robert
22.08.15, 07:28
Hallo,
ich habe leider ein kleines Problem mit jemanden mit dem ich per Mail kommunizieren muss. Leider hat der Administrator des Netzwerks dort wohl einige Probleme mit einer sauberen Konfiguration. Denn jedes mal bekomme ich die gleiche Fehler Meldung: "Helo command rejected: Host not found"
Nach einiger Recherche zu Postfix habe ich die Domain des Sender auf eine whitelist setzen wollen. Doch irgend wie funktioniert es nicht, oder ich habe einen Denkfehler.
Hier mal der Auszug aus meiner Postfix Konfiguration.
postconf -n
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
body_checks = regexp:/etc/postfix/mbl-body-deny
bounce_queue_lifetime = 4h
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
config_directory = /etc/postfix
disable_vrfy_command = yes
empty_address_recipient = postmaster
freemail_gmx = check_client_access regexp:/etc/postfix/freemail_gmx, reject
freemail_webde = check_client_access regexp:/etc/postfix/freemail_webde, reject
freemail_yahoo = check_client_access regexp:/etc/postfix/freemail_yahoo, reject
inet_interfaces = meineip1 meineip2 127.0.0.1
inet_protocols = ipv4
ipc_idle = 5s
local_destination_concurrency_limit = 5
local_recipient_maps = $alias_maps
luser_relay = postmaster
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
masquerade_domains = $mydomain
maximal_queue_lifetime = 4h
mydestination = $myhostname, $mydomain, localhost, localhost.$mydomain, meinezweitedomain.de
mydomain = meinedomain.de
myhostname = mail.meinedomain.de
mynetworks = 127.0.0.0/8, meineip1/32, meineip2/32, 192.168.10.0/24
myorigin = /etc/mailname
recipient_canonical_maps = hash:/etc/postfix/canonical_recipient
recipient_delimiter = +
relayhost =
sender_canonical_maps = hash:/etc/postfix/canonical_sender
smtp_bind_address = meineip1
smtp_data_done_timeout = 60s
smtp_data_xfer_timeout = 60s
smtp_helo_timeout = 30s
smtp_mail_timeout = 60s
smtp_quit_timeout = 30s
smtp_rcpt_timeout = 30s
smtp_sasl_auth_enable = no
smtp_skip_quit_response = no
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 5
smtpd_client_connection_rate_limit = 5
smtpd_client_restrictions = permit_inet_interfaces permit_mynetworks check_client_access regexp:/etc/postfix/client_check reject_rbl_client ix.dnsbl.manitu.net reject_rhsbl_client ix.dnsbl.manitu.net permit
smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce
smtpd_delay_reject = yes
smtpd_hard_error_limit = 5
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, check_helo_access regexp:/etc/postfix/check_helo_access, reject_invalid_hostname, reject_unknown_hostname, reject_non_fqdn_hostname, permit
smtpd_recipient_limit = 50
smtpd_recipient_restrictions = permit_inet_interfaces, permit_sasl_authenticated, permit_mynetworks, reject_unlisted_recipient, reject_unlisted_sender, reject_unknown_recipient_domain, reject_unknown_sender_domain, reject_invalid_hostname, reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unauth_destination, reject_unknown_reverse_client_hostname, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client zen.spamhaus.org, permit
smtpd_relay_restrictions = permit_inet_interfaces, permit_sasl_authenticated, permit_mynetworks, reject_unlisted_recipient, reject_unlisted_sender, reject_unknown_recipient_domain, reject_unknown_sender_domain, reject_invalid_hostname, reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unauth_destination, reject_unknown_reverse_client_hostname, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client zen.spamhaus.org, permit
smtpd_restriction_classes = freemail_webde, freemail_gmx, freemail_yahoo, white_list
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain =
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = permit_mynetworks, check_sender_access regexp:/etc/postfix/sender_check, reject_invalid_hostname, reject_unknown_hostname, reject_unknown_sender_domain, reject_non_fqdn_hostname, reject_non_fqdn_sender, permit
smtpd_soft_error_limit = 2
smtpd_timeout = 60s
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/transport_map
virtual_alias_domains = meinezweitedomain.de
virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps
white_list = check_client_access hash:/etc/postfix/white_list, reject
/etc/postfix/check_helo_access
/(^|\.)sender-domain\.de$/ white_list
/etc/postfix/white_list
ipdersenderdomain OK
Ich habe natürlich alle persönliche Daten wie Domain oder IP aus Sicherheitsgründen ersetzt.
Problem ist nun, dass beim Verbinden der Sender folgendes macht.
So verbindet er sich mit meinem Server:
RCPT from fw01.sender-domain.de[senderip]
Beim Helo kommt aber folgendes rüber:
irgendeinsubdomainname.sender-domain.de
Das lehnt meine Postfix Konfiguration natürlich ab.
Deshalb habe ich die entsprechende WhiteList gesetzt, aber es wird trotzdem noch abgelehnt.
Hat jemand eine Idee, wo mein Denkfehler liegt?
