Re: [AMaViS-user] amavis[xx]: (!)DENIED ACCESS from IP x.x.x.43,

Thanks mouss, I'll try that.

Regarding the other notes, the smtp/lmtp are there
because I was following the amavis install guide.
Regarding the mynetworks, etc, that's all from me
trying different things trying to resolve this error.

Thanks again.


--- mouss <mlist.only@free.fr> wrote:

> john bender wrote:
> > Hi there!
> >
> > I'm running Qmail, and on the same system I run
> > postfix as a "smart host" or spam "firewall".
> >
> > Qmail listens on x.x.x.42 and postfix listens on
> > x.x.x.43
> >
> >>From what I read, this setup might be causing the
> > error in question. My question is: would anyone
> know
> > specifically why this is happening and what I can
> do
> > to add amavis to this set up?
> >
> > It is postfix that connects to amavis from source
> IP
> > x.x.x.43.
> >
> > I've obviously googled the error and found pretty
> much
> > nothing that applies to me, except for one thread
> > where someone disabled smtp_bind_address to solve
> > this:
> >
> >
>
http://www.howtoforge.com/forums/arc...hp/t-1217.html
> >
> > I can't do that in my set up.
> >
> >
> > main.cf:
> > =======
> > inet_interfaces = x.x.x.43
>
> remove this and try again.
>
> if you want postfix to listen on a given IP, use
> master.cf instead: replace
>
> smtp .... smtpd
>
> with
>
> x.x.x.45:25 .... smtp
>
>
>
> > mynetworks = x.x.x.40/29, 192.168.0.0/16,
> 10.0.0.0/8,
> > 127.0.0.0/8
> > content_filter=amavisfeed:[127.0.0.1]:10024
>
> this is a bit convoluted. you set inet_interfaces to
> x.x.x.43 but you
> want postfix to talk to 127.0.0.1. while it will,
> this is not very logical.
>
> >
> > master.cf:
> > ========
> > amavisfeed unix - - n - 2 lmtp
> > -o lmtp_data_done_timeout=1200
> > -o lmtp_send_xforward_command=yes
> > -o disable_dns_lookups=yes
> > -o max_use=20
> >
> > amavisfeed unix - - n - 2 smtp
> > -o smtp_data_done_timeout=1200
> > -o smtp_send_xforward_command=yes
> > -o disable_dns_lookups=yes
> > -o max_use=20
> >
>
> you need to make your mind: use lmtp or smtp? use
> different names for
> different transports.
>
> >
> > 127.0.0.1:10025 inet n - n - - smtpd
> > -o content_filter=
> > -o smtpd_delay_reject=no
> > -o
> > smtpd_client_restrictions=permit_mynetworks,reject
> > -o smtpd_helo_restrictions=
> > -o smtpd_sender_restrictions=
> > -o
> >
>
smtpd_recipient_restrictions=permit_mynetworks,rej ect
> > -o
> > smtpd_data_restrictions=reject_unauth_pipelining
> > -o smtpd_end_of_data_restrictions=
> > -o smtpd_restriction_classes=
> > -o mynetworks=127.0.0.0/8
> > -o smtpd_error_sleep_time=0
> > -o smtpd_soft_error_limit=1001
> > -o smtpd_hard_error_limit=1000
> > -o smtpd_client_connection_count_limit=0
> > -o smtpd_client_connection_rate_limit=0
> > -o
> >
>
receive_override_options=no_header_body_checks,no_ unknown_recipient_checks,no_milters
> > -o local_header_rewrite_clients=
> >
> > amavis.conf:
> > ===========
> > @local_domains_maps = ( [".$mydomain"] ); # list
> of
> > all local domains
> >
> > @mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10
> > [FEC0::]/10
> > 10.0.0.0/8 172.16.0.0/12
> > 192.168.0.0/16 x.x.x.40/29 );
> >
> >
> > Connecting using telnet on localhost works fine.
> >
> > # telnet localhost 10024
>
> This will use 127.0.0.1 as the source IP. This isn't
> the same as what
> you're asking postfix to do: you're asking postfix
> to use x.x.x.43 as a
> source IP but connect to 127.0.0.1. you'll need more
> than telnet to test
> this (you need a client that binds before it
> connects).
>
>
>
> > Trying 127.0.0.1...
> > Connected to localhost.localdomain (127.0.0.1).
> > Escape character is '^]'.
> > 220 [127.0.0.1] ESMTP amavisd-new service ready
> > mail from:<darek@domain.com>
> > 250 2.1.0 Sender <darek@domain.com> OK
> > rcpt to:<darek@example.com>
> > 250 2.1.5 Recipient <darek@example.com> OK
> > data
> > 354 End data with <CR><LF>.<CR><LF>
> > Subject: asdads
> >
> > asd
> > ..
> > 250 2.0.0 Ok: queued as 77015A40013
> >
> > Thanks for reading all this :P
> >
> >
> >
>
__________________________________________________ __________________________________
> > Never miss a thing. Make Yahoo your home page.
> > http://www.yahoo.com/r/hs
> >
> >
> >
>
-------------------------------------------------------------------------
> > SF.Net email is sponsored by:
> > Check out the new SourceForge.net Marketplace.
> > It's the best place to buy or sell services
> > for just about anything Open Source.
> >
>
http://ad.doubleclick.net/clk;164216...et/marketplace
> > _______________________________________________
> > AMaViS-user mailing list
> > AMaViS-user@lists.sourceforge.net
> >
>
https://lists.sourceforge.net/lists/...fo/amavis-user
> > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> > AMaViS-HowTos:http://www.amavis.org/howto/
> >
> >
>
>
>
-------------------------------------------------------------------------
> SF.Net email is sponsored by:
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services
> for just about anything Open Source.
>
http://ad.doubleclick.net/clk;164216...et/marketplace
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-user@lists.sourceforge.net
>
https://lists.sourceforge.net/lists/...fo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/
>



__________________________________________________ __________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i...Dypao8Wcj9tAcJ



-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/