<p>Hi,type 'sudo gedit /etc/posfix/relay_recipients' and add the relevant email address(es) to the list followed by a space and 'ok' e.g '<a href="mailto:example@example.com">example@example.com</a> ok'.Save the file then type 'sudo postmap /etc/postfix/relay_recipients' .That's it! Enjoy your emails! </p>
<p>On 23 Jan 2012 13:40, "Rumbidzayi Gadhula" <<a href="mailto:rumbiles@gmail.com">rumbiles@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br><div class="gmail_quote"><br>I have a postfix email installation on linux. I can send emails to other domains and my ISP relays the emails. However I get relay access denied messages when I send emails to my domain. I get the following error message, <br>
<br><div><b>Delivery to the following recipient failed permanently:<br><br></b>
</div><b> </b>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal"><b><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:blue"><a href="mailto:test@yyyyy.ac.zw" target="_blank">test@yyyyy.ac.zw</a></span></b><span style="font-size:12.0pt;font-family:"Times New Roman","serif""></span></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal"><b><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><br>
Technical details of permanent failure:</span></b><span style="font-size:12.0pt;font-family:"Times New Roman","serif""></span></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">Google tried to deliver your message, but it was
rejected by the recipient domain. We recommend contacting the other email
provider for further information about the cause of this error. The error that
the other server returned was: 550 550 unknown user <span style="color:blue"><a href="mailto:test@yyyyy.ac.zw" target="_blank">test@yyyyy.ac.zw</a></span>(state
17)</span></b><span style="font-size:12pt;line-height:115%;font-family:"Times New Roman","serif""><br>
<br>
On the firewall interface I am getting the following error</span></p><p class="MsoNormal"><span style="font-size:12pt;line-height:115%;font-family:"Times New Roman","serif""><br></span></p><p class="MsoNormal">
<span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">
<b>Jan 18 15:54:57 xxxxx-SERVER postfix/smtpd[31115]: NOQUEUE: reject: RCPT
from <span style="color:blue"><a href="http://ssss.ttttttt.com" target="_blank">ssss.ttttttt.com</a></span>[aaa.bbb.ccc.49]: 554
5.7.1 <<span style="color:blue"><a href="mailto:test@yyyyy.ac.zw" target="_blank">test@yyyyy.ac.zw</a></span>>: Relay access
denied; from=<> to=<<span style="color:blue"><a href="mailto:test@yyyyy.ac.zw" target="_blank">test@yyyyy.ac.zw</a></span>>
proto=SMTP helo=<<span style="color:blue"><a href="http://ssss.ttttttt.com" target="_blank">ssss.ttttttt.com</a></span>></b></span></p>
<b><span style="display:block;padding-left:6em"><span></span></span></b><br><br>I have two email servers, 192.168.1.2 hosting xxxxx domain, works fine and 192.168.1.10 with the yyyyy domain failing to receive emails. I am using the same ISP for routing emails. The xxxxx domain is the one registered usng the public address that I am also using for domain yyyyy. How do I configure my firewall to direct traffic for yyyyy domain to the 192.168.1.10 server? See my current firewall configuration below<br>
<br>PIX Version 6.3(3)<br>interface ethernet0 auto<br>interface ethernet1 100full<br>nameif ethernet0 outside security0<br>nameif ethernet1 inside security100<br>enable password Ya33doEYpauqoRPP encrypted<br>passwd Ya33doEYpauqoRPP encrypted<br>
hostname xxxxxA<br>domain-name <a href="http://xxxxx.co.zw" target="_blank">xxxxx.co.zw</a><br>fixup protocol dns maximum-length 512<br>fixup protocol ftp 21<br>no fixup protocol h323 h225 1720<br>no fixup protocol h323 ras 1718-1719<br>
fixup protocol http 80<br>fixup protocol rsh 514<br>fixup protocol rtsp 554<br>no fixup protocol sip 5060<br>no fixup protocol sip udp 5060<br>fixup protocol skinny 2000<br>fixup protocol smtp 25<br>fixup protocol sqlnet 1521<br>
