Postfix and PTR record issues

[arnaud gaboury]

On Wed, Feb 10, 2016 at 12:29 AM, Ed Greshko <ed.greshko at greshko.com> wrote:
>
>
> On 02/09/16 21:14, arnaud gaboury wrote:
>> Now trying to an external user:
>>
>> % telnet mail.thetradinghall.com 587
>> ----------------------------------------
>> ..............
>> email from:arnaud.gaboury at thetradinghall.com
>> 502 5.5.2 Error: command not recognized
>> mail from:arnaud.gaboury at thetradinghall.com
>> 250 2.1.0 Ok
>> rcpt to:arnaud.gaboury at gmail.com
>> 454 4.7.1 <arnaud.gaboury at gmail.com>: Relay access denied
>> ---------------------------------------------------------------------------
>>
>> $ journactl --unit postfix -r
>> ----------------------------------------
>> Feb 09 13:47:05 poppy postfix/smtpd[1518]: NOQUEUE: reject: RCPT from
>> unknown[MyPublicIp]: 454 4.7.1 <arnaud.gaboury at gmail.com>: Relay
>> access denied; from=<arnaud.gaboury at thetradinghall.com
>> Feb 09 13:46:02 poppy postfix/smtpd[1518]: connect from unknown[MyPublicIp]
>> Feb 09 13:46:02 poppy postfix/smtpd[1518]: warning: hostname
>> dsldevice.lan does not resolve to address MyPublicIp
>>
>> ***********************
>>
>> After some reading, I came to the conclusion I did not setup any PTR
>> record. hostname dsldevice.lan is in fact my gateway (168.192.1.254).
>
> I doubt the problem is the lack of a PTR record.
>
> If you tried the reverse, "mail from xxx at gmail.com" to someone at thetradinghall.com chances
> are it would work.

You are right. Sending emails from outside works.

>
> The error message you are getting is "Relay access denied".  This is normally a good thing
> since if the mail server is facing the Internet you'd have what is known as an "open
> relay" which spammers use and would get you blacklisted.
>
> I've not worked with postfix or sendmail for quite some time.  Most recently I worked with
> another MTA which had a concept of "Trusted Domains".  One could define a domain or a
> range of IP addresses where relaying would be allowed.  I don't know if postfix has that
> sort of configuration option.

I will have a closer look at the relay settings.
TY

>
> The other option, and the best one if you plan to use the server as your SMTP host when
> traveling or outside the local network, is to configure your system for SMTP AUTH.  With
> SMTP AUTH a user authenticates to the server and then is allow to send mail anywhere.
>
>
> --
> In reality, some people should stick to running Windows and others should stay away from
> computers altogether.
>
> --
> users mailing list
> users at lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org



-- 

google.com/+arnaudgabourygabx