[SOLVED] Postgrey installation

[alidaf]

Hello Zimpeeps

The instructions for installing postgrey would appear to be very simple but I get 451 errors for everybody that tries to send us an e-mail. I've had it working on my home system with a bog standard postfix/dovecot installation so I don't think I'm completely hopeless.

I have Ubuntu 8.04LTS and Zimbra 5.0.13 installed.

The typical errors in /var/log/mail.log are along the lines of ...

NOQUEUE: reject: RCPT from remote.server[ip address]:451 4.3.5 Server configuration error; from= proto=ESMTP helo=

I have tried a few times now and upset everyone by having to restart zimbra after removing it.

Does anyone have any suggestions or could offer some help?

Many thanks.

[raj]

you can follow the SQLGREY instructions..
Connecting with SQLGrey - Zimbra :: Wiki

we use it on every server...it works.

Raj

[alidaf]

Thanks. I may try that if I don't figure this out. I'd prefer to stick to using apt for the time being, especially since the postgrey installation would appear to be so simple. It must just be a config problem somewhere.

[alidaf]

Ok, I've just installed sqlgrey and I get exactly the same errors so it has to be a config problem.

[alidaf]

Fixed!

The reason it didn't work was the instruction to put the line "check_policy_service inet:127.0.0.1:60000" before the permit line.

Although true, it seems that the "check_policy_service inet:127.0.0.1:60000" line also needs to precede all of the lines that begin and end with "%%", e.g. "contains VAR:zimbraMtaRestriction reject_unknown_sender_domain%%.

[raj]

reject_non_fqdn_recipient
permit_sasl_authenticated
permit_mynetworks
reject_unauth_destination
reject_unlisted_recipient
%%contains VAR:zimbraMtaRestriction reject_invalid_hostname%%
%%contains VAR:zimbraMtaRestriction reject_non_fqdn_hostname%%
%%contains VAR:zimbraMtaRestriction reject_non_fqdn_sender%%
%%contains VAR:zimbraMtaRestriction reject_unknown_client%%
%%contains VAR:zimbraMtaRestriction reject_unknown_hostname%%
%%contains VAR:zimbraMtaRestriction reject_unknown_sender_domain%%
%%contains VAR:zimbraMtaRestriction reject_rbl_client dnsbl.njabl.org%%
%%contains VAR:zimbraMtaRestriction reject_rbl_client cbl.abuseat.org%%
%%contains VAR:zimbraMtaRestriction reject_rbl_client bl.spamcop.net%%
%%contains VAR:zimbraMtaRestriction reject_rbl_client sbl.spamhaus.org%%
%%contains VAR:zimbraMtaRestriction reject_rbl_client xbl.spamhaus.org%%
%%contains VAR:zimbraMtaRestriction reject_rbl_client sbl-xbl.spamhaus.org%%
%%contains VAR:zimbraMtaRestriction reject_rbl_client relays.mail-abuse.org%%
%%contains VAR:zimbraMtaRestriction check_policy_service inet:127.0.0.1:2501%%
permit

this is how we have SQLGREY setting on our servers.

Raj