SMTP Postfix refuses all connections both internal and external

My server initially started bouncing all outgoing e-mail from our users saying that an invalid user name and password has been specified. Now it has progressed to bouncing all SMTP traffic both incoming and outgoing. I've got hours into trying to decode the mystery of why Postfix is doing this but still can't come up with an explanation. The server is an OD master running just AFP and Mail. Here is the output from postconf -n
If anyone can provide me with some insight I would be extremely grateful!
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter =
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
header_checks =
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = dovecot
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mapsrbldomains =
messagesizelimit = 10485760
mydomain = mydomain.com
mydomain_fallback = localhost
mynetworks = 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpdclientrestrictions = permit_mynetworks permitsaslauthenticated rejectrblclient zen.spamhaus.org permit
smtpdenforcetls = no
smtpdhelorequired = no
smtpdhelorestrictions =
smtpdpw_server_securityoptions = cram-md5,gssapi
smtpdrecipientrestrictions = permitsaslauthenticated permit_mynetworks rejectunauthdestination permit
smtpdsasl_authenable = yes
smtpdtlsCAfile = /etc/certificates/server.mydomain.com.5E4E6414CE4D89A47A4D36A04661CAEAC9F0DE82. chain.pem
smtpdtls_certfile = /etc/certificates/server.mydomain.com.5E4E6414CE4D89A47A4D36A04661CAEAC9F0DE82. cert.pem
smtpdtls_excludeciphers = SSLv2, aNULL, ADH, eNULL
smtpdtls_keyfile = /etc/certificates/server.mydomain.com.5E4E6414CE4D89A47A4D36A04661CAEAC9F0DE82. key.pem
smtpdtlsloglevel = 0
smtpduse_pwserver = yes
smtpdusetls = yes
unknownlocal_recipient_rejectcode = 550
virtualaliasmaps =

I'm also seeing entires like this in the SMTP log. I don't know if this is a misconfiguration of main.cf or something else that I haven't considered. Authentication for AFP works fine though.
Feb 19 13:35:50 server postfix/smtpd[29788]: connect from unknown[10.0.55.116]
Feb 19 13:35:51 server postfix/smtpd[29788]: lost connection after EHLO from unknown[10.0.55.116]
Feb 19 13:35:51 server postfix/smtpd[29788]: disconnect from unknown[10.0.55.116]

Similar Messages

Add account fails both internally and externally, but autodisover is working

Recently our internal DNS zone was deleted on remote DC and the change propagated to all of our DNS server. I was able to make a copy of zone and restore it. The Exchange server is back online and working for existing machines, but when we attempt to add
a users profile to a new machine or a remote machine the auto setup fails. I am not sure if it is DNS related, because our external DNS was not affected, but I wanted to mention it because I think it has something to do with problem. The following happens
now:
It finds the user.
Fails to logon:
Tells me I must provide the mail serve name
When I click on check name it tells me the name cannot be resolved.
I have been banging my head against the wall here, because both internal and external exchange connectivity test pass. Also,
I cannot find anything in the event logs that looks related. Any ideas?

Hi,
Please refer to the following article to troubleshoot the issue:
Outlook: Unable to perform a Check Name or connect to an Exchange mailbox
To resolve this issue, import the User Shell Folders registry key from a working Windows User Profile.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added
protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs
Hope this helps!
Thanks.
Niko Cheng
TechNet Community Support

Delivery report shows status of Pending for external address. Email sent to both internal and external addresses.

