postfix-users July 2011 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Re: User not Logged in

Re: User not Logged in

From: Noel Jones <njones_at_nospam>
Date: Tue Jul 19 2011 - 16:09:38 GMT
To: postfix-users@postfix.org

On 7/19/2011 7:26 AM, Dave Johnson wrote:
> Hi All
>
> I am getting the following error on a new installation
>
> <xxxxxxx@xxx.com>: host smtphost.xxxxx.com[xxx.xxx.xx]
> said:
> 553 5.7.1 <xxxxxxx@xxx.com>: Sender address rejected: not
> logged in (in reply to RCPT TO command)
>
> <xxxxx@xxxxx>: host smtphost.xxxxx.com[xxxx.xxxx.xxxx] said: 553 5.7.1
> <xxxxxxx@xxx.com>: Sender address rejected: not logged in
> (in reply to RCPT TO command)
>
>
> There appear to be a number of fixes found in Google.

http://www.postfix.org/postconf.5.html#reject_sender_login_mismatch

...
> smtpd_recipient_restrictions = reject_unknown_sender_domain,
> reject_unknown_recipient_domain, reject_non_fqdn_sender,
> reject_non_fqdn_recipient, reject_unlisted_recipient,
> reject_unknown_recipient_domain, reject_rhsbl_client
> blackhole.securitysage.com, reject_rhsbl_sender
> blackhole.securitysage.com, reject_rhsbl_client rhsbl.sorbs.net,
> reject_rhsbl_sender rhsbl.sorbs.net, reject_rbl_client
> bl.spamcop.net, reject_rbl_client relays.ordb.org, reject_rbl_client
> dnsbl.sorbs.net, reject_rbl_client zen.spamhaus.org,
> reject_rbl_client dnsbl.njabl.org, check_policy_service
> unix:private/policy, check_policy_service inet:127.0.0.1:7777,
> permit_mynetworks, permit_sasl_authenticated,
> reject_unauth_destination, reject_non_fqdn_helo_hostname,
> reject_invalid_helo_hostname, check_policy_service
> inet:127.0.0.1:10031, permit

It's customary to put 'permit_mynetworks, permit_sasl_authenticated,
' *before* the (excessive) RBL checks. One generally does not want
to reject authenticated users just because they happen to be using a
residential connection.

(review your RBL list to make sure they are all still active)

> smtpd_sender_login_maps =
> proxy:mysql:/etc/postfix/mysql/sender_login_maps.cf
> smtpd_sender_restrictions = permit_mynetworks,
> reject_sender_login_mismatch, permit_sasl_authenticated

Apparently the MAIL FROM was listed in smtpd_sender_login_maps, but
the user wasn't logged in.

  -- Noel Jones