fixup protocol tftp 69<br>names <br>name 192.168.1.3 hotspot<br>name 192.168.1.2 xxxxx<br>name 192.168.1.10 yyyyy<br>access-list inbound deny icmp any any <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq www <br>
access-list inbound permit tcp any host aaa.bbb.ddd.14 eq smtp <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 8080 <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq domain <br>access-list inbound permit udp any host aaa.bbb.ddd.14 eq domain <br>
access-list inbound permit tcp any host aaa.bbb.ddd.14 eq ftp <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 4848 <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 81 <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 3000 <br>
access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 8000 <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 8005 <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 8443 <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 8009 <br>
access-list inbound permit tcp any host aaa.bbb.ddd.14 eq https <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq ssh <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 8081 <br>access-list inbound permit tcp any host aaa.bbb.ddd.14 eq 8082 <br>
access-list 101 permit ip any any <br>pager lines 24<br>mtu outside 1500<br>mtu inside 1500<br>ip address outside aaa.bbb.ddd.14 255.255.255.252<br>ip address inside 192.168.1.1 255.255.255.0<br>ip audit info action alarm<br>
ip audit attack action alarm<br>pdm location 192.168.1.6 255.255.255.255 inside<br>pdm logging informational 100<br>pdm history enable<br>arp timeout 14400<br>global (outside) 10 interface<br>nat (inside) 10 0.0.0.0 0.0.0.0 0 0<br>
alias (inside) xxxxx aaa.bbb.ddd.14 255.255.255.255<br>static (inside,outside) tcp interface smtp xxxxx smtp netmask 255.255.255.255 0 0 <br>static (inside,outside) tcp interface www xxxxx www netmask 255.255.255.255 0 0 <br>
static (inside,outside) tcp interface 8080 xxxxx 8080 netmask 255.255.255.255 0 0 <br>static (inside,outside) tcp interface ftp xxxxx ftp netmask 255.255.255.255 0 0 <br>static (inside,outside) tcp interface 81 xxxxx 81 netmask 255.255.255.255 0 0 <br>
static (inside,outside) tcp interface 4848 xxxxx 4848 netmask 255.255.255.255 0 0 <br>access-group inbound in interface outside<br>route outside 0.0.0.0 0.0.0.0 aaa.bbb.ddd.13 1<br>route inside 192.168.0.0 255.255.255.0 hotspot 1<br>
timeout xlate 3:00:00<br>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00<br>timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00<br>timeout uauth 0:05:00 absolute<br>aaa-server TACACS+ protocol tacacs+ <br>
aaa-server RADIUS protocol radius <br>aaa-server LOCAL protocol local <br>aaa authentication telnet console LOCAL<br>aaa authentication http console LOCAL<br>http server enable<br>http 192.168.1.0 255.255.255.0 inside<br>
no snmp-server location<br>no snmp-server contact<br>snmp-server community public<br>no snmp-server enable traps<br>floodguard enable<br>telnet aaa.bbb.ddd.12 255.255.255.252 outside<br>telnet 192.168.1.0 255.255.255.0 inside<br>
telnet timeout 50<br>ssh timeout 60<br>console timeout 0<br>dhcpd dns aaa.bbb.ccc.1 aaa.bbb.ccc.4<br>username admin password fuqXsBJRQmphzmcC encrypted privilege 15<br>terminal width 80<br>Cryptochecksum:2d70437ecde3ce671db45b421f97351f<br>
: end <br><br><br>Regards,<br><br>R Gadhula<br clear="all">
<br>
</div><br>-- <br><i>Senior Systems Administrator<br>UZCHS- NECTAR<br>Ward C10, Parirenyatwa Hospital<br>Mazoe St, Avondale<br>Harare<br>Tel: +263<span style="font-family:Arial" lang="en-US">772 148 889/890 x 320<br>Cell:0772588210</span></i><span lang="en-ZW"></span>
<br>
<br>_______________________________________________<br>
afnog mailing list<br>
<a href="http://afnog.org/mailman/listinfo/afnog" target="_blank">http://afnog.org/mailman/listinfo/afnog</a><br></blockquote></p>