Config mail service
hi,
i try to set up mail service,but i have some trouble.
I do have a internet domain like example.com in the host name
and local name id of the server 192.168.0.2 is it good.
and i got an mx from may isp
Then when i run mail service smtp do not run do i have to config dns service?
Thanks for ur valuable reply Dolores.
Similar Messages
-
Why cant i disable mail service ?
Mail service got enabled when I enabled some other services (don't know which one) i checked a couple and it got enabled, i tried to disable it then but it wouldn't let me, back then i didn't pay much attention to it so of course it's not configured. Right now the server is going crazy with disk IO, ran iotop and found out there are 2 processes to blame, 1 is mds (i'll murder spotlight soon) and the other is qmgr which from the man page i found it's mail related, my mail is hosted on gmail so i have no intention of using this service. If i click stop nothing happends, same if i uncheck it under services.
this is the ouput on the syslog when i try to stop
servermgrd[69]: -[AccountsRequestHandler(AccountsOpenDirectoryHelpers) syncClientServicesConfigRecord]: Error writing ClientServices config record: Error Domain=com.apple.OpenDirectory Code=4001 UserInfo=0x10652ad30 "Unable to set value or values for dsAttrTypeStandard:XMLPlist in the record ClientServices."
servermgr_info: markrunning_servicesconfigured(): marked running services configured: com.apple.ServerAdmin.DNS, com.apple.ServerAdmin.SWUpdate, com.apple.ServerAdmin.Web, com.apple.ServerAdmin.NFS, com.apple.ServerAdmin.DirectoryServices
also, my syslog is full of
postfix/qmgr[3830]: warning: connect #1 to subsystem private/rewrite: Connection refused
I'm guessing it's required by some other service, i currently have...
DNS
Mail -> DIE
NFS
Open Directory
Software Update
Web
Xgrid - Stopped ( just testing )
Is there any way to kill it, or is my only way around it to figure out what's wrong with it (no one is using it for mail so i don't get why is it so busy).Unchecked 'Enable SMTP', 'Enable IMAP' and 'Enable POP', then checked 'Deliver to /var/mail
That seemed to 'disable the mail service'
As for disk usage, i'm running a cron job every minute so que queue had close to 6k mails it couldn't deliver. deleted them all " sudo postsuper -d ALL " and redirected output on the cron job to /dev/null -
Recently, after a year or more of relatively smooth service, my OS X Server 10.4.11 Mail services has been locking up daily.
I was finally able to get some information from the log files (I am a noob to this) and saw the following right after my most recent reboot of the server:
Oct 5 09:51:11 mm1 master[50]: ERROR: Cannot start mail services, configuration directory does not exist: /Volumes/Data/mail/var/imap
I checked the server and that directory is indeed there on the partition named "DATA", so I am baffled as why the server does not thing the configuration directory exists?
drwxr-xr-x 15 cyrusima mail 510 Oct 5 09:51 imap
drwxr-xr-x 15 root admin 510 Oct 3 20:01 imap.BAK
drwxr-xr-x 15 cyrusima mail 510 Oct 3 20:05 imapold10032009-200707
drwxr-xr-x 4 jkoerber admin 136 Dec 3 2007 spool
mm1:/Volumes/Data/mail/var jkoerber$
Can anyone help me? My customers are yelling for blood because they cannot send/receive emails.
-- Jon
Message was edited by: Jon KoerberThanks Alex for the feedback. You are helpful as always!
It's good to know that the message I am getting from the mail server about the configuration files is only a temporary thing. Although I find it strange that the mail service doesn't know where its config files are since it is specified in the mail server setup.
I looked at the log files you mentioned and do not see anything that looks like a specific problem with the mail services themselves.
Recently, however, I have been having recurring problems where my mail server and my Web/Database server have both become unresponsive at nearly the same time even though they are on different class A networks to where I cannot access them via ARD, Server Admin and even SSH. That is usually when my mail server goes offline. I was afraid it was because of that configuration error I was seeing, but think now that the problem could be something else entirely (maybe some kind of network problem or denial of service hacking attack, no idea).
Thanks again.
-- Jon -
Mail service stuck starting in Mavericks
After installing Mavericks server I've got a problem with the mailserver. In the Server.app it keeps showing as starting, but it never starts.
the terminal command 'serveradmin fullstatus mail' shows that everything is started as it should, except the Mail Transfer Agent. It shows the error Warning: SMTP mail service is enabled but not running.
The command 'serveradmin start mailtransferagent' results in the error "CANNOT_LOAD_BUNDLE_ERR"
Console shows no helpfull messages except the obscure "serveradmin: posting dist not" right after entering the 'serveradmin start mailtransferagent' command.
Any idea how I can get the mail service to start?It's sort of an upgraded system. The Mavericks installation is actually a fresh one, but data was then restored with TimeMachine from a previous 10.6 system. So old configs are a possibility.
Belowe is all that showed in the log. Besides some (IMHO) non critical permission warnings, there is nothing. The mailaccess.log was actually empty.
Mail.log:
postfix/postfix-script[67467]: warning: group or other writable: /Library/Server/Mail/Config/postfix/./custom_header_checks
postfix/postfix-script[67468]: warning: group or other writable: /Library/Server/Mail/Config/postfix/./master.cf.default
postfix/postfix-script[67469]: warning: group or other writable: /Library/Server/Mail/Config/postfix/./master.cf.orig
postfix/postfix-script[67470]: warning: group or other writable: /Library/Server/Mail/Config/postfix/./virtual.db
postfix/postfix-script[67471]: warning: group or other writable: /Library/Server/Mail/Config/postfix/./virtual_domains
postfix/postfix-script[67472]: warning: group or other writable: /Library/Server/Mail/Config/postfix/./virtual_users
System.log:
mds[63]: (/)(Warning) IndexQuery in virtual bool SISearchCtx_FSI::performSearch(struct PartialQueryResults *):Retried searchfs 4 times
mds[63]: (/)(Warning) IndexQuery in virtual bool SISearchCtx_FSI::performSearch(struct PartialQueryResults *):Throttling slow file system query
xpcd[916]: restored permissions (100600 -> 100700) on /private/var/root/Library/Containers/com.apple.TextEdit/Container.plist
WindowServer[107]: disable_update_timeout: UI updates were forcibly disabled by application "TextEdit" for over 1.00 seconds. Server has re-enabled them.
com.apple.appkit.xpc.openAndSavePanelService[68212]: Bogus event received by listener connection:
<error: 0x7fff7af06b50> { count = 1, contents =
"XPCErrorDescription" => <string: 0x7fff7af06e60> { length = 18, contents = "Connection invalid" }
quicklookd[68202]: generateImageInProcess Failed to composit image for binding VariantBinding [0x203] flags: 0x8 binding: FileInfoBinding [0x103] - extension: pps, UTI: com.microsoft.powerpoint.pps, fileType: ????.
quicklookd[68202]: generateImageInProcess Failed to composit image for binding VariantBinding [0x403] flags: 0x8 binding: FileInfoBinding [0x303] - extension: GIF, UTI: com.compuserve.gif, fileType: ????.
