Postfix – TLS – 端口587 – 仅从本地主机连接

为什么我无法连接到AMI上587端口上的Postfix？

这是一个AMI，AMI防火墙有587个打开，iptables是空的，因为我正在使用亚马逊防火墙。

从服务器本身，以下工作正常：

openssl s_client -starttls smtp -crlf -connect ami.example.com:587

• 不接收电子邮件：Postfix（CentOS 7）拒绝中继访问
• CentOS上的Postfix – 邮件发送缓慢
• 邮件服务器（Debian / Postfix / Dovecot）和被拒绝的电子邮件
• 有没有办法build立一个SMTP中继，允许一个Web应用程序的用户使Web应用程序发送电子邮件与他们自己的电子邮件地址作为发件人？
• 将Postfix设置为与Neptune和Papercut类似的假服务器

postconf -n

alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 9 debug_peer_list = ami.example.com mail.example.com home_mailbox = Maildir/ html_directory = no inet_interfaces = localhost inet_protocols = all mailbox_command = mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES sample_directory = /usr/share/doc/postfix-2.6.6/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtp_tls_note_starttls_offer = yes smtp_use_tls = yes smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem smtpd_tls_auth_only = no smtpd_tls_cert_file = /etc/ssl/certs/mail.example.com.crt smtpd_tls_key_file = /etc/ssl/private/mail.example.com.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 

master.cf

 submission inet n - n - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_sasl_path=private/auth -o smtpd_sasl_security_options=noanonymous -o smtpd_sasl_local_domain=$myhostname -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o smtpd_sender_restrictions=reject_sender_login_mismatch -o smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject 

nmap结果

 Nmap scan report for ami.example.com Host is up (0.024s latency). Not shown: 995 filtered ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 143/tcp open imap 587/tcp closed submission 993/tcp open imaps 

netstat的结果

 netstat --proto=inet -pnl | grep 587 tcp 0 0 127.0.0.1:587 0.0.0.0:* LISTEN 29829/master 

使用远程机器时的结果：

openssl s_client -starttls smtp -crlf -connect ami.example.com:587

套接字：连接被拒绝

连接：错误号= 111

身份validation是由pam。

选中： 后缀拒绝587