Mountain Lion Server reject outgoing mail after upgrade

Question

Martin2684 Author

Level 1

5 points

Mountain Lion Server reject outgoing mail after upgrade

hi guys,

yesterday i upgraded my working Lion Server to Mountain Lion Server...

....today I can`t send Emails out. where is the Problem??

I hope anyone can Help me *goingcrazy* ^^ Sorry for my bad english... my german is better 🙂

greetz Martin 😉

here is my postconf - n output:

alias_maps = hash:/etc/aliases

biff = no

command_directory = /usr/sbin

config_directory = /Library/Server/Mail/Config/postfix

content_filter = smtp-amavis:[127.0.0.1]:10024

daemon_directory = /usr/libexec/postfix

data_directory = /Library/Server/Mail/Data/mta

debug_peer_level = 2

debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin xxgdb $daemon_directory/$process_name $process_id & sleep 5

dovecot_destination_recipient_limit = 1

enable_server_options = yes

header_checks = pcre:/etc/postfix/custom_header_checks

html_directory = /usr/share/doc/postfix/html

imap_submit_cred_file = /Library/Server/Mail/Config/postfix/submit.cred

inet_interfaces = all

inet_protocols = all

local_recipient_maps =

mail_owner = _postfix

mailbox_size_limit = 0

mailbox_transport = dovecot

mailq_path = /usr/bin/mailq

manpage_directory = /usr/share/man

maps_rbl_domains =

message_size_limit = 52428800

mydestination = $myhostname, localhost.$mydomain, XXX.de

mydomain = mail.XXXX.de

mydomain_fallback = localhost

myhostname = XXXX.de

mynetworks = 127.0.0.0/8, [::1]/128

newaliases_path = /usr/bin/newaliases

owner_request_special = no

postscreen_dnsbl_sites = zen.spamhaus.org*2

queue_directory = /Library/Server/Mail/Data/spool

readme_directory = /usr/share/doc/postfix

recipient_canonical_maps = hash:/etc/postfix/system_user_maps

recipient_delimiter = +

relayhost = smtp.XXX.de

sample_directory = /usr/share/doc/postfix/examples

sendmail_path = /usr/sbin/sendmail

setgid_group = _postdrop

smtp_sasl_auth_enable = yes

smtp_sasl_password_maps = hash:/etc/postfix/sasl/passwd

smtp_sasl_security_options = noanonymous

smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated reject_rbl_client zen.spamhaus.org permit

smtpd_enforce_tls = no

smtpd_helo_required = yes

smtpd_helo_restrictions = reject_invalid_helo_hostname

smtpd_pw_server_security_options = cram-md5,gssapi,login,plain

smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination permit

smtpd_sasl_auth_enable = yes

smtpd_tls_CAfile = /etc/certificates/smtp.XXX.de.7D98938F14280E43AD764E5D99795A722DAAC938.chain.pe m

smtpd_tls_cert_file = /etc/certificates/smtp.XXX.de.7D98938F14280E43AD764E5D99795A722DAAC938.cert.pem

smtpd_tls_exclude_ciphers = SSLv2, aNULL, ADH, eNULL

smtpd_tls_key_file = /etc/certificates/smtp.XXX.de.7D98938F14280E43AD764E5D99795A722DAAC938.key.pem

smtpd_tls_loglevel = 0

smtpd_use_pw_server = yes

smtpd_use_tls = yes

tls_random_source = dev:/dev/urandom

unknown_local_recipient_reject_code = 550

use_sacl_cache = yes

virtual_alias_domains = $virtual_alias_maps hash:/etc/postfix/virtual_domains

virtual_alias_maps = $virtual_maps hash:/etc/postfix/virtual_users

postconf: warning: /etc/postfix/main.cf: unused parameter: virus_db_update_enabled=1

OS X Server

Posted on Jul 26, 2012 1:21 PM

Reply

Answer 1

TheJoshD

Level 1

0 points

Jul 26, 2012 1:26 PM in response to Martin2684

Could you paste in the contents of your /Library/Server/Mail/Config/MailServicesOther.plist ?

Reply

Answer 2

Martin2684 Author

Level 1

5 points

Jul 26, 2012 1:35 PM in response to TheJoshD

hey josh,

wow very fast reply

here is the MailServicesOther.plist :