WindowServer[107]: common_reenable_update: UI updates were finally reenabled by application "TextEdit" after 5.36 seconds (server forcibly re-enabled them after 1.00 seconds)
quicklookd[68202]: generateImageInProcess Failed to composit image for binding VariantBinding [0x603] flags: 0x8 binding: FileInfoBinding [0x503] - extension: gif, UTI: com.compuserve.gif, fileType: ????.
quicklookd[68202]: generateImageInProcess Failed to composit image for binding VariantBinding [0x803] flags: 0x8 binding: FileInfoBinding [0x703] - extension: tiff, UTI: public.tiff, fileType: ????.
quicklookd[68202]: generateImageInProcess Failed to composit image for binding VariantBinding [0xa03] flags: 0x8 binding: FileInfoBinding [0x903] - extension: gif, UTI: com.compuserve.gif, fileType: ????.
kernel[0]: Sandbox: xcscredd(164) deny file-read-metadata /private/var/root
--- last message repeated 11 times ---
birds-srv-03.local sandboxd[191] ([164]): xcscredd(164) deny file-read-metadata /private/var/root
--- last message repeated 7 times --- -
Mail service on, SMTP on, but clients can't connect -- please help a novice
Hi all,
We use 10.4 Server on a G5 Xserve. A few days ago we had a problem with our server being used for spam. That was fixed quickly enough, but the problem is: while being fixed, the mail queue accumulated more and more mail, and it wasn't going out. The "retry" button didn't work. Repairing the database didn't work.
To make a long story shorter, after reading different things here and on the web, I managed to delete all the messages in the queue. All the users are still there. But now, when I turn the mail service back on, everyone gets a "can't connect" error.
I've used the terminal before, but I've always been following directions; I don't know what to type or why. But if someone with patience can help, I can follow directions, and would really appreciate the help. Right now I'm dead in the water.OK, I've already admitted that I know nothing about this, so I'm sure this will give some people some laughs. That's OK, so the only thing I've changed was the name of the company. I have more peace of mind knowing I'm not showing who's got problems. The other thing is that I don't know when my part of the history begins. Maybe it's all me, but I don't remember doing anything even remotely close to changing IPs. So here it is:
1 telnet mail.abcde.com 110
2 telnet mail.abcde.com 110
3 telnet mail.abcde.com 110
4 sudo /etc/squirrelmail/config/conf.pl
5 grep swupd /etc/swupd/com.apple.server.swupdate.plist > ~/Desktop/
6 update_list.txt
7 grep swupd /etc/swupd/com.apple.server.swupdate.plist > ~/Desktop/
8 update_list.txt
9 grep swupd /etc/swupd/com.apple.server.swupdate.plist > ~/Desktop/update_list.txt
10 softwareupdate
11 man changeip
12 changeip
13 exit
14 changeip -checkhostname
15 sudo changeip
16 changeip -checkhostname
17 sudo changeip -checkhostname
18 man changeip
19 sudo changeip -gethostname
20 sudo changeip -gethostname
21 sudo changeip
22 /usr/sbin/changeip /LDAPv3/127.0.0.1 10.10.10.3 10.10.10.3 mail.abcde.org mail.abcde.org
23 sudo changeip -checkhostname
24 sudo /usr/sbin/changeip /LDAPv3/127.0.0.1 10.10.10.3 10.10.10.3 mail.abcde.org mail.abcde.org
25 changeip -checkhostname
26 sudo changeip -checkhostname
27 sudo rm -rf /usr/share/swupd/html/061-4590/
28 sudo rm -rf /usr/share/swupd/html/061-4589/
29 sudo rm -rf /usr/share/swupd/html/061-4589
30 sudo rm -rf /usr/share/swupd/html/061-4590/
31 sudo rm -rf /usr/share/swupd/html/061-4590/
32 sudo rm -rf /usr/share/swupd/html/061-2089/
33 grep swupd /etc/swupd/com.apple.server.swupdate.plist > ~/Desktop/update_list.txt
34 sudo mkdir /usr/sieve
35 sudo mkdir /usr/sieve
36 sudo pico /etc/services
37 netstat -an | grep 2000
38 telnet localhost 2000
39 sudo mkdir -p /usr/sieve
40 sudo mkdir -p /usr/sieve
41 sudo chown cyrusimap /usr/sieve
42 sudo chgrp wheel /usr/sieve
43 cd
44 pwd
45 ls
46 cd /usr
47 ls
48 ls -l
49 exit
50 sudo pico /etc/services
51 telnet localhost 2000
52 netstat
53 netstat -an | grep 2000
54 exit
55 changeip
56 sudo changeip
57 changeip -checkhostname
58 sudo changeip -checkhostname
59 exit
60 sudo ls -al /var/spool/imap/user/diradmin
61 sudo ls -al /var/spool/imap/user/kbentley
62 sudo /usr/share/mailman/bin/check_perms -f
63 su root
64 su root
65 su root
66 su root
67 su root
68 fsck -f
69 fsck
70 sudo fsck -f
71 sudo fsck /?
72 fsck /help
73 fsck \help
74 pwd
75 ..
76 12345
77 sudo /System/Library/CoreServices/Finder.app/
78 sudo /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder
79 su root
80 su root
81 sudo -u cyrusimap
82 su cyrus
83 su cyrus
84 su cyrus
85 su cyrus
86 su cyrus
87 cyrus
88 sudo cyrus
89 su cyrus
90 su cyrus
91 su cyrus /usr/bin/cyrus/bin/reconstruct -r -f /var/spool/imap/bbills
92 postfix reload
93 sudo postfix reload
94 sudo postfix reload
95 ls -l /var/spool/imap/user/bbills
96 history -
Needed: Person who can help me set up mail service
Hi...I've been reading the forum for days and have been finding information in small bits and pieces...but I need someone who can help me put it all together. Basically, we are trying to move our mail server in-house. We have a better than T1 connection, I just need SOMEONE who can tell me exactly what we need to do to set up mail service on osx server 10.4.8 to work for us. Any takers?
I have enough knowledge to set up our web and file sharing services (very easy, no brainer stuff), but really I'm lost on the Mail Service setup.
Thanks!Hi
I hope this thread is not resolved. Even if it is, this is my solution.
0.1. You must have a domain name pointing to your public IP
0.2. Your router (if you have one) must forward smtp, pop, and imap ports to the private IP adress of the sever
Server Admin
1. You must have DNS enable with your domain name configured. I presume that you know to.
2. Setup your mail service
in General
2.1. Activate POP
2.2. Acivate Imap (if you need)
2.3. Activate SMTP
2.4. Accept incoming mail
2.5. Retain outgoing mail
in filter
2.6. Set up as you need
in advanced->security
2.7. Set up aurhentifaction for smtp and pop.(important for smtp because you can be a spam relay)
in advanced->Hosting
2.8. add your domain name in localhost window
Users admin
3. Go to your users account (mail tab)
3.1 Activate mail
3.2 Choose receipt method.
I've followed this procedure 5 or 6 times and it's working fine every time.
Be carefull. In 10.4.8, something change in Imap service and the send of messages dont work. There is a little corrective to apply (a line to change in a config file but I do not remember what)
Sorry if the words are not exactly the same on you screen. I'm working on a french vs and my english is not very good.
Good luck
Vinc' -
Major Mail Service Panic after upgrade! Customer about to kill me!
Me again.
As mentioned in another thread, I had to upgrade an Xserve from 10.3.9 to 10.4.3 for a customer. When I ran the upgrade I discovered that the volume containing the mail database was damaged. I wasted a day getting the data off this onto another drive, then did the upgrade. Because the mail database had been moved and might have the odd missing file I used mailbfr -o and mailbfr -f at this point. Now, all client mail folders are back as they should be but all new mail is stuck in the queue. Outgoing mail can be sent successfully.
