory = /usr/lib/postfix
inet_interfaces = all
masquerade_domains = 1domain.de
mydestination = $myhostname, $mydomain, 2domain.de, 1domain.de, mail.1domain.de
defer_transports =
disable_dns_lookups = no
content_filter =
mailbox_command =
mailbox_transport =
smtpd_sasl_application_name=smtpd
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_helo_required = no
smtpd_helo_restrictions =
strict_rfc821_envelopes = no
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_sasl_local_domain = mail.1domain.de
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access
smtpd_use_tls = yes
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_received_header = yes
tls_daemon_random_source = dev:/dev/urandom
tls_random_source = dev:/dev/urandom
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mailbox_size_limit = 0
message_size_limit = 10240000
header_checks = pcre:/etc/postfix/header_checks
body_checks = pcre:/etc/postfix/body_checks
mime_header_checks = regexp:/etc/postfix/mime_header_checks.regexp
maps_rbl_domains = dnsbl.njabl.org bl.spamcop.net cbl.abuseat.org relays.ordb.org

Irgendeine Idee?

http://www.postfix.org/virtual.5.html

Do not specify virtual alias domain names in the main.cf
mydestination or relay_domains configuration parameters.

hm und ich dachte die Bücher von O´Reilly (Postfix Buch) sind ok, weil genau so haben sie da das hosting von mehreren Domains beschrieben, so wie ich es oben gepostet habe :-(((

Das Buch kenne ich nicht. Schau aber trotzdem folgendes an:
http://www.postfix.org/VIRTUAL_README.html

" The simplest method to host an additional domain is to add the domain name to the domains listed in the Postfix mydestination configuration parameter, and to add the user names to the UNIX password file."


so habe ich es ja gemacht mit Mydestination ;-)

ich teste jetzt nochmal Postfix virtual ALIAS example: separate domains, UNIX system accounts

hatte das zwar schon, aber ich machs nochmal nach der Anleitung von postfix.org

Du verwechselst verschiedene Sachen. Hast denn auf deinem System User "info"?

Du brauchst Postfix virtual ALIAS. Lies einfach alles durch die Seite.

Kostya wrote:Du verwechselst verschiedene Sachen. Hast denn auf deinem System User "info"?

ich brauche info nicht als Unix user, da:


5 /etc/postfix/virtual:
6 postmaster@example.com postmaster
7 info@example.com joe
while mail for info@example.com goes to the UNIX account joe


meine virtual:

info@2domain.de web1p1



also ist ja die info mit web1p1 (Unix acc auf System) verknüft, so wie es in der Anleitung von postfix.org steht.

http://www.postfix.org/VIRTUAL_README.h ... tual_alias

das habe ich nun gemacht und werde jetzt mal eine Mail senden ;-)

hm, ich falle gleich vom glaube ab :-/

habe es nun genauso gemacht wie unter
http://www.postfix.org/VIRTUAL_README.h ... tual_alias
beschrieben:


virtual_alias_domains = 2domain.de (auch schon mai.2domain.de stand hier, das gleiche Ergebnis)
virtual_alias_maps = hash:/etc/postfix/virtual

/etc/postfix/virtual:
info@2domain.de web1p1

postmap /etc/postfix/virtual
postfix reload

bekomme aber immer noch access realy denied....das solls aber angeblich nur geben wenn: Line 2: the virtual_alias_domains setting tells Postfix that example.com is a so-called virtual alias domain. If you omit this setting then Postfix will reject mail (relay access denied) or will not be able to deliver it (mail for example.com loops back to myself).


Aber das habe ich ja gemacht.....


The original message was received at Thu, 16 Dec 2004 14:37:47 +0100
from bla [IP]

----- The following addresses had permanent fatal errors -----
<info@2domain.de>
(reason: 554 <info@2domain.de>: Relay access denied)

----- Transcript of session follows -----
... while talking to mail.2domain.de.:

>>>>>> RCPT To:<info@2domain.de>

<<< 554 <info@2domain.de>: Relay access denied
554 5.0.0 Service unavailable





:?: :?: :?: :?: :?:

Mein Satz über den User wa bezüglich von dir zuvor verwendeter Methode.

thomas.km wrote:" The simplest method to host an additional domain is to add the domain name to the domains listed in the Postfix mydestination configuration parameter, and to add the user names to the UNIX password file."

Bei virtal aliases brauchst du natürlich keinen user, deswegen habe ich dir dies auch empfohlen.

