[Postfixbuch-users] Undelivered Mail

[Uwe Driessen]

On Behalf Of Silvio Siefke
> Logeintrag:
> May 16 21:33:18 server1 postfix/smtpd[15184]: 55D701DC0BF:
> client=unknown[67.102.13.38]
> May 16 21:33:20 server1 postfix/cleanup[15188]: 55D701DC0BF:
> message-id=<20090516193318.55D701DC0BF at server1.silviosiefke.de>
> May 16 21:33:21 server1 postfix/qmgr[7182]: 55D701DC0BF:
> from=<info at silviosiefke.de>, size=6563, nrcpt=1 (queue active)
> May 16 21:33:21 server1 postfix/smtpd[15184]: disconnect from
> unknown[67.102.13.38]
> 
> 
> Aber normalerweise habe ich doch SMTP Auth aktiviert, da sollte das doch
> nicht passieren oder?
> 
> postconf -n
> alias_maps = hash:/etc/aliases
> broken_sasl_auth_clients = yes
> config_directory = /etc/postfix
> content_filter = smtp-amavis:[127.0.0.1]:10024
> home_mailbox = maildir/
> mailbox_size_limit = 0
> mydestination = $myhostname, mail.silvio-siefke.de, server1.silviosiefke.de
> myhostname = server1.silviosiefke.de
> recipient_delimiter = +
> smtp_sasl_auth_enable = no
> smtpd_recipient_restrictions =
> reject_non_fqdn_sender
> reject_non_fqdn_recipient
> reject_invalid_helo_hostname
> reject_non_fqdn_helo_hostname
Die Helo restriktionen wirken auch auf die eigenen Kunden von daher würde ich die nach den
reject_unauth_destination einschieben. 

Die Restriktion die du suchst dürfte 
reject_unauthenticated_sender_login_mismatch 
Enforces the reject_sender_login_mismatch restriction for unauthenticated clients only.
This feature is available in Postfix version 2.1 and later.

Sein 

> permit_sasl_authenticated
> permit_mynetworks
> reject_unauth_destination
> reject_unlisted_recipient

Die reject_unlisted_recipient habe ich vor dem reject_unauth_destination ziemlich weit
oben stehen 
reject_unlisted_recipient (with Postfix version 2.0: check_recipient_maps) 
Reject the request when the RCPT TO address is not listed in the list of valid recipients
for its domain class. See the smtpd_reject_unlisted_recipient parameter description for
details. This feature is available in Postfix 2.1 and later.


> check_sender_access hash:/etc/postfix/spam/sender_access
> reject_rbl_client zen.spamhaus.org
> reject_rbl_client dul.dnsbl.sorbs.net
> reject_rbl_client bl.spamcop.net


Mit freundlichen Grüßen

Drießen

-- 
Software & Computer
Uwe Drießen
Lembergstraße 33
67824 Feilbingert
Tel.: +49 06708 / 660045   Fax: +49 06708 / 661397