Postfix Address Verification

[Drew Marshall]

On Fri, June 29, 2007 04:57, Seamus Allan wrote:
> I even made a point of not top posting. Guess I can't make *everyone*
> happy.

You are so right :-) The only reason I asked was that my quotes of yours
were so mangled by my web mail client they were almost not woth including.
No biggie really (To me!)

> I spent the good part of a day investigating logs and found almost
> nothing useful. I was expecting to see a point where the main (hub)
> mailserver started rejecting the (Mailscanner) Gateways probes to check
> whether a mailbox existed, as the probes are only Helo, Mail from, rcpt
> to, then a disconnect.
>
> Anywho, here are some log snippets for you to gander at.
>
> This is for a domain where is worked:
> Jun 28 02:49:24 gatekeeper2 postfix/smtpd[8702]: NOQUEUE: reject: RCPT
> from c175-80.icpnet.pl[85.221.175.80]: 550 <user at validdomain.com>:
> Recipient address rejected: undeliverable address: host
> 192.168.1.225[192.168.1.225] said: 550 Requested action not taken:
> mailbox unavailable or not local (in reply to RCPT TO command);
> from=<agassy at gopitts.com> to=<user at validdomain.com> proto=SMTP
> helo=<144209448>

That looks fine

>
> And this is for one where is didn't:
> Jun 28 02:49:28 gatekeeper2 postfix/smtpd[8700]: NOQUEUE: reject: RCPT
> from unknown[80.99.7.4]: 450 <user at validdomain.com>: Recipient address
> rejected: Domain not found; from=<jahka at place.com>
> to=<user at validdomain.com> proto=ESMTP helo=<aram.chello.hu>

This looks like a DNS problem. Are you running a cacheing DNS server on
this box? Postfix is rejecting with a temporary failure (450) as it is
having what it thinks could be a short term problem. I assume you have set
the next hop in the transport map file, have you done this using a name
record or IP address? i.e. in the file does it say:

validdomain  relay:internal.host

or

validdomain  relay:[192.168.1.225]

Just to make sure this isn't Postfix logging a slight red herring, can you
also let me know what you have under:

smtpd_client_restrictions
smtpd_sender_restrictions

in main.cf

The other thing to check is the logs of the internal machine (Exchange?),
just in case there is anything obvious there.

Drew


-- 
In line with our policy, this message has been scanned 
for viruses and dangerous content by the Technology Tiger MailScanner.
Further information can be found at www.technologytiger.net/policy

Technology Tiger Limited is registered in Scotland with registration number: 310997
Registered Office 55-57 West High Street Inverurie AB51 3QQ