<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div class=""><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">Am 16.05.2024 um 18:48 schrieb Markus Winkler via postfix-users <<a href="mailto:postfix-users@de.postfix.org" class="">postfix-users@de.postfix.org</a>>:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hallo Christoph,<br class=""><br class=""><blockquote type="cite" class="">P.S. also noch nicht O.T. :)<br class=""></blockquote>yep - wollte ich eigentlich heute früh auch schon schreiben ;-)<br class=""><br class=""><blockquote type="cite" class=""> 5.7.1 Service unavailable; client [xx.xxx.xxx.x] blocked using<br class=""><a href="http://zen.spamhaus.org" class="">zen.spamhaus.org</a> <<a href="http://zen.spamhaus.org" class="">http://zen.spamhaus.org</a>> (in reply to RCPT TO command)<br class="">Da sich meine IP zu Hause natürlich öfters ändert, dürfte das jetzt schwierig sein, das dynamisch zu gestalten?<br class=""></blockquote><br class="">Eben, darum ein anderer Ansatz, den ich Dir vorschlagen würde. Du hattest erwähnt:<br class=""><br class=""><blockquote type="cite" class="">von mir kontrollierten Mailserver (postfix/dovecot)<br class=""></blockquote><br class="">---------------------------------------------^^^^^^^<br class=""><br class="">und:<br class=""><br class=""><blockquote type="cite" class="">Ich habe meine derzeitige IP mal in /etc/postfix/rbl_override eingetragen. In main.cf steht jetzt:<br class="">smtpd_recipient_restrictions=<br class="">permit_mynetworks,<br class="">permit_sasl_authenticated,<br class=""></blockquote><br class="">--^^^^^^^^^^^^^^^^^^^^^^^^^^<br class=""><br class="">Daher nehme ich mal an, auf Deinem "richtigen" Mailserver, der jetzt hier Relay sein soll, hast Du in irgendeiner Form virtuelle Useraccounts und erlaubst denen nach erfolgter Authentifizierung das Senden von Mails, richtig?<br class=""></div></div></blockquote><div><br class=""></div>Es scheint so, als habe ich dovecot virtual users. Es gibt allerdings keine /etc/dovecot/passwd.</div><div>Habe aber in mysql ein vmail Schema und select * from users gibt mir meine Benutzer.</div><div>Weiß momentan gar nicht, wie ich neue kreiere. Muß da noch mal suchen. </div><div><br class=""></div><div>Melde mich dann, wenn die Aktion erfolgreich war.</div><div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">Ich vermute darum außerdem, Du hast in Deiner master.cf vielleicht irgendwas in der Art:<br class=""><br class="">submission inet n - y - - smtpd<br class=""><br class=""></div></div></blockquote><div><br class=""></div>Ja.</div><div><br class=""><blockquote type="cite" class=""><div class=""><div class="">und/oder auch<br class=""><br class="">smtps inet n - y - - smtpd<br class=""></div></div></blockquote><div><br class=""></div><div>Dieser Block ist auskommentiert:</div><div><br class=""></div><div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85); min-height: 13px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(9, 249, 247); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">#smtps inet n - - - - smtpd</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(9, 249, 247); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># -o smtpd_tls_wrappermode=yes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(9, 249, 247); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># -o smtpd_sasl_auth_enable=yes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(9, 249, 247); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># -o smtpd_client_restrictions=permit_sasl_authenticated,reject</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(9, 249, 247); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># -o milter_macro_daemon_name=ORIGINATING</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div></div><div><br class=""></div><blockquote type="cite" class=""><div class=""><div class=""><br class="">mit jeweils Optionen wie<br class=""><br class="">[...]<br class=""> -o smtpd_sasl_auth_enable=yes<br class=""> -o smtpd_sasl_type=dovecot<br class="">[...]<br class=""><br class=""></div></div></blockquote><div><br class=""></div><div><br class=""></div>Das ist vorhanden:</div><div><br class=""></div><div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">submission inet n - y - - smtpd</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> -o syslog_name=postfix/submission</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> -o smtpd_tls_security_level=encrypt</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> -o smtpd_sasl_type=dovecot</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> -o smtpd_sasl_path=private/auth</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> -o smtpd_sasl_security_options=noanonymous</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> -o smtpd_sasl_auth_enable=yes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> -o smtpd_client_restrictions=permit_sasl_authenticated,reject</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(124, 105, 56); background-color: rgba(255, 170, 161, 0.85);" class=""><br class=""></div><blockquote type="cite" class=""><div class=""><div class="">Wenn ja, dann hast Du schon fast gewonnen.<br class=""><br class="">Jetzt auf dem <a href="http://mail.kukulies.org" class="">mail.kukulies.org</a> einfach einen Dummy-user 'relayusername' nach bisher verwendetem Schema anlegen und dessen Credentials auf Deinem macOS-Postfix in etwa so hinterlegen:<br class=""><br class="">/etc/postfix/main.cf<br class=""><br class="">[...]<br class="">relayhost = [<a href="http://mail.kukulies.org" class="">mail.kukulies.org</a>]:587<br class="">[...]<br class="">smtp_sasl_auth_enable = yes<br class="">smtp_sasl_password_maps = hash:/etc/postfix/sasl/sasl_passwd<br class="">[...]<br class=""><br class=""><br class="">/etc/postfix/sasl/sasl_passwd:<br class=""><br class=""><a href="http://mail.kukulies.org" class="">mail.kukulies.org</a> relayusername:ganz_doll_sicheres_passwort<br class=""><br class=""><br class="">postmap /etc/postfix/sasl/sasl_passwd<br class=""><br class="">Damit sollte das Versenden der Mails dann eigentlich auch von Deinem macOS am heimischen Internetanschluss mit dynamischer IP-Adresse aus funktionieren.<br class=""><br class="">Versuch's bitte mal. Wenn was nicht klappen sollte, dann bitte Logs von beiden Stellen schicken.<br class=""><br class="">Viel Erfolg und Grüße<br class="">Markus<br class=""></div></div></blockquote><br class=""></div><div>Danke und Grüße</div><div><br class=""></div><div>Christoph</div><br class=""></body></html>