On Wed, Jul 29, 2009 at 2:35 PM, Carlos Williams<carlosw...@gmail.com> wrote: > I am checking my mail queue and I have noticed that mail in my queue > is stuck with the following error: > > AA83077925B 1508 Sun Jul 26 10:22:31 rheinl...@simulationinformation.com > (host mx.dr1.us.army.mil[143.69.243.34] said: 451 #4.1.8 Domain of > sender address <rheinl...@simulationinformation.com> does not resolve > (in reply to MAIL FROM command)) > james.to...@us.army.mil > > 4094D77921F 1520 Sun Jul 26 10:22:31 rheinl...@simulationinformation.com > (host mx.dr1.us.army.mil[143.69.243.34] said: 451 #4.1.8 Domain of > sender address <rheinl...@simulationinformation.com> does not resolve > (in reply to MAIL FROM command)) > br...@omitted_domain.com > > 2EF15779273 1503 Sun Jul 26 10:22:32 rheinl...@simulationinformation.com > (host mx.ps1.us.army.mil[143.69.251.34] said: 451 #4.1.8 Domain of > sender address <rheinl...@simulationinformation.com> does not resolve > (in reply to MAIL FROM command)) > tho...@omitted_domain.com > > 78BCE779279 1499 Sun Jul 26 10:22:31 rheinl...@simulationinformation.com > (host mx.dr1.us.army.mil[143.69.243.34] said: 451 #4.1.8 Domain of > sender address <rheinl...@simulationinformation.com> does not resolve > (in reply to MAIL FROM command)) > fr...@omitted_domain.com > > My domain is not the domain I omitted from the log entries and I > checked /var/log/maillog to find the same error in my mail logs. I am > concerned as to why my Postfix server is handling mail for the omitted > domain. That domain is a .mil domain which has nothing to do with my > Postfix server. > > ***Postconf -n*** > > [r...@mail ~]# postconf -n > alias_database = hash:/etc/aliases > alias_maps = hash:/etc/aliases > broken_sasl_auth_clients = yes > command_directory = /usr/sbin > config_directory = /etc/postfix > content_filter = amavisfeed:[127.0.0.1]:10024 > daemon_directory = /usr/libexec/postfix > home_mailbox = mail/ > html_directory = no > inet_interfaces = all > mail_owner = postfix > mailq_path = /usr/bin/mailq.postfix > manpage_directory = /usr/share/man > mydestination = $myhostname, $mydomain, mail.$mydomain > mydomain = iamghost.com > myhostname = mail.iamghost.com > mynetworks = $config_directory/mynetworks > myorigin = $mydomain > newaliases_path = /usr/bin/newaliases.postfix > queue_directory = /var/spool/postfix > relay_domains = > sendmail_path = /usr/sbin/sendmail.postfix > setgid_group = postdrop > smtpd_banner = $myhostname ESMTP > smtpd_delay_reject = yes > smtpd_helo_required = yes > smtpd_helo_restrictions = permit_mynetworks, > permit_sasl_authenticated, reject_non_fqdn_helo_hostname, > reject_invalid_helo_hostname, permit > smtpd_recipient_restrictions = permit_mynetworks, > permit_sasl_authenticated, reject_unauth_pipelining, > reject_non_fqdn_recipient, reject_unknown_recipient_domain, > reject_unauth_destination, reject_unlisted_recipient, > check_policy_service unix:postgrey/socket, check_sender_access > hash:/etc/postfix/sender_access, reject_rbl_client > zen.spamhaus.org, reject_rbl_client bl.spamcop.net, permit > smtpd_sasl_auth_enable = yes > smtpd_sasl_path = private/auth > smtpd_sasl_security_options = noanonymous > smtpd_sasl_type = dovecot > smtpd_sender_restrictions = permit_mynetworks, > permit_sasl_authenticated, reject_non_fqdn_sender, > reject_unknown_sender_domain, > reject_unknown_reverse_client_hostname, permit > smtpd_tls_CAfile = /etc/ssl/intermediate.crt > smtpd_tls_auth_only = yes > smtpd_tls_cert_file = /etc/ssl/mail.crt > smtpd_tls_key_file = /etc/ssl/mail.key > smtpd_tls_loglevel = 1 > smtpd_tls_security_level = may > smtpd_tls_session_cache_database = btree:/var/spool/postfix/smtpd_tls_cache > smtpd_tls_session_cache_timeout = 3600s > tls_random_source = dev:/dev/urandom > unknown_local_recipient_reject_code = 550 > > Can someone please help me understand why I am getting this several of > the same entries showing up in my log entries? I don't think the > sender is a spammer and this might be legitimate email but I can't > understand why it's flowing through my SMTP server... > > - Carlos >
Your configuration allows 'mynetworks' and sasl authenticated senders to send mail from/to anywhere. These are the likely sources of the messages in question. Your postfix logs will show you exactly where the message came from. -Aaron
