Re: Network is unreachable email error

On 12/12/07, Mihira Fernando <mihiratheace@xxxxxxxxx> wrote:
hce wrote:

$ /usr/sbin/postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = yes
biff = no
canonical_maps = hash:/etc/postfix/canonical
config_directory = /etc/postfix
inet_interfaces = loopback-only
inet_protocols = ipv4
mailbox_size_limit = 51200000
masquerade_domains = bizmail.com.au
mydestination = mail.bizmail.com.au
myhostname = debian
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtp_sasl_auth_enable = yes
smtp_sasl_mechanism_filter = login
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_sasl_type = cyrus
smtp_tls_CApath = /etc/ssl/certs
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes

The bizmail.com.au is wrong, it was my old ISP, but I could not find
where the parameters get it from?
Most likely this is in your main.cf


I only use one file mailname and I have changed mailname to
smtp.gmail.com:587, but still got port 25:
What is mailname ? are you referring to /etc/mailname ?
Your postfix configuration doesnt seem to be using any file called mailname so
changing that will not help you.

Dec 11 22:07:47 debian postfix/smtp[5598]: connect to
mailc.microsoft.com[131.107.115.214]: Network is unreachable (port 25)
Because you're not using a relayhost, Postfix is trying to send the mail
directly to the recipient's mailserver and since your ISP is blocking port 25,
Postfix cannot access it.


That's correct. I've only got three files contains specific mail
information in postfix:

1. mailname: smtp.gmail.com:587
Again, what is this file ? where is it located ?

2. canonical

yh webmail.hce@xxxxxxxxx
root webmail.hce@xxxxxxxxx

3. sasl_passwd

smtp.gmail.com webmail.hce@xxxxxxxxx:mypassword

That was working fine to my previous ISP bizmail.com.au, or may be
because the postfix config set to:

masquerade_domains = bizmail.com.au
mydestination = mail.bizmail.com.au

I could not find postfix.conf, and where I can change those parameers?
/etc/postfix/main.cf is the place to change these parameters.

If your postfix version is > 2.3 you can use the postconf -e command to edit the
main.cf like this:
postconf -e parameter_name=value

Try the following (as root) :

# postconf -e relayhost=[smtp.gmail.com]:587

To remove the masquerades :
# postconf -e masquerade_domains=

Since you're not mail.bizmail.com.au, change mydestination to either your FQDN
and/or simply localhost.

# postconf -e mydestination=localhost

Now reload Postfix:

# postfix reload

That should get things moving.

Almost, but it has following error for certificates, it seems that was
a ssl proglem, but I don't know how to fix it:

Dec 12 21:50:42 debian postfix/master[2740]: reload configuration /etc/postfix
Dec 12 21:50:42 debian postfix/qmgr[4881]: B7BFE62:
from=<webmail.hce@xxxxxxxxx>, size=455, nrcpt=1 (queue active)
Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=20:unable to get local issuer
certificate
Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=27:certificate not trusted
Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=21:unable to verify the first
certificate
Dec 12 21:50:46 debian postfix/smtp[4884]: warning: SASL
authentication failure: No worthy mechs found
Dec 12 21:50:46 debian postfix/smtp[4884]: B7BFE62: SASL
authentication failed; cannot authenticate to server
smtp.gmail.com[64.233.167.109]: no mechanism available
Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=20:unable to get local issuer
certificate
Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=27:certificate not trusted
Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
failed for smtp.gmail.com: num=21:unable to verify the first
certificate
Dec 12 21:50:50 debian postfix/smtp[4884]: warning: SASL
authentication failure: No worthy mechs found
Dec 12 21:50:50 debian postfix/smtp[4884]: B7BFE62:
to=<webmail.hce@xxxxxxxxx>, relay=smtp.gmail.com[64.233.167.111]:587,
delay=1022, delays=1015/0.17/7.1/0, dsn=4.7.0, status=deferred (SASL
authentication failed; cannot authenticate to server
smtp.gmail.com[64.233.167.111]: no mechanism available)


I should clarify that my main.cf was copied from a friend's Ubuntu
machine. Not sure if something was missing? I did check that
/etc/ssl/certs/ssl-cert-snakeoil.pem and
/etc/ssl/private/ssl-cert-snakeoil.key did exist.

$ sudo /usr/sbin/postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = yes
biff = no
canonical_maps = hash:/etc/postfix/canonical
config_directory = /etc/postfix
inet_interfaces = loopback-only
inet_protocols = ipv4
mailbox_size_limit = 51200000
masquerade_domains = localhost
mydestination =
myhostname = debian
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost = smtp.gmail.com:587
smtp_sasl_auth_enable = yes
smtp_sasl_mechanism_filter = login
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_sasl_type = cyrus
smtp_tls_CApath = /etc/ssl/certs
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes


How can I fix it?

Thank you.

Jim


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Relevant Pages

  • Re: saslauthd? I cant seem to get it installed for postfix..
    ... > But still cant find saslauthd... ... Here's a recipy for getting SASL running with Postfix on a Sarge box. ... 2] Get the SASL Authentication daemon and SASL authentication modules: ... CA certificate filename ...
    (Debian-User)
  • Re: Linux and Verizon FiOS
    ... > to quit using sendmail to get to the Internet. ... mutt through esmtp should work for outgoing mail. ... I use postfix as my ... One quirk with postfix and Verizon's authentication required ...
    (comp.os.linux.misc)
  • Re: Postfix and MySQL
    ... SMTP Authentication with Postfix and MySQL ... a way for them to say to your SMTP server "hey I ... One way to do is is using SMTP Authentication. ...
    (RedHat)
  • Re: Postfix: can send but cant receive
    ... Then it's something about postfix for sure. ... < myhostname = osireion.abydos.kmt ... # The daemon_directory parameter specifies the location of all Postfix ... # The mydestination parameter specifies the list of domains that this ...
    (comp.sys.mac.system)
  • Re: Postfix and SASL2 authentication
    ... >Subject: Postfix and SASL2 authentication ... but now I'm trying to use SASL2. ... To unsubscribe, ...
    (freebsd-questions)