We have an Exchange 2013 on-premise server and seem to have an issue with emails sent to internal and external users at the same time.
The issue came to light because someone sent an email to 44 recipients, of which one was internal. None of the external recipients received the email. I checked the delivery report in the EAC and found the internal email marked as 'Delivered' and all of
the external ones marked as 'Pending'. I checked the queues and there were none. I did some testing and sent an email to just one of the external addresses on the list, it arrived. I tried sending the email again to all of the recipients, the external ones
all showed 'Pending'. I tried it again, but this time excluded the internal email address and all of the 43 external emails were immediately delivered.
So it seems that the issue only arises when we are sending to both internal and external addresses.
I then tried a test email to one internal address and one external address. The Delivery report says that the internal address was delivered immediately, while the external address is 'Pending' and gives more information saying: 'Message delivery is taking
longer than expected. There may be system delays. For more information, contact your helpdesk.'. To add further mystery to this, the email was actually delivered.
So, I have two concerns:
First is seems that some emails sent both internally and externally are only arriving internally. This is a huge problem because I don't know how many have been affected. There may be many lost emails we don't know about.
Second, it looks like I can't trust the delivery report. It says pending for some emails which didn't arrive, but it also says pending for some which did arrive. That is no good at all.
For info the server is running Windows Server 2012. I have run a Microsoft Update to check if there are any to apply and the only Exchange one is a spam filter update, which I doubt has any bearing but I will apply when I get chance.

Hi Neil,
According to the description, I find a related KB on Exchange 2010:
https://support.microsoft.com/kb/2694474?wa=wsignin1.0
It has the similar situation as yours.
This issue occurs because a function in a message tracking component tries to obtain the information for the recipient instead of the external recipient.
Please try to upgrade to the latest Exchange update to check whether this issue can be solved.
Also please check whether Throttling has been set.
Please run "Get-TransportService | fl" to check the MaxOutboundConnections parameter value.
More details to see:
Message throttling
http://technet.microsoft.com/en-us/library/bb232205(v=exchg.150).aspx
Thanks
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

Cisco ISE with both internal and External RADIUS Server

Hi
I have ISE 1.2 , I configured it as management monitor and PSN and it work fine
I would like to know if I can integrate an external radius server and work with both internal and External RADIUS Server simultanously
So some computer (groupe_A in active directory ) will continu to made radius authentication on the ISE internal radius and other computer (groupe_B in active directory) will made radius authentication on an external radius server
I will like to know if it is possible to configure it and how I can do it ?
Thanks in advance for your help
Regards
Blaise

Cisco ISE can function both as a RADIUS server and as a RADIUS proxy server. When it acts as a proxy server, Cisco ISE receives authentication and accounting requests from the network access server (NAS) and forwards them to the external RADIUS server. Cisco ISE accepts the results of the requests and returns them to the NAS.
Cisco ISE can simultaneously act as a proxy server to multiple external RADIUS servers. You can use the external RADIUS servers that you configure here in RADIUS server sequences. The External RADIUS Server page lists all the external RADIUS servers that you have defined in Cisco ISE. You can use the filter option to search for specific RADIUS servers based on the name or description, or both. In both simple and rule-based authentication policies, you can use the RADIUS server sequences to proxy the requests to a RADIUS server.
The RADIUS server sequence strips the domain name from the RADIUS-Username attribute for RADIUS authentications. This domain stripping is not applicable for EAP authentications, which use the EAP-Identity attribute. The RADIUS proxy server obtains the username from the RADIUS-Username attribute and strips it from the character that you specify when you configure the RADIUS server sequence. For EAP authentications, the RADIUS proxy server obtains the username from the EAP-Identity attribute. EAP authentications that use the RADIUS server sequence will succeed only if the EAP-Identity and RADIUS-Username values are the same.

ILife with both internal and external hard drives?

I've been considering switching from a homebrew, multi-boot desktop to a MacBook for my primary computer, in part so I can hang out with my family in the living room rather than be exiled to the home office when I want to compute.
But here's my concern: I have media. We have about 50 GB of iTunes; maybe 30 GB of iPhoto; and tons and tons of digital video that would be stored in iMovie. Obviously the libraries are all interlinked. And it's all growing. I also like to rip DVDs and re-encode them for my iPod and AppleTV. Right now, my desktop has 480 GB of internal storage and that's just about enough.
I have discovered that the MacBook only comes with an option up to 250 GB. I absolutely need AppleCare, so I can't get an aftermarket hard drive. (All my Macs break - this one from the office that I'm on right now has a bum DVD drive, and my wife's has needed both fan and logic board replacements.)
While I'm aware of the existence of external hard drives, I'm concerned about Apple's non-external-hard-drive-friendly way of storing iLife data. If I wanted to keep more recent or useful music and photos on the internal drive but older stuff on an external, and still be able to use iLife seamlessly, would that be possible? (I see myself editing recent video in the living room, but then hooking back into the external HD in the office if I need older stuff.)
What solutions are out there for integrating data stores on both internal and external hard drives into an iLifestyle?
Thanks!

