1 Topic by zybster (edited by zybster 2018-09-25 20:54:30)

  • zybster
  • Member
  • Offline
  • Registered: 2018-09-25
  • Posts: 6

Topic: Problems with sending mails after manual upgrade to 0.9.8

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: Ubuntu 16.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Sep 25 08:53:44 mail amavis[2049]: (02049-05) (!)kHDLOXffS6S4 FWD from <xxx@xxx.xxx> -> <yyy@yyy.yyy>,  451 4.5.0 From MTA() during fwd-connect (Negative greeting: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied): id=02049-05
Sep 25 08:53:44 mail amavis[2049]: (02049-05) Blocked MTA-BLOCKED {TempFailedInternal}, ORIGINATING/MYNETS LOCAL [127.0.0.1]:53004 <xxx@xxx.xxx> -> <yyy@yyy.yyy>, Queue-ID: 8A0C6860175, Message-ID: <1d5af48ca965d86486b7e157dec91674@xxx.xxx>, mail_id: kHDLOXffS6S4, Hits: -1, size: 463, 85 ms, Tests: [ALL_TRUSTED=-1]
Sep 25 08:53:44 mail postfix/smtp[3392]: 8A0C6860175: to=<yyy@yyy.yyy>, relay=127.0.0.1[127.0.0.1]:10026, delay=4779, delays=4779/0.02/0/0.09, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 id=02049-05 - Temporary MTA failure on relaying, From MTA() during fwd-connect (Negative greeting: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied): id=02049-05 (in reply to end of DATA command))
====

Hi Community,

yesterday I manually updated my iRedmail installation from 0.9.5-1 to 0.9.8 following all the steps in the seperate upgrade tutorials.

I went:
0.9.5-1 -> 0.9.6 -> 0.9.7 -> 0.9.8 performing all the steps described.

Maybe I did an error or missed a step, but today I have the problem that I am not able to send out emails anymore.
Problem seems to be related with postfix and amavisd, but I cannot figure out where the problem is.

this is the output of postconf -n:

