Current time: 05-06-2024, 12:43 PM Hello There, Guest! (LoginRegister)


Post Reply 
Postfix problem
Author Message
theprincy Offline
Member
***

Posts: 311
Joined: Nov 2008
Reputation: 2
Post: #1
Postfix problem
i have this error

Code:
[b]504 5.5.2 <sedepos>: Helo command rejected: need fully-qualified hostname[/b]

cat /etc/hosts
# 'hosts' file configuration.

127.0.0.1 localhost.localdomain localhost
::ffff:xxx.xxx.xxx.xxx aaaaaa.bbbbbb.ext torino
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
# Auto-generated hostname. Please do not remove this comment.
xxx.xxx.xxx.xxx aaaaa.bbbb.ext torino


hostname aaaaa.bbbb.ext

postconf -n
Code:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_at_myorigin = yes
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
inet_interfaces = all
inet_protocols = all
local_destination_recipient_limit = 1
local_recipient_maps = unix:passwd.byname $alias_database
local_transport = local
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
message_size_limit = 0
mydestination = $myhostname, $mydomain
mydomain = aaaaa.bbbb.ext.local
myhostname = aaaaa.bbbb.ext
mynetworks = 127.0.0.1/32 xxx.xxxx.xxx.xxx/32
mynetworks_style = host
myorigin = $myhostname
recipient_delimiter = +
relayhost =
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP ispCP 1.0.0 OMEGA Managed
smtpd_data_restrictions = reject_multi_recipient_bounce,                               reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,                               permit_sasl_authenticated,                               reject_invalid_helo_hostname,                               reject_non_fqdn_helo_hostname
smtpd_recipient_restrictions = reject_non_fqdn_recipient,                               reject_unknown_recipient_domain,                               permit_mynetworks,                               permit_sasl_authenticated,                               reject_unauth_destination,                               reject_unlisted_recipient,                               check_policy_service inet:127.0.0.1:12525,                               check_policy_service inet:127.0.0.1:60000,                               permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = reject_non_fqdn_sender,                               reject_unknown_sender_domain,                               permit_mynetworks,
transport_maps = hash:/etc/postfix/ispcp/transport
virtual_alias_maps = hash:/etc/postfix/ispcp/aliases
virtual_gid_maps = static:8
virtual_mailbox_base = /var/mail/virtual
virtual_mailbox_domains = hash:/etc/postfix/ispcp/domains
virtual_mailbox_limit = 0
virtual_mailbox_maps = hash:/etc/postfix/ispcp/mailboxes
virtual_minimum_uid = 1000
virtual_transport = virtual
virtual_uid_maps = static:1000

