主题: 外网能发不能收,内网收发正常。跪求解决方案

大概架构如下:
域名是在中资源申请的域名,A/MX记录已经在中资源做过解析,解析正常。ping域名及返回的IP均正常

内部e-mail server 映射到公网IP。在路由器上开放25,80,110端口。telnet  *.*.*.*  25/110均 正常。

服务器是用ubuntu 10.04  64位操作系统,安装了iredmail。下面是简单配置,请各位大侠给予帮助,

小弟已经研究几天了,快崩溃列。主要问题是:对外网能发不能收,内网收发正常,先谢谢各位了。

主机名:
cynovo@mail:~$ hostname -f
mail.cynovo.com.cn


mian.cf  配置:
cynovo@mail:~$ sudo postconf -n
[sudo] password for cynovo:
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
allow_min_user = no
append_dot_mydomain = no
biff = no
bounce_queue_lifetime = 1d
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
delay_warning_time = 0h
disable_vrfy_command = yes
enable_original_recipient = no
home_mailbox = Maildir/
inet_interfaces = all
inet_protocols = ipv4
mail_name = iRedMail
mail_version = 0.6.1
mailbox_command = /usr/lib/dovecot/deliver
mailbox_size_limit = 15728640
maximal_backoff_time = 4000s
maximal_queue_lifetime = 1d
minimal_backoff_time = 300s
mydestination = cynovo.com.cn, mail.cynovo.com.cn, localhost.cynovo.com.cn, localhost
mydomain = cynovo.com.cn
myhostname = mail.cynovo.com.cn
mynetworks = 127.0.0.0/8  192.168.1.0/24
mynetworks_style = subnet
myorigin = mail.cynovo.com.cn
proxy_read_maps = $canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps
queue_run_delay = 300s
readme_directory = no
recipient_bcc_maps = proxy:ldap:/etc/postfix/ldap_recipient_bcc_maps_domain.cf, proxy:ldap:/etc/postfix/ldap_recipient_bcc_maps_user.cf
recipient_delimiter = +
relay_domains = $mydestination, proxy:ldap:/etc/postfix/ldap_relay_domains.cf
relayhost =
sender_bcc_maps = proxy:ldap:/etc/postfix/ldap_sender_bcc_maps_domain.cf, proxy:ldap:/etc/postfix/ldap_sender_bcc_maps_user.cf
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_enforce_tls = no
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,permit_sasl_authenticated, check_helo_access pcre:/etc/postfix/helo_access.pcre
smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unlisted_recipient, check_policy_service inet:127.0.0.1:7777, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, check_policy_service inet:127.0.0.1:10031
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = no
smtpd_sasl_local_domain =
smtpd_sasl_path = dovecot-auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_sender_login_maps = proxy:ldap:/etc/postfix/ldap_sender_login_maps.cf
smtpd_sender_restrictions = permit_mynetworks, reject_sender_login_mismatch, permit_sasl_authenticated
smtpd_tls_cert_file = /etc/ssl/certs/iRedMail_CA.pem
smtpd_tls_key_file = /etc/ssl/private/iRedMail.key
smtpd_tls_loglevel = 0
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
transport_maps = proxy:ldap:/etc/postfix/ldap_transport_maps_user.cf, proxy:ldap:/etc/postfix/ldap_transport_maps_domain.cf
virtual_alias_maps = proxy:ldap:/etc/postfix/ldap_virtual_alias_maps.cf, proxy:ldap:/etc/postfix/ldap_virtual_group_maps.cf, proxy:ldap:/etc/postfix/ldap_sender_login_maps.cf, proxy:ldap:/etc/postfix/ldap_catch_all_maps.cf
virtual_gid_maps = static:1001
virtual_mailbox_base = /var/vmail
virtual_mailbox_domains = proxy:ldap:/etc/postfix/ldap_virtual_mailbox_domains.cf
virtual_mailbox_maps = proxy:ldap:/etc/postfix/ldap_virtual_mailbox_maps.cf
virtual_minimum_uid = 1001
virtual_transport = dovecot
virtual_uid_maps = static:1001
cynovo@mail:~$