Danke,
gruß Robert
ich habe leider ein kleines Problem mit jemanden mit dem ich per Mail kommunizieren muss. Leider hat der Administrator des Netzwerks dort wohl einige Probleme mit einer sauberen Konfiguration. Denn jedes mal bekomme ich die gleiche Fehler Meldung: "Helo command rejected: Host not found"
Nach einiger Recherche zu Postfix habe ich die Domain des Sender auf eine whitelist setzen wollen. Doch irgend wie funktioniert es nicht, oder ich habe einen Denkfehler.
Hier mal der Auszug aus meiner Postfix Konfiguration.
postconf -n
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
body_checks = regexp:/etc/postfix/mbl-body-deny
bounce_queue_lifetime = 4h
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
config_directory = /etc/postfix
disable_vrfy_command = yes
empty_address_recipient = postmaster
freemail_gmx = check_client_access regexp:/etc/postfix/freemail_gmx, reject
freemail_webde = check_client_access regexp:/etc/postfix/freemail_webde, reject
freemail_yahoo = check_client_access regexp:/etc/postfix/freemail_yahoo, reject
inet_interfaces = meineip1 meineip2 127.0.0.1
inet_protocols = ipv4
ipc_idle = 5s
local_destination_concurrency_limit = 5
local_recipient_maps = $alias_maps
luser_relay = postmaster
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
masquerade_domains = $mydomain
maximal_queue_lifetime = 4h
mydestination = $myhostname, $mydomain, localhost, localhost.$mydomain, meinezweitedomain.de
mydomain = meinedomain.de
myhostname = mail.meinedomain.de
mynetworks = 127.0.0.0/8, meineip1/32, meineip2/32, 192.168.10.0/24
myorigin = /etc/mailname
recipient_canonical_maps = hash:/etc/postfix/canonical_recipient
recipient_delimiter = +
relayhost =
sender_canonical_maps = hash:/etc/postfix/canonical_sender
smtp_bind_address = meineip1
smtp_data_done_timeout = 60s
smtp_data_xfer_timeout = 60s
smtp_helo_timeout = 30s
smtp_mail_timeout = 60s
smtp_quit_timeout = 30s
smtp_rcpt_timeout = 30s
smtp_sasl_auth_enable = no
smtp_skip_quit_response = no
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 5
smtpd_client_connection_rate_limit = 5
smtpd_client_restrictions = permit_inet_interfaces permit_mynetworks check_client_access regexp:/etc/postfix/client_check reject_rbl_client ix.dnsbl.manitu.net reject_rhsbl_client ix.dnsbl.manitu.net permit
smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce
smtpd_delay_reject = yes
smtpd_hard_error_limit = 5
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, check_helo_access regexp:/etc/postfix/check_helo_access, reject_invalid_hostname, reject_unknown_hostname, reject_non_fqdn_hostname, permit
smtpd_recipient_limit = 50
smtpd_recipient_restrictions = permit_inet_interfaces, permit_sasl_authenticated, permit_mynetworks, reject_unlisted_recipient, reject_unlisted_sender, reject_unknown_recipient_domain, reject_unknown_sender_domain, reject_invalid_hostname, reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unauth_destination, reject_unknown_reverse_client_hostname, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client zen.spamhaus.org, permit
smtpd_relay_restrictions = permit_inet_interfaces, permit_sasl_authenticated, permit_mynetworks, reject_unlisted_recipient, reject_unlisted_sender, reject_unknown_recipient_domain, reject_unknown_sender_domain, reject_invalid_hostname, reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unauth_destination, reject_unknown_reverse_client_hostname, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client zen.spamhaus.org, permit
smtpd_restriction_classes = freemail_webde, freemail_gmx, freemail_yahoo, white_list
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain =
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = permit_mynetworks, check_sender_access regexp:/etc/postfix/sender_check, reject_invalid_hostname, reject_unknown_hostname, reject_unknown_sender_domain, reject_non_fqdn_hostname, reject_non_fqdn_sender, permit
smtpd_soft_error_limit = 2
smtpd_timeout = 60s
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/transport_map
virtual_alias_domains = meinezweitedomain.de
virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps
white_list = check_client_access hash:/etc/postfix/white_list, reject
/etc/postfix/check_helo_access
/(^|\.)sender-domain\.de$/ white_list
/etc/postfix/white_list
ipdersenderdomain OK
Ich habe natürlich alle persönliche Daten wie Domain oder IP aus Sicherheitsgründen ersetzt.
Problem ist nun, dass beim Verbinden der Sender folgendes macht.
So verbindet er sich mit meinem Server:
RCPT from fw01.sender-domain.de[senderip]
Beim Helo kommt aber folgendes rüber:
irgendeinsubdomainname.sender-domain.de
Das lehnt meine Postfix Konfiguration natürlich ab.
Deshalb habe ich die entsprechende WhiteList gesetzt, aber es wird trotzdem noch abgelehnt.
Hat jemand eine Idee, wo mein Denkfehler liegt?
Danke,
gruß Robert