Kostya wrote:Mein Satz über den User wa bezüglich von dir zuvor verwendeter Methode.

thomas.km wrote:" The simplest method to host an additional domain is to add the domain name to the domains listed in the Postfix mydestination configuration parameter, and to add the user names to the UNIX password file."

Bei virtal aliases brauchst du natürlich keinen user, deswegen habe ich dir dies auch empfohlen.

gut, ok, danke.....das habe ich ja wieder verworfen und die 2 gerade eben gepostete Sache getestet, die ja an sich recht simpel ist :-/
Irgendwas muss hier generell falsch laufen vermute ich wenn nicht mal die äußert einfache Variante, Virtual aliases läuft.....aber bloß was ...

Eine ganz dumme Frage: kommt diese Meldung auch von deinem Server oder von einem anderem? Falls vom anderen, verweist denn MX-Record bei 2domain auf dein Server?

Kostya wrote:Eine ganz dumme Frage: kommt diese Meldung auch von deinem Server oder von einem anderem? Falls vom anderen, verweist denn MX-Record bei 2domain auf dein Server?

kein problem ;-)

MX habe ich sicherheitshalber schon 100 mal gecheckt weil ich einfach nicht mehr weiter weis

dig 2domain.de mx

;; ANSWER SECTION:
2domain.de 86400 IN MX 10 mail.2domain.de

dig mail.2domain.de

;; ANSWER SECTION:
mail.2domain.de. 86400 IN A meine Root Server IP


:-(

poste hier doch die komplette Ausgabe von postconf

ich hoffe das ist alles mehr ging nicht auf den screen ;-)))