Now, I know an amateur like me shouldn't be messing with the config files willy-nilly to try and fix this without a clear idea of what's going on. However, given that the customer and his 20 staff are going mad waiting for their mail I tried to get it right by directly comparing their config files with the equivalents on my own 10.4.3 server which is set up more or less identically and is working.
I will get lynched if I can't make this work soon. Here's postconf -n and a snippet of the smtp log. Please someone look at this and save my life!!
mail:/var/log root# postconf -n
alias_maps = hash:/etc/aliases,hash:/var/mailman/data/aliases
always_bcc =
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
inet_interfaces = all
luser_relay = postmaster
mail_owner = postfix
mailboxsizelimit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mapsrbldomains = dun.dnsrbl.net,relays.ordb.org,bl.csma.biz,bl.spamcop.net,sbl-xbl.spamhaus.org
messagesizelimit = 0
mydestination = $myhostname,localhost.$mydomain,mail.mandm.uk.com,192.168.1.100,mandm.uk.com,re ed-munkenbeck.com,212.18.249.218,mail.reed-munkenbeck.com
mydomain = mandm.uk.com
mydomain_fallback = localhost
myhostname = mail.mandm.uk.com
mynetworks = 127.0.0.0/8
mynetworks_style = host
newaliases_path = /usr/bin/newaliases
ownerrequestspecial = no
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpdclientrestrictions = permit_mynetworks hash:/etc/postfix/smtpdreject rejectrblclient bl.csma.biz rejectrblclient dun.dnsrbl.net rejectrblclient relays.ordb.org rejectrblclient bl.spamcop.net rejectrblclient sbl-xbl.spamhaus.org permit
smtpdenforcetls = no
smtpdpw_server_securityoptions = cram-md5
smtpdrecipientrestrictions = permitsasl_authenticated,permit_mynetworks,reject_unauthdestination,permit
smtpdsasl_authenable = yes
smtpdtlsloglevel = 0
smtpduse_pwserver = yes
smtpdusetls = no
unknownlocal_recipient_rejectcode = 550
virtualmailboxdomains =
mail:/var/log root#
smtp log:
Jan 5 12:35:17 mail postfix/master[20503]: daemon started -- version 2.1.5
Jan 5 12:35:17 mail postfix/qmgr[20506]: 3C1983B7F0D82: from=<[email protected]>, size=5704, nrcpt=1 (queue active)
Jan 5 12:35:17 mail postfix/qmgr[20506]: 8C51A3B7F13CA: from=<[email protected]>, size=4047, nrcpt=1 (queue active)
Jan 5 12:35:17 mail postfix/qmgr[20506]: 91B7D3B7F13A8: from=<[email protected]>, size=2638, nrcpt=1 (queue active)
Jan 5 12:35:17 mail postfix/qmgr[20506]: CF9FB3B7F13AF: from=, size=5145, nrcpt=1 (queue active)
Jan 5 12:35:17 mail postfix/pipe[20510]: 3C1983B7F0D82: to=<[email protected]>, relay=cyrus, delay=4489, status=deferred (temporary failure. Command output: couldn't connect to lmtpd: Connection refused_ 421 4.3.0 deliver: couldn't connect to lmtpd_ )
Jan 5 12:35:17 mail postfix/pipe[20517]: 8C51A3B7F13CA: to=<[email protected]>, relay=cyrus, delay=2301, status=deferred (temporary failure. Command output: couldn't connect to lmtpd: Connection refused_ 421 4.3.0 deliver: couldn't connect to lmtpd_ )
Jan 5 12:35:17 mail postfix/pipe[20514]: CF9FB3B7F13AF: to=<[email protected]>, relay=cyrus, delay=2307, status=deferred (temporary failure. Command output: couldn't connect to lmtpd: Connection refused_ 421 4.3.0 deliver: couldn't connect to lmtpd_ )
Jan 5 12:35:17 mail postfix/pipe[20515]: 91B7D3B7F13A8: to=<[email protected]>, relay=cyrus, delay=2307, status=deferred (temporary failure. Command output: couldn't connect to lmtpd: Connection refused_ 421 4.3.0 deliver: couldn't connect to lmtpd_ )
Other symptoms since upgrade: Server Admin refuses to turn on Mailing Lists. There's one list that was in use before the upgrade. If I click 'Enable Mailing Lists' and press Save, the box goes unchecked again as soon as the screen refreshes. Mailaccess.log (as shown in SA as the IMAP log)remains empty. Like the Mailing Lists issue above, I can't change the log detail levels; they just reset to what they were before.
Anything else anyone wants to know I'll post it.
Xserve G5 2.0DP, 2Gb RAM, 10.4.3 (u/g from 10.3.9) Mac OS X (10.4)
G4 and Xserve Mac OS X (10.4)aha. a-bloody-ha.
I'll live to fight another day. The log entries about the stage. folder got me thinking and I realised that there was something wrong with the permissions. because I'd had to 'rescue' the mail database by moving to another volume, the permissions weren't right. Now, I had run mailbfr and watched it say it was fixing the ownerships and permissions on all this; I shouldn't have taken this for granted. The stage. folder was owned by me (admin) with read-only for everyone else. I changed it (heck, I changed the whole directory tree) to read-write for everyone and instantly mail started pouring in to everyone's accounts.
Everything is now working normally. It still bothers me that the whole shebang seems so fragile - especially in so far as the Server Admin app has at best only a tenuous grasp on the config files it's supposed to be supporting. Looking back over the past two days I can see that the basic setup was right in the first place but the manual changes I've been making in the various conf and cf files were ones that SA was supposed to be able to do for me. The whole point of having Server Admin>Settings>Logging is so you can set the log level right there - not in bloody pico via the bloody command line. Sorry - I'm tired and a little punch-drunk. It also bothers me that, having learned my humble skills on AppleShare 6 (and MacDNS), we're now in a place where none of the key components of the server are actually made by Apple, documented by Apple, or properly supported by Apple. Since Mail Service isn't a closed box with 'Apple' written on it, but a collection of dozens of interconnected third-party processes working in tandem, there really ought to be a 'master document' that shows the complete flow through the system. Most of you guys are proper experts and I'm truly grateful you're there - but I'm not afraid to admit that I didn't actually know that every message had to pass though a folder called stage. on its way to delivery and it would have nice to have been able to find that information in one of Apple's manuals. If I'd known I might have looked at it sooner.
The customer in this case is a firm of architects; they're creatives; non-technical; Apple-lovers precisely because they love the ease of use, the style and the non-pointy-headed approach of Apple's kit. I'm reminded that when this customer bought this Xserve 18 months ago, I made them buy the 3 year service contract for it. But when during the initial setup NAT wouldn't work properly I called Apple for help and they told me that 'setup problems aren't covered'. Good Grief. 450 quid. And let's not forget 700 quid for the 10.4 software.
Now, having saved myself from being lynched by the customer I'm probably going to be strung up by the very people on this list that people like me have to rely on when we get into trouble.
So, to save you all the trouble - yes, I'm a rank amateur; yes, I should do more homework; yes, I promise to keep googling and searching and reading and playing with my in-house machine... I don't promise to do a course on it since 'MacOs Server Essentials' is $2,000 to start with, and I don't have that kind of money.
Think I'd better go have a lie down. -
Hello ALL,
yesterday I installed OCS 10.1.2 with exists DB 10.2.0.2 on RHEL 3 after that I stop whole OCS and did backup. And now I try start my OCS but Mail Services such as email_listserver,email_pop, email_smtp_in, email_smtp_out, not started.
