Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

When somebody sends mail to myvirtualdomain.com I get the message

Remote host said: 550 relay not permitted! [RCPT_TO]

What is wrong with my settings?

I do not think the problem is in the mysql cf-files nor in the database as these settings used to work correctly and have never been changed. Unfortunately I cannot reproduce config changes else where. But if necessay I am happy to provide the content of these files/database.

My server domain (mydomain.com) does receive mail correctly and my main.cf reads as below:

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = /usr/share/doc/postfix

# TLS parameters
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_use_tls = yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = mail.mydomain.com
mydomain = mydomain.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = 
relayhost = 
mynetworks = [::ffff:]/104 [::1]/128
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
html_directory = /usr/share/doc/postfix/html
message_size_limit = 30720000
virtual_alias_domains = 
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes
# see under Spam smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1

# Spam
disable_vrfy_command = yes
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
   check_helo_access hash:/etc/postfix/helo_access,
smtpd_recipient_restrictions =
   reject_rbl_client sbl.spamhaus.org,
   reject_rbl_client zen.spamhaus.org,
   reject_rbl_client cbl.abuseat.org,
   reject_rbl_client bl.spamcop.net,
smtpd_error_sleep_time = 1s
smtpd_soft_error_limit = 10
smtpd_hard_error_limit = 20
share|improve this question

1 Answer 1

Remote host said: 550 relay not permitted! [RCPT_TO]

This is not a postfix-generated message.

Please provide relevant syslog mail.* messages that pertain to one message sent to myvirtualdomain.com, and accepted by your postfix server running the configuration above.

share|improve this answer
The point is that I do not see anything in my mail or mail.err log. But the message from various external mail addresses is the same. –  zensys Jan 10 '13 at 15:31
If there is nothing in YOUR mail.log, then YOUR postfix is not involved. I suggest ascertaining from where to where this traffic is actually flowing; there may be a DNS issue instead. –  adaptr Jan 10 '13 at 15:32
your comment made me think and check my dns settings. The MX record was not set to my server which I have corrected. I will confirm when the dns recordes have been propagated. –  zensys Jan 10 '13 at 15:44
ITYM "when the cached RRs have expired". DNS does not "propagate". –  adaptr Jan 10 '13 at 15:45
As suggested by adaptr below it was a dns issue indeed. –  zensys Jan 11 '13 at 17:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.