grep -v “^#” /etc/postfix/master.cf

Code:
#                                                                                                                                                                                  
# Postfix master process configuration file.  For details on the format                                                                                                            
# of the file, see the master(5) manual page (command: "man 5 master").                                                                                                            
#                                                                                                                                                                                  
# ==========================================================================                                                                                                        
# service type  private unpriv  chroot  wakeup  maxproc command + args                                                                                                              
#               (yes)   (yes)   (yes)   (never) (100)                                                                                                                              
# ==========================================================================                                                                                                        
smtp      inet  n       -       -       -       -       smtpd                                                                                                                      
#submission inet n       -       -       -       -       smtpd                                                                                                                      
#  -o smtpd_enforce_tls=yes                                                                                                                                                        
#  -o smtpd_sasl_auth_enable=yes                                                                                                                                                    
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject                                                                                                                    
#smtps     inet  n       -       -       -       -       smtpd                                                                                                                      
#  -o smtpd_tls_wrappermode=yes                                                                                                                                                    
#  -o smtpd_sasl_auth_enable=yes                                                                                                                                                    
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject                                                                                                                    
# For AOL-Accounts                                                                                                                                                                  
587       inet  n       -       -       -       -       smtpd                                                                                                                      
        -o smtpd_client_restrictions=permit_sasl_authenticated,reject_unauth_destination                                                                                            
#628      inet  n       -       -       -       -       qmqpd                                                                                                                      
pickup    fifo  n       -       -       60      1       pickup                                                                                                                      
cleanup   unix  n       -       -       -       0       cleanup                                                                                                                    
qmgr      fifo  n       -       n       300     1       qmgr                                                                                                                        
#qmgr     fifo  n       -       -       300     1       oqmgr                                                                                                                      
tlsmgr    unix  -       -       -       1000?   1       tlsmgr                                                                                                                      
rewrite   unix  -       -       -       -       -       trivial-rewrite                                                                                                            
bounce    unix  -       -       -       -       0       bounce                                                                                                                      
defer     unix  -       -       -       -       0       bounce                                                                                                                      
trace     unix  -       -       -       -       0       bounce                                                                                                                      
verify    unix  -       -       -       -       1       verify                                                                                                                      
flush     unix  n       -       -       1000?   0       flush                                                                                                                      
proxymap  unix  -       -       n       -       -       proxymap                                                                                                                    
smtp      unix  -       -       -       -       -       smtp                                                                                                                        
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops                                                                                                        
relay     unix  -       -       -       -       -       smtp                                                                                                                        
        -o fallback_relay=                                                                                                                                                          
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5                                                                                                                            
showq     unix  n       -       -       -       -       showq                                                                                                                      
error     unix  -       -       -       -       -       error                                                                                                                      
discard   unix  -       -       -       -       -       discard                                                                                                                    
local     unix  -       n       n       -       -       local                                                                                                                      
virtual   unix  -       n       n       -       -       virtual                                                                                                                    
lmtp      unix  -       -       -       -       -       lmtp                                                                                                                        
anvil     unix  -       -       -       -       1       anvil                                                                                                                      
scache    unix  -       -       -       -       1       scache                                                                                                                      
# ====================================================================                                                                                                              
# ispCP ω (OMEGA) a Virtual Hosting Control System                                                                                                                                  
#                                                                                                                                                                                  
# @copyright    2001-2006 by moleSoftware GmbH                                                                                                                                      
# @copyright    2006-2008 by ispCP | http://isp-control.net
# @version              SVN: $Id$
# @link                 http://isp-control.net
# @author               ispCP Team
# ====================================================================
# AMaViS => Antivir / Antispam
amavis    unix  -       -       n       -       2       smtp
   -o smtp_data_done_timeout=1200
   -o smtp_send_xforward_command=yes
   -o disable_dns_lookups=yes

localhost:10025 inet  n -       n       -      -        smtpd
   -o content_filter=
   -o local_recipient_maps=
   -o relay_recipient_maps=
   -o smtpd_restriction_classes=
   -o smtpd_client_restrictions=
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o smtpd_override_options=no_address_mappings
   -o mynetworks=127.0.0.0/8
   -o strict_rfc821_envelopes=yes

# ispCP autoresponder
ispcp-arpl unix  -      n       n       -       -       pipe
  flags=O user=vmail argv=/var/www/ispcp/engine/messager/ispcp-arpl-msgr

# TLS - Activate, if TLS is avaiable/used
smtps     inet  n       -       -       -       -       smtpd
   -o smtpd_tls_wrappermode=yes
   -o smtpd_sasl_auth_enable=yes
#   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}retry     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
08-29-2009 07:02 PM
Visit this user's website Find all posts by this user Quote this message in a reply
kilburn Offline
Development Team
*****
Dev Team

Posts: 2,182
Joined: Feb 2007
Reputation: 34
Post: #2
RE: Postfix problem
Do you get this error when sending or when receiving mails?
08-29-2009 07:18 PM
Visit this user's website Find all posts by this user Quote this message in a reply
theprincy Offline
Member
***

Posts: 311
Joined: Nov 2008
Reputation: 2
Post: #3
RE: Postfix problem
ops Tongue when sending the email through management software, web and Outlook works without any problems.

this is configuration xml software
<IndirizzoServerSmtp>mail.domain.ext</IndirizzoServerSmtp>
<IndirizzoServerPopMail>mail.domain.ext</IndirizzoServerPopMail>
<NomeAccount>user@domain.ext</NomeAccount>
<PasswordAccount>password</PasswordAccount>
08-29-2009 07:31 PM
Visit this user's website Find all posts by this user Quote this message in a reply
kilburn Offline
Development Team
*****
Dev Team

Posts: 2,182
Joined: Feb 2007
Reputation: 34
Post: #4
RE: Postfix problem
Your management software is probably not identifying itself. Please paste the whole set of mail.log lines generated when you try to send one of this e-mails so we can further diagnose.
08-29-2009 07:53 PM
Visit this user's website Find all posts by this user Quote this message in a reply
theprincy Offline
Member
***

