up vote 2 down vote favorite
2
share [g+] share [fb]

Previously I had a relayhost set in postfix to mailhost.zen.co.uk - I don't think it accepts SASL - only TLS. So I though I would try changing to a different relay host. However, the following log shows that it still remembers part of the original relayhost?

I've read a hell of a lot and I don't want to give up. Please help - I don't know why it would be doing this.

Nov 16 15:09:43 db3 postfix/smtpd[4838]: connect from 82-69-111-139.dsl.in-addr.zen.co.uk[82.69.111.139]
Nov 16 15:09:43 db3 postfix/smtpd[4838]: warning: SASL authentication failure: realm changed: authentication aborted
Nov 16 15:09:43 db3 postfix/smtpd[4838]: warning: 82-69-111-139.dsl.in-addr.zen.co.uk[82.69.111.139]: SASL DIGEST-MD5 authentication failed: authentication failure
Nov 16 15:09:44 db3 postfix/smtpd[4838]: NOQUEUE: reject_warning: RCPT from 82-69-111-139.dsl.in-addr.zen.co.uk[82.69.111.139]: 504 5.5.2 <danpc>: Helo command rejected: need fully-qualified hostname; from=<dan.smith@autovhc.co.uk> to=<d.smith@btopenworld.com> proto=ESMTP helo=<danpc>
Nov 16 15:09:44 db3 postfix/smtpd[4838]: 298D4258073: client=82-69-111-139.dsl.in-addr.zen.co.uk[82.69.111.139], sasl_method=LOGIN, sasl_username=dan.smith@autovhc.co.uk
Nov 16 15:09:44 db3 postfix/cleanup[4854]: 298D4258073: message-id=<004001ca66ce$dbe7d420$93b77c60$@smith@autovhc.co.uk>
Nov 16 15:09:46 db3 postfix/qmgr[4794]: 298D4258073: from=<dan.smith@autovhc.co.uk>, size=96581, nrcpt=1 (queue active)
Nov 16 15:09:46 db3 amavis[14771]: (14771-09) ESMTP::10024 /var/lib/amavis/tmp/amavis-20091116T131025-14771: <dan.smith@autovhc.co.uk> -> <d.smith@btopenworld.com> SIZE=96581 Received: from db3.wsautovhc.co.uk ([127.0.0.1]) by localhost (db3.wsautovhc.co.uk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <d.smith@btopenworld.com>; Mon, 16 Nov 2009 15:09:46 +0000 (GMT)
Nov 16 15:09:46 db3 amavis[14771]: (14771-09) Checking: gGb0NNPEYF2y [82.69.111.139] <dan.smith@autovhc.co.uk> -> <d.smith@btopenworld.com>
Nov 16 15:09:46 db3 amavis[14771]: (14771-09) p005 1 Content-Type: multipart/related
Nov 16 15:09:46 db3 amavis[14771]: (14771-09) p006 1/1 Content-Type: multipart/alternative
Nov 16 15:09:46 db3 amavis[14771]: (14771-09) p001 1/1/1 Content-Type: text/plain, size: 1355 B, name:
Nov 16 15:09:46 db3 amavis[14771]: (14771-09) p002 1/1/2 Content-Type: text/html, size: 13631 B, name:
Nov 16 15:09:46 db3 amavis[14771]: (14771-09) p003 1/2 Content-Type: image/jpeg, size: 29872 B, name: image001.jpg
Nov 16 15:09:46 db3 amavis[14771]: (14771-09) p004 1/3 Content-Type: image/jpeg, size: 27778 B, name: image002.jpg
Nov 16 15:09:47 db3 postfix/smtpd[4864]: connect from localhost[127.0.0.1]
Nov 16 15:09:47 db3 postfix/smtpd[4864]: 0087125823C: client=localhost[127.0.0.1]
Nov 16 15:09:47 db3 postfix/cleanup[4854]: 0087125823C: message-id=<004001ca66ce$dbe7d420$93b77c60$@smith@autovhc.co.uk>
Nov 16 15:09:47 db3 postfix/smtpd[4864]: disconnect from localhost[127.0.0.1]
Nov 16 15:09:47 db3 postfix/qmgr[4794]: 0087125823C: from=<dan.smith@autovhc.co.uk>, size=97068, nrcpt=1 (queue active)
Nov 16 15:09:47 db3 amavis[14771]: (14771-09) FWD via SMTP: <dan.smith@autovhc.co.uk> -> <d.smith@btopenworld.com>,BODY=7BIT 250 2.6.0 Ok, id=14771-09, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 0087125823C
Nov 16 15:09:47 db3 amavis[14771]: (14771-09) Passed CLEAN, [82.69.111.139] [82.69.111.139] <dan.smith@autovhc.co.uk> -> <d.smith@btopenworld.com>, Message-ID: <004001ca66ce$dbe7d420$93b77c60$@smith@autovhc.co.uk>, mail_id: gGb0NNPEYF2y, Hits: 0.381, size: 96581, queued_as: 0087125823C, 602 ms
Nov 16 15:09:47 db3 postfix/smtp[4861]: 298D4258073: to=<d.smith@btopenworld.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.1, delays=2.4/0/0/0.6, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 0087125823C)
Nov 16 15:09:47 db3 postfix/qmgr[4794]: 298D4258073: removed
Nov 16 15:09:47 db3 amavis[14771]: (14771-09) TIMING [total 605 ms] - SMTP greeting: 1 (0%)0, SMTP EHLO: 0 (0%)0, SMTP pre-MAIL: 0 (0%)0, SMTP pre-DATA-flush: 1 (0%)1, SMTP DATA: 47 (8%)8, check_init: 0 (0%)8, digest_hdr: 0 (0%)8, digest_body: 1 (0%)9, gen_mail_id: 0 (0%)9, mime_decode: 19 (3%)12, get-file-type4: 41 (7%)19, decompose_part: 1 (0%)19, parts_decode: 0 (0%)19, check_header: 1 (0%)19, AV-scan-1: 19 (3%)22, AV-scan-2: 2 (0%)22, spam-wb-list: 1 (0%)23, SA parse: 6 (1%)24, SA check: 354 (59%)82, update_cache: 4 (1%)83, decide_mail_destiny: 0 (0%)83, fwd-connect: 13 (2%)85, fwd-mail-pip: 2 (0%)85, fwd-rcpt-pip: 0 (0%)85, fwd-data-chkpnt: 0 (0%)85, write-header: 0 (0%)86, fwd-data-contents: 2 (0%)86, fwd-end-chkpnt: 79 (13%)99, prepare-dsn: 0 (0%)99, main_log_entry: 5 (1%)100, update_snmp: 1 (0%)100, SMTP pre-response: 0 (0%)100, SMTP response: 0 (0%)100, unlink-4-files: 0 (0%)100, rundown: 0 (0%)100