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>cluster</key>

<dict/>

<key>cyrus</key>

<dict>

<key>imap_principal</key>

<string>imap/server.XXXX.de@SERVER.XXXX.DE</string>

<key>pop_principal</key>

<string>pop/server.xxxx.de@SERVER.XXXX.DE</string>

</dict>

<dict>

<key>enable_sieve</key>

<true/>

<key>lmtp_luser_relay</key>

<string>admin</string>

<key>lmtp_luser_relay_enabled</key>

<true/>

<key>notification_server_enabled</key>

<true/>

<key>request_enable_webmail</key>

<true/>

</dict>

<key>mailman</key>

<dict>

<key>mailman_enabled</key>

</dict>

<key>postfix</key>

<dict>

<key>always_bcc</key>

<key>enable_smtp</key>

<true/>

<key>group_expansion</key>

<dict>

<key>enable_group_expansion</key>

<key>start_interval</key>

</dict>

<key>local_recipient_maps</key>

<string>proxy:unix:passwd.byname $alias_maps</string>

<key>log_rolling_days</key>

<key>log_rolling_days_enabled</key>

<true/>

<key>mynetworks</key>

<array>

</array>

<key>mynetworks_enabled</key>

<key>relayhost</key>

<key>relayhost_enabled</key>

<true/>

<key>service_initialized</key>

<true/>

<key>smtp_principal</key>

<string>smtp/server.xxxx.de@SERVER.xxxx.DE</string>

<key>spam_enabled</key>

<true/>

<key>tls_server_options</key>

</dict>

<key>server</key>

<dict>

</dict>

<key>service_initialized</key>

<true/>

<key>service_state</key>

<string>RUNNING</string>

<key>service_state_stamp</key>

<key>state</key>

<string>SERVICE_ENABLE</string>

</dict>

</plist>

Reply

Answer 3

Jul 26, 2012 10:53 PM in response to Martin2684

Hallo Martin2684,

ist das Verzeichnis /etc/postfix/sasl bei dir vorhanden mit der passwd ?

(Wurde bei mir bei dem Upgrade gelöscht)

Reply

Answer 4

Martin2684 Author

Level 1

5 points

Jul 27, 2012 11:03 AM in response to JuergenHere

hi juergen, nein der Ordner ist nicht vorhanden, wie hast du ihn erstellt/ wiederhergestellt?? :-)

aus einem TimeMachine backup??

gruß Martin

Reply

Answer 5

Jul 27, 2012 1:32 PM in response to Martin2684

Hallo Martin,

ich hatte vorher ein manuelles Backup gemacht und von dort den Ordner mit den Dateien zurückkopiert. Grundsätzlich müsste der Ordner auch in den TimeMachine Sicherungen vorhanden sein.

Gruss

Jürgen

Reply

Answer 6

Martin2684 Author

Level 1

5 points

Jul 28, 2012 2:07 AM in response to JuergenHere

Hallo Jürgen, vielen dank für die Hilfe, hab den ordner aus der TimeMachine wiederhergestellt, jetzt läuft es wieder!

gruß Martin

Reply

Answer 7

mopedpan

Level 1

0 points

Jul 28, 2012 5:08 AM in response to Martin2684

Hallo Jürgen,

wer Backups macht ist feige ;-)

Kannst Du oder jemand anders mir verraten, wie ich den Ordner wieder anlege? Ordner ist mir durchaus klar, aber die passwd zu erstellen, ist mir grad nicht klar ....

Danke

Thorsten

Reply

Answer 8

Mark23

Level 4

994 points

Jul 28, 2012 6:34 AM in response to Martin2684

Germans have a hard time speaking and writing English because they have very little of it at school and at the movies even James Bond is a native German speaking person or so it seems.

This is true -- having movies and series play on tv in the original language with subtitling helps enormously -- but there is a lot you can do yourself to learn without the need for a school or movie. Internet is the place to learn everything! Please see an online english course here: http://www.internetpolyglot.com/lessons-en-de

By not standing up and making some form of official protest, they'll make themselves an outcast in every part of the world that doesn't have German as the main language.

I think Martin2684's English is not that bad at all, I think he's just insecure about it. Don't be. Everybody has to learn sometimes and practicing is the best teacher.

As for all German speaking people in this thread: by answering in German you only tell Martin that it's all-right to be insecure and you are not helping. Furthermore it's not good for people who don't speak German, which is still the majority, who use Apple Discussions as a reference when debugging problems.

Please mind this.

Reply

Answer 9

Martin2684 Author

Level 1

5 points

Jul 28, 2012 7:10 AM in response to Martin2684

Hey Mark23 your right everybody want to understand what we were talking about, here is my description in English :

Hey People,😉

here is the solution for every non German speaking people:

JuergenHere asked me if the folder "/etc/postfix/sasl" with the passwd file is existing on my Server after the upgrade from 10.7 Server to 10.8 Mountain Lion Server.

The Folder/File was missing, I have restored the Folder with the File from a TimeMachine Backup.

Now everything is working fine!

Martin 🙂

Reply

Answer 10

Mark23

Level 4

994 points

Jul 28, 2012 7:35 AM in response to Martin2684

Thank you, Martin!

Reply

Answer 11

mopedpan

Level 1

0 points

Jul 28, 2012 12:24 PM in response to Martin2684

so, here I'll try in english language....

