From: Axel Werner on
NEWS UPDATE:

THANKS to ONYX <ivakras1(a)gmail.com> - i found a nasty lil BUG within my
main.cf file.

My original main.cf showed some lines like...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
SMTPD_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
check_policy_service net:127.0.0.1:60000,
reject
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

usualy... it should be good. but somehow my main.cf contained some
"invisible" characters or something like that, causing postfix to
miss-read the lines somehow.

Thanks to ONYX - he told me to try a "postconf
smtpd_recipient_restrictions" on the console to see if the result is
just line expected. BUT IS WAS NOT!

entering "postconf smtpd_recipient_restrictions" showed me something like...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

.... but nothing more!

then i edit my main.cf and "reassembled" the parameters into ONE single
line and tried that command again...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unauth_destination,
check_policy_service inet:127.0.0.1:60000, reject
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

after a restart of postfix the new entering of "postconf
smtpd_recipient_restrictions" showed me the correct parameters now.

So it seems something within my main.cf was bad and the lines dont
belong toghether. bad bug! baaad! :)

THANKS A LOT FOR HELPING AND SHOWING ME THE LIGHT! :)

greets
Axel

From: Ralf Hildebrandt on
On 2007-11-29, Axel Werner <mail(a)awerner.homeip.net> wrote:

> SMTPD_recipient_restrictions = permit_mynetworks,
> permit_sasl_authenticated,
> reject_unauth_destination,
> check_policy_service net:127.0.0.1:60000,
> reject

That's still wrong, it must be:
smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination
check_policy_service net:127.0.0.1:60000

no reject at the end.

--
Ralf Hildebrandt (i.A. des IT-Zentrums) Ralf.Hildebrandt(a)charite.de
Charite - Universitätsmedizin Berlin Tel. +49 (0)30-450 570-155
Gemeinsame Einrichtung von FU- und HU-Berlin Fax. +49 (0)30-450 570-962
IT-Zentrum Standort CBF send no mail to plonk(a)charite.de