Sascha Segan1 wrote:
.. What solutions are out there for integrating data stores on both internal and external hard drives into an iLifestyle?
all iApps (iPhoto, iTunes, iM08) support usage of external drives as 'mass storage' devices.. you can tell all apps which drive to use for the Libraries.. there some tools out there, which even allow the usage of 2/many different Libraries in iTunes/iPhoto..
for iM in detail: the Projects are small files, and should stay internal (allthough I'm discribing a 'hack' on my site: http://karsten.schluter.googlepages.com/im08tricks Project Library (and Events) on External Harddrive); the Events (=GBs) could be located on as much ext. HDDs as you want..
but ...
all iApps are single-user .. you can NOT 'share' Libraries to 2/many different users; the idea of a 'media server' which hosts/shares all kind of data to all kind of users is not 'on concept' of iLife ..

Pictures on both internal and external HDs

Hi -My iphoto libray pulls pictures from both my internal and external hard drives. When the external is turned off or disconnected, I get a lot of outline/exclamation point errors. I'd like to pull all the external photos onto the internal hard drive, have all the pictures in one place, and ensure the whole set is backed up in time machine. But I can't tell which pictures need to be imported without going one at a time...through 30000 pictures. Sigh. Is there a better way to do this? Thanks!

If you use iPhoto Library Manager - http://www.fatcatsoftware.com/iplm/ - to rebuild the library while the photos are available and the preference is checked it will create a new managed library - the old one will be intact in case you are not happy with the results of the rebuild
LN

Cisco Presence/Jabber both internally and externally

We have installed the Cisco Presence server and intergrated it with our Microsoft Exchnage for ldap, Cisco Unified Communications Manager, and Cisco Unity Connection for phone and voicemail support. It is all installed inside our corporate network and with my testing, I have found it to be available outside our Corporate network as long as I have a VPN configured and active from outside.
However, management wants the enitre thing accessible from both within and from the outside without having to have a VPN connection. Does anyone know of a method for doing this or could point me to some good documentation as to what would be required?
Thanks in advance.
Gene

If you are using Jabber onPrem with CUPS, the only way this will work (for now) is using VPN. This will give the external using IM/Presence/CUCM. You cant really open CUCM or CUPS via 5060 Ports and expect it to work. The problem is the internal/external IPs are not proxied correctly and presence will not work.
If your management really wants to have this seamless inside and out, the best solution right now is to use Jabber Cloud and use VPN back for CUCM call control on the client. (mobile or PC/Mac).
Hopefully sooner than later we will see a "Presence gateway" that will sit in the DMZ and connect external IM clients to the internal CUPS server,

Dark displays, now both internal and external

I've occationally had problems with the display on my 17" MacBook Pro 2008 (Model A1261): sometimes the screen would not turn on. It started the first year I had it, but at the Apple store (when I got a bad key fixed) the repair man just said "Yeah, I've that problem sometimes too" like it was nothing to bother about :[
When I'd had the MBP for 2 years the problem became worse. Sometimes only my added display would light up, behaving as if it were my main display. But clicking on Detect displays would bring up MBP's display as well.
But now I can't get any display on at all, neither internal nor external :[ :[ :[
I've tried restarting several times. No response in either display.
What can I do?? I've had the MBP for 2 and a half year now.
Reset PRAM doesn't work - there's no regular upstart sound, but I can hear the hard disk running and the little white light in the front is on.
And if I need to do a complete reinstall, is there any reasonable way to save the files? (Hard to see what I'm doing when the screen is black...)