I missed to have a backup from my lion server :-(

How can I generate the "passwd" File in /etc/postfix/sasl, to create the directory is "sudo md ...", I think.

Does I have to switch the owner of the diretctory to "_postfix" ?

Thanks a lot !

Reply

Answer 12

Jul 28, 2012 12:38 PM in response to mopedpan

some path in the mail config have not been updated in the upgrade process.

When you migrate from Lion Server to Mountain Lion / OS X Server, mail config files are not stored in /etc/postfix but in /library/server/mail/postfix this is clearly an improvement but... migration process is 100% ok. Thank yo apple !

you have to update virtual_alias_maps in the main.cf to make it point to the new path.

I'm looking for the best way to do it as I'm not 100% sure that if I directly modfy the main.cf file it will "resist" to future configuration updates.

All ideas are welcome !

Reply

Answer 13

Martin2684 Author

Level 1

5 points

Jul 29, 2012 12:52 AM in response to Fred de Gembloux

Hey Fred

in the Book "OS X 10.6 Server-Die Kommunikationzentrale" ISBN 978-3-89721-971-7 O`Reilly

the Author describes a lot things you have to change the main.cf for.

I think they wouldn`t do that if the mainf.cf is then resist for Future configuration updates.

You can try it, make a copy of the original main.cf rename it in main-cf.backup and change the main.cf. ;-)

best regards

Martin

Reply

Answer 14

mopedpan

Level 1

0 points

Jul 29, 2012 3:41 AM in response to Fred de Gembloux

Hi Fred de Gembloux,

thanks for your advice.

I've changed the main.cf manually, because I could not stand waiting ...

The changes i have made solved my problem! Thanks a lot

Reply

Answer 15

Jul 29, 2012 12:25 PM in response to Fred de Gembloux

Hello Fred,

where is the configuration file really stored - or are talking about files? The root directory from my server looks like this:

macmini:/ admin$ ls -l

total 16037

drwxrwxr-x+ 39 root admin 1326 Jul 29 13:08 Applications

drwxr-xr-x+ 7 root wheel 238 Feb 7 13:07 Groups

drwxr-xr-x+ 61 root wheel 2074 Jul 29 11:53 Library

drwxr-xr-x@ 2 root wheel 68 Jun 20 21:16 Network

drwxr-xr-x 9 root admin 306 Jul 29 11:51 Previous System

drwxr-xr-x 4 root wheel 136 Nov 6 2011 Shared Items

drwxr-xr-x+ 5 root wheel 170 Jul 29 11:50 System

drwxr-xr-x+ 16 root admin 544 Jul 29 11:46 Users

drwxrwxrwt@ 5 root admin 170 Jul 29 20:42 Volumes

drwxr-xr-x@ 39 root wheel 1326 Jul 29 11:42 bin

drwxrwxr-t@ 2 root admin 68 Jun 20 21:16 cores

dr-xr-xr-x 3 root wheel 4319 Jul 29 13:27 dev

lrwxr-xr-x@ 1 root wheel 11 Jul 29 11:33 etc -> private/etc

dr-xr-xr-x 2 root wheel 1 Jul 29 13:28 home

-rw-r--r--@ 1 root wheel 8191712 Jun 25 08:00 mach_kernel

dr-xr-xr-x 2 root wheel 1 Jul 29 13:28 net

drwxr-xr-x@ 7 root wheel 238 Jul 29 11:50 private

drwxr-xr-x@ 62 root wheel 2108 Jul 29 11:43 sbin

lrwxr-xr-x@ 1 root wheel 11 Jul 29 11:34 tmp -> private/tmp

drwxr-xr-x@ 10 root wheel 340 Jul 29 11:45 usr

lrwxr-xr-x@ 1 root wheel 11 Jul 29 11:34 var -> private/var

Then I have this:

macmini:/ admin$ ls -l /Library/Server/Mail/Config/postfix/

total 928

-rw-r--r-- 1 root wheel 11942 Jul 29 11:43 LICENSE

-rw-r--r-- 1 root wheel 1629 Jul 29 11:43 TLS_LICENSE

-rw-r--r-- 1 root wheel 20876 Jul 29 11:43 access

-rw-r--r-- 1 root wheel 8829 Jul 29 11:43 aliases

-rw-r--r-- 1 root wheel 8829 Jul 29 11:43 aliases.desktop

-rw-r--r-- 1 root wheel 3548 Jul 29 11:43 bounce.cf.default

-rw-r--r-- 1 root wheel 11681 Jul 29 11:43 canonical

-rw-r--r-- 1 root wheel 44 Jul 29 11:43 custom_header_checks

-rw-r--r-- 1 root wheel 9904 Jul 29 11:43 generic

-rw-r--r-- 1 root wheel 21535 Jul 29 11:43 header_checks

-rw-r--r-- 1 root wheel 28837 Jul 29 21:09 main.cf

-rw-r--r-- 1 root wheel 26856 Nov 6 2011 main.cf.default

-rw-r--r-- 1 root wheel 26856 Jul 29 12:19 main.cf.default.10.8

-rw-r--r-- 1 root wheel 26970 Jul 29 11:43 main.cf.default~orig

-rw-r--r-- 1 root wheel 27430 Jul 29 11:43 main.cf~orig

-rw-r--r-- 1 root wheel 1361 Jul 29 11:43 makedefs.out

-rw-r--r-- 1 root wheel 8617 Jul 29 21:02 master.cf

-rw-r--r-- 1 root wheel 7443 Jul 29 11:43 master.cf.default

-rw-r--r-- 1 root wheel 7443 Jul 29 12:19 master.cf.default.10.8

-rw-r--r-- 1 root wheel 7443 Jul 29 11:43 master.cf~orig

-rw-r--r-- 1 root wheel 18473 Jul 29 12:19 postfix-files

-rw-r--r-- 1 root wheel 18647 Nov 6 2011 postfix-files.prev

-rw-r--r-- 1 root wheel 18473 Jul 29 11:43 postfix-files~orig

-rw-r--r--@ 1 root wheel 128 Jul 29 12:19 rbl_whitelist

-rw-r--r-- 1 root wheel 16384 Jul 29 12:19 rbl_whitelist.db

-rw-r--r-- 1 root wheel 6816 Jul 29 11:43 relocated

-rw------- 1 root wheel 70 Jul 29 14:43 submit.cred

-rw-r--r--@ 1 root wheel 178 Jul 29 12:21 system_user_maps

-rw-r--r-- 1 root wheel 16384 Jul 29 13:06 system_user_maps.db

-rw-r--r-- 1 root wheel 12549 Jul 29 11:43 transport

-rw-r--r-- 1 root wheel 12494 Jul 29 11:43 virtual

-rw-r--r-- 1 root wheel 0 Jul 29 12:21 virtual_domains

-rw-r--r-- 1 root wheel 16384 Jul 29 12:21 virtual_domains.db

And I have that too:

macmini:/ admin$ ls -l /private/etc/postfix/

total 344

-rw-r--r-- 1 root wheel 11942 Jul 29 11:43 LICENSE

-rw-r--r-- 1 root wheel 1629 Jul 29 11:43 TLS_LICENSE

-rw-r--r-- 1 root wheel 20876 Jul 29 11:43 access

-rw-r--r-- 1 root wheel 8829 Jul 29 11:43 aliases

-rw-r--r-- 1 root wheel 8829 Jul 29 11:43 aliases.desktop

-rw-r--r-- 1 root wheel 3548 Jul 29 11:43 bounce.cf.default

-rw-r--r-- 1 root wheel 11681 Jul 29 11:43 canonical

-rw-r--r-- 1 root wheel 44 Jul 29 11:43 custom_header_checks

-rw-r--r-- 1 root wheel 9904 Jul 29 11:43 generic

-rw-r--r-- 1 root wheel 21535 Jul 29 11:43 header_checks

-rw-r--r-- 1 root wheel 28789 Jul 29 21:02 main.cf

-rw-r--r-- 1 root wheel 26856 Nov 6 2011 main.cf.default

-rw-r--r-- 1 root wheel 26970 Jul 29 11:43 main.cf.default~orig

-rw-r--r-- 1 root wheel 27430 Jul 29 11:43 main.cf~orig

-rw-r--r-- 1 root wheel 1361 Jul 29 11:43 makedefs.out

-rw-r--r-- 1 root wheel 8528 Jul 29 12:19 master.cf

-rw-r--r-- 1 root wheel 8528 Mar 5 12:29 master.cf.10.7.4.orig

-rw-r--r-- 1 root wheel 7443 Jul 29 11:43 master.cf.default

-rw-r--r-- 1 root wheel 7443 Jul 29 11:43 master.cf~orig

-rw-r--r-- 1 root wheel 18473 Jul 29 12:19 postfix-files

-rw-r--r-- 1 root wheel 18647 Nov 6 2011 postfix-files.prev

-rw-r--r-- 1 root wheel 18473 Jul 29 11:43 postfix-files~orig

-rw-r--r-- 1 root wheel 6816 Jul 29 11:43 relocated

drwxr-xr-x 2 root wheel 68 Jul 29 15:06 sasl

-rw-r--r-- 1 root wheel 12549 Jul 29 11:43 transport

-rw-r--r-- 1 root wheel 12494 Jul 29 11:43 virtual

So - I have the same file in 2 different locations - and they look exactly the same (as far as I can tell).

You're talking about a path - what path?! What is it supposed to look like - I mean the path?! Can you provide little more detail on that, because I can't follow you at the moment.

Reply