In lof files I found only one error : "((time 07/31/2007 13:42:12.358 MSD)(compclass oracle.mail.system.server.imap4srv)(compinst super.tradevisa.ru:um_system:imap:118579868319046952)(module
espsnet)(priority error 6)(execid 192.168.1.19:21342.0:1185874929-64)(msgid <null>)(mtext Failed to register with the listener))"
How I can resolve my issue and where I have to find it? In what log files?I tried what you recommended and the mail that gets sent out when the cron job runs still goes to the Library/Server/Mail/Data/mail location. When I checked the /Library/Server/Mail/Config/postfix/main.cf it actually had the mail_spool_directory = /var/mail commented out.
I uncommented to see it would send mail to /var/mail but it did not work. Am I missing something. Another parameter somewhere. Any other suggestions on where I should look?
Any online documentation that would explain more about what happens when mail services is activated by the Server App? -
Outgoing mail service offline charter
I cannot send email from my imac. Out going mail service shows offline with no other options. I can send email from my iphone. Help?
maybe some some helphere
http://support.apple.com/kb/index?page=search&src=support_site.kbase.search&loca le=en_US&q=off%20line%20email%2010.6.6
http://support.apple.com/kb/index?page=search&product=&q=send%20email%20iPhone&s rc=support_site.kbase.search.searchresults -
Setting up mail services. Name of server needs to be changed?
I setup my xserve with snow leopard. By default it was named server.ourcompanyname.private.
Here is my problem Im trying to host our company web site along with mail services. Need to bring all this in-house.
I have with my web provider 5 dedicated IP address, and router address. I bridged the modem to an airport extreme to hand out all the ip address and DHCP, this was done with apple support.
I need advise on how to go about setting up all the services. Can the name of the server be changed without causing major problems?
Any advise would be appreciated.One other note. Can I change the .private. to .com and will this help me setup mail and hosting services?
-
ERROR: Cannot start mail services, configuration directory does not exist
I'm running an Xserve G5 with one internal boot drive and one RAID using the other two internal drives. I used Apple's Disk Utility to set-up the RAID.
Back in early December, I moved my mail database and mail store to the RAID. Ever since, when I restart the server, the mailaccess.log generates the following error:
Jan 23 18:51:33 mail master[47]: ERROR: Cannot start mail services, configuration directory does not exist: /Volumes/RAID/mail.data/db
I'm speculating this is a timing error that gets created when Postfix initially can't find the RAID. Then, it must try again and find it because the error message does not repeat and mail starts running.
Is this something to worry about?Hi Joel,
You're right, it's a timing issues. The mail system is ready for work before the file system is mounted. It's benign.
Jeff -
How do I set up Mail service for simple IMAP with SSL?
This should be easy but something isn't working. I have an Xserve with 10.6. I've enabled the Mail service, and want to add this server as an Account under Entourage. I've put in the IP address, my username/password, etc. but something isn't working. It appears under the Accounts folder tree, but when I try to send an email, I have a window that says "4.7.0 TLS not available due to local problem", Error -17099". I've also seen errors telling me the password is being sent in cleartext and I can't see where I enable the same (SSL, password needed) settings on the client and the server menus. Can someone clue me in - what are the right settings on both ends to have a simple IMAP w/o cleartext passwords? I had this working fine in 10.4 Server... Thanks!
MikeI see dropdown menus for SMTP SSL and IMAP/POP SSL. I have them both set as "Require"
Do not to this if your server is handling incoming mail from outside your network.
Few remote mail servers will use SSL, so if your server requires SSL then you will not be able to receive mail from outside your domain.
'Use', on the other hand, advertises the fact your server supports SSL, so clients and remote servers can use if if they like, but this still allows other mail in.
What should "Authentication" be - "Login" or "Plain"
Do not use Plain unless you absolutely trust all your clients (i.e. they're all on a LAN or all using SSL). Plain sends an unencrypted password over the wire, which is susceptible to sniffing.
what will the client be using?
Whatever you set it to.
The client complains about a correct root certificate not being installed).
Are you using a self-signed certificate? if so, you're going to get that unless you do a lot of extra work. Getting a real certificate from a trusted authority should resolve this.
As for the slow connections, the use of SSL shouldn't significantly impact connection or delivery/transfer times, so something else is amiss. -
Mail Services connection times out after 10.5.8 - 10.6.4 upgrade
I have been running a mail server on my macosxserver02.binghamton.edu (128.226.xx.x) for Podcast Producer email notifications only. The mail service has been running fine until I recently upgraded the server to Apple's latest server software: Snow Leopard Server (10.6.4).
After the upgrade I'm no longer able to receive mail to the mail server from outside it's domain (macosxserver02.binghamton.edu). I can send and receive mail locally from within that domain. I can send mail outside of the domain without any trouble to my personal email account [email protected], but not my work account: [email protected]. If I try to send from outside the domain -- say with my Binghamton Univ account -- the mail bounces back with this message:
Delivery to the following recipient has been delayed:
[email protected]
Message will be retried for 2 more day(s)
Technical details of temporary failure:
The recipient server did not accept our requests to connect. Learn more at http://mail.google.com/support/bin/answer.py?answer=7720
[macosxserver02.binghamton.edu (1): Connection timed out]
---- Original message -----
Received: by 10.224.102.202 with SMTP id h10mr6012071qao.49.1277903965341;
Wed, 30 Jun 2010 06:19:25 -0700 (PDT)
Return-Path: <[email protected]>
Received: from [128.226.62.7] ([128.226.62.7])
by mx.google.com with ESMTPS id v20sm41975621qce.46.2010.06.30.06.19.24
(version=TLSv1/SSLv3 cipher=RC4-MD5);
Wed, 30 Jun 2010 06:19:24 -0700 (PDT)
From: Cheryl Tarbox <[email protected]>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: another attempt
Date: Wed, 30 Jun 2010 09:19:22 -0400
Message-Id: <[email protected]>
To: [email protected],
[email protected]
Mime-Version: 1.0 (Apple Message framework v1078)
X-Mailer: Apple Mail (2.1078)
One thing to note about the .binghamton.edu domain is that we recently switched to Google Mail and .binghamton.edu is our branded domain within google.com.
DNS is managed on another server. I had an MX record added to my server this morning.
I have these ports open on my firewall: 143, 993, 25, 587 (POP is not enabled)
In ServerAdmin>Mail>Settings>Relay 'Accept SMTP relays only from these hosts and networks' is checked with
127.0.0.0/8
128.226.62.0/26 (my local subnet)
In ServerAdmin>Mail>Settings>Filters Junk Mail and Virus filtering is not enabled, so greylisting should not be a problem. I did confirm this line in main.cf: smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reje ct_unauth_destination permit
10MB quota is set, Mailing Lists not enabled, Logging set at Information
In ServerAdmin>Mail>Settings>Advanced>Security I am not using SSL. I do have a valid certificate that I would like to use after I get this back up and running.
In ServerAdmin>Mail>Settings>Hosting 'Include server's domain as local host alias' is checked with
localhost
binghamton.edu
Virtual hosting is not enabled.
