WBM User Unknown - firewall config change

In my Security Log I have been seeing a strange message that keeps appearing, see below.
I have no idea what this is or if this is someone hacking my router or if a virus is on my computer. It has appeared even during times when my computer has been turned off. I have my firewall set at max security and changed my password. Even after changing my password this appeared. Not sure what this is or what to do about it but I am very concerned.
Firewall Setup Configuration change
WBM user Unknown (0.0.0.0) has changed security settings[repeated 5 times, last time on Aug 25 03:00:26 2010]

This explanation was given by Actiontec (they build the router for Verizon)
Product:MI424WR (Rev. I) - Wireless Broadband Router
Incident Summary
=========================
Since Verizon can't answer this question I would like to know for the
people who built this router.
Verizon Actiontec MI242WR (not sure of Rev)
firmware 40.19.36
Why do I get this log security event every day?
mmm dd hh:mm:ss yyyy
Firewall Setup Configuration change WBM user Unknown (0.0.0.0) has
changed security settings
=========================
Resolution:
=========================
Each and every day, Verizon has a server that makes contact with your
router to check its firmware.
No changes are made to your router however, it simply checks the router
to make sure the firmware is up to date and this generates a log entry.
=========================

Similar Messages

Firewall-config cannot change firewall zones of NetworkManager conns

I have been playing around with firewalld and firewall-config recently to try to harden up my laptop.
My regular user account is in group wheel, and I have polkit set up. So, any administrative tasks prompt me for my password. I can configure networks with NetworkManager (and even set a firewall zone from within NetworkManager). And with a password, I can modify firewalld rules.
However, if I attempt to change the firewall zone of a network connection (either under Options > Change Zones of Connections... or by left-clicking on firewall-applet), I get the following stackdump:
Traceback (most recent call last):
File "/usr/bin/firewall-config", line 1007, in change_zone_connection_editor
editor.run()
File "/usr/bin/firewall-config", line 5301, in run
settings = connection_obj.GetSettings()
File "/usr/lib/python3.4/site-packages/dbus/proxies.py", line 70, in __call__
return self._proxy_method(*args, **keywords)
File "/usr/lib/python3.4/site-packages/slip/dbus/proxies.py", line 51, in __call__
return dbus.proxies._ProxyMethod.__call__(self, *args, **kwargs)
File "/usr/lib/python3.4/site-packages/dbus/proxies.py", line 145, in __call__
**keywords)
File "/usr/lib/python3.4/site-packages/dbus/connection.py", line 651, in call_blocking
message, timeout)
dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 8 matched rules; type="method_call", sender=":1.78" (uid=2290 pid=4997 comm="/usr/bin/python -Es /usr/bin/firewall-config ") interface="(unset)" member="GetSettings" error name="(unset)" requested_reply="0" destination=":1.6" (uid=0 pid=1461 comm="/usr/bin/NetworkManager --no-daemon ")
So, it is some permission problem. If I run firewall-config as root and try again, everything works as intended. So, I think this is DBUS or Polkit configuration problem. Is there some way to determine why access is denied or what DBUS call is being attempted? I have tried dbus-monitor and d-feet, but I still can't find the call the fails. (I have never had to troubleshoot DBUS calls before, so I'm quite confused as is.)
What's weird is I can change the firewall zone of the network configuration using nm-connection-editor. So is this bug in how firewall-config and NetworkManager communicate?
Any advice on which permissions to check would be greatly appreciated.

Hi Kristian.
The problem in my case was the RRAS/Gateway system was no longer available. Unfortunately, VMM still "wanted" to connect to it to complete the removal; regardless of the dependency order. (BTW, I was trying to remove objects in the
correct order.)
I expect VMM should be enhanced to allow objects, such as the ones I had, to be removed if the communication with the backing system fails. Say, a warning/confirmation/force popup with the GUI, or something somilar for the various PowerShell cmdlets.
- Mark

I'm apple user. some one has hacked my user ID profile & has changed my security questions. Also hacker has give rescue email , which is absolutely unknown to me.Resultantly i can't make any purchase from apple. How apple can help me. Thank

I'm apple user. some one has hacked my user ID profile & has changed my security questions. Also hacker has give rescue email , which is absolutely unknown to me.Resultantly i can't make any purchase from apple. How apple can help me.
Thanks in anticipation.