The only thing you have to do is to click the 'Reset' button in Preferences>Advanced>General.
Your 'iTunes Music folder location' will be reset to the default location on the internal disk.
All new imported music will be stored there.
New added music will be stored there if you have the checked 'copy files to iTunes Music folder location when adding to library' in Preferences>Advanced>General.
When your new Mac arrives and you want to transfer the library, first copy the entire 'iTunes' folder (in ./Users/YourUsername/Music) from your eMac to the exact same location on the new Mac.
To transfer the iTunes folder, you can burn it on CD or DVD, but a lot easier is to put the eMac in Firewire target mode.
This article tells you how to do that:
How to use FireWire target disk mode
After the transfer of the iTunes folder is completed, connect your external drive and run iTunes.
The new Mac will have a newer iTunes version and it will take some time to convert the old library format to the new format.
Once all works OK and If you want all your music on your new Mac, use the 'Consolidate Library...' command from the Advanced menu in the menubar.
All music from the external disk will be copied to the internal disk.
Hope this helps.
M
17' iMac fp 800 MHz 768 MB RAM Mac OS X (10.4.6) Several ext. HD (backup and data)

2610 LAN configuration with devices on both internal and external IPs

I am more than a bit rusty and reconfiguring a network due the arrival of a new SBS office server. The new office server (and clients) needs to connect to the Internet via our Cisco 2610 router. The server is say 10.1.1.10 and the FastEthernet0 interface on the router is set to 10.1.1.200. The 2600 has a Serial0 interface that is connected to a leased line with an external IP address. We also have our own class C IP range used for web, mail and dns servers.
So:
OfficeServer (10.1.1.10)<----->FastEthernet0(10.1.1.200)[2600 ROUTER1]Serial0(123.123.123.54)<---leased line--->ISP(Internet)
However, I also have a webserver etc in our office, with an external IP address from our range, that needs to, and can, see the Internet.
So, we also have, on the same router:
WebServer (90.4.123.35)<----->FastEthernet0(90.4.123.254)[2600 ROUTER1]Serial0(123.123.123.1)<---leased line--->ISP(Internet)
interface FastEthernet0/0
ip address 10.1.1.200 255.255.0.0 secondary
ip address 90.4.123.254 255.255.255.0
ip nat inside
speed auto
full-duplex
interface Serial0/0
description Connection to NTL
ip address 123.123.123.54 255.255.255.252
ip broadcast-address 123.123.123.55
ip access-group inboundfilter in
ip access-group outboundfilter2 out
ip nat outside
encapsulation ppp
no fair-queue
The FastEthernet0 interface has both an internet and external IP address mapped to it. Currently the office PCs use the external IP address as their gateway address and this works, however the new server is more secure and won't allow this.
There is NAT and access-lists running on the Cisco and each office PC has an internal IP address that is NATted to a dedicated external IP.
At the moment the webserver can see the Internet, but the office server cannot. Office PCs can see the Internet if they use the external IP address mapped to FastEthernet0/0 direct as their gateway address (although you get a message suggesting that this is not the way to go). So I am trying to resolve this whilst also trying to set it up better/properly.
What is the best way to do this (all assistance appreciated)?
Do I need to NAT the internal office server IP to an external IP address for it to see the internet?
Do I need to NAT the internal gateway address to an external IP address or will the router be able to route this anyhow?
Could it be DNS, so should I set the DNS server on the office server NIC to the ISPs DNS server, or to the Cisco

The best solution is to renumber the webserver to an internal ip address and configure a static nat on the router:
ip nat inside source static
http://www.cisco.com/en/US/docs/ios/12_3/12_3x/12_3xe/feature/guide/gt_ntsip.html
regards,
Leo

12" won't read Cds, DVDs OK both internal and external optical drives WEIRD

Very strange one.
12" 1Ghz, 1.25gb RAM - Combo drive - 10.5.4; Great condition.
No CDs mount, Audio, CDR all dyes. No mounto at all.
DVDs mount and play fine, shop bought films data on DVD-/+R, all OK
The above is true for the internal Matshita combo drive and for two other external Lacie d2s
One Firewire and one USB both exhibit the same behaviour.
Finder Preferences are ticked to mount both DVD and CD.
Please solve this one, I am going slightly mad. It doesn't make sense to my mind
Cheers all!