I anonymized my mailhost name

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
allow_min_user = no
allow_percent_hack = no
biff = no
body_checks = pcre:/etc/postfix/body_checks.pcre
command_directory = /usr/sbin
compatibility_level = 2
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/lib/postfix/sbin
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
disable_vrfy_command = yes
dovecot_destination_recipient_limit = 1
enable_original_recipient = no
header_checks = pcre:/etc/postfix/header_checks
inet_interfaces = all
inet_protocols = all
lmtp_tls_mandatory_protocols = !SSLv2 !SSLv3
lmtp_tls_protocols = !SSLv2 !SSLv3
mail_owner = postfix
mailq_path = /usr/bin/mailq
message_size_limit = 15728640
mydestination = $myhostname, localhost, localhost.localdomain
mydomain = myhost.mydomain.de
myhostname = myhost.mydomain.de
mynetworks = 127.0.0.1
myorigin = myhost.mydomain.de
newaliases_path = /usr/bin/newaliases
postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/postscreen_access.cidr
postscreen_blacklist_action = enforce
postscreen_dnsbl_action = enforce
postscreen_dnsbl_reply_map = texthash:/etc/postfix/postscreen_dnsbl_reply
postscreen_dnsbl_sites = zen.spamhaus.org*3 b.barracudacentral.org*2
postscreen_dnsbl_threshold = 2
postscreen_greet_action = enforce
proxy_read_maps = $canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps
queue_directory = /var/spool/postfix
recipient_bcc_maps = proxy:mysql:/etc/postfix/mysql/recipient_bcc_maps_user.cf proxy:mysql:/etc/postfix/mysql/recipient_bcc_maps_domain.cf
recipient_delimiter = +
relay_domains = $mydestination proxy:mysql:/etc/postfix/mysql/relay_domains.cf
sender_bcc_maps = proxy:mysql:/etc/postfix/mysql/sender_bcc_maps_user.cf proxy:mysql:/etc/postfix/mysql/sender_bcc_maps_domain.cf
sender_dependent_relayhost_maps = proxy:mysql:/etc/postfix/mysql/sender_dependent_relayhost_maps.cf
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp-amavis_destination_recipient_limit = 1
smtp_tls_CAfile = $smtpd_tls_CAfile
smtp_tls_loglevel = 1
smtp_tls_mandatory_protocols = !SSLv2 !SSLv3
smtp_tls_note_starttls_offer = yes
smtp_tls_protocols = !SSLv2 !SSLv3
smtp_tls_security_level = may
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:7777
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks permit_sasl_authenticated check_helo_access pcre:/etc/postfix/helo_access.pcre reject_non_fqdn_helo_hostname reject_invalid_helo_hostname
smtpd_recipient_restrictions = reject_unknown_recipient_domain reject_non_fqdn_recipient reject_unlisted_recipient check_policy_service inet:127.0.0.1:7777 permit_mynetworks permit_sasl_authenticated reject_unauth_destination
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = yes
smtpd_sasl_path = private/dovecot-auth
smtpd_sasl_type = dovecot
smtpd_sender_login_maps = proxy:mysql:/etc/postfix/mysql/sender_login_maps.cf
smtpd_sender_restrictions = reject_unknown_sender_domain reject_non_fqdn_sender reject_unlisted_sender permit_mynetworks permit_sasl_authenticated check_sender_access pcre:/etc/postfix/sender_access.pcre
smtpd_tls_CAfile = /etc/ssl/certs/iRedMail_chain.crt
smtpd_tls_cert_file = /etc/ssl/certs/iRedMail.crt
smtpd_tls_dh1024_param_file = /etc/ssl/dh2048_param.pem
smtpd_tls_dh512_param_file = /etc/ssl/dh512_param.pem
smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA
smtpd_tls_key_file = /etc/ssl/private/iRedMail.key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3
smtpd_tls_protocols = !SSLv2 !SSLv3
smtpd_tls_security_level = may
swap_bangpath = no
tls_random_source = dev:/dev/urandom
transport_maps = proxy:mysql:/etc/postfix/mysql/transport_maps_user.cf proxy:mysql:/etc/postfix/mysql/transport_maps_domain.cf
unknown_local_recipient_reject_code = 550
virtual_alias_domains =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql/virtual_alias_maps.cf proxy:mysql:/etc/postfix/mysql/domain_alias_maps.cf proxy:mysql:/etc/postfix/mysql/catchall_maps.cf proxy:mysql:/etc/postfix/mysql/domain_alias_catchall_maps.cf
virtual_gid_maps = static:2000
virtual_mailbox_base = /var/vmail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/virtual_mailbox_maps.cf
virtual_minimum_uid = 2000
virtual_transport = dovecot
virtual_uid_maps = static:2000


Please help me.

BR,

zybster

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,160

Re: Problems with sending mails after manual upgrade to 0.9.8

Could you show us the full content of /etc/postfix/master.cf? Did you change any parameter of the transport "smtp-amavis"?

3 Reply by zybster

  • zybster
  • Member
  • Offline
  • Registered: 2018-09-25
  • Posts: 6

Re: Problems with sending mails after manual upgrade to 0.9.8

Dear Zhang,

thank you for your quick reply.

