Discussion :

[castrogne]

Bonjour tous,

Désolé d'ouvrir un sujet de plus sur ça... Je sais, y'en a déjà pas mal mais justement, j'ai essayé pas mal de choses, rien à faire!

Bref je n'arrive pas à envoyer des mails vers l'extérieur sans passer par mon FAI (en passant par free pas de souci, mais le nombre de mail envoyé est limité à 200 par heure ce qui ne me suffit pas toujours). J'ai donc voulu essayé gmail.

j'ai suivi les tutoriels suivant :
pour postfix :
http://olange.developpez.com/article...e/?page=page_6
pour mettre gmail :
http://www.pcinpact.com/forum/index.php?showtopic=87786

voici le main.cf :

smtp_banner = $myhostname ESMTP (Debian / GNU)
biff = no
disable_vrfy_command = yes
disable_dns_lookups = yes
smtpd_helo_required = yes

append_dot_mydomain = no

mydestination = mail.mon.domaine.net, localhost, localhost.localdomain

mydomain = mail.mon.domaine.net

myhostname = mail.mon.domaine.net

relayhost = [smtp.gmail.com]

mynetworks = 127.0.0.0/8,192.168.0.0/24,88.xxx.xxx.xxx.xxx/24
inet_interfaces = all

smtpd_sender_restrictions =
permit_mynetworks,
reject_unknown_sender_domain,
warn_if_reject reject_unverified_sender

smtpd_recipient_restrictions =
permit_mynetworks,
reject_unauth_destination,
reject_unknown_recipient_domain,
reject_non_fqdn_recipient

smtpd_client_restrictions =
reject_unknown_client,
permit_mynetworks

virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_aliases.cf, mysql:/etc/postfix/mysql-virtual_aliases_mailbox.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_mailbox_base = /var/spool/vmail/
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000

virtual_create_maildirsize = yes
virtual_mailbox_extended = yes
virtual_mailbox_limit_maps = mysql:/etc/postfix/mysql-virtual_mailbox_limit_maps.cf
virtual_mailbox_limit_override = yes
virtual_maildir_limit_message = "Desole, la boite email de l'utilisateur est pleine. Veuillez re-essayer plus tard !"
virtual_overquota_bounce = yes

relay_domains = $mydestination, $mydomain, $mynetworks, gmail.com
#smtp_sasl_auth_enable = yes
#smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
#smtp_sasl_security_options = noanonymous
#smtp_sasl_tls_security_options = noanonymous

#tls_random_source = dev:/dev/urandom
#smtp_tls_scert_verifydepth = 5
#smtp_tls_CApath=/etc/ssl/certs
#smtp_tls_enforce_peername = no
#smtp_tls_per_site = hash:/etc/postfix/usar_tls
#inet_protocols = ipv4

# Suite de main.cf
#
# Le TLS

# Niveau de log. Au niveau 3, on a un détail assez impressionnant
smtp_tls_loglevel = 1
smtpd_tls_loglevel = 1

smtp_enforce_tls = yes
# , quand je le met ça plante, pour certain ça ne marche pas sans, décommentez cette ligne pour l’activer.

# On va voir ça juste après.
smtp_tls_per_site = hash:/etc/postfix/tls_per_site

smtp_use_tls = yes
smtp_tls_CAfile = /etc/ssl/demoCA/cacert.pem
smtp_tls_cert_file = /etc/postfix/uranus-cert.pem
smtp_tls_key_file = /etc/postfix/uranus-key.pem


smtpd_use_tls = yes
smtpd_tls_CAfile = /etc/ssl/demoCA/cacert.pem
smtpd_tls_cert_file = /etc/postfix/uranus-cert.pem
smtpd_tls_key_file = /etc/postfix/uranus-key.pem
smtp_tls_received_header = yes
smtpd_tls_ask_ccert = yes
tls_random_source = dev:/dev/urandom

# Authentification SASL

smtpd_sasl_auth_enable = no
smtp_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtpd_sasl_local_domain = $myhostname
smtp_sasl_security_options = noanonymous
smtpd_sasl_application_name = smtpd

Voilà, j'utilise mon dernier jocker: quelqu'un a-t'il une idée? Il semble que le tls ne se déclanche pas...

merci!

les mails en interne marchent. Pas vers l'extérieur...

Dec 2 11:33:51 localhost postfix/qmgr[30423]: 5A8A06A69E: from=<root@mail.mon.domaine.net>, size=356, nrcpt=1 (queue active)
Dec 2 11:34:22 localhost postfix/smtp[30430]: connect to gmail-smtp-in.l.google.com[72.14.221.27]: Connection timed out (port 25)
Dec 2 11:34:52 localhost postfix/smtp[30430]: connect to gmail-smtp-in.l.google.com[72.14.221.114]: Connection timed out (port 25)
Dec 2 11:35:22 localhost postfix/smtp[30430]: connect to alt2.gmail-smtp-in.l.google.com[209.85.163.27]: Connection timed out (port 25)
Dec 2 11:35:52 localhost postfix/smtp[30430]: connect to alt1.gmail-smtp-in.l.google.com[64.233.163.114]: Connection timed out (port 25)
Dec 2 11:36:22 localhost postfix/smtp[30430]: connect to alt1.gmail-smtp-in.l.google.com[64.233.163.27]: Connection timed out (port 25)
Dec 2 11:36:22 localhost postfix/smtp[30430]: 5A8A06A69E: to=<moi@gmail.com>, relay=none, delay=527, delays=377/0.06/150/0, dsn=4.4.1, status=deferred (connect to alt1.gmail-smtp-in.l.google.com[64.233.163.27]: Connection timed out)

