domain.provider.org - имя сервера
200.400.900.300 - IP
Локалка 10.0.0.*
Проверка DNS:
=============
> set type=all
> domain.provider.org
Server: [10.0.0.1]
Address: 10.0.0.1
domain.provider.org
primary name server = domain.provider.org
responsible mail addr = domain.provider.org
serial = 13
refresh = 3600 (1 hour)
retry = 600 (10 mins)
expire = 86400 (1 day)
default TTL = 3600 (1 hour)
domain.provider.org nameserver = domain.provider.org
domain.provider.org internet address = 200.400.900.300
domain.provider.org MX preference = 10, mail exchanger = mail.domain.provider.org
domain.provider.org MX preference = 20, mail exchanger = mail.provider.org
domain.provider.org internet address = 200.400.900.300
mail.domain.provider.org internet address = 200.400.900.300
mail.provider.org internet address = 200.400.900.5
/etc/tcp.smtp
==============
:allow
(
было:
127.:allow,RELAYCLIENT=""
10.0.0.:allow,RELAYCLIENT=""
:allow
но open relay мне вообще не нужен
)
/var/qmail/rc
==============
#!/bin/sh
exec env - PATH="/var/qmail/bin:$PATH" \
qmail-start "`cat /var/qmail/control/defaultdelivery`"
/var/qmail/supervise/qmail-pop3d/run
====================================
#!/bin/sh
PATH=/var/qmail/bin:/usr/local/bin:/usr/bin:/bin
export PATH
exec tcpserver -H -R -v -c100 0 110 qmail-popup domain.provider.org.com \
/home/vpopmail/bin/vchkpw qmail-pop3d Maildir 2>&1
/var/qmail/supervise/qmail-send/run
====================================
#!/bin/sh
exec /var/qmail/rc
/var/qmail/supervise/qmail-smtpd/run
===================================
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`
if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z "$LOCAL" ]; then
echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
echo /var/qmail/supervise/qmail-smtpd/run
exit 1
fi
if [ ! -f /var/qmail/control/rcpthosts ]; then
echo "No /var/qmail/control/rcpthosts!"
echo "Refusing to start SMTP listener because it'll create an open relay"
exit 1
fi
exec /usr/local/bin/softlimit -m 2000000 \
/usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
/var/qmail/bin/qmail-smtpd domain.provider.org \
/home/vpopmail/bin/vchkpw /usr/bin/true 2>&1
================================================================
/var/qmail/control/rcpthosts
=============================
domain.provider.org
.ru
.com
(Он действительно нужен, если -x /etc/tcp.smtp.cdb?)
все юзеры созданы vpopmail для домена domain.provider.org,чтобы пароли
отличались от системных, т.к. юзеров почты больше, чем тех, кто может
логиниться на сервер.
Симптомы:
посылаем письмо:
user1@domain.provider.org -> user2@domain.provider.org - OK
user1@domain.provider.org -> somewhere - OK (стало работать именно
сегодня, вчера не работало, почему - непонятно)
somewhere -> user1@domain.provider.org - FAILED
"Hi. This is the qmail-send program at somewhere.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<user1@domain.provider.org>:
Sorry, I couldn't find a mail exchanger or IP address. (#5.4.4)
--- Below this line is a copy of the message.
И самое прикольное:
somewhere1 -> somewhere2 (через SMTP 200.400.900.300) - OK.
Выглядит ну ооочень похоже на Open Relay :(
P.S. Права везде правильные
Вариант для распечатки
OpenNET: Виртуальная конференция (Public)
on
15-Дек-03, 13:34 (MSK)
