smtp relay access denied

[afterhours]

Folks,

My posts previous to this one have been minor issues. What I’ve actually been trying to track down and resolve is a mail server that would not accept in-bound (SMTP) traffic.

The mail server has been set up for POP accounts, inbound and outbound SMTP traffic, and for the purposes of our testing, left wide open. (Please spare me the lectures on open relays — I need to get this working before I tighten the security and it is never left running when we aren’t testing it here now.)

We’ve created several accounts with the workgroup manager and enabled their mail (POP only until we fix things).

When we send mail to the account, it bounces. The SMTP logs reveal:

Nov 3 16:21:41 mail postfix/smtpd[20742]: connect from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]
Nov 3 16:21:41 mail postfix/smtpd[20742]: C3D86A9150: client=ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]
Nov 3 16:21:41 mail postfix/smtpd[20742]: C3D86A9150: reject: RCPT from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]: 554 : Relay access denied; from= to= proto=ESMTP helo=
Nov 3 16:21:47 mail postfix/smtpd[20742]: disconnect from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]

As I mentioned, the mail settings have smtp and pop enabled. No filters are employed (well, we keep trying to turn off the RBL entry we made, but that UI issue where the box doesn’t uncheck doesn’t worry me — we aren’t getting blacklisted by spamhaus.org).

From the logs, I would have thought we had other filters in play blocking inbound. Messages to the account bounce back with a 554:

<<< 554 : Relay access denied
554 5.0.0 Service unavailable

Should I be looking at the config files themselves and not the UI?

[afterhours]

[QUOTE BY= MacTroll] Convolute the addresses if you want, but please leave them in the logs.

1. How have you attempted to make the server an open relay?
2. What domains do you have set up on the server?[/QUOTE]

Odd — I didn’t strip out the addresses in the post. Naturally, we have to protect our customer’s identity, but they weren’t stripped initially ?!? Perhaps Geeklog does it if text/html mode is toggled.

1. Yes, I opened everything up on the server, yet it won’t accept inbound.
2. mail.domain.com (the same as the MX record in the DNS tables.

I’ll repost the log:

Nov 3 16:21:41 mail postfix/smtpd[20742]: connect from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]
Nov 3 16:21:41 mail postfix/smtpd[20742]: C3D86A9150: client=ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]
Nov 3 16:21:41 mail postfix/smtpd[20742]: C3D86A9150: reject: RCPT from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]: 554 : Relay access denied; from= to= proto=ESMTP helo=
Nov 3 16:21:47 mail postfix/smtpd[20742]: disconnect from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]

where domain.com is the customer’s domain

[afterhours]

Yep… our fried geeklog strips out the addresses. One more time with text mode on:

Nov 3 16:21:41 mail postfix/smtpd[20742]: connect from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]
Nov 3 16:21:41 mail postfix/smtpd[20742]: C3D86A9150: client=ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]
Nov 3 16:21:41 mail postfix/smtpd[20742]: C3D86A9150: reject: RCPT from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]: 554 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ms-smtp-03-eri0.southeast.rr.com>
Nov 3 16:21:47 mail postfix/smtpd[20742]: disconnect from ms-smtp-03-lbl.southeast.rr.com[24.25.9.102]

[Author]

Posts