On Tue, Apr 22, 2014 at 03:53:02PM -0400, James B. Byrne wrote: > On Tue, April 22, 2014 15:14, Wietse Venema wrote: > > James B. Byrne: > >> usr/lib64/ruby/2.0.0/net/smtp.rb:950:in `check_response': 554 5.7.1 > >> <[email protected]>: Sender address rejected: Access denied > >> (Net::SMTPFatalError). > >> > >> In master.cf I have this: > >> > >> submission inet n - n - - smtpd -v > >> -o smtpd_tls_security_level=encrypt > >> -o smtpd_sasl_auth_enable=yes > >> -o smtpd_client_restrictions=permit_sasl_authenticated,reject > > > > This requires SASL authentication. If the client is local, you may > > want to use > > > > -o > > smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject > > I did exactly as you have written above: > > /etc/postfix/master.cf > . . . > -o > smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject > . . . > > and received this error: > > /usr/lib64/ruby/2.0.0/net/smtp.rb:950:in `check_response': 554 5.7.1 > <[email protected]>: Sender address rejected: Access denied > (Net::SMTPFatalError).
In your OP you also had this line: -o smtpd_sender_restrictions=permit_sasl_authenticated,permit_tls_clientcerts,reject Which of those three restrictions are met? 1. permit_sasl_authenticated, no, the client did not AUTH 2. permit_tls_clientcerts, no, you didn't even check the certs 3. reject Sender address rejected: Access denied -- http://rob0.nodns4.us/ Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:
