3

I have setup a sendgrid relayhost on my postfix server.
This works perfectly when sending mails via sendmail:

May 24 16:21:13 ip-*-*-*-* postfix/smtp[17742]: 542D01CDF:
to=<mail@externaladdress.com>, relay=smtp.sendgrid.net[5.153.47.203]:587,
delay=2, delays=0.04/0.02/1.5/0.47, dsn=2.0.0, status=sent
(250 Delivery in progress)

but when I try to send via port 587 and authenticating:

May 24 16:34:03 ip-*-*-*-* postfix/error[18081]:
46A711CDE: to=<mail@externaladdress.com>, relay=none,
delay=0.61, delays=0.59/0/0/0.01, dsn=4.7.4, status=deferred
(delivery temporarily suspended: TLS is required, but was not offered
by host 127.0.0.1[127.0.0.1])

Relevant config:

postconf -n | grep relayhost
relayhost = [smtp.sendgrid.net]:587

# master.cf port 587
submission inet n       -       -       -       -       smtpd
  -o syslog_name=postfix/submission
#  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
# http://flurdy.com/docs/postfix/#config-secure-crypt
# if you do not want to restrict it encryption only, comment out next line
  -o smtpd_tls_auth_only=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject_unauth_destination,reject
  -o smtpd_sasl_security_options=noanonymous,noplaintext
  -o smtpd_sasl_tls_security_options=noanonymous

I have no transport file overriding anything, yet sending to the same "to" recipient yields a different relayhost depending on me using sendmail or authenticating via SASL on port 587.
Everything works perfectly while connected to port 587, and postfix replies with a "ok, sending", but it just uses a different relay.

How can I make sure that every mail that doesn't have to be delivered locally is sent via relay?

Razor
  • 336
  • 6
  • 20
  • 1
    you can try log debuggin postfix with [this step](http://www.postfix.org/DEBUG_README.html#debug_peer). Try to compare submission case and sendmail case. If you are still in doubt, you could post the output. – masegaloeh May 25 '14 at 02:13
  • @masegaloeh thank you, that got me on the right path, turns out it was amavis. – Razor May 25 '14 at 10:59

1 Answers1

3

The communication on localhost was towards amavis, not a relay.
It's the same issue as another question, and the solution is the same, add the following line under the connection to/from amavis

amavis unix - - - - 2 smtp
  -o smtp_tls_security_level=none

127.0.0.1:10025 inet n - - - - smtpd
  -o smtp_tls_security_level=none
Community
  • 1
Razor
  • 336
  • 6
  • 20