[mrtonio]

fais voir un postconf -n plutot

[castrogne]

Voici :

# postconf -n
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
disable_dns_lookups = yes
disable_vrfy_command = yes
inet_interfaces = all
mydestination = mail.mon.domaine.net, localhost, localhost.localdomain
mydomain = mail.mon.domaine.net
myhostname = mail.mon.domaine.net
mynetworks = 127.0.0.0/8,192.168.0.0/24,xx.xx.xx.xx/24
relay_domains = gmail.com
relayhost = [smtp.gmail.com]
sender_canonical_maps = hash:/etc/postfix/sender_canonical
smtp_enforce_tls = yes
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_sasl_tls_security_options = noanonymous
smtp_tls_CAfile = /etc/ssl/demoCA/cacert.pem
smtp_tls_cert_file = /etc/postfix/uranus-cert.pem
smtp_tls_key_file = /etc/postfix/uranus-key.pem
smtp_tls_loglevel = 1
smtp_tls_per_site = hash:/etc/postfix/tls_per_site
smtp_use_tls = yes
smtpd_client_restrictions = reject_unknown_client, permit_mynetworks
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, reject_unknown_recipient_domain, reject_non_fqdn_recipient
smtpd_sasl_auth_enable = no
smtpd_sasl_local_domain = $myhostname
smtpd_sender_restrictions = permit_mynetworks, reject_unknown_sender_domain, warn_if_reject reject_unverified_sender
smtpd_tls_CAfile = /etc/ssl/demoCA/cacert.pem
smtpd_tls_ask_ccert = yes
smtpd_tls_cert_file = /etc/postfix/uranus-cert.pem
smtpd_tls_key_file = /etc/postfix/uranus-key.pem
smtpd_tls_loglevel = 1
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_aliases.cf, mysql:/etc/postfix/mysql-virtual_aliases_mailbox.cf
virtual_gid_maps = static:5000
virtual_mailbox_base = /var/spool/vmail/
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_uid_maps = static:5000

concernant les logs, j'ai remarqué que je passe en deferred et pas en bounce... Etrange. En plus il n'y a pas d'initialisation de la connection TLS. Je ne comprends pas pourquoi puisque mon postfix l'a.

[mrtonio]

fais aussi voir le contenu de

/etc/postfix/tls_per_site
/etc/postfix/sender_canonical
/etc/postfix/sasl_passwd
/etc/postfix/transport


quels sont les mails gérés dans la base appelée par virtual_mailbox_domains ?
(fais un dump de la table)


relay_domains = gmail.com ????? a quoi ca sert ?

[castrogne]

Merci à toi de répondre si vite :p

j'en profite pour faire un petit test telnet :

# telnet mail.mon.domaine.net 25
Trying xxx.xxx.xxx.xxx...
Connected to mail.mon.domaine.net.
Escape character is '^]'.
220 mail.mon.domaine.net ESMTP Postfix
EHLO mail.mon.domaine.net
250-mail.mon.domaine.net
250-PIPELINING
250-SIZE 10240000
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
quit
221 2.0.0 Bye
Connection closed by foreign host.

il y a clairement STARTTLS...

je regarde les fichiers que tu m'indiques de suite.

[castrogne]

/etc/postfix/tls_per_site

# cat /etc/postfix/tls_per_site
smtp.gmail.com MUST
mail.mon.domaine.net MAY

/etc/postfix/sender_canonical

# cat /etc/postfix/sender_canonical
root moi@hotmail.fr
postfix moi@hotmail.fr

/etc/postfix/sasl_passwd

# cat /etc/postfix/sasl_passwd
smtp.gmail.com moi@gmail.com:moncode
gmail-smtp.google.akadns.net moi@gmail.com:moncode
gmail-smtp-in.l.google.com moi@gmail.com:moncode

/etc/postfix/transport

# cat /etc/postfix/transport
# Contents of /etc/postfix/transport
#
# This sends mail to Gmail
gmail.com smtp:[smtp.gmail.com]

relay_domains = gmail.com à quoi ça sert? honnêtement je ne sais pas. Toujours est-il que l'option n'est pas rejetée... J'ai trouvé ça dans les tuto sur le web. Je débute en serveur mail donc je ne connais pas la moitié des options que je passe...

pour la table :

--
-- Structure de la table `domain`
--

CREATE TABLE `domain` (
`domain` varchar(255) NOT NULL default '',
`actif` tinyint(1) NOT NULL default '1',
PRIMARY KEY (`domain`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1 COMMENT='Postfix Admin - Domaines Virtuels';

--
-- Contenu de la table `domain`
--

INSERT INTO `domain` (`domain`, `actif`) VALUES
('mon.domaine.net', 1);

merci pour ton aide!! tu me sauves la vie :p