Kolab / Postfix : relay acces denied

Hi all,
I've got a functionnal server with Postfix/Cyrus/sasldb/...,

its own DNS server with MX entry pointing on itself,
with which I can send/retrieve mails on the net, as locally
(on debian sarge)

I've installed and configured kolab(2)/postfix/ldap/...,
on a another computer,
working well with kontact/kmail/korganizer/...
which can only send mails locally
(on debian etch -with corresponding packages-)
kolab version : 2.2.12

I'd like now to give the second one the same functionnality
as the first
I mean sending mail to external adresses
(to save energy)
But always have "relay access denied".

I tried :
postconf > file, on both configurations
then 'diiff' on the files to compare them
But can't find what's (really) missing for now

I had to search on the kolab-webadmin pages...

Is it possible to do so without breaking groupware
functionnality ?
Is the solution in postfix configuration ?

Thanks per advance !
Dams

PS : I hadn't posted details because I'm not sure what's
necessary, and it 
would be too long...
Feel free to ask for more...

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

* Damien Ulrich <damsdomosys.org> [20061017
08:50]:
> I've installed and configured
kolab(2)/postfix/ldap/...,
> on a another computer,
> working well with kontact/kmail/korganizer/...
> which can only send