This is my master.cf

#
# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: "man 5 master" or
# on-line: http://www.postfix.org/master.5.html).
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (no)    (never) (100)
# ==========================================================================
smtp      inet  n       -       y       -       1       postscreen
smtpd     pass  -       -       y       -       -       smtpd
dnsblog   unix  -       -       y       -       0       dnsblog
tlsproxy  unix  -       -       y       -       0       tlsproxy
#submission inet n       -       y       -       -       smtpd
#  -o syslog_name=postfix/submission
#  -o smtpd_tls_security_level=encrypt
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#smtps     inet  n       -       y       -       -       smtpd
#  -o syslog_name=postfix/smtps
#  -o smtpd_tls_wrappermode=yes
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#628       inet  n       -       y       -       -       qmqpd
#smtp       inet  n       -       -       -       -       smtpd
pickup     unix  n       -       n       60      1       pickup
cleanup    unix  n       -       n       -       0       cleanup
#qmgr     unix  n       -       n       300     1       oqmgr
qmgr       unix  n       -       n       300     1       qmgr
tlsmgr     unix  -       -       n       1000?   1       tlsmgr
rewrite    unix  -       -       n       -       -       trivial-rewrite
bounce     unix  -       -       n       -       0       bounce
defer      unix  -       -       n       -       0       bounce
trace      unix  -       -       n       -       0       bounce
verify     unix  -       -       n       -       1       verify
flush      unix  n       -       n       1000?   0       flush
proxymap   unix  -       -       n       -       -       proxymap
proxywrite unix  -       -       n       -       1       proxymap
smtp       unix  -       -       n       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
relay      unix  -       -       n       -       -       smtp
showq      unix  n       -       n       -       -       showq
error      unix  -       -       n       -       -       error
retry      unix  -       -       n       -       -       error
discard    unix  -       -       n       -       -       discard
local      unix  -       n       n       -       -       local
virtual    unix  -       n       n       -       -       virtual
lmtp       unix  -       -       n       -       -       lmtp
anvil      unix  -       -       n       -       1       anvil
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
scache     unix  -       -       n       -       1       scache
#
# ====================================================================
#
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
#
# Specify in cyrus.conf:
#   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of the following:
#  mailbox_transport = lmtp:inet:localhost
#  virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus     unix  -       n       n       -       -       pipe
#  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
# Old example of delivery via Cyrus.
#
#old-cyrus unix  -       n       n       -       -       pipe
#  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
maildrop   unix  -       n       n       -       -       pipe flags=DRhu
    user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# Other external delivery methods.
#
uucp       unix  -       n       n       -       -       pipe flags=Fqhu
    user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail     unix  -       n       n       -       -       pipe flags=F user=ftn
    argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp      unix  -       n       n       -       -       pipe flags=Fq.
    user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n       n       -       2       pipe flags=R
    user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop}
    ${user} ${extension}

mailman    unix  -       n       n       -       -       pipe flags=FR
    user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop}
    ${user}
# Submission, port 587, force TLS connection.
submission inet n       -       n       -       -       smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
  -o content_filter=smtp-amavis:[127.0.0.1]:10026

# Use dovecot's `deliver` program as LDA.
dovecot unix    -       n       n       -       -      pipe
    flags=DRh user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${domain} -m ${extension}

# Amavisd integration.
smtp-amavis unix -  -   n   -   2  smtp
    -o smtp_data_done_timeout=1200
    -o smtp_send_xforward_command=yes
    -o disable_dns_lookups=yes
    -o max_use=20

127.0.0.1:10025 inet n  -   n   -   -  smtpd
    -o content_filter=
    -o mynetworks_style=host
    -o mynetworks=127.0.0.0/8
    -o local_recipient_maps=
    -o relay_recipient_maps=
    -o strict_rfc821_envelopes=yes
    -o smtp_tls_security_level=none
    -o smtpd_tls_security_level=none
    -o smtpd_restriction_classes=
    -o smtpd_delay_reject=no
    -o smtpd_client_restrictions=reject
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o smtpd_end_of_data_restrictions=
    -o smtpd_error_sleep_time=0
    -o smtpd_soft_error_limit=1001
    -o smtpd_hard_error_limit=1000
    -o smtpd_client_connection_count_limit=0
    -o smtpd_client_connection_rate_limit=0
    -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_address_mappings

BR,

zybster

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,160

Re: Problems with sending mails after manual upgrade to 0.9.8

zybster wrote:

127.0.0.1:10025 inet n  -   n   -   -  smtpd
    ...
    -o smtpd_client_restrictions=reject

This "smtpd_client_restrictions=" is wrong, it must be:

    -o smtpd_client_restrictions=permit_mynetworks,reject

5 Reply by zybster (edited by zybster 2018-09-25 20:54:10)

  • zybster
  • Member
  • Offline
  • Registered: 2018-09-25
  • Posts: 6

Re: Problems with sending mails after manual upgrade to 0.9.8

ZhangHuangbin wrote:
zybster wrote:

127.0.0.1:10025 inet n  -   n   -   -  smtpd
    ...
    -o smtpd_client_restrictions=reject

This "smtpd_client_restrictions=" is wrong, it must be:

    -o smtpd_client_restrictions=permit_mynetworks,reject

Dear Zhang,

thank you, I corrected this line and restarted postfix, but the error still occurs:
Sep 25 12:31:05 mail postfix/qmgr[5937]: 19AF88614DE: from=<xxx@xxx.xxx>, size=563, nrcpt=1 (queue active)
Sep 25 12:31:05 mail roundcube: <otvd4g67> User xxx@xxx.xxx [192.168.x.1]; Message for yyy@yyy.yyy; 250: 2.0.0 Ok: queued as 19AF88614DE
Sep 25 12:31:05 mail postfix/submission/smtpd[5974]: disconnect from localhost[127.0.0.1] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=8
Sep 25 12:31:05 mail postfix/smtpd[5992]: connect from localhost[127.0.0.1]
Sep 25 12:31:05 mail postfix/smtpd[5992]: NOQUEUE: reject: CONNECT from localhost[127.0.0.1]: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied; proto=SMTP
Sep 25 12:31:05 mail postfix/smtpd[5992]: lost connection after CONNECT from localhost[127.0.0.1]
Sep 25 12:31:05 mail postfix/smtpd[5992]: disconnect from localhost[127.0.0.1] commands=0/0
Sep 25 12:31:05 mail amavis[2049]: (02049-19) (!)reuVfYRD-PNq FWD from <xxx@xxx.xxx> -> <yyy@yyy.yyy>,  451 4.5.0 From MTA() during fwd-connect (Negative greeting: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied): id=02049-19
Sep 25 12:31:05 mail amavis[2049]: (02049-19) Blocked MTA-BLOCKED {TempFailedInternal}, ORIGINATING/MYNETS LOCAL [127.0.0.1]:50668 <xxx@xxx.xxx> -> <yyy@yyy.yyy>, Queue-ID: 19AF88614DE, Message-ID: <b5a0dcc3137da4a9d7e6fbab8bf4174e@xxx.xxx>, mail_id: reuVfYRD-PNq, Hits: -1, size: 563, 185 ms, Tests: [ALL_TRUSTED=-1]
Sep 25 12:31:05 mail postfix/smtp[5987]: 19AF88614DE: to=<yyy@yyy.yyy>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.49, delays=0.29/0.01/0/0.19, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 id=02049-19 - Temporary MTA failure on relaying, From MTA() during fwd-connect (Negative greeting: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied): id=02049-19 (in reply to end of DATA command))

I tried to send this email from roundcube - Do I need to enhance my_networks by 192.168.x.0/24 ?
192.168.x.1 is actually my firewall which is in front of Roundcube.

Additionally - I'm also not able to receive emails - with the same error message:

Sep 25 14:27:20 mail postfix/cleanup[7682]: 1C3D1860F73: message-id=<VI1PR0801MB17414BA23CFB0BCEF8DE6C63C4160@VI1PR0801MB1741.eurprd08.prod.outlook.com>
Sep 25 14:27:20 mail postfix/qmgr[5937]: 1C3D1860F73: from=<xxx@xxx.xxx>, size=11472, nrcpt=1 (queue active)
Sep 25 14:27:20 mail postfix/smtpd[7677]: disconnect from mail-eopbgr70052.outbound.protection.outlook.com[40.107.7.52] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Sep 25 14:27:23 mail postfix/smtpd[7701]: connect from localhost[127.0.0.1]
Sep 25 14:27:23 mail postfix/smtpd[7701]: NOQUEUE: reject: CONNECT from localhost[127.0.0.1]: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied; proto=SMTP
Sep 25 14:27:23 mail postfix/smtpd[7701]: lost connection after CONNECT from localhost[127.0.0.1]
Sep 25 14:27:23 mail postfix/smtpd[7701]: disconnect from localhost[127.0.0.1] commands=0/0
Sep 25 14:27:23 mail amavis[6233]: (06233-08) (!)LF7RxeV-GSFV FWD from <xxx@xxx.xxx> -> <yyy@yyy.yyy>,  451 4.5.0 From MTA() during fwd-connect (Negative greeting: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied): id=06233-08
Sep 25 14:27:23 mail amavis[6233]: (06233-08) Blocked MTA-BLOCKED {TempFailedInbound}, [40.107.7.52]:57020 [40.107.7.52] <xxx@xxx.xxx> -> <yyy@yyy.yyy>, Queue-ID: 1C3D1860F73, Message-ID: <VI1PR0801MB17414BA23CFB0BCEF8DE6C63C4160@vi1pr0801mb1741.eurprd08.prod.outlook.com>, mail_id: LF7RxeV-GSFV, Hits: -0.002, size: 11466, dkim_sd=selector1-xxx-onmicrosoft-com:xxx.onmicrosoft.com, 3187 ms, Tests: [DKIMWL_WL_MED=-0.001,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_NONE=-0.0001,SPF_HELO_PASS=-0.001,SPF_PASS=-0.001]
Sep 25 14:27:23 mail postfix/smtp[7687]: 1C3D1860F73: to=<yyy@yyy.yyy>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.6, delays=0.45/0.01/0/3.2, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 id=06233-08 - Temporary MTA failure on relaying, From MTA() during fwd-connect (Negative greeting: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied): id=06233-08 (in reply to end of DATA command))

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,160

Re: Problems with sending mails after manual upgrade to 0.9.8

It's same error, i'm afraid that you may not modify /etc/postfix/master.cf correctly. Could you show us the lines for transport "127.0.0.1:10025"? or simply show us full content of master.cf if it's easier.

7 Reply by zybster

  • zybster
  • Member
  • Offline
  • Registered: 2018-09-25
  • Posts: 6

Re: Problems with sending mails after manual upgrade to 0.9.8

Dear Zhang,

these are the requested lines:

127.0.0.1:10025 inet n  -   n   -   -  smtpd
    -o content_filter=
    -o mynetworks_style=host
    -o mynetworks=127.0.0.0/8
    -o local_recipient_maps=
    -o relay_recipient_maps=
    -o strict_rfc821_envelopes=yes
    -o smtp_tls_security_level=none
    -o smtpd_tls_security_level=none
    -o smtpd_restriction_classes=
    -o smtpd_delay_reject=no
    -o smtpd_client_restrictions=reject
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o smtpd_end_of_data_restrictions=
    -o smtpd_error_sleep_time=0
    -o smtpd_soft_error_limit=1001
    -o smtpd_hard_error_limit=1000
    -o smtpd_client_connection_count_limit=0
    -o smtpd_client_connection_rate_limit=0
    -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_address_mappings

master.cf is already completely some posts higher.

8 Reply by zybster

  • zybster
  • Member
  • Offline
  • Registered: 2018-09-25
  • Posts: 6

Re: Problems with sending mails after manual upgrade to 0.9.8

btw. thanks for all your time - I send you a coffee smile

9 Reply by zybster

  • zybster
  • Member
  • Offline
  • Registered: 2018-09-25
  • Posts: 6

Re: Problems with sending mails after manual upgrade to 0.9.8

Dear Zhang,

I found the problem myself - I installed a fresh installation of 0.9.8 to a VM and compared the transports.

    -o smtpd_client_restrictions=reject

needed to be

    -o smtpd_client_restrictions=permit_mynetworks,reject

This fixed everything.

However, thanks for your help and the hint that the problem is in master.cf

Enjoy your coffee !

10 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,160

Re: Problems with sending mails after manual upgrade to 0.9.8

This is exactly what i mentioned in #4 reply. cool

Thanks for your coffee. smile