You will need to contact Support in your country to get the security questions reset (these are user-to-user forums) : Apple ID: Contacting Apple for help with Apple ID account security (if your account's password has been changed then they should also be able to reset that for you)
When they've been reset you can then use the steps on this page to change the rescue email address to an account that you have access to, for potential future use : Manage your Apple ID primary, rescue, alternate, and notification email addresses

%ONLINE-SP-6-REGN_TIMER: multiple line cards down after config change

Hi,
I was wondering if someone could help.
I recently changed the entire configuration on two 6509 switches, and the fibre modules on slot 7 and 8 have gone down on BOTH switches. It would be easy to say that its a hardware fault but I cannot understand how module 7 and 8 can go down on both switches. Initially I thought it maybe due to IOS bug 22-33.SXI2a.bin" so I upgraded it to s72033-advipservicesk9_wan-mz.122-18.SXF12a.bin but it still down.
These are the actions I have carrried out to try resolve the issue:
- Reverted back to orginal configs but no luck
- Tried to use "power enable" command but the status light on both modules seems to turn red and then go off again.
- I have also tried to put one of the fibre modules into a different slot but no joy
- Upgraded the IOS from 22-33.SXI2a. to 122-18.SXF12a
I am running out of ideas.. can anyone help ? I am sure that hardware fault cannot occur on BOTH modules 7 & 8 on BOTH switches after config change.
The error in the log shows that modules "failed to bring online because of registration timer event". I understand this means that it is unable to download the image within the allocated time.. maybe I could manually copy the image onto the line card if that is possible ?? any ideas ?
Daughterboard         WS-SUP720          SAL135063V2 4.0    Ok
7 Centralized Forwarding Card WS-F6700-CFC       SAL1419HKJK 4.1    PwrDown
8 Centralized Forwarding Card WS-F6700-CFC       SAL1419HAG0 4.1    PwrDown
Mod                                                      Hw    Fw           Sw           Status
7 5475.d016.075c to 5475.d016.075f   3.1   Unknown      Unknown      PwrDown
8 5475.d0bb.7404 to 5475.d0bb.7407   3.1   Unknown      Unknown      PwrDown
System image file is "disk0:s72033-advipservicesk9_wan-mz.122-18.SXF12a.bin"
BOOT variable = disk0:s72033-advipservicesk9_wan-mz.122-18.SXF12a.bin,12;sup-bootdisk,1;
CONFIG_FILE variable =
BOOTLDR variable =
Configuration register is 0x2102
Standby is not present.
May 28 17:25:10.352: %C6KPWR-SP-4-DISABLED: power to module in slot 7 set off (Module Failed SCP dnld)
May 28 17:25:10.452: %ONLINE-SP-6-REGN_TIMER: Module 8, Proc. 0. Failed to bring online because of registration timer event
sm(cygnus_oir_bay slot8), running yes, state wait_til_online
Last transition recorded: (disabled)-> disabled (disabled)-> disabled2 (restart)-> wait_til_disabled (timer)-> may_be_occupied (timer)-> occupied (known)-> can_power_on (yes_power)-> powered_on (real_power_on)-> check_power_on (timer)-> check_power_on (power_on_ok)-> wait_til_online
May 28 17:25:10.452: %C6KPWR-SP-4-DISABLED: power to module in slot 8 set off (Module Failed SCP dnld)
May 29 11:41:16.601: %SYS-5-CONFIG_I: Configured from console by console

