+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Support Area (/forum-30.html)
+--- Forum: Usage (/forum-34.html)
+--- Thread: Postfix problem (/thread-7696.html)
Postfix problem - theprincy - 08-29-2009 07:02 PM
i have this error
Code:
[b]504 5.5.2 <sedepos>: Helo command rejected: need fully-qualified hostname[/b]cat /etc/hosts
# 'hosts' file configuration.
127.0.0.1 localhost.localdomain localhost
::ffff:xxx.xxx.xxx.xxx aaaaaa.bbbbbb.ext torino
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
# Auto-generated hostname. Please do not remove this comment.
xxx.xxx.xxx.xxx aaaaa.bbbb.ext torino
hostname aaaaa.bbbb.ext
postconf -n
Code:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_at_myorigin = yes
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
inet_interfaces = all
inet_protocols = all
local_destination_recipient_limit = 1
local_recipient_maps = unix:passwd.byname $alias_database
local_transport = local
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
message_size_limit = 0
mydestination = $myhostname, $mydomain
mydomain = aaaaa.bbbb.ext.local
myhostname = aaaaa.bbbb.ext
mynetworks = 127.0.0.1/32 xxx.xxxx.xxx.xxx/32
mynetworks_style = host
myorigin = $myhostname
recipient_delimiter = +
relayhost =
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP ispCP 1.0.0 OMEGA Managed
smtpd_data_restrictions = reject_multi_recipient_bounce, reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname
smtpd_recipient_restrictions = reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unlisted_recipient, check_policy_service inet:127.0.0.1:12525, check_policy_service inet:127.0.0.1:60000, permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = reject_non_fqdn_sender, reject_unknown_sender_domain, permit_mynetworks,
transport_maps = hash:/etc/postfix/ispcp/transport
virtual_alias_maps = hash:/etc/postfix/ispcp/aliases
virtual_gid_maps = static:8
virtual_mailbox_base = /var/mail/virtual
virtual_mailbox_domains = hash:/etc/postfix/ispcp/domains
virtual_mailbox_limit = 0
virtual_mailbox_maps = hash:/etc/postfix/ispcp/mailboxes
virtual_minimum_uid = 1000
virtual_transport = virtual
virtual_uid_maps = static:1000grep -v “^#” /etc/postfix/master.cf
Code:
#
# Postfix master process configuration file. For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - - - - smtpd
#submission inet n - - - - smtpd
# -o smtpd_enforce_tls=yes
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#smtps inet n - - - - smtpd
# -o smtpd_tls_wrappermode=yes
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
# For AOL-Accounts
587 inet n - - - - smtpd
-o smtpd_client_restrictions=permit_sasl_authenticated,reject_unauth_destination
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - - 300 1 oqmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - - - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - - - - smtp
-o fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
# ====================================================================
# ispCP ω (OMEGA) a Virtual Hosting Control System
#
# @copyright 2001-2006 by moleSoftware GmbH
# @copyright 2006-2008 by ispCP | http://isp-control.net
# @version SVN: $Id$
# @link http://isp-control.net
# @author ispCP Team
# ====================================================================
# AMaViS => Antivir / Antispam
amavis unix - - n - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
localhost:10025 inet n - n - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o smtpd_override_options=no_address_mappings
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
# ispCP autoresponder
ispcp-arpl unix - n n - - pipe
flags=O user=vmail argv=/var/www/ispcp/engine/messager/ispcp-arpl-msgr
# TLS - Activate, if TLS is avaiable/used
smtps inet n - - - - smtpd
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}retry unix - - - - - error
retry unix - - - - - errorRE: Postfix problem - kilburn - 08-29-2009 07:18 PM
Do you get this error when sending or when receiving mails?