Hello HankMossop,
I would recommend taking a look through the following article for some useful troubleshooting steps that can help get your SuperDrive working.
Apple Computers: Troubleshooting the slot-loading SuperDrive
http://support.apple.com/kb/HT2801
Cheers,
Allen

I have lost space on my drives - both internal and external drives.

I am new to Mac. I have a Macbookpro using 10.6.7.
I used boot camp to add a partition to my internal drive so I could add some much needed PC apps. Before adding apps I decided to rough it and deleted the partition, But when I use get info for the drive I do not see the space added back to the total available. Is there something that I forgot to do? The boot camp partition no longer appears in the sidebar of finder.
For external drives I run get info on the single folder in the drive and it tells me that I am using 200G - it is a 650G drive. When I run get info on the drive it tells me I have 39G available. Where has the other 411G gone? Could there be hidden files that I can't see? If so, how do I make hidden files visible on a Mac. Could it be backup files from the automatic backup (time feature) feature? If so, would they be hidden files?
I really am having a hard time with this Mac but am learning - I keep pushing it and bought books and read anything I can get to learn but it is frustrating sometimes. However, I refused to give it. Sites like this one are a real blessing and I can't say enough about all the help I get from all of you.
Thanks.
Bhubha

You should repair both disk with disk utility, open the program and click repair also repair your permissions. You can also use Omni Disksweeper to check your file usage.

Can Time Machine be used to backup both internal and external drive?

I have a Mac Book Pro with Lion OSX installed. I have an external fire wire hard drive connected which contains my iTunes Library. I would like to use Time Machine to backup both the internal drive and the attached external drive. Can this be done?

Yes, make sure the drive is not excluded under the Privacy tab in Time Machine.
System Preferences > Time Machine

Application for both internal and external use

Hi,
I am looking to develop an application for a small company that will be an order tracking system. The app would need to be accessible externally over the web for customers to log in and check their order status, but also internally by the company staff to update statuses, enter comments etc.
Does anyone have any suggestions or best practices regarding security when pushing an app to the external world?
One thing I considered was having two apps, one for the internal usage and one for the external usage, both with separate parsing schemas. Then create everything under the internal schema and grant select up to the external schema. That way it ensures at the DB level that the application can only read from certain tables. Then anything which the external site does need to update, either do it through a staging table, or grant up the appropriate tables to have insert allowed. Then put triggers on the tables which will raise an exception if columns are updated from a user who isn't authenticated etc.
Does this all sound ok? Is it overkill? Anyone any other suggestions? I want to avoid having multiple databases or instances, simply because for the size of the company it doesn't warrant such complexity (or cost/resources). We won't be storing any "sensitive" data so to speak, but obviously need to protect against malicious intruders.
Thanks

When looking to design your application in this scenario it is best to assume the worst and see what impact it has on your environment. There are several attack scenarios that immediately spring to mind
A problem in the Apex framework leads to running arbitrary SQL statements.
A problem in the code leads to running arbitrary SQL statements.
A problem in the code leads to cross-site scripting attacks.
Configuration problems mean Apex components are available to the Internet.
Obviously if cost is an issue there will always be a compromise in security so make sure you can do the the absolute best with the resources available to you. Separating the Internet side from the Internal side as much as you can is always a good idea.
Sony was recently fined in the UK for not doing enough to protect personal data, so you should have evidence to ensure you have done the absolute best you can.
Two things available over the internet currently to help you;
https://secure.recx.co.uk/ApexSecUI/ - ApexSec Security Scanner
http://www.enkitec.com/products/esert_cloud - eSert cloud
Both provide free credits to scan your application for security problems for free.
Edited by: Recx Ltd on Feb 6, 2013 12:12 PM