Here is the output of: postconf -n:
macosxserver02:~ academic$ postconf -n
2bounce_notice_recipient = postmaster
access_map_reject_code = 554
address_verify_default_transport = $default_transport
address_verify_local_transport = $local_transport
address_verify_map =
address_verify_negative_cache = yes
address_verify_negative_expire_time = 3d
address_verify_negative_refresh_time = 3h
address_verify_poll_count = 3
address_verify_poll_delay = 3s
address_verify_positive_expire_time = 31d
address_verify_positive_refresh_time = 7d
address_verify_relay_transport = $relay_transport
address_verify_relayhost = $relayhost
address_verify_sender = $double_bounce_sender
address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps
address_verify_service_name = verify
address_verify_transport_maps = $transport_maps
address_verify_virtual_transport = $virtual_transport
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_mail_to_commands = alias, forward
allow_mail_to_files = alias, forward
always_bcc =
anvil_rate_time_unit = 60s
anvil_status_update_time = 600s
application_event_drain_time = 100s
authorized_flush_users = static:anyone
authorized_mailq_users = static:anyone
authorized_submit_users = static:anyone
backwards_bounce_logfile_compatibility = yes
berkeley_db_create_buffer_size = 16777216
berkeley_db_read_buffer_size = 131072
best_mx_transport =
body_checks_size_limit = 51200
bounce_notice_recipient = postmaster
bounce_queue_lifetime = 5d
bounce_service_name = bounce
bounce_size_limit = 50000
bounce_template_file =
canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
check_for_od_forward = yes
cleanup_service_name = cleanup
command_directory = /usr/sbin
command_execution_directory =
command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
command_time_limit = 1000s
config_directory = /etc/postfix
connection_cache_protocol_timeout = 5s
connection_cache_service_name = scache
connection_cache_status_update_time = 600s
connection_cache_ttl_limit = 2s
content_filter =
cyrus_sasl_config_path =
daemon_directory = /usr/libexec/postfix
daemon_timeout = 18000s
data_directory = /var/lib/postfix
debug_peer_level = 2
debug_peer_list =
default_database_type = hash
default_delivery_slot_cost = 5
default_delivery_slot_discount = 50
default_delivery_slot_loan = 3
default_destination_concurrency_failed_cohort_limit = 1
default_destination_concurrency_limit = 20
default_destination_concurrency_negative_feedback = 1
default_destination_concurrency_positive_feedback = 1
default_destination_rate_delay = 0s
default_destination_recipient_limit = 50
default_extra_recipient_limit = 1000
default_minimum_delivery_slots = 3
default_privs = nobody
default_process_limit = 100
default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
default_recipient_limit = 20000
default_recipient_refill_delay = 5s
default_recipient_refill_limit = 100
default_transport = smtp
default_verp_delimiters = +=
defer_code = 450
defer_service_name = defer
defer_transports =
delay_logging_resolution_limit = 2
delay_notice_recipient = postmaster
delay_warning_time = 0h
deliver_lock_attempts = 20
deliver_lock_delay = 1s
destination_concurrency_feedback_debug = no
detect_8bit_encoding_header = yes
dont_remove = 0
double_bounce_sender = double-bounce
duplicate_filter_limit = 1000
empty_address_recipient = MAILER-DAEMON
empty_address_relayhost_maps_lookup_key =
enable_original_recipient = yes
enable_server_options = yes
error_notice_recipient = postmaster
error_service_name = error
execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
export_environment = TZ MAIL_CONFIG LANG
fallback_transport =
fallback_transport_maps =
fast_flush_domains = $relay_domains
fast_flush_purge_time = 7d
fast_flush_refresh_time = 12h
fault_injection_code = 0
flush_service_name = flush
fork_attempts = 5
fork_delay = 1s
forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
frozen_delivered_to = yes
hash_queue_depth = 1
hash_queue_names = deferred,defer
header_address_token_limit = 10240
header_checks =
header_size_limit = 102400
hopcount_limit = 50
html_directory = no
import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C
in_flow_delay = 1s
inet_interfaces = all
inet_protocols = ipv4
initial_destination_concurrency = 5
internal_mail_filter_classes =
invalid_hostname_reject_code = 501
ipc_idle = 5s
ipc_timeout = 3600s
ipc_ttl = 1000s
line_length_limit = 2048
lmtp_bind_address =
lmtp_bind_address6 =
lmtp_body_checks =
lmtp_cname_overrides_servername = no
lmtp_connect_timeout = 0s
lmtp_connection_cache_destinations =
lmtp_connection_cache_on_demand = yes
lmtp_connection_cache_time_limit = 2s
lmtp_connection_reuse_time_limit = 300s
lmtp_data_done_timeout = 600s
lmtp_data_init_timeout = 120s
lmtp_data_xfer_timeout = 180s
lmtp_defer_if_no_mx_address_found = no
lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
lmtp_destination_rate_delay = $default_destination_rate_delay
lmtp_destination_recipient_limit = $default_destination_recipient_limit
lmtp_discard_lhlo_keyword_address_maps =
lmtp_discard_lhlo_keywords =
lmtp_enforce_tls = no
lmtp_generic_maps =
lmtp_header_checks =
lmtp_host_lookup = dns
lmtp_initial_destination_concurrency = $initial_destination_concurrency
lmtp_lhlo_name = $myhostname
lmtp_lhlo_timeout = 300s
lmtp_line_length_limit = 990
lmtp_mail_timeout = 300s
lmtp_mime_header_checks =
lmtp_mx_address_limit = 5
lmtp_mx_session_limit = 2
lmtp_nested_header_checks =
lmtp_pix_workaround_delay_time = 10s
lmtp_pix_workaround_maps =
lmtp_pix_workaround_threshold_time = 500s
lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf
lmtp_quit_timeout = 300s
lmtp_quote_rfc821_envelope = yes
lmtp_randomize_addresses = yes
lmtp_rcpt_timeout = 300s
lmtp_rset_timeout = 20s
lmtp_sasl_auth_cache_name =
lmtp_sasl_auth_cache_time = 90d
lmtp_sasl_auth_soft_bounce = yes
lmtp_sasl_mechanism_filter =
lmtp_sasl_path =
lmtp_sasl_security_options = noplaintext, noanonymous
lmtp_sasl_tls_security_options = $lmtp_sasl_security_options
lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options
lmtp_sasl_type = cyrus
lmtp_send_xforward_command = no
lmtp_sender_dependent_authentication = no
lmtp_skip_5xx_greeting = yes
lmtp_starttls_timeout = 300s
lmtp_tcp_port = 24
lmtp_tls_CAfile =
lmtp_tls_CApath =
lmtp_tls_cert_file =
lmtp_tls_dcert_file =
lmtp_tls_dkey_file = $lmtp_tls_dcert_file
lmtp_tls_enforce_peername = yes
lmtp_tls_exclude_ciphers =
lmtp_tls_fingerprint_cert_match =
lmtp_tls_fingerprint_digest = md5
lmtp_tls_key_file = $lmtp_tls_cert_file
lmtp_tls_loglevel = 0
lmtp_tls_mandatory_ciphers = medium
lmtp_tls_mandatory_exclude_ciphers =
lmtp_tls_mandatory_protocols = SSLv3, TLSv1
lmtp_tls_note_starttls_offer = no
lmtp_tls_per_site =
lmtp_tls_policy_maps =
lmtp_tls_scert_verifydepth = 9
lmtp_tls_secure_cert_match = nexthop
lmtp_tls_security_level =
lmtp_tls_session_cache_database =
lmtp_tls_session_cache_timeout = 3600s
lmtp_tls_verify_cert_match = hostname
lmtp_use_tls = no
lmtp_xforward_timeout = 300s
local_command_shell =
local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
local_destination_concurrency_limit = 2
