I've setup Amazon SES, verified my domain, and have been approved for Production mode. When an email from the outside world is sent to an address in my domain, my server forwards it back out to a Gmail account, but the forward is rejected by Amazon SES with the error "Email address is not verified."
For example, if someone from yahoo.com sends an email to me at "email@example.com", and that email is then immediately forwarded to "firstname.lastname@example.org" because of an entry in /etc/aliases, SES is rejecting the email to gmail.com, even though "mydomain.com" is a verified domain. When I turn on detailed logging in Postfix for the connection to gmail.com, the email appears to be from yahoo.com and going to gmail.com -- neither of which are my domain. Is it complaining about the fact that the email is originally from yahoo.com? If that's the case, then am I not able to use SES when relaying mail from outside domains, through my domain, to another (gmail) domain?
It works fine, however, if I send an email originating from my domain and going to the gmail address.
Here's the line in /var/log/maillog where the SES server rejects the forward to gmail.com:
Apr 15 02:11:43 ip-10-194-190-140 postfix/smtp10191: 9013922528: to=<email@example.com>, orig_to=<firstname.lastname@example.org>, relay=email-smtp.us-east-1.amazonaws.comhttp://126.96.36.199:25, delay=0.32, delays=0.01/0/0.11/0.2, dsn=5.0.0, status=bounced (host email-smtp.us-east-1.amazonaws.comhttp://188.8.131.52 said: 554 Message rejected: Email address is not verified. (in reply to end of DATA command))
And here are the lines I added to /etc/postfix/main.cf:
relayhost = email-smtp.us-east-1.amazonaws.com:25 smtp_sasl_auth_enable = yes smtp_sasl_security_options = noanonymous smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd smtp_use_tls = yes smtp_tls_security_level = encrypt smtp_tls_note_starttls_offer = yes smtp_tls_CAfile = /etc/ssl/certs/ca-bundle.crt
Followup question: When this problem happens, where does the email end up? The email is being accepted by my Postfix server for "email@example.com", but the forward to gmail.com is rejected by Amazon SES. But the email is not in the outgoing mail queue on my server, it's not in the mailbox for my account on my server, and it hasn't been bounced back to the original sender (at yahoo, in my example above). Where did it go?