Would anyone know if the line cards are maybe failing due to Embedded Event Manager configuration ? The person who configured this lab has left the company so I am not sure what the EEM configurations actually mean.
The reason i am suspecting the EEM configuration is because the error in the log seems to suggest the module failed due to registration timer event.
May 30 14:47:00.366: %ONLINE-SP-6-REGN_TIMER: Module 8, Proc. 0. Failed to bring online because of registration timer event
Just trying to check all the possibilities as I have tried everything else,
event manager directory user policy "disk0:/fcp_eem"
event manager directory user repository tftp://10.11.x.x/xxx/
event manager scheduler script thread class default number 10
no event manager policy Mandatory.go_switchbus.tcl type system
event manager policy rp_test.tcl type user
event manager detector rpc ssh acl 60 event manager directory user policy "disk0:/fcp_eem"
event manager directory user repository tftp://10.11.216.145/FCPD/
event manager scheduler script thread class default number 10
no event manager policy Mandatory.go_switchbus.tcl type system
event manager policy rp_test.tcl type user
event manager detector rpc ssh acl 60

Is there a way to find all config changes between clients and sap system

We have our Dev system with clients
310 - Developer make changes and create transport
400 - Test client
410 - a copy of our Production system (over 1 year ago0
TST - this is our quality system with one client
101
Production system one client
101
I know if i do a database copy from Production to our TST system, both systems would be exact.
Abaper Director wants to know all the configuration changes that are different between Devopment client 310 - Test and production.
I told him that in development client 310 the abaper or functional users make most of the changes if they do not get transported they would be missing.
I cannot copy to client 310 otherwise we would loose all of our version management.
Is there another way that I can see the config changes between all these clients.
Thanks
Joe

You should be able to use tcode SCU0
Regards,
Brian

ACS will not save the config changes to reports

I have configured a very old ACS appliance, 4.1. At this time this is what I we have to use. The authentication is working fine, the reports for accounting, TACACS+ accounting is only saving the login and logout of the users and not any config changes that are being made.
I'm hoping that someone may have an idea of what accounting command I am using or if this older version has some changes that need to be done as the config/aaa lines I use today and work on newer version work. I was under the impression that this line "aaa accounting exec default start-stop group tacacs+" would send every command to the tacacs server?
aaa new-model
aaa authentication login default group tacacs+
aaa authorization config-commands
aaa authorization exec default group tacacs+ none
aaa authorization commands 0 default group tacacs+ none
aaa authorization commands 1 default group tacacs+ none
aaa authorization commands 2 default group tacacs+ none
aaa authorization commands 7 default group tacacs+ none
aaa authorization commands 15 default group tacacs+ none
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
any ideas would be3 appreciated. thanks for reading
Yvon

Hi martijn,
Are there some custom fields in this list or some duplicate columns? Please have a check.
For more information about the possible reasons and solutions, see
http://social.technet.microsoft.com/Forums/en-US/sharepointcustomizationprevious/thread/ae946f73-3126-41ad-833b-25e4cc2b7723#e22af3fe-8203-45c4-8d19-e18041a048e2
http://social.technet.microsoft.com/Forums/en-US/sharepointgenerallegacy/thread/59895a6b-7f61-431f-a762-e3fd9d81fe34
http://social.technet.microsoft.com/Forums/en/sharepointcustomizationprevious/thread/eba4cd7e-498a-465f-adea-decae44d7a8c
Regards,
Kelly Chen

Vbscript - detect config changes

not sure if this is the right community to post this kind of question but i am after some example of vbscripts to detect routing change for example like to know when someone add a new route entry, advertised in to our campus networks, would like to know the no of routing entries being added, now of routes in the routing table /etc including vlan changes, RPF failures within the environment and number of entries in our multicast table including new additions.
any example you can provide will be useful. thanks in advance.

