由于某种原因，postfix认为域是内部的，纠正我，如果我错了？
来自postfix maillog的示例：
Sep 17 18:45:52 smail1 postfix/smtp[23241]: 269D140A92: to=<[email protected]>, relay=mail1.abc.co.il[5.6.7.8]:25, delay=0.28, delays=0/0/0.27/0.01, dsn=5.0.0, status=undeliverable (host mail1.abc.co.il[5.6.7.8] said: 550 Recipient address rejected: User unknown (in reply to RCPT TO command)) Sep 17 18:45:55 smail1 postfix/smtpd[23196]: send attr address = [email protected] Sep 17 18:45:55 smail1 postfix/smtpd[23196]: input attribute value: host mail1.abc.co.il[5.6.7.8] said: 550 Recipient address rejected: User unknown (in reply to RCPT TO command) Sep 17 18:45:55 smail1 postfix/smtpd[23196]: check_mail_access: [email protected] Sep 17 18:45:55 smail1 postfix/smtpd[23196]: ctable_locate: move existing entry key [email protected] Sep 17 18:45:55 smail1 postfix/smtpd[23196]: check_access: [email protected] Sep 17 18:45:55 smail1 postfix/smtpd[23196]: check_domain_access: abc.co.il Sep 17 18:45:55 smail1 postfix/smtpd[23196]: check_namadr_access: name xyz.abc.co.il addr 1.2.3.4 Sep 17 18:45:55 smail1 postfix/smtpd[23196]: check_domain_access: xyz.abc.co.il Sep 17 18:45:55 smail1 postfix/smtpd[23196]: check_namadr_access: name xyz.abc.co.il addr 1.2.3.4 Sep 17 18:45:55 smail1 postfix/smtpd[23196]: check_domain_access: xyz.abc.co.il Sep 17 18:45:55 smail1 postfix/smtpd[23196]: dict_regexp_lookup: /etc/postfix/regexp_client: xyz.abc.co.il Sep 17 18:45:55 smail1 postfix/smtpd[23196]: NOQUEUE: reject: RCPT from xyz.abc.co.il[1.2.3.4]: 450 4.1.7 <[email protected]>: Sender address rejected: unverified address: host mail1.abc.co.il[5.6.7.8] said: 550 Recipient address rejected: User unknown (in reply to RCPT TO command); from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail1.abc.co.il> Sep 17 18:45:55 smail1 postfix/smtpd[23196]: > xyz.abc.co.il[1.2.3.4]: 450 4.1.7 <[email protected]>: Sender address rejected: unverified address: host mail1.abc.co.il[5.6.7.8] said: 550 Recipient address rejected: User unknown (in reply to RCPT TO command) Sep 17 18:46:00 smail1 postfix/smtpd[23196]: < xyz.abc.co.il[1.2.3.4]: QUIT Sep 17 18:46:00 smail1 postfix/smtpd[23196]: > xyz.abc.co.il[1.2.3.4]: 221 2.0.0 Bye Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 192.168.57.0/24 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 127.0.0.0/8 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 192.168.8.1/32 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 172.19.214.0/24 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 10.1.2.0/24 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 10.7.15.152/32 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 10.7.15.150/32 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 10.7.15.152/32 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_hostname: xyz.abc.co.il ~? 192.168.58.8/32 Sep 17 18:46:00 smail1 postfix/smtpd[23196]: match_list_match: xyz.abc.co.il: no match Sep 17 18:46:00 smail1 postfix/smtpd[23196]: disconnect from xyz.abc.co.il[1.2.3.4] POSTCONF -N
2bounce_notice_recipient = [email protected] address_verify_sender = [email protected] alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases bounce_notice_recipient = [email protected] bounce_template_file = /etc/postfix/bounce.cf broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 debug_peer_list = neptune.co.il default_destination_concurrency_limit = 8 delay_notice_recipient = [email protected] disable_mime_input_processing = no disable_mime_output_conversion = no disable_vrfy_command = yes error_notice_recipient = [email protected] header_checks = regexp:/etc/postfix/header_checks html_directory = no inet_interfaces = all inet_protocols = ipv4 local_destination_concurrency_limit = 10 local_destination_recipient_limit = 300 mail_owner = postfix mailbox_command = /usr/bin/procmail mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 51200000 mydestination = $myhostname, localhost.