RE: Postfix problem - theprincy - 08-29-2009 07:31 PM
ops
when sending the email through management software, web and Outlook works without any problems.this is configuration xml software
<IndirizzoServerSmtp>mail.domain.ext</IndirizzoServerSmtp>
<IndirizzoServerPopMail>mail.domain.ext</IndirizzoServerPopMail>
<NomeAccount>user@domain.ext</NomeAccount>
<PasswordAccount>password</PasswordAccount>
RE: Postfix problem - kilburn - 08-29-2009 07:53 PM
Your management software is probably not identifying itself. Please paste the whole set of mail.log lines generated when you try to send one of this e-mails so we can further diagnose.
RE: Postfix problem - theprincy - 08-29-2009 07:53 PM
Aug 29 11:50:20 torino postfix/smtpd[32505]: connect from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]
Aug 29 11:50:20 torino postfix/smtpd[32505]: NOQUEUE: reject: RCPT from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]: 504 5.5.2 <sedepos>: Helo command rejected: need fully-qualified hostname; from=<sedepos@vallejosina.it> to=<peveragno@vallejosina.it> proto=SMTP helo=<sedepos>
Aug 29 11:50:21 torino postfix/smtpd[32505]: disconnect from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]
Aug 29 11:50:21 torino postfix/smtpd[32505]: connect from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]
Aug 29 11:50:21 torino postfix/smtpd[32505]: NOQUEUE: reject: RCPT from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]: 504 5.5.2 <sedepos>: Helo command rejected: need fully-qualified hostname; from=<sedepos@vallejosina.it> to=<peveragno@vallejosina.it> proto=SMTP helo=<sedepos>
Aug 29 11:50:21 torino postfix/smtpd[32505]: disconnect from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]
RE: Postfix problem - kilburn - 08-29-2009 09:49 PM
Definitely, your management software is not authenticating itself at all. Otherwise there should be an extra log line between the first two you pasted, looking something like this:
Code:
Aug 29 11:50:20 torino postfix/smtpd[32505]: 2CE22170C99: client=host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192], sasl_method=LOGIN, sasl_username=sedepos@vallejosina.itSo it's nothing related to ispcp or postfix at all...
RE: Postfix problem - theprincy - 08-29-2009 11:37 PM
is a postfix configuration problem , but I can not understand why not go ,
the problem is not recognized hostnam
in ispcp manage ips i have
151.1.153.27 test.bitrunners.com test.bitrunners.com venet0:0 N/D
in ispcp.conf i have
SERVER_HOSTNAME = admin.solintec.net
BASE_SERVER_IP = 151.1.153.27
BASE_SERVER_VHOST = admin.solintec.net
hostname
torino.solintec.net
In my opinion, these different settings cause problems. now manage IP as I edit the data?
RE: Postfix problem - kilburn - 08-30-2009 03:23 AM
Trust me, it's not a postfix problem. The problem is that, as your management software doesn't identify as a user, postfix applies the usual checks it does when an external mailer tries to send mail to it.
One of this checks is a hostname check (all external mailers MUST have valid hostnames, and use them in the "EHLO" smtp command). Your management software uses "sedepos" as hostname, which obviously is not a fqdn. Therefore, postfix rejects this delivery attempt with a "Helo command rejected: need fully-qualified hostname" error.
The easiest and safest way to correct this is making the management software identify properly as a user. There are other options though, such as deactivating this hostname check in postfix. To do this, remove "reject_non_fqdn_sender," from the "smtpd_sender_restrictions" in /etc/postfix/main.cf
RE: Postfix problem - theprincy - 08-30-2009 09:17 AM
I solved by changing in this way
# SASL paramters
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options =
smtpd_sasl_local_domain =
broken_sasl_auth_clients = no
smtpd_helo_required = no
smtpd_helo_restrictions = permit_mynetworks,
permit
smtpd_sender_restrictions = permit_mynetworks,
permit
smtpd_recipient_restrictions = permit_mynetworks,
reject_unauth_destination
smtpd_data_restrictions = reject_multi_recipient_bounce,
reject_unauth_pipelining
thanks for the tip