Config Changes are Changes to Customizing Objects (e.g. through IMG). Config changes are usually settings that a functional user would do in comparison to technical changes that involve ABAP which would require a developer.
In general you could say that config changes are usually done by functional consultants whereas anything that involves ABAP coding is not config related.
E.g. You set up order types in IMG and transport those settings. If you would now make changes to your DEV config but didn't transport this you will have config differences between DEV and Q.
Hope that helps,
Michael

Cannot contact user after a name change

One of our users got married and changed her last name. My colleagues changed her name and alias in AD and in Exchange, and they changed her email address, keeping the old address as a secondary SMTP address in Exchange. I ran the following command
on the Lync server:
Set-CsUser -Identity "CN=JNewname,OU=HQ,DC=Corp,DC=Com" -SipAddress sip:[email protected]
After the user logged off the Domain and then logged back on, she could log in to Lync and could initiate an IM conversation with me. However, I still cannot contact her. She was never in my favorites list, and when I start typing her new alias,
she shows up in my Lync client with her new name and then "Presence unknown". When I try to initiate an IM conversation with her, my Lync client says "We couldn't send this message because we couldn't find Newname, Jane".
I have tried deleting the Lync local cache from my client machine and still have the same errors. What am I missing with this name change?
Thank you very much for your help.

Thank you! That must have been what I should have done after I changed the sip address. As it turns out, the contact had started working sometime before you posted this. Does this update process take place automatically over time and the
Update-CsAddressBook command would have forced the update immediately? I had changed the sip address about 2 hours before I posted this question.
Thanks so much for your help. I will incorporate this into a memo I am writing for making a name change.

ISG - ASR1002 config change

Hi Support Team,
We have had two instants - when there was an outage on our broadband customer.
Our 'rancid' server was able to pick up the change in config on one of the BRAS - AS1002
Config change is attached below...this was removing and adding the configs as noticed by the Rancid Server.
Any assistance anyone can give in identifying the root cause will be very much appreciated as so far the ASR log has no indication that the change was manually done by any of our users.
- class-map type traffic match-any ISG_OPENGARDEN
- match access-group output name OPENGARDEN_ACL_OUT
- match access-group input name OPENGARDEN_ACL_IN
+ class-map type traffic match-any Empty-Class
class-map type traffic match-any L4REDIRECT
match access-group input name L4REDIRECT_ACL_PORTAL_IN
- class-map type traffic match-any Empty-Class
+ class-map type traffic match-any ISG_OPENGARDEN
+ match access-group input name OPENGARDEN_ACL_IN
+ match access-group output name OPENGARDEN_ACL_OUT
class-map type control match-all IP_UNAUTH_COND
match timer IP_UNAUTH_TIMER
We are looking forward to hear from anyone who can throw us some light into this 'strange issue'
Thankyou in advance,
RWaqa

Hi,
You can select particular absence/Attendance types in this table V_T554S_ESSEX ... based on selection in this table you can restrict entries in CAT2/ ESS portal.
Try this it may help.
Thanks

Send snmp when config changes

Hi all
I have an ASA 8.2 and I would like to know if theres any snmp trap that can be sent. when a configuration is made.
Thanks

You could try the following command.
snmp-server enable traps entity config-change
This is assuming you have your authentication correctly configured as you would need your users to use the same password as their login password for the enable password. for example:
aaa authentication enable consol LOCAL
Please remember to select a correct answer and rate helpful posts

Speaker config changes rando

Hey guys, Ive looked all over for help on this problem but cant find anything.. I have an Audigy 2 ZS and its been running fine using a 5. speaker setup, or so I thought .. The problem is for no reason at all the Audigy will simply output to 2 speakers instead of the 5. that its setup as.Playing music with Winamp or WMP does the same .. I start the music, it plays in 5., if I then skip to the next song it only plays in 2 speaker?mode and I have to STOP the playback and start it again to activate 5. mode again.Playing games is the same also.. One game works fine with 5., then the next is only 2. .. Before you ask "Yes I have set them all to 5. output "?THX / EAX / Control Panel are all set to 5. output, and it stays that way even when its only outputting in?stereo mode as mentioned above. I also run a small app called 'Speaker Guard' that forces XP to always have 5. output set, and any program that tries to change it will not be able to. I have uninstalled / reinstalled with all the latest drivers etc, but nothing seems to fix this problem. Any help would be appreciated.

