unknown smtpd restriction: "@"

[Paul Grebenc]

There's a message stuck in the queue of my secondary mail server, which
keeps attempting and failing as follows:

Transcript of session follows.

Out: 220 abcdefghi.org ESMTP Postfix (Debian/GNU)
In: EHLO smtp.easydns.com
Out: 250-abcdefghi.org
Out: 250-PIPELINING
Out: 250-SIZE 10240000
Out: 250-ETRN
Out: 250 8BITMIME
In: MAIL FROM:<""@jtothgraphic.com> SIZE=7165
Out: 250 Ok
In: RCPT TO:<us...@abcdefghi.org>
Out: 451 Server configuration error
In: DATA
Out: 554 Error: no valid recipients
In: RSET
Out: 250 Ok
In: QUIT
Out: 221 Bye

In my logs, I'm seeing:

Feb 3 07:31:05 localhost postfix/smtpd[7843]: connect from smtp.easydns.com[205.210.42.52]
Feb 3 07:31:05 localhost postfix/smtpd[7843]: warning: unknown smtpd restriction: "@"
Feb 3 07:31:05 localhost postfix/smtpd[7843]: NOQUEUE: reject: RCPT from smtp.easydns.com[205.210.42.52]: 451 Server configuration error; from=<@jtothgraphic.com> to=<us...@abcdefghi.org> proto=ESMTP helo=<smtp.easydns.com>

And my main.cf has the following:

smtpd_sender_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_unknown_address,
permit

It looks to me as though postfix is possibly choking on the ""@domain
email address, because I don't see where it is finding the restriction "@"
to complain about.

Any ideas?

Thanks,
Paul

[Sandy Drobic]

postconf -e "strict_rfc821_envelopes = yes"
postfix reload

Will result in:

mail from:<""@jtothgraphic.com>
501 5.1.7 Bad sender address syntax

--
Sandy

List replies only please!
Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com

[Wietse Venema]

Paul Grebenc:

> And my main.cf has the following:
>
> smtpd_sender_restrictions =
> permit_sasl_authenticated,
> permit_mynetworks,
> reject_non_fqdn_sender,
> reject_unknown_sender_domain,
> reject_unknown_address,
> permit

And it has more; that is where your error is.

As requested by the mailing list welcome, post "postconf -n"
command output.

Wietse

1 Welcome to the postfix-users mailing list.
2
3 This list is for questions and discussions concerning the installation,
4 configuration and operation of the Postfix mail system.
5
6 TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail
7
8 TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html
9
10 Thank you for using Postfix.

[Paul Grebenc]

On Sat, 3 Feb 2007, Wietse Venema wrote:

> And it has more; that is where your error is.

Sorry, here is the output from postconf:

(strict_rfc821_envelopes was just added as per the previous reply)

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
disable_vrfy_command = yes
inet_interfaces = all
mailbox_command = /usr/bin/maildrop -d ${USER}
mailbox_size_limit = 0
mydestination = abceefghi.org, zyxwvutsr.ca, localhost.localdomain, localhost.localdomain, localhost
myhostname = abceefghi.org
mynetworks = 127.0.0.0/8, 216.58.41.24, 192.168.1.1
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_data_restrictions = reject_unauth_pipelining, permit
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname, permit
smtpd_recipient_restrictions = reject_unauth_pipelining, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access, check_recipient_access hash:/etc/postfix/recipient_access, check_helo_access hash:/etc/postfix/secondary_mx_access, reject_rbl_client relays.ordb.org, reject_rbl_client list.dsbl.org, reject_rbl_client sbl-xbl.spamhaus.org, permit

smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unknown_address, permit

strict_rfc821_envelopes = yes

Regards,
Paul

[Wietse Venema]

Paul Grebenc:

> smtpd_recipient_restrictions = reject_unauth_pipelining,
reject_unknown_recipient_domain,
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
check_sender_access hash:/etc/postfix/sender_access,
check_recipient_access hash:/etc/postfix/recipient_access,
check_helo_access hash:/etc/postfix/secondary_mx_access,
reject_rbl_client relays.ordb.org,
reject_rbl_client list.dsbl.org,
reject_rbl_client sbl-xbl.spamhaus.org,
permit

The mistake is in one of the hash: maps.

Wietse

[Sandy Drobic]

Paul Grebenc wrote:
> smtpd_recipient_restrictions = reject_unauth_pipelining,
> reject_unknown_recipient_domain, permit_mynetworks,
> permit_sasl_authenticated, reject_unauth_destination,
> check_sender_access hash:/etc/postfix/sender_access,
> check_recipient_access hash:/etc/postfix/recipient_access,
> check_helo_access hash:/etc/postfix/secondary_mx_access,
> reject_rbl_client relays.ordb.org, reject_rbl_client

Better remove relays.ordb.org from your configuration, the blacklist is dead.