$mydomain, localhost mydomain = neptune.co.il myhostname = mail.neptune.co.il mynetworks = 192.168.57.0/24, 127.0.0.0/8, 192.168.8.1/32, 172.19.214.0/24, 10.1.2.0/24, 10.7.15.152/32 , 10.7.15.150/32 ,10.7.15.152/32, 192.168.58.8/32 mynetworks_style = host myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES recipient_delimiter = + sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtp_sender_dependent_authentication = yes smtp_tls_policy_maps = hash:/mailroot/postfix/tls_policy smtp_tls_security_level = may smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) smtpd_data_restrictions = permit smtpd_helo_required = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unlisted_sender, reject_unlisted_recipient, reject_invalid_hostname, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unverified_sender, reject_unlisted_recipient reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access check_client_access hash:/etc/postfix/vip_ip, check_client_access regexp:/etc/postfix/regexp_client, reject_rbl_client bl.spamcop.net, reject_rbl_client sbl.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dul.dnsbl.sorbs.net, reject_rbl_client bl.spamcop.net, permit smtpd_sasl_auth_enable = yes smtpd_sasl_path = smtpd smtpd_sasl_security_options = noanonymous smtpd_sender_login_maps = ldap:/etc/postfix/loginmaps.cf smtpd_tls_CAfile = /etc/pki/tls/certs/rapidssl.pem smtpd_tls_cert_file = /etc/pki/tls/certs/mail.neptune.co.il.crt smtpd_tls_key_file = /etc/pki/tls/private/mail.neptune.co.il.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_security_level = may smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_alias_maps = hash:/etc/postfix/virtual, ldap:/etc/postfix/groupmaps.cf virtual_mailbox_base = /mailroot/var/lib/imap virtual_mailbox_domains = ldap:domain virtual_mailbox_maps = ldap:/etc/postfix/loginmaps.cf virtual_transport = lmtp:unix:/mailroot/var/lib/imap/socket/lmtp
一些build议：如果你不明白它是如何工作的，请不要在smtpd _ * _ restriction中join一些规则。 它有一天会咬你。
这些错误是由这个限制reject_unverified_sender造成的。 此特殊限制将检查发件人地址prvs = 7337e4471e = [email protected]是否存在于远程发件人上。 检查机制的细节可以在这个文档中find。
简而言之，postfix将尝试telnet到远程发件人，并检查远程是否接受EMAIL TO prvs = 7337e4471e = [email protected] 。 所以，它会出现在您的日志中，远程发件人不接受电子邮件至[email protected] 。
Sep 17 18:45:52 smail1 postfix/smtp[23241]: 269D140A92: to=<[email protected]>, relay=mail1.abc.co.il[5.6.7.8]:25, delay=0.28, delays=0/0/0.27/0.01, dsn=5.0.0, status=undeliverable (host mail1.abc.co.il[5.6.7.8] said: 550 Recipient address rejected: User unknown (in reply to RCPT TO command))
现在，由于远程发件人拒绝了， 发件人未经validation 。 所以，你的服务器拒绝接收电子邮件。
对发送电子邮件的小stream量做sender_verification是可以的，但它可能是一个大的烦人的。 看看为什么你应该closures它在这篇文章中的一些原因
注意，在开启之前，这里应该closures限制列表或者至less了解它的行为。
在这里你的smtpd_recipient_restrictions参数
permit_mynetworks, permit_sasl_authenticated,
好，没问题
reject_unlisted_sender, reject_unlisted_recipient,
看到这个页面和这个页面 。
reject_invalid_hostname, reject_invalid_helo_hostname,
reject_invalid_hostname是reject_invalid_helo_hostname的别名。 限制reject_invalid_hostname用于后缀<2.3。 当HELO或EHLO主机名格式错误时，此限制将拒绝该请求。
reject_non_fqdn_helo_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient,
好。 没问题
reject_unknown_sender_domain, reject_unknown_recipient_domain,
好。 它会拒绝来自不存在的域名或者没有configuration好的域名的邮件。
reject_unverified_sender,
如上所述
reject_unlisted_recipient,
重复（？）
reject_unauth_destination,
这是强制性的限制。
check_sender_access hash:/etc/postfix/sender_access, check_client_access hash:/etc/postfix/vip_ip, check_client_access regexp:/etc/postfix/regexp_client,
好
reject_rbl_client bl.spamcop.net, reject_rbl_client sbl.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dul.dnsbl.sorbs.net,
好
reject_rbl_client bl.spamcop.net,
重复（再次？）
permit