Config Changes are Changes to Customizing Objects (e.g. through IMG). Config changes are usually settings that a functional user would do in comparison to technical changes that involve ABAP which would require a developer.
In general you could say that config changes are usually done by functional consultants whereas anything that involves ABAP coding is not config related.
E.g. You set up order types in IMG and transport those settings. If you would now make changes to your DEV config but didn't transport this you will have config differences between DEV and Q.
Hope that helps,
Michael

Mavericks mail server "user unknown" error

For some reason, the mail server bounces the email sent to local network users and returns a "user unknown" error. The same error is received when an email from an external domain is sent to one of the open directory associated email addresses.
However, sending email from these accounts works just fine, just like sending and receiving email associated with the diradmin account.

Hi Jeffrey,
Changed the mx record to the juffrou......net domain, without succes.
Please find the export below.
Regards,
Lex
juffrouwjannie:~ xandstorm-juffrpuw-jannie$ sudo serveradmin settings mail
Password:
mail:postfix:smtpd_pw_server_security_options:_array_index:0 = "cram-md5"
mail:postfix:smtpd_pw_server_security_options:_array_index:1 = "digest-md5"
mail:postfix:smtpd_pw_server_security_options:_array_index:2 = "gssapi"
mail:postfix:smtpd_pw_server_security_options:_array_index:3 = "login"
mail:postfix:smtpd_pw_server_security_options:_array_index:4 = "plain"
mail:postfix:spam_quarantine = "[email protected]"
mail:postfix:smtp_reject_list_enabled = no
mail:postfix:smtp_sasl_auth_enable = no
mail:postfix:submit_cred:juffrouwjannie.vanderwerff.net:username = "submit"
mail:postfix:submit_cred:juffrouwjannie.vanderwerff.net:password = "lvFBZ9973YcUBWtAPEX7Dq"
mail:postfix:submit_cred:XANDSTORM-JUFFRPUW-JANNIEs-Mac-mini.local:username = "submit"
mail:postfix:submit_cred:XANDSTORM-JUFFRPUW-JANNIEs-Mac-mini.local:password = ""
mail:postfix:smtp_auth_relay_dict:smtp_auth_relay_userid = ""
mail:postfix:smtp_auth_relay_dict:smtp_auth_relay_pwd = ""
mail:postfix:smtp_auth_relay_dict:smtp_auth_relay_host = ""
mail:postfix:client_permit_mynetworks = yes
mail:postfix:smtpd_tls_cert_file = "/etc/certificates/juffrouwjannie.vanderwerff.net.69F8227930804D0241A279CBC08AF DFBA687F300.cert.pem"
mail:postfix:maps_rbl_domains_enabled = yes
mail:postfix:spam_subject_tag = "***JUNK MAIL*** "
mail:postfix:smtpd_tls_CAfile = "/etc/certificates/juffrouwjannie.vanderwerff.net.69F8227930804D0241A279CBC08AF DFBA687F300.chain.pem"
mail:postfix:message_size_limit_enabled = yes
mail:postfix:virus_db_last_update = "2014-04-19 19:50:45 +0000"
mail:postfix:mail_enabled_groups = _empty_array
mail:postfix:add_whitelist_domain:_array_index:0 = "XANDSTORM-JUFFRPUW-JANNIEs-Mac-mini.local"
mail:postfix:add_whitelist_domain:_array_index:1 = "vanderwerff.net"
mail:postfix:virus_scan_enabled = no
mail:postfix:spam_notify_admin_email = "[email protected]"
mail:postfix:virus_db_log_level = "info"
mail:postfix:black_hole_domains:_array_index:0 = "zen.spamhaus.org"
mail:postfix:spam_ok_locales = "en"
mail:postfix:spam_scan_enabled = yes
mail:postfix:virus_quarantine = "[email protected]"
mail:postfix:reject_unauth_piplining_enabled = no
mail:postfix:spam_rewrite_subject = yes
mail:postfix:message_size_limit = 10485760
mail:postfix:mynetworks:_array_index:0 = "127.0.0.0/8"
mail:postfix:mynetworks:_array_index:1 = "[::1]/128"
mail:postfix:virus_log_level = "info"
mail:postfix:host_whitelist:_array_index:0 = "juffrouwjannie.vanderwerff.net"
mail:postfix:rbl_override_list = _empty_array
mail:postfix:greylist_enabled = no
mail:postfix:list_server_log_level = "info"
mail:postfix:group_expansion:start_interval = 10
