Help request to receive mail from intenet - HOWTO verify?

Further

Hi Matthias,

Thanks for answering.
I have no clue as to auth. users.
During install I guess a couple of packages didn't make it for on reason or another. I do remember I had to install TLS afterwards... But I have to admit I don't know TLS... So even harder to understand and get thins to work.

I am also trying to increase logging for Postfix. Perhaps you have tips on this?
I have added -v to the smtp line in master.cf;
As I noticed the ip numbers of no-Ip reflector service were appearing in Iptraf, I added both to mynetworks
This way I get to see more, but still I'm at a loss..

logging shows this:

May  5 13:30:41 mail postfix/smtpd[3571]: connect from mail1.no-ip.com[204.16.252.100]
May  5 13:30:41 mail postfix/smtpd[3571]: match_list_match: mail1.no-ip.com: no match
May  5 13:30:41 mail postfix/smtpd[3571]: match_list_match: 204.16.252.100: no match
May  5 13:30:41 mail postfix/smtpd[3571]: match_list_match: mail1.no-ip.com: no match
May  5 13:30:41 mail postfix/smtpd[3571]: match_list_match: 204.16.252.100: no match
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostname: mail1.no-ip.com ~? no-ip.com
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostname: mail1.no-ip.com ~? 127.0.0.0/8
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostaddr: 204.16.252.100 ~? 127.0.0.0/8
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostname: mail1.no-ip.com ~? 192.168.80.0/24
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostaddr: 204.16.252.100 ~? 192.168.80.0/24
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostname: mail1.no-ip.com ~? 204.16.252.100
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostaddr: 204.16.252.100 ~? 204.16.252.100
May  5 13:30:41 mail postfix/smtpd[3571]: > mail1.no-ip.com[204.16.252.100]: 220 mail.ipanini.com ESMTP Postfix
May  5 13:30:41 mail postfix/smtpd[3571]: watchdog_pat: 0x8081cc8
May  5 13:30:41 mail postfix/smtpd[3571]: vstream_fflush_some: fd 11 flush 36
May  5 13:30:41 mail postfix/smtpd[3571]: smtp_get: EOF
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostname: mail1.no-ip.com ~? 127.0.0.0/8
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostaddr: 204.16.252.100 ~? 127.0.0.0/8
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostname: mail1.no-ip.com ~? 192.168.80.0/24
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostaddr: 204.16.252.100 ~? 192.168.80.0/24
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostname: mail1.no-ip.com ~? 204.16.252.100
May  5 13:30:41 mail postfix/smtpd[3571]: match_hostaddr: 204.16.252.100 ~? 204.16.252.100
May  5 13:30:41 mail postfix/smtpd[3571]: lost connection after CONNECT from mail1.no-ip.com[204.16.252.100]
May  5 13:30:41 mail postfix/smtpd[3571]: disconnect from mail1.no-ip.com[204.16.252.100]
May  5 13:30:41 mail postfix/smtpd[3571]: master_notify: status 1

But I keep getting:

mail postfix/smtpd[3571]: lost connection after CONNECT from mail1.no-ip.com[204.16.252.100]

I also find this in logs:

May  5 12:34:15 mail postfix/trivial-rewrite[23615]: warning: do not list domain ipanini.com in BOTH mydestination and virtual_alias_domains
May  5 12:34:15 mail cyrus/imap[23617]: TLS server engine: No CA file specified. Client side certs may not work
May  5 12:34:15 mail postfix/pipe[23591]: warning: no @ in recipient address: erwin.panen
May  5 12:35:05 mail cyrus/imap[24177]: TLS server engine: No CA file specified. Client side certs may not work
May  5 12:35:28 mail postfix/pipe[23591]: warning: no @ in recipient address: erwin.panen
May  5 12:41:44 mail postfix/smtpd[24910]: warning: database /etc/aliases.db is older than source file /etc/aliases
May  5 12:44:24 mail postfix/smtpd[24976]: warning: database /etc/aliases.db is older than source file /etc/aliases
May  5 12:50:41 mail postfix/smtpd[26196]: warning: database /etc/aliases.db is older than source file /etc/aliases
May  5 12:52:51 mail postfix/smtpd[26252]: warning: database /etc/aliases.db is older than source file /etc/aliases
May  5 12:56:06 mail postfix/smtpd[28089]: warning: database /etc/aliases.db is older than source file /etc/aliases
May  5 13:04:15 mail cyrus/imap[23617]: idle for too long, closing connection

Thanks for your suggestions!!

