From: Wietse Venema on
donovan jeffrey j:
> thanks for the reply, i did the update and have no errors on postfix check.
>
> i have setup a test on my mx server to transport mail for lukeskywalker(a)beth.k12.pa.us to mx2.beth.k12.pa.us ( my new 10.6 filter )
>
> so far my mail2 primary mx can send to the filter (mx2). Mx2 ;postfix picks up and sends to amavis. then I get some 554 error,.. im not sure who is complaining.
>
> Jul 29 10:20:08 mx2 postfix/smtpd[63722]: connect from mail2.beth.k12.pa.us[192.227.0.10]
> Jul 29 10:20:08 mx2 postfix/smtpd[63722]: 15B7551C06DA: client=mail2.beth.k12.pa.us[192.227.0.10]
> Jul 29 10:20:08 mx2 postfix/cleanup[63726]: 15B7551C06DA: message-id=<0D766F25-EC81-452B-9F77-F4C2A0CE2DE1(a)gmail.com>
> Jul 29 10:20:08 mx2 postfix/qmgr[63217]: 15B7551C06DA: from=<doctorfoo1(a)gmail.com>, size=2231, nrcpt=1 (queue active)
> Jul 29 10:20:11 mx2 postfix/smtp[63727]: 15B7551C06DA: to=<lukeskywalker(a)beth.k12.pa.us>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.4, delays=0.01/0.01/0.01/3.3, dsn=5.1.0, status=bounced (host 127.0.0.1[127.0.0.1] said: 554 5.1.0 Failed, id=63219-01, from MTA([smtp.beth.k12.pa.us]:2525): 554 <mx2.beth.k12.pa.us[10.135.1.23]>: Client host rejected: Access denied (in reply to end of DATA command))
>
> so amavis picks it up then someone says access denied. my next relay is sitting at " smtp.beth.k12.pa.us:2525 " so it looks like that MTA is complaining about MX2 sending to it. maybe because it's says it's hostname is localhost ???
>

Sorry, I can help with Postfix migration from one version to another,
but this is about amavis configuration which is not part of Postfix.

Wietse

From: Jeroen Geilman on
On 07/29/2010 05:07 PM, donovan jeffrey j wrote:
>
> Jul 29 10:20:08 mx2 postfix/smtpd[63722]: connect from mail2.beth.k12.pa.us[192.227.0.10]
> Jul 29 10:20:08 mx2 postfix/smtpd[63722]: 15B7551C06DA: client=mail2.beth.k12.pa.us[192.227.0.10]
> Jul 29 10:20:08 mx2 postfix/cleanup[63726]: 15B7551C06DA: message-id=<0D766F25-EC81-452B-9F77-F4C2A0CE2DE1(a)gmail.com>
> Jul 29 10:20:08 mx2 postfix/qmgr[63217]: 15B7551C06DA: from=<doctorfoo1(a)gmail.com>, size=2231, nrcpt=1 (queue active)
> Jul 29 10:20:11 mx2 postfix/smtp[63727]: 15B7551C06DA: to=<lukeskywalker(a)beth.k12.pa.us>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.4, delays=0.01/0.01/0.01/3.3, dsn=5.1.0, status=bounced (host 127.0.0.1[127.0.0.1] said: 554 5.1.0 Failed, id=63219-01, from MTA([smtp.beth.k12.pa.us]:2525): 554<mx2.beth.k12.pa.us[10.135.1.23]>: Client host rejected: Access denied (in reply to end of DATA command))
>

Amavis tells postfix: "Hi! I tried to connect to smtp.beth.k12.pa.us on
port 2525, but that machine refused. Here's your message back, good luck."

I'd suggest configuring that MTA to accept mail from amavis, although I
don't know why amavis is sending mail to a different machine.

> so amavis picks it up then someone says access denied. my next relay is sitting at " smtp.beth.k12.pa.us:2525 " so it looks like that MTA is complaining about MX2 sending to it. maybe because it's says it's hostname is localhost ???
>
> this below is another issue where the bounce can't leave the building.
>
> Jul 29 10:20:11 mx2 postfix/cleanup[63726]: 6C64951C06E7: message-id=<20100729142011.6C64951C06E7(a)mx1.beth.k12.pa.us>
> Jul 29 10:20:11 mx2 postfix/bounce[63731]: 15B7551C06DA: sender non-delivery notification: 6C64951C06E7
> Jul 29 10:20:11 mx2 postfix/qmgr[63217]: 6C64951C06E7: from=<>, size=4388, nrcpt=1 (queue active)
> Jul 29 10:20:11 mx2 postfix/qmgr[63217]: 15B7551C06DA: removed
> Jul 29 10:20:11 mx2 postfix/smtp[63732]: connect to gmail-smtp-in.l.google.com[74.125.91.27]:25: Connection refused
> Jul 29 10:20:11 mx2 postfix/smtp[63732]: connect to alt1.gmail-smtp-in.l.google.com[74.125.77.27]:25: Connection refused
> Jul 29 10:20:11 mx2 postfix/smtp[63732]: connect to alt2.gmail-smtp-in.l.google.com[74.125.43.27]:25: Connection refused
> Jul 29 10:20:11 mx2 postfix/smtp[63732]: connect to alt3.gmail-smtp-in.l.google.com[74.125.155.27]:25: Connection refused
> Jul 29 10:20:11 mx2 postfix/smtp[63732]: connect to alt4.gmail-smtp-in.l.google.com[74.125.157.27]:25: Connection refused
> Jul 29 10:20:11 mx2 postfix/smtp[63732]: 6C64951C06E7: to=<foo1(a)gmail.com>, relay=none, delay=0.03, delays=0/0.01/0.01/0, dsn=4.4.1, status=deferred (connect to alt4.gmail-smtp-in.l.google.com[74.125.157.27]:25: Connection refused)
>
>

Looks like you're blacklisted - either by google or on a list google checks.

> postconf -v has tons of info beyond what i have set.
>
>

We don't need any of it - the above is what you need to address.

J.