Posts: 311
Joined: Nov 2008
Reputation: 2
Post: #5
RE: Postfix problem
Aug 29 11:50:20 torino postfix/smtpd[32505]: connect from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]
Aug 29 11:50:20 torino postfix/smtpd[32505]: NOQUEUE: reject: RCPT from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]: 504 5.5.2 <sedepos>: Helo command rejected: need fully-qualified hostname; from=<sedepos@vallejosina.it> to=<peveragno@vallejosina.it> proto=SMTP helo=<sedepos>
Aug 29 11:50:21 torino postfix/smtpd[32505]: disconnect from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]
Aug 29 11:50:21 torino postfix/smtpd[32505]: connect from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]
Aug 29 11:50:21 torino postfix/smtpd[32505]: NOQUEUE: reject: RCPT from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]: 504 5.5.2 <sedepos>: Helo command rejected: need fully-qualified hostname; from=<sedepos@vallejosina.it> to=<peveragno@vallejosina.it> proto=SMTP helo=<sedepos>
Aug 29 11:50:21 torino postfix/smtpd[32505]: disconnect from host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192]
08-29-2009 07:53 PM
Visit this user's website Find all posts by this user Quote this message in a reply
kilburn Offline
Development Team
*****
Dev Team

Posts: 2,182
Joined: Feb 2007
Reputation: 34
Post: #6
RE: Postfix problem
Definitely, your management software is not authenticating itself at all. Otherwise there should be an extra log line between the first two you pasted, looking something like this:
Code:
Aug 29 11:50:20 torino postfix/smtpd[32505]: 2CE22170C99: client=host192-203-static.55-88-b.business.telecomitalia.it[88.55.203.192], sasl_method=LOGIN, sasl_username=sedepos@vallejosina.it

So it's nothing related to ispcp or postfix at all...
(This post was last modified: 08-29-2009 09:50 PM by kilburn.)
08-29-2009 09:49 PM
Visit this user's website Find all posts by this user Quote this message in a reply
theprincy Offline
Member
***

Posts: 311
Joined: Nov 2008
Reputation: 2
Post: #7
RE: Postfix problem
is a postfix configuration problem , but I can not understand why not go ,
the problem is not recognized hostnam


in ispcp manage ips i have
151.1.153.27 test.bitrunners.com test.bitrunners.com venet0:0 N/D

in ispcp.conf i have

SERVER_HOSTNAME = admin.solintec.net
BASE_SERVER_IP = 151.1.153.27
BASE_SERVER_VHOST = admin.solintec.net

hostname
torino.solintec.net

In my opinion, these different settings cause problems. now manage IP as I edit the data?
08-29-2009 11:37 PM
Visit this user's website Find all posts by this user Quote this message in a reply
kilburn Offline
Development Team
*****
Dev Team

Posts: 2,182
Joined: Feb 2007
Reputation: 34
Post: #8
RE: Postfix problem
Trust me, it's not a postfix problem. The problem is that, as your management software doesn't identify as a user, postfix applies the usual checks it does when an external mailer tries to send mail to it.

One of this checks is a hostname check (all external mailers MUST have valid hostnames, and use them in the "EHLO" smtp command). Your management software uses "sedepos" as hostname, which obviously is not a fqdn. Therefore, postfix rejects this delivery attempt with a "Helo command rejected: need fully-qualified hostname" error.

The easiest and safest way to correct this is making the management software identify properly as a user. There are other options though, such as deactivating this hostname check in postfix. To do this, remove "reject_non_fqdn_sender," from the "smtpd_sender_restrictions" in /etc/postfix/main.cf
08-30-2009 03:23 AM
Visit this user's website Find all posts by this user Quote this message in a reply
theprincy Offline
Member
***

Posts: 311
Joined: Nov 2008
Reputation: 2
Post: #9
RE: Postfix problem
I solved by changing in this way


# SASL paramters
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options =
smtpd_sasl_local_domain =
broken_sasl_auth_clients = no

smtpd_helo_required = no

smtpd_helo_restrictions = permit_mynetworks,
permit

smtpd_sender_restrictions = permit_mynetworks,
permit

smtpd_recipient_restrictions = permit_mynetworks,
reject_unauth_destination

smtpd_data_restrictions = reject_multi_recipient_bounce,
reject_unauth_pipelining


thanks for the tipSmile
08-30-2009 09:17 AM
Visit this user's website Find all posts by this user Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)