inet_interfaces = all
initial_destination_concurrency = 5
invalid_hostname_reject_code = 501
ipc_idle = 100s
ipc_timeout = 3600s
line_length_limit = 2048
lmtp_cache_connection = yes
lmtp_connect_timeout = 0s
lmtp_data_done_timeout = 600s
lmtp_data_init_timeout = 120s
lmtp_data_xfer_timeout = 180s
lmtp_lhlo_timeout = 300s
lmtp_mail_timeout = 300s
lmtp_quit_timeout = 300s
lmtp_rcpt_timeout = 300s
lmtp_rset_timeout = 300s
lmtp_sasl_auth_enable = no
lmtp_sasl_password_maps =
lmtp_sasl_security_options = noplaintext, noanonymous
lmtp_skip_quit_response = no
lmtp_tcp_port = 24
local_command_shell =
local_destination_concurrency_limit = 2
local_destination_recipient_limit = 1
local_recipient_maps = $alias_maps unix:passwd.byname
local_transport = local:$myhostname
luser_relay =
mail_name = Postfix
mail_owner = postfix
mail_release_date = 20030812
mail_spool_directory = /var/mail
mail_version = 2.0.14
mailbox_command =
mailbox_command_maps =
mailbox_delivery_lock = fcntl, dotlock
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains = dnsbl.njabl.org bl.spamcop.net cbl.abuseat.org relays.ordb.org
maps_rbl_reject_code = 554
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains = 1domain.de
masquerade_exceptions = root
max_idle = 100s
max_use = 100
maximal_backoff_time = 4000s
maximal_queue_lifetime = 5d
message_size_limit = 10240000
mime_boundary_length_limit = 2048
mime_header_checks = regexp:/etc/postfix/mime_header_checks.regexp
mime_nesting_limit = 100
minimal_backoff_time = 1000s
mydestination = 1domain.de, mail.1domain.de, smtp.1domain.de
mydomain = 1domain.de
myhostname = mail.1domain.de
mynetworks = 127.0.0.0/8 80.237.208.0/24 10.11.8.56/30
mynetworks_style = subnet
myorigin = $mydomain
nested_header_checks = $header_checks
newaliases_path = /usr/bin/newaliases
non_fqdn_reject_code = 504
notify_classes = resource,software
owner_request_special = yes
parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps
permit_mx_backup_networks =
pickup_service_name = pickup
prepend_delivered_header = command, file, forward
process_id_directory = pid
program_directory = /usr/lib/postfix
propagate_unmatched_extensions = canonical, virtual
proxy_interfaces =
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
qmgr_clog_warn_time = 300s
qmgr_fudge_factor = 100
qmgr_message_active_limit = 20000
qmgr_message_recipient_limit = 20000
qmgr_message_recipient_minimum = 10
qmqpd_authorized_clients =
qmqpd_error_delay = 1s
qmqpd_timeout = 300s
queue_directory = /var/spool/postfix
queue_file_attribute_count_limit = 100
queue_minfree = 0
queue_run_delay = 1000s
queue_service_name = qmgr
rbl_reply_maps =
readme_directory = /usr/share/doc/packages/postfix/README_FILES
recipient_canonical_maps =
recipient_delimiter =
reject_code = 554
relay_clientcerts =
relay_domains = $mydestination
relay_domains_reject_code = 554
relay_recipient_maps =
relay_transport = relay
relayhost =
relocated_maps = hash:/etc/postfix/relocated
require_home_directory = no
resolve_dequoted_address = yes
rewrite_service_name = rewrite
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
service_throttle_time = 60s
setgid_group = maildrop
show_user_unknown_table_name = yes
showq_service_name = showq
smtp_always_send_ehlo = yes
smtp_bind_address =
smtp_connect_timeout = 30s
smtp_data_done_timeout = 600s
smtp_data_init_timeout = 120s
smtp_data_xfer_timeout = 180s
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
smtp_destination_recipient_limit = $default_destination_recipient_limit
smtp_enforce_tls = no
smtp_helo_name = $myhostname
smtp_helo_timeout = 300s
smtp_line_length_limit = 990
smtp_mail_timeout = 300s
smtp_never_send_ehlo = no
smtp_pix_workaround_delay_time = 10s
smtp_pix_workaround_threshold_time = 500s
smtp_quit_timeout = 300s
smtp_randomize_addresses = yes
smtp_rcpt_timeout = 300s
smtp_sasl_auth_enable = no
smtp_sasl_password_maps =
smtp_sasl_security_options = noplaintext, noanonymous
smtp_sasl_tls_security_options = $var_smtp_sasl_opts
smtp_sasl_tls_verified_security_options = $var_smtp_sasl_tls_opts
smtp_skip_4xx_greeting = yes
smtp_skip_5xx_greeting = yes
smtp_skip_quit_response = yes
smtp_starttls_timeout = 300s
smtp_tls_CAfile =
smtp_tls_CApath =
smtp_tls_cert_file =
smtp_tls_cipherlist =
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_enforce_peername = yes
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 0
smtp_tls_note_starttls_offer = no
smtp_tls_per_site =
smtp_tls_scert_verifydepth = 5
smtp_tls_session_cache_database =
smtp_tls_session_cache_timeout = 3600s
smtp_use_tls = no
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions =
smtpd_data_restrictions =
smtpd_delay_reject = yes
smtpd_enforce_tls = no
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions =
smtpd_expansion_filter = t40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
smtpd_hard_error_limit = 20
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_history_flush_threshold = 100
smtpd_junk_command_limit = 100
smtpd_noop_commands =
smtpd_null_access_lookup_key = <>
smtpd_recipient_limit = 1000
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_restriction_classes =
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = mail.1domain.de
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sender_login_maps =
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access
smtpd_soft_error_limit = 10
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_CApath =
smtpd_tls_ask_ccert = no
smtpd_tls_auth_only = no
smtpd_tls_ccert_verifydepth = 5
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_cipherlist =
smtpd_tls_dcert_file =
smtpd_tls_dh1024_param_file =
smtpd_tls_dh512_param_file =
smtpd_tls_dkey_file = $smtpd_tls_dcert_file
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 0
smtpd_tls_received_header = yes
smtpd_tls_req_ccert = no
smtpd_tls_session_cache_database =
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_wrappermode = no
smtpd_use_tls = yes
soft_bounce = no
stale_lock_time = 500s
strict_7bit_headers = no
strict_8bitmime = no
strict_8bitmime_body = no
strict_mime_encoding_domain = no
strict_rfc821_envelopes = no
sun_mailtool_compatibility = no
swap_bangpath = yes
syslog_facility = mail
syslog_name = postfix
tls_daemon_random_bytes = 32
tls_daemon_random_source = dev:/dev/urandom
tls_random_bytes = 32
tls_random_exchange_name = ${config_directory}/prng_exch
tls_random_prng_update_period = 60s
tls_random_reseed_period = 3600s
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
transport_retry_time = 60s
trigger_timeout = 10s
undisclosed_recipients_header = To: undisclosed-recipients:;
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 450
unknown_relay_recipient_reject_code = 550
unknown_virtual_alias_reject_code = 550
unknown_virtual_mailbox_reject_code = 550
verp_delimiter_filter = -=+
virtual_alias_domains = 2domainde, mail.2domain.de
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_gid_maps =
virtual_mailbox_base =
virtual_mailbox_domains = $virtual_mailbox_maps
virtual_mailbox_limit = 51200000
virtual_mailbox_lock = fcntl
virtual_mailbox_maps =
virtual_minimum_uid = 100
virtual_transport = virtual
virtual_uid_maps =