mail:postfix:group_expansion:enable_group_expansion = no
mail:postfix:virus_notify_recipients = no
mail:postfix:luser_relay_enabled = no
mail:postfix:mydomain = "vanderwerff.net"
mail:postfix:enable_list_server = yes
mail:postfix:mydestination:_array_index:0 = "localhost"
mail:postfix:mydestination:_array_index:1 = "$mydomain"
mail:postfix:virus_notify_admin_email = "[email protected]"
mail:postfix:enable_virtual_domains = no
mail:postfix:spam_notify_admin = no
mail:postfix:required_hits = 6
mail:postfix:add_whitelist_host:_array_index:0 = "juffrouwjannie.vanderwerff.net"
mail:postfix:always_bcc_enabled = no
mail:postfix:enable_var_mail = no
mail:postfix:enable_smtp = yes
mail:postfix:smtpd_tls_key_file = "/etc/certificates/juffrouwjannie.vanderwerff.net.69F8227930804D0241A279CBC08AF DFBA687F300.key.pem"
mail:postfix:relayhost = ""
mail:postfix:mynetworks_enabled = no
mail:postfix:virtual_domains = _empty_array
mail:postfix:spam_ok_languages = "en"
mail:postfix:rbl_override_enabled = no
mail:postfix:log_rolling_days = 1
mail:postfix:enable_smtp_in = yes
mail:postfix:virtual_users_maps = _empty_array
mail:postfix:tls_server_options = "require"
mail:postfix:spam_action = "deliver"
mail:postfix:log_rolling_days_enabled = yes
mail:postfix:list_server_post_to_archve = no
mail:postfix:spam_log_level = "warn"
mail:postfix:smtp_uce_controlls = 1
mail:postfix:relayhost_enabled = no
mail:postfix:list_server_share_archives = no
mail:postfix:virus_action = "delete"
mail:postfix:virus_db_update_days = 12
mail:postfix:virus_notify_admin = no
mail:postfix:domain_whitelist:_array_index:0 = "XANDSTORM-JUFFRPUW-JANNIEs-Mac-mini.local"
mail:postfix:domain_whitelist:_array_index:1 = "vanderwerff.net"
mail:postfix:enable_smtp_out = yes
mail:postfix:text_only_attachments = no
mail:postfix:reject_unknown_client_enabled = no
mail:postfix:log_level = "info"
mail:postfix:myhostname = "juffrouwjannie.vanderwerff.net"
mail:global:auto_auth = no
mail:global:skip_enable_service_check = no
mail:global:service_data_path = "/Library/Server/Mail"
mail:imap:aps_topic = "com.apple.mail.XServer.0051960a-2429-481a-b784-c073eed597e1"
mail:imap:servername = ""
mail:imap:imap_auth_clear = yes
mail:imap:auth_gssapi_hostname = ""
mail:imap:admins = _empty_array
mail:imap:lmtp_luser_relay_enabled = no
mail:imap:lmtp_luser_relay = ""
mail:imap:pop_auth_clear = yes
mail:imap:enable_listid_autosave = "no"
mail:imap:max_imap_connections = 1000
mail:imap:log_level = "info"
mail:imap:tls_key_file = "/etc/certificates/juffrouwjannie.vanderwerff.net.69F8227930804D0241A279CBC08AF DFBA687F300.key.pem"
mail:imap:imap_auth_plain = yes
mail:imap:postmaster_address = "[email protected]"
mail:imap:quotawarn = 80
mail:imap:enable_quota_warnings = no
mail:imap:pop_auth_gssapi = no
mail:imap:junk_mail_userid = "junkmail"
mail:imap:global_quota = 0
mail:imap:partitions = _empty_array
mail:imap:tls_ca_file = "/etc/certificates/juffrouwjannie.vanderwerff.net.69F8227930804D0241A279CBC08AF DFBA687F300.chain.pem"
mail:imap:enforce_quotas = no
mail:imap:not_junk_mail_userid = "notjunkmail"
mail:imap:imap_auth_digest_md5 = yes
mail:imap:request_enable_webmail = no
mail:imap:client_cert_enabled = no
mail:imap:aps_topic_enabled = yes
mail:imap:imap_auth_gssapi = no
mail:imap:tls_server_options = "require"
mail:imap:pop_auth_apop = yes
mail:imap:quota_full_tempfail = yes
mail:imap:imap_urlauth_host = " "
mail:imap:enable_imap = yes
mail:imap:postmaster = "postmaster"
mail:imap:enable_pop = yes
mail:imap:partition-default = "/Library/Server/Mail/Data/mail"
mail:imap:imap_auth_login = yes
mail:imap:enable_sieve = yes
mail:imap:imap_auth_cram_md5 = yes
mail:imap:notification_server_enabled = yes
mail:imap:tls_cert_file = "/etc/certificates/juffrouwjannie.vanderwerff.net.69F8227930804D0241A279CBC08AF DFBA687F300.cert.pem"

