Thanks for the hints on the TLS config. I had not even looked at that as those
are the default values.
Can you explain what you mean by "All valid addresses in "example.com" need to
be rewritten to some other domain"? I only have 1 domain.
I am using postfix to forward email to virtual aliases only. Below are the
specific changes to the postfix config files that I've made.
You asked why I made a change to the virtual alias file, because I was just
following instructions for setting up an auto responder. If there is a better
way to do this please let me know.
main.cf
========
relayhost = [relay.dnsexit.com]:2525
transport_maps = hash:/etc/postfix/transport
virtual_alias_domains = mydomain.com
virtual_alias_maps = hash:/etc/postfix/lists/virtual
master.cf
==========
inforeply unix - n n - - pipe
flags=F user=autoresp argv=/etc/postfix/inforeply.pl ${sender}
transport
==========
[email protected] inforeply:
virtual
========
[email protected] [email protected]
-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of Viktor Dukhovni
Sent: Wednesday, May 21, 2014 7:34 PM
To: [email protected]
Subject: Re: Transport Not Working
On Thu, May 22, 2014 at 02:12:59AM +0000, Wesley Witt wrote:
> 4: add the entry to the virtual alias file
What entry? Why?
> What I'm seeing is an entry in syslog saying "User unknown in virtual
> alias table". It is looking for the address that is defined in the
> transport file. It appears that postfix is not looking in the
> transport file at all and rejecting the email.
Addresses in virtual alias domains are undeliverable unless aliased to a real
domain. Transport overrides can't help. Either the domain should not be a
virtual alias domain, or you need to rewrite the address to a real domain
before adding transport overrides (for the rewritten address).
> virtual_alias_domains = example.com
> virtual_alias_maps = hash:/etc/postfix/lists/virtual
All valid addresses in "example.com" need to be rewritten to some other domain.
> smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
> smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
Why would you do that? Surely you can generate a new cert/key pair:
http://www.postfix.org/TLS_README.html#quick-start
also recommended:
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
> smtpd_use_tls = yes
smtpd_tls_security_level = may
> smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
Not much use without also:
smtp_tls_security_level = may
smtp_tls_loglevel = 1
--
Viktor.