I've posted other questions for different problems - the solutions to those brought me to this. I feel so close!

My main.cf contains:

relayhost = mail.btopenworld.com
smtp_sasl_auth_enabled = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_type = cyrus
smtp_sasl_security_options =
link|improve this question
95% accept rate
1  
I don't see anything in that log that covers an attempt to deliver to any external smarthost -- btopenworld or zen. You'd be looking for more lines involving queue ID 0087125823C, probably for an smtp process. – womble Nov 16 '09 at 16:26
It looks like part of the log was removed when I pasted. It is saying 530 authentication required - "Your email could not be sent. To fix this you must make a simple change to your email (known as SMTP authentication). For advice visit www.btyahoo.com/smtp" (in reply to MAIL FROM command)) for btopenworld relay host. So your saying it isn't sending the authentication details - it didn't do this for zen, zen said I could only use tls. How do I overcomet this? all my settings seem fine? – Mr Shoubs Nov 16 '09 at 16:34
On seconds thoughts, I coming round to the idea that postfix isn't sending the AUTH LOGIN at all... all my settings seem correct, what could cause this? p.s. That first log entry is probably as I am behind a NAT on this machine. – Mr Shoubs Nov 16 '09 at 17:03
SASL is authentication, TLS is encryption. (You might be confusing SASL with SSL.) – grawity Nov 16 '09 at 18:29
1  
If you paste the output of "postconf -n", that would help a lot. – Bill Weiss Nov 16 '09 at 20:33
show 1 more comment
feedback

1 Answer

up vote 0 down vote accepted

As requested postconf -n

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = amavis:[127.0.0.1]:10024
delay_warning_time = 4h
disable_vrfy_command = yes
inet_interfaces = all
local_recipient_maps =
mailbox_size_limit = 0
maximal_backoff_time = 8000s
maximal_queue_lifetime = 7d
minimal_backoff_time = 1000s
mydestination =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mynetworks_style = host
myorigin = autovhc.co.uk
readme_directory = no
recipient_delimiter = +
relayhost = [mail.btopenworld.com]
smtp_helo_timeout = 60s
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_sasl_type = cyrus
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions = reject_rbl_client sbl.spamhaus.org, reject_rbl_client blackholes.easynet.nl, reject_rbl_client dnsbl.njabl.org
smtpd_delay_reject = yes
smtpd_hard_error_limit = 12
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, warn_if_reject reject_non_fqdn_hostname, reject_invalid_hostname, permit
smtpd_recipient_limit = 30
smtpd_recipient_restrictions = reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unauth_destination, check_policy_service inet:127.0.0.1:60000, permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = no
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = cyrus
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unauth_pipelining, permit
smtpd_soft_error_limit = 3
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 450
virtual_alias_maps = mysql:/etc/postfix/mysql_alias.cf
virtual_gid_maps = mysql:/etc/postfix/mysql_gid.cf
virtual_mailbox_base = /var/spool/mail/virtual
virtual_mailbox_domains = mysql:/etc/postfix/mysql_domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql_mailbox.cf
virtual_uid_maps = mysql:/etc/postfix/mysql_uid.cf
link|improve this answer
1  
I just noticed smtp_sasl_auth_enable wasn't here for some reason. I looked and I had put smtp_sasl_auth_enabled. Duh. Will let you know if this solves the problem in a sec. – Mr Shoubs Nov 17 '09 at 10:24
unfortuantly now nothing external sends - message stays in outbox and the mail log doesn't show anything happening :( – Mr Shoubs Nov 17 '09 at 10:37
ok, I can't send internal either. Though the outlook test message works fine. – Mr Shoubs Nov 17 '09 at 10:50
UPDATE: outlook problem - don't know why it did that, but deleted the mail account and everything works fine! – Mr Shoubs Nov 17 '09 at 11:09
Bill Weiss should answer so I can say he led me to this solution – Mr Shoubs Nov 17 '09 at 11:10
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.