Fetchmail, Postfix user unknown in local recipient table

Hello all --
My fetchmail job has been failing to get mail to my mailbox with this error:
SMTP error: 450 4.1.1 <username@localhost>: Recipient address rejected: User unknown in local recipient table
(I replace my actual user name with "username")
The problem goes away temporarily if I stop and restart postfix, but it comes back almost immediately.
I'm having a hard time finding any clues in postfix's log. I'm not too sure what to look for, and it's pretty voluminous!
Any suggestions?

AlanNYC wrote:
If I turn off local recipient checking, will I actually get my mail?
Yes, all email properly addressed should be delivered to you without problems.
The line only affects improperly addressed email, in this case allowing them to be accepted instead of rejected.
Since you are running Spamassassin and an IMAP server, I suggest also using the line
luser=[email protected]
which will send all improperly addressed mail to the address specified by "[email protected]". This is what I meant by "catch-all" address.
If you find postfix giving you problems after adding the lines, simply delete them or comment them out by adding a hash mark to the front of the line, e.g.
#localrecipientmaps =
Alternatively, you can simply make no changes and allow the log messages to accumulate. The messages mean that postfix is doing its job by rejecting email addressed to users that don't exist. The above steps allow you to receive mail addressed to [email protected], where "anything" is any string allowed in an email address.
I assume you're testing your changes using a separate email account, but in case you're not: sign up for a free email account with any of a number of free email services (Gmail, Yahoo) and test your postfix install as you make changes using the free account.

User unknown in local recipient table

I have some of my mail users getting this error:
(reason: 550 5.1.1 <<[email protected]>: Recipient address rejected: User unknown in local recipient table)
It also comes in this form:
Action: failed
Status: 5.6.0
Diagnostic-Code: x-unix; user1: Mailbox does not exist
user1 and domain.com changed to protect the innocent.
Any thoughts on what might be causing this?