I'm not sure how No-IP test works. My proposal was make a telnet on no-ip.com port 25 wich redirects to your server.

Regarding mynetworks you should explain how you auth. your users. If auth is on no-ip.com you may use mynetworks.
For dial-in-users i use permit_sasl_authenticated.

Regards

Matthias

narrowing down to solution - nearly there..

Ok guys..
We're closing in to the solution.
Indeed I had a config error in firewall settings.

So at the moment I can see No-Ip connect to my server behind the firewall, BUT:

May  5 09:59:00 mail postfix/anvil[1644]: statistics: max connection rate 1/60s for (2525:204.16.252.112) at May  5 09:51:48
May  5 09:59:00 mail postfix/anvil[1644]: statistics: max connection count 1 for (2525:204.16.252.112) at May  5 09:51:48
May  5 09:59:00 mail postfix/anvil[1644]: statistics: max cache size 2 at May  5 09:53:48
May  5 09:59:26 mail postfix/smtpd[2414]: connect from www.no-ip.com[204.16.252.112]
May  5 09:59:26 mail postfix/smtpd[2414]: lost connection after CONNECT from www.no-ip.com[204.16.252.112]
May  5 09:59:26 mail postfix/smtpd[2414]: disconnect from www.no-ip.com[204.16.252.112]

Could this be due to the fact the IP range from No-Ip is not listed in mynetworks (main.cf)?

The No-Ip test service reports this:

2525: Invalid response (non 220),

Thanks again!

Config problem?

Thanks for your reply;
As I am not a Postfix guru, I try to do things step by step. I believe you can configure Postfix to listen on multiple ports.
At the moment I have only listening on port 2525 enabled.
I have tested manual connection from local lan, both port 25 and after config change, on port 2525. This works perfectly.

I 'think' port forwarding in my firewall is properly setup.
The No-IP service has a testing facility with which it tests connection to 'your' mail server on port 2525.
I just now setup Iptraf.
When I monitor eth0 (there is only 1 nic) AND at the same time activate the No-IP test, I immediately see the IP address from No-Ip appear in Iptraf:

┌204.16.252.112:46805                                    =       1            60  S---     eth0

I have been browsing the Postfix information and found this:

My main.cf contains this line:
---------------------------------
mynetworks = 127.0.0.0/8, 192.168.80.0/24
---------------------------------

Could this be the reason I will not receive mail from outside?
Do I have to include the IP address from my router connected to my ISP? If yes, how to solve this with dynamic IP?

Thanks for your suggestions!

Erwin

Maybe a check of the connection via telent direct on port 25 and via no-ip.com on port 2525 will show the differences.
After 1 second shouldn't be a disconnect through a timeout.
Check also Logs from your firewall.

Regards

Matthias

Hi forum,

I have successfully managed to setup Hyperion on Ubuntu 7.10 thanks to your wonderfull install script!! Thanks a lot once more.

After quite some fiddling and research I am now at a point where sending mail worldwide fully works. (It did not 'out of the box'; I had to install a couple of extra packages, but now this part works)

However, I am unable to receive mails from the internet.
I do realize this may not entirely be OX's problem.
I am behind a firewall, and ISP is blocking most ports, certainly 25.
To overcome this, I have setup a No-IP account that forwards mail to port 2525.
Initially I had this fully working on a previous SuSE 10.3 install. Unfortunately I wrecked this working install by testing Hyperion install script, so I can't check anymore.

So now I'm seeking help on how to check for functionality of receiving mail.
During testing I find this in mail.log:

May  2 17:16:40 era postfix/smtpd[381]: connect from mail1.no-ip.com[204.16.252.100]
May  2 17:16:41 era postfix/smtpd[381]: lost connection after CONNECT from mail1.no-ip.com[204.16.252.100]
May  2 17:16:41 era postfix/smtpd[381]: disconnect from mail1.no-ip.com[204.16.252.100]

I'm quite convinced that my portforwarding from 2525 to 25 again on my firewall is properly setup.
What can I do to find a solution? Could this be due to timing issues? (because of No-IP being in between?)

Thanks a lot for your help!

Erwin