mail.log没有任何数据
cynovo@mail:~$ sudo tail /var/log/mail.log
cynovo@mail:~$

dovecot.log 为:

cynovo@mail:~$ sudo tail /var/log/dovecot.log
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: Effective uid=1001, gid=1001, home=/var/vmail
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: Quota root: name= backend=maildir args=
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: Quota rule: root= mailbox=* bytes=104857600 messages=0
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: Quota warning: bytes=89128960 (85%) messages=0 command=/usr/local/bin/dovecot-quota-warning.sh 85
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: Quota warning: bytes=94371840 (90%) messages=0 command=/usr/local/bin/dovecot-quota-warning.sh 90
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: Quota warning: bytes=99614720 (95%) messages=0 command=/usr/local/bin/dovecot-quota-warning.sh 95
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: maildir: data=~/vmail1/cynovo.com.cn/w/ww/www/www-2010.11.29.12.25.48//Maildir/
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: maildir++: root=/var/vmail/vmail1/cynovo.com.cn/w/ww/www/www-2010.11.29.12.25.48//Maildir, index=, control=, inbox=/var/vmail/vmail1/cynovo.com.cn/w/ww/www/www-2010.11.29.12.25.48//Maildir
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: Namespace : Using permissions from /var/vmail/vmail1/cynovo.com.cn/w/ww/www/www-2010.11.29.12.25.48//Maildir: mode=0700 gid=-1
Nov 30 12:34:04 IMAP(www@cynovo.com.cn): Info: Disconnected: Logged out bytes=254/2422
cynovo@mail:~$

弱弱问下:我没有配置SPF和DKIM记录。不知是否会有影响?

         这边映射的公网IP是否需要ISP提供商做反解析?   

       谢谢各位大侠了、、在线等。。。

回复: 外网能发不能收,内网收发正常。跪求解决方案

用其它邮箱(例如 gmail,163)发给你的邮箱会有什么错误信息?类似的错误信息有助于定位问题所在

回复: 外网能发不能收,内网收发正常。跪求解决方案

老大,感谢您的回复。

gmail 和163可以收到邮件,发送给我的时候没有任何反应,也没有退信。

回复: 外网能发不能收,内网收发正常。跪求解决方案

这就是感到郁闷的地方,没有任何退信,而且我的服务器mail.log里面也没有任何记录。

回复: 外网能发不能收,内网收发正常。跪求解决方案

检查一下 DNS 设置。

回复: 外网能发不能收,内网收发正常。跪求解决方案

我之前感觉应该没有找到域名或者mx的问题,但是telnet *****25/110等很正常,ping邮件域名也很正常,
返回的公网IP也是我这边的IP。。

郁闷~~~望回复,谢谢

回复: 外网能发不能收,内网收发正常。跪求解决方案

刚刚gmail退回一封邮件,(之前发的很多封都没有退信)如下:
This is an automatically generated Delivery Status Notification

THIS IS A WARNING MESSAGE ONLY.

YOU DO NOT NEED TO RESEND YOUR MESSAGE.

Delivery to the following recipient has been delayed:

    www@cynovo.com.cn

Message will be retried for 2 more day(s)

Technical details of temporary failure:
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 451 451 4.3.5 Server configuration problem (state 14).

----- Original message -----

回复: 外网能发不能收,内网收发正常。跪求解决方案

顶起来。。跪求解啊。

回复: 外网能发不能收,内网收发正常。跪求解决方案

Nov 30 14:53:56 mail postfix/smtpd[11990]: warning: problem talking to server 127.0.0.1:10031: Connection refused

Policyd 程序没有启动。

# /etc/init.d/policyd restart

回复: 外网能发不能收,内网收发正常。跪求解决方案

万分谢谢老大,终于能收到了。。

分享一下:

把check_policy_service inet:127.0.0.1:10031删除了。就OK了、、

回复: 外网能发不能收,内网收发正常。跪求解决方案

yin_885 写道:

把check_policy_service inet:127.0.0.1:10031删除了。就OK了、、

怎么不是把 policyd 服务给启动了?