Using both internal and external drives for iTunes

Hi
I know this is a basic question . I did a few searches and my head started spinning .
I've been using an external drive for my music but it only has 3GB left .
My internal drive has 12GB so I would like to start to use it for storage of music along with the external . (I'll be getting a new mac soon)
In Importing I have >Create file names with track number
Advanced>Keep iTunes Music folder organized
This is on my Panther eMac with iTunes 4.7.1
thanks in advance for any help
----------bob
Powerbook Mac OS X (10.4.6) Panther eMac

The only thing you have to do is to click the 'Reset' button in Preferences>Advanced>General.
Your 'iTunes Music folder location' will be reset to the default location on the internal disk.
All new imported music will be stored there.
New added music will be stored there if you have the checked 'copy files to iTunes Music folder location when adding to library' in Preferences>Advanced>General.
When your new Mac arrives and you want to transfer the library, first copy the entire 'iTunes' folder (in ./Users/YourUsername/Music) from your eMac to the exact same location on the new Mac.
To transfer the iTunes folder, you can burn it on CD or DVD, but a lot easier is to put the eMac in Firewire target mode.
This article tells you how to do that:
How to use FireWire target disk mode
After the transfer of the iTunes folder is completed, connect your external drive and run iTunes.
The new Mac will have a newer iTunes version and it will take some time to convert the old library format to the new format.
Once all works OK and If you want all your music on your new Mac, use the 'Consolidate Library...' command from the Advanced menu in the menubar.
All music from the external disk will be copied to the internal disk.
Hope this helps.
M
17' iMac fp 800 MHz 768 MB RAM Mac OS X (10.4.6) Several ext. HD (backup and data)

DNS pointing to both internal and external addresses

I am currently going through the very helpful lynda.com OS X Server 10.5 videos to set up an Advanced Server from the ground up.
DNS was set up first and for the most part everything has gone for me just like Sean shows in the movies.
Our company's domain name is automaticduck.com so I have been setting up DNS records for our internal network to some of the machines, for example the Xserve I'm configuring is called duckxserve.automaticduck.com and it points to the proper internal IP address. I set up my MacBook Pro OS X Client system to use the new DNS server on duckxserve and while it works for getting around the internal network now I'm having problems connecting to outside addresses on our domain such as www.automaticduck.com and support.automaticduck.com. If I remove the internal Xserve from my client's DNS servers list I am able to get out again.
I thought I would be smart and add A NAME records to my internal DNS server with the external IP addresses, however this didn't change anything, I still couldn't get out to them.
We are NOT hosting our own web site and email etc., we have DNS set up through our web host with A NAME, C NAME and MX records for various servers that are exposed to the outside world.
My intention based on my understanding was that with the setup of this internal Xserve running DNS it would simply serve DNS records to the internal network. How can my set up my internal DNS to it does not conflict with my ability to get out to our outside public addresses?
Message was edited by: Wes Plate

Antonio Rocco wrote:
Add your ISP DNS Addresses to the forwarders section and that should be it.
Thank you for the reply, Tony.
If I set up the forwarders section* can I just not include information about our automaticduck.com servers that are not on our internal network? It seems to me (not that I know anything about this) that if our internal DNS server does not know about www.automaticduck.com or support.automaticduck.com then requests for those addresses should get passed on to our ISP's name servers*, right?
*68.238.128.12, 68.238.64.12
This doesn't work like I thought it would.
I have my client set up to use my new internal DNS server's IP address for a DNS server and I am able to get to the local machines defined therein (like http://wesworkg5/ ), however I cannot get to my outside sites... www.automaticduck.com or support.automaticduck.com (I can't even get to discussions.apple.com for some reason).
I can get to other outside sites that I've never been to before (so I know they have to get looked up), like whitehouse.gov or harvard.edu or almondjoy.com
The DNS log doesn't show me anything, maybe it isn't supposed to in a case like this.
Whatcha think? Thank you so much.

SMTP Postfix refuses all connections both internal and external

Similar Messages

Maybe you are looking for