local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
local_destination_rate_delay = $default_destination_rate_delay
local_destination_recipient_limit = 1
local_header_rewrite_clients = permit_inet_interfaces
local_initial_destination_concurrency = $initial_destination_concurrency
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
local_transport = local:$myhostname
luser_relay = pcastadmin
mail_name = Postfix
mail_owner = _postfix
mail_release_date = 20080902
mail_spool_directory = /var/mail
mail_version = 2.5.5
mailbox_command =
mailbox_command_maps =
mailbox_delivery_lock = flock, dotlock
mailbox_size_limit = 0
mailbox_transport = dovecot
mailbox_transport_maps =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains =
maps_rbl_reject_code = 554
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions =
max_idle = 100s
max_use = 100
maximal_backoff_time = 4000s
maximal_queue_lifetime = 5d
message_reject_characters =
message_size_limit = 10485760
message_strip_characters =
milter_command_timeout = 30s
milter_connect_macros = j {daemon_name} v
milter_connect_timeout = 30s
milter_content_timeout = 300s
milter_data_macros = i
milter_default_action = tempfail
milter_end_of_data_macros = i
milter_end_of_header_macros = i
milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer}
milter_macro_daemon_name = $myhostname
milter_macro_v = $mail_name $mail_version
milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr}
milter_protocol = 2
milter_rcpt_macros = i {rcpt_addr}
milter_unknown_command_macros =
mime_boundary_length_limit = 2048
mime_header_checks = $header_checks
mime_nesting_limit = 100
minimal_backoff_time = 300s
multi_recipient_bounce_reject_code = 550
mydestination = $myhostname, localhost.$mydomain, localhost, binghamton.edu, $mydomain
mydomain = binghamton.edu
mydomain_fallback = localhost
myhostname = macosxserver02.binghamton.edu
mynetworks = 127.0.0.0/8,128.226.62.0/26
mynetworks_style = subnet
myorigin = $myhostname
nested_header_checks = $header_checks
newaliases_path = /usr/bin/newaliases
non_fqdn_reject_code = 504
non_smtpd_milters =
notify_classes = resource, software
parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_a uthorized_clients,relay_domains,smtpd_access_maps
permit_mx_backup_networks =
pickup_service_name = pickup
plaintext_reject_code = 450
prepend_delivered_header = command, file, forward
process_id_directory = pid
propagate_unmatched_extensions = canonical, virtual
proxy_interfaces =
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps
proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name
qmgr_clog_warn_time = 300s
qmgr_fudge_factor = 100
qmgr_message_active_limit = 20000
qmgr_message_recipient_limit = 20000
qmgr_message_recipient_minimum = 10
qmqpd_authorized_clients =
qmqpd_client_port_logging = no
qmqpd_error_delay = 1s
qmqpd_timeout = 300s
queue_directory = /private/var/spool/postfix
queue_file_attribute_count_limit = 100
queue_minfree = 0
queue_run_delay = 300s
queue_service_name = qmgr
rbl_reply_maps =
readme_directory = /usr/share/doc/postfix
receive_override_options =
recipient_bcc_maps =
recipient_canonical_classes = envelope_recipient, header_recipient
reject_code = 554
relay_clientcerts =
relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
relay_destination_concurrency_limit = $default_destination_concurrency_limit
relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
relay_destination_rate_delay = $default_destination_rate_delay
relay_destination_recipient_limit = $default_destination_recipient_limit
relay_domains = $mydestination
relay_domains_reject_code = 554
relay_initial_destination_concurrency = $initial_destination_concurrency
relay_recipient_maps =
relay_transport = relay
relayhost =
relocated_maps =
remote_header_rewrite_domain =
resolve_null_domain = no
resolve_numeric_domain = no
rewrite_service_name = rewrite
sample_directory = /usr/share/doc/postfix/examples
send_cyrus_sasl_authzid = no
sender_bcc_maps =
sender_canonical_classes = envelope_sender, header_sender
sender_canonical_maps =
sender_dependent_relayhost_maps =
sendmail_path = /usr/sbin/sendmail
service_throttle_time = 60s
setgid_group = _postdrop
showq_service_name = showq
smtp_bind_address6 =
smtp_body_checks =
smtp_cname_overrides_servername = no
smtp_connect_timeout = 30s
smtp_connection_cache_destinations =
smtp_connection_cache_on_demand = yes
smtp_connection_cache_time_limit = 2s
smtp_connection_reuse_time_limit = 300s
smtp_data_done_timeout = 600s
smtp_data_init_timeout = 120s
smtp_data_xfer_timeout = 180s
smtp_defer_if_no_mx_address_found = no
smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
smtp_destination_rate_delay = $default_destination_rate_delay
smtp_destination_recipient_limit = $default_destination_recipient_limit
smtp_discard_ehlo_keyword_address_maps =
smtp_discard_ehlo_keywords =
smtp_enforce_tls = no
smtp_fallback_relay = $fallback_relay
smtp_generic_maps =
smtp_header_checks =
smtp_helo_name = $myhostname
smtp_helo_timeout = 300s
smtp_host_lookup = dns
smtp_initial_destination_concurrency = $initial_destination_concurrency
smtp_line_length_limit = 990
smtp_mail_timeout = 300s
smtp_mime_header_checks =
smtp_mx_address_limit = 5
smtp_mx_session_limit = 2
smtp_nested_header_checks =
smtp_pix_workaround_delay_time = 10s
smtp_pix_workaround_maps =
smtp_pix_workaround_threshold_time = 500s
smtp_pix_workarounds = disable_esmtp,delay_dotcrlf
smtp_quit_timeout = 300s
smtp_quote_rfc821_envelope = yes
smtp_rcpt_timeout = 300s
smtp_rset_timeout = 20s
smtp_sasl_auth_cache_name =
smtp_sasl_auth_cache_time = 90d
smtp_sasl_auth_soft_bounce = yes
smtp_sasl_mechanism_filter =
smtp_sasl_password_maps =
smtp_sasl_path =
smtp_sasl_security_options = noplaintext, noanonymous
smtp_sasl_tls_security_options = $smtp_sasl_security_options
smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options
smtp_sasl_type = cyrus
smtp_send_xforward_command = no
smtp_sender_dependent_authentication = no
smtp_starttls_timeout = 300s
smtp_tls_CAfile =
smtp_tls_CApath =
smtp_tls_cert_file =
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_enforce_peername = yes
smtp_tls_exclude_ciphers =
smtp_tls_fingerprint_cert_match =
smtp_tls_fingerprint_digest = md5
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 0
smtp_tls_mandatory_ciphers = medium
smtp_tls_mandatory_exclude_ciphers =
smtp_tls_mandatory_protocols = SSLv3, TLSv1
smtp_tls_note_starttls_offer = no
smtp_tls_per_site =
smtp_tls_policy_maps =
smtp_tls_scert_verifydepth = 9
smtp_tls_secure_cert_match = nexthop, dot-nexthop
smtp_tls_security_level =
smtp_tls_session_cache_database =
smtp_tls_session_cache_timeout = 3600s
smtp_tls_verify_cert_match = hostname
smtp_use_tls = no
smtp_xforward_timeout = 300s
smtpd_authorized_verp_clients = $authorized_verp_clients
smtpd_authorized_xclient_hosts =
smtpd_authorized_xforward_hosts =
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 50
smtpd_client_connection_rate_limit = 0
smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks}
smtpd_client_message_rate_limit = 0
smtpd_client_new_tls_session_rate_limit = 0
smtpd_client_port_logging = no
smtpd_client_recipient_rate_limit = 0
smtpd_client_restrictions =
smtpd_data_restrictions =
smtpd_delay_open_until_valid_rcpt = yes
smtpd_discard_ehlo_keyword_address_maps =
smtpd_discard_ehlo_keywords =
smtpd_end_of_data_restrictions =
smtpd_enforce_tls = no
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions =
smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghi jklmnopqrstuvwxyz{|}~
smtpd_forbidden_commands = CONNECT GET POST
smtpd_hard_error_limit = 20
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_history_flush_threshold = 100
smtpd_junk_command_limit = 100
smtpd_milters =
smtpd_noop_commands =
smtpd_null_access_lookup_key =
smtpd_peername_lookup = yes
smtpd_policy_service_max_idle = 300s
smtpd_policy_service_max_ttl = 1000s
smtpd_policy_service_timeout = 100s
smtpd_proxy_ehlo = $myhostname
smtpd_proxy_filter =
smtpd_proxy_timeout = 100s
smtpd_pw_server_security_options = login,plain
smtpd_recipient_limit = 1000
smtpd_recipient_overshoot_limit = 1000
smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination permit
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = no
smtpd_restriction_classes =
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = no
smtpd_sasl_exceptions_networks =
smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sasl_type = cyrus
smtpd_sender_login_maps =
smtpd_sender_restrictions =
smtpd_soft_error_limit = 10
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
smtpd_tls_CAfile = /etc/certificates/*.binghamton.edu.1C15A00CCD190A0295A8587B951BA187BFD560ED.cha in.pem
smtpd_tls_CApath =
smtpd_tls_always_issue_session_ids = yes
smtpd_tls_ask_ccert = no
smtpd_tls_auth_only = no
smtpd_tls_ccert_verifydepth = 9
smtpd_tls_cert_file = /etc/certificates/*.binghamton.edu.1C15A00CCD190A0295A8587B951BA187BFD560ED.cer t.pem
smtpd_tls_dcert_file =
smtpd_tls_dh1024_param_file =
smtpd_tls_dh512_param_file =
smtpd_tls_dkey_file = $smtpd_tls_dcert_file
smtpd_tls_exclude_ciphers =
smtpd_tls_fingerprint_digest = md5
smtpd_tls_key_file = /etc/certificates/*.binghamton.edu.1C15A00CCD190A0295A8587B951BA187BFD560ED.key .pem
smtpd_tls_loglevel = 0
smtpd_tls_mandatory_ciphers = medium
smtpd_tls_mandatory_exclude_ciphers =
smtpd_tls_mandatory_protocols = SSLv3, TLSv1
smtpd_tls_received_header = no
smtpd_tls_req_ccert = no
smtpd_tls_security_level =
smtpd_tls_session_cache_database =
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_wrappermode = no
smtpd_use_pw_server = yes
smtpd_use_tls = no
stale_lock_time = 500s
stress =
strict_mailbox_ownership = yes
syslog_facility = mail
syslog_name = postfix
tls_daemon_random_bytes = 32
tls_export_cipherlist = ALL:+RC4:@STRENGTH
tls_high_cipherlist = ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH
tls_low_cipherlist = ALL:!EXPORT:+RC4:@STRENGTH
tls_medium_cipherlist = ALL:!EXPORT:!LOW:+RC4:@STRENGTH
tls_null_cipherlist = eNULL:!aNULL
tls_random_bytes = 32
tls_random_exchange_name = ${data_directory}/prng_exch
tls_random_prng_update_period = 3600s
tls_random_reseed_period = 3600s
tls_random_source = dev:/dev/urandom
trace_service_name = trace
transport_maps =
transport_retry_time = 60s
trigger_timeout = 10s
undisclosed_recipients_header = To: undisclosed-recipients:;
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 550
unknown_relay_recipient_reject_code = 550
unknown_virtual_alias_reject_code = 550
unknown_virtual_mailbox_reject_code = 550
unverified_recipient_reject_code = 450
unverified_sender_reject_code = 450
use_getpwnam_ext = yes
use_od_delivery_path = no
verp_delimiter_filter = -=+
virtual_alias_domains = $virtual_alias_maps
virtual_alias_expansion_limit = 1000
virtual_alias_maps =
virtual_alias_recursion_limit = 1000
virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
virtual_destination_concurrency_limit = $default_destination_concurrency_limit
virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
virtual_destination_rate_delay = $default_destination_rate_delay
virtual_destination_recipient_limit = $default_destination_recipient_limit
virtual_gid_maps =
virtual_initial_destination_concurrency = $initial_destination_concurrency
virtual_mailbox_base =
virtual_mailbox_domains = $virtual_mailbox_maps
virtual_mailbox_limit = 51200000
virtual_mailbox_lock = fcntl, dotlock
virtual_mailbox_maps =
virtual_minimum_uid = 100
virtual_transport = virtual
virtual_uid_maps =
macosxserver02:~ academic$
Could someone please help me figure out what is wrong?
Cheryl Tarbox
Macintosh Support Specialist
Binghamton University
[email protected]I found two things that were causing my troubles.
First, port 25 on the switch going to the server was blocked. After this was opened I was able to receive mail to macosxserver02.binghamton.edu. Since this mail server is only used for Podcast Producer notifications, I'm hoping to have this port closed back down after I get Pcast Producer back up and running and fully tested.
Second, when the upgrade from 10.5 -> 10.6 was performed, in ServerAdmin>Mail>Settings>Domain Name, only the .binghamton.edu was populated in this field, not the full domain name of macosxserver02.binghamton.edu. This was preventing me sending mail to our Google branded .binghamton.edu email addresses. Apparently 10.6 was looking locally for all the .binghamton.edu email addresses.
A big thank you to Gordon for looking into this and helping me get this resolved.
Cheryl -
How may I automatically stop and start Mail services at a set time please
Hi folks. I was wondering if anyone could tell me how to automatically stop and start Mail services (or any other services) at a set time please in Leopard Server? Is there a script someone has created which might help?
Cheers, David ( a realy newbie when it comes to administering OS X server)launchd works through a series of XML documents that define tasks to run, either at launch, on a time schedule, in response to network events, etc.
So you'll need to create two .plists - one to start the mail server and one to stop it. They should be saved in /Library/LaunchDaemons. I'd suggest something like:
/Library/LaunchDaemons/local.postfix.stop.plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple
.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>local.postfix.stop</string>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/serveradmin</string>
<string>stop</string>
<string>mail</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>1</integer>
<key>Minute</key>
<integer>00</integer>
</dict>
</dict>
</plist>
and /Library/LaunchDaemons/local.postfix.start.plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple
.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>local.postfix.start</string>
<key>ProgramArguments</key>
<array>
<string>/usr/sbin/serveradmin</string>
<string>start</string>
<string>mail</string>
</array>
<key>StartCalendarInterval</key>
<dict>
<key>Hour</key>
<integer>4</integer>
<key>Minute</key>
<integer>00</integer>
</dict>
</dict>
</plist>
You'll need to either use launchctl load /Library/LaunchDaemons/local.postfix.stop (or start) to load the tasks, or reboot your server.
I'm curious, though, as to why you want to do this. Mail is typically one of the services that people want to run 24/7 so they don't miss out on any emails (even though SMTP can tolerate this). Why do you want to shut yours down? -
Error while executing the service request : : Login to Mail Service failed
I am getting the following error in Convergence while attempting to authenticate against the mail service. I am able to access the backend mail service directly from a mail client with the same account without any issue.
Looking at the log file info:
==> iwc.log <==
AUTH: WARN from com.sun.comms.client.protocol.delegate.agent.LoginContextAgent Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,744 - Subject not found in session, creating one
AUTH: INFO from com.sun.comms.client.security.auth.modules.impl.SunAuthCallBack Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,745 - User LoginID is [email protected]
AUTH: INFO from com.sun.comms.client.security.auth.modules.impl.SunAuthCallBack Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,745 - User domain is mydomain.com
AUTH: INFO from com.sun.comms.client.security.auth.modules.impl.SunLDAPLoginModule Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,746 - Loaded UG LDAP pool...
AUTH: INFO from com.sun.comms.client.security.auth.modules.impl.SunLDAPLoginModule Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,750 - SunLDAPLoginModule:User [email protected] Authenticated
AUTH: INFO from com.sun.comms.client.security.auth.CommsUserInitContext Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,752 - Loading user entry from LDAP
AUTH: INFO from com.sun.comms.client.security.auth.CommsUserInitContext Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,754 - User entry loaded successfully
PROTOCOL: INFO from com.sun.comms.client.entity.user.sun.CommsUser Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,757 - IM Service is not enabled for user: sunImUser object class is not present
AUTH: INFO from com.sun.comms.client.web.IwcCookieManager Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:21,758 - Preferred language for user is en
PROTOCOL: WARN from com.sun.comms.client.protocol.delegate.UserPrefsCommandDelegate Thread httpSSLWorkerThread-8080-2 at 2009-03-10 04:33:22,404 - get_allprefs.iwc : Service is not enabled : im
PROTOCOL: INFO from com.sun.comms.client.entity.user.sun.CommsUser Thread httpSSLWorkerThread-8080-2 at 2009-03-10 04:33:22,405 - SMIME Service is not enabled for server
PROTOCOL: WARN from com.sun.comms.client.protocol.delegate.UserPrefsCommandDelegate Thread httpSSLWorkerThread-8080-2 at 2009-03-10 04:33:22,406 - get_allprefs.iwc : Service is not enabled : smime
PROTOCOL: WARN from com.sun.comms.client.protocol.delegate.agent.ClientOptionsAgent Thread httpSSLWorkerThread-8080-2 at 2009-03-10 04:33:22,407 - client preferences not found for domain: mydomain.com
PROTOCOL: INFO from com.sun.comms.client.entity.user.sun.CommsUser Thread httpSSLWorkerThread-8080-2 at 2009-03-10 04:33:22,418 - Client customization service is disbaled for the deployment
ADDRESS_BOOK: INFO from com.sun.comms.client.ab.coresrv.DBHandler Thread httpSSLWorkerThread-8080-1 at 2009-03-10 04:33:23,131 - Got DBPluginMap
PROXY_MAIL: INFO from com.sun.comms.client.web.services.sun.MailServiceProxy Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:23,139 - Performing Sun Mail Authentication
==> ../../messaging/log/http <==
[10/Mar/2009:04:33:23 -0400] fe-msg httpd[17512]: Account Information: connect [10.10.10.229:40786]
[10/Mar/2009:04:33:23 -0400] fe-msg httpd[17512]: General Information: [10.10.10.229:40786] POST /login.msc HTTP/1.1
[10/Mar/2009:04:33:23 -0400] fe-msg httpd[17512]: Account Notice: badlogin: [10.10.10.229:40786] proxy admin [email protected] domain=us.mydomain.com: user not found
==> iwc.log <==
PROXY_MAIL: ERROR from com.sun.comms.client.web.services.sun.MailServiceProxy Thread httpSSLWorkerThread-8080-0 at 2009-03-10 04:33:25,160 - cookies not present from MS response
==> ../../messaging/log/http <==
[10/Mar/2009:04:33:25 -0400] fe-msg httpd[17512]: Account Notice: close [10.10.10.229:40786] [unauthenticated] 2009/3/10 4:33:23 0:00:02 248 0 0
It appears that the authentication mechanism is trying to authenticate against the domain "us.mydomain.com" rather than "mydomain.com". At one point I added "us.mydomain.com" as an alias to the domain "mydomain.com" but it has since been removed. I am unsure where Convergence is pulling this information from. Any advice would be appreciated.highamjd1 wrote:
[10/Mar/2009:04:33:23 -0400] fe-msg httpd[17512]: Account Information: connect [10.10.10.229:40786]
[10/Mar/2009:04:33:23 -0400] fe-msg httpd[17512]: General Information: [10.10.10.229:40786] POST /login.msc HTTP/1.1
[10/Mar/2009:04:33:23 -0400] fe-msg httpd[17512]: Account Notice: badlogin: [10.10.10.229:40786] proxy admin [email protected] domain=us.mydomain.com: user not found
It appears that the authentication mechanism is trying to authenticate against the domain "us.mydomain.com" rather than "mydomain.com". At one point I added "us.mydomain.com" as an alias to the domain "mydomain.com" but it has since been removed. I am unsure where Convergence is pulling this information from. Convergence determines the default domain from the URL that you used to connect e.g. if you used "http://myserver.us.mydomain.com/iwc" it sets the default domain to "us.mydomain.com"
http://wikis.sun.com/display/CommSuite/Sun+Convergence+Administrative+Tasks#SunConvergenceAdministrativeTasks-HowdoIcustomizetheLoginpagebasedonthedomainnameintheURLtoaccesstheConvergenceclient%3F
Rather then use the default domain for the proxy administrator, you can hard-code the domain e.g.
./iwcadmin -w <password> -o mail.proxyadminid -v [email protected]
./iwcadmin -w <password> -o cal.proxyadminid -v [email protected] need to restart the application-server domain hosting Convergence for the changes to become active.
Regards,
Shane.
Maybe you are looking for
-
Video "Dropouts" with FCS and Mountain Lion
I would like to see if anyone else is having this problem and maybe save some folks from the experience. I have two macs. #1- Imac, 2.93, core 2 duo, 4g ram, 24". #2-Macbook Pro, 17", 2.53, 4g 4t g-raids Clean Install done on Imac of Mountain Lion.
-
Calling IP function in ABAP report
Hi guys, I would like to execute a planning function of BIIP from an ABAP report. Which function module has to be used or is there a different approach? For the old BPS planning function there was the API_SEM_BPS.... Regards Stefan
-
Which airplay speakers can be renamed?
I have been looking for a simple way to be able to play music simply around the house. We have computers, iphones and ipads. Most music will be played on ipads (streamed from multiple apps). I have figured out that Airplay is going to be the easie
-
The enduring mystery of error message 9672
I have recently got Airport Express, and can use the network for the internet without problem. However... I have connected my printer (HP Office Jet 4110 all-in-one) to the Airport. With my desktop computer (imac G4, OS 10.3.9) the wireless printer w
-
Should I uninstall Office 2004 for Mac after installing Office 2011 on new iMac ?
Replacing an aging G5 with a refurb 2011 iMac. The G5 has Office 2004 on it. When I migrate to the new iMac, do I need to move the Office 2004 to the new machine to not lose any documents ? And then unistall it on the new machine once I have Office 2