Here's the output from postconf -n
= = = = = = = = = = = = = = = = = = = =
alias_maps = hash:/etc/aliases,hash:/var/mailman/data/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
disablevrfycommand = yes
enableserveroptions = yes
html_directory = no
inet_interfaces = all
localrecipientmaps = proxy:unix:passwd.byname $alias_maps
luser_relay =
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
messagesizelimit = 104857600
mydestination = $myhostname,localhost.$mydomain,localhost,mycompany.com
mydomain = mycompany.com
mydomain_fallback = localhost
myhostname = mail.mycompany.com
mynetworks = 127.0.0.0/8
mynetworks_style = host
newaliases_path = /usr/bin/newaliases
ownerrequestspecial = no
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpdclientrestrictions = permitsaslauthenticated, permit_mynetworks, rejectrblclient zen.spamhaus.org, permit
smtpddatarestrictions = permit_mynetworks, rejectunauthpipelining, permit
smtpdenforcetls = no
smtpdhelorequired = yes
smtpdhelorestrictions = permitsaslauthenticated, permit_mynetworks, checkheloaccess hash:/etc/postfix/helo_access, rejectnon_fqdnhostname, rejectinvalidhostname, permit
smtpdpw_server_securityoptions = cram-md5,login
smtpdrecipientrestrictions = permitsasl_authenticated,permit_mynetworks,reject_unauthdestination,permit
smtpdsasl_authenable = yes
smtpdsenderrestrictions = permitsaslauthenticated, permit_mynetworks, rejectnon_fqdnsender, permit
smtpdtlsCAfile = /etc/certificates/mail.mycompany.com.chcrt
smtpdtls_certfile = /etc/certificates/mail.mycompany.com.crt
smtpdtls_keyfile = /etc/certificates/mail.mycompany.com.key
smtpdtlsloglevel = 0
smtpduse_pwserver = yes
smtpdusetls = yes
unknownlocal_recipient_rejectcode = 550
virtualaliasmaps = hash:/var/mailman/data/virtual-mailman
virtualmailboxdomains = hash:/etc/postfix/virtual_domains
virtual_transport = lmtp:unix:/var/imap/socket/lmtp
= = = = = = = = = = = = = = = = = = = =
real company = "mycompany"

Adding failover ASA back after config changes on "primary" ASA?

I had a working active/passive pair of ASA5510's, and then I had to do a rush firmware upgrade, but didn't have time to do it on the secondary at the same time. Now I have made config changes and upgraded the secondary firmware to be the same, and wish to know if I plug it back in if it will think the secondary has the "correct" config or if it will know that the primary is newer. I disconnected the failover cable because it was complaining about version mismatches constantly.
Is it safe to add the secondary back in or is it possible it will be declared newer and overwrite the config?

Hi,
There should be no problem adding another ASA back to the network.
Here is what I just did (and what happened) on a rather big customer
A power fault broke Secondary ASA and it never booted up
A replacement device was aquired
The replacement device was
Updated to matching hardware setup (mainly memory)
Updated to same software (OS and ASDM)
Configured with its physical interface up with "no shutdown"
Configured with ONLY "failover" configurations (exact configuration ofcourse depends on your setup)
It was attached to the rack and powered up.
After boot every interface BUT "failover" was attached to the network (Dont necesarily have to do it in this order) and I checked that every single one was up.
After everything above was done I connected the failover interface and watched as the devices "noticed" eachother and the Active firewall copied its configuration to the new Secondary unit.
This was done in a factory environment and all went fine.
There should be no problems doing this though I personally still prefer doing the replacement by attaching a "blank" ASA with only Failover configurations.
EDIT: Beeing that I am always paranoid when doing anything like this, I had ofcourse saved the configurations to flash on a separate file for worst case scenario and was ready to boot the original primary unit incase it took in something it wasnt supposed to.
EDIT 2: In the case where you think the Secondary unit doesnt have the exact configuration of the Primary unit, you can issue the command write standby on the Primary unit to save/copy the COMPLETE configuration of the Primary unit to the Secondary. Think the "write mem" on the Primary unit only updates some changes you have made to the Secondary unit
- Jouni

WBM User Unknown - firewall config change

Similar Messages

Maybe you are looking for