Tag: Domains

I have multiple domains on one server handled by postfix, dovecot and ViMbAdmin. It came to my attention that one of the domains no longer receives emails, but other emails work fine.

The domain/mailbox that’s failing is for domain agilob.net and I can’t understand why:

Jul  1 10:58:44 queennode postfix/smtpd(7986): connect from mail-db8eur05on2048.outbound.protection.outlook.com(40.107.20.48)
Jul  1 10:58:44 queennode postfix/smtpd(7986): Anonymous TLS connection established from mail-db8eur05on2048.outbound.protection.outlook.com(40.107.20.48): TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul  1 10:58:44 queennode postfix/smtpd(7986): NOQUEUE: reject: RCPT from mail-db8eur05on2048.outbound.protection.outlook.com(40.107.20.48): 454 4.7.1 <myemail@agilob.net>: Relay access denied; from=<sender@outlook.com> to=<myemail@agilob.net> proto=ESMTP helo=<EUR05-DB8-obe.outbound.protection.outlook.com>
Jul  1 10:58:44 queennode postfix/smtpd(7986): disconnect from mail-db8eur05on2048.outbound.protection.outlook.com(40.107.20.48) ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6

postconf -n

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
compatibility_level = 2
inet_interfaces = all
inet_protocols = ipv4 ipv6
message_size_limit = 20240000
milter_default_action = accept
milter_protocol = 6
mydestination = localhost
mydomain = agilob.net
myhostname = agilob.net
mynetworks = 127.0.0.0/8 (::ffff:127.0.0.0)/104 (::1)/128 (2001:41d0:8:7525::1) 37.59.58.37
myorigin = $mydomain
policy-spf_time_limit = 7200s
queue_directory = /home/spool/postfix
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_relay_restrictions = permit_mynetworks,permit_sasl_authenticated,defer_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_tls_cert_file = /etc/letsencrypt/live/agilob.net/fullchain.pem
smtpd_tls_key_file = /etc/letsencrypt/live/agilob.net/privkey.pem
smtpd_tls_loglevel = 1
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
virtual_alias_maps = mysql:/etc/postfix/mysql/virtual_alias_maps.cf
virtual_gid_maps = static:5000
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = mysql:/etc/postfix/mysql/virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql/virtual_mailbox_maps.cf
virtual_transport = lmtp:unix:private/dovecot-lmtp
virtual_uid_maps = static:5000

relevant parts of master.cf:

smtp       inet  n       -       y       -       -       smtpd
    -o content_filter=spamassassin
#    -o smtpd_tls_cert_file=/etc/pki/tls/domain.crt
#    -o smtpd_tls_key_file=/etc/pki/tls/domain.key

#  -o syslog_name=postfix/submission
  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
  -o smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,defer_unauth_destination
  -o smtpd_relay_restrictions=permit_mynetworks,permit_sasl_authenticated,defer_unauth_destination
#  -o milter_macro_daemon_name=ORIGINATING
submission inet n - n - - smtpd
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_sasl_type=dovecot
  -o smtpd_sasl_path=private/auth
  -o smtpd_sasl_security_options=noanonymous
  -o virtual_mailbox_maps=mysql:/etc/postfix/mysql/virtual_mailbox_maps.cf
  -o smtpd_sasl_local_domain=$myhostname
#  -o smtpd_sender_login_maps=mysql:/etc/postfix/mysql/virtual_alias_maps.cf
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#    -o smtpd_tls_cert_file=/etc/pki/tls/domain.crt
#    -o smtpd_tls_key_file=/etc/pki/tls/domain.key
#  -o syslog_name=postfix/smtps
  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#628       inet  n       -       -       -       -       qmqpd
smtps      inet  n       -       -       -       -       smtpd
  -o syslog_name=postfix/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_relay_restrictions=permit_mynetworks,permit_sasl_authenticated,defer_unauth_destination
  -o smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,defer_unauth_destination
  -o smtpd_sasl_type=dovecot
  -o smtpd_sasl_path=private/auth
  -o smtpd_recipient_restrictions=permit_mynetworks


...

ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}
policy-spf  unix  -       n       n       -       0       spawn
     user=nobody argv=/usr/bin/policyd-spf
spamassassin unix -     n       n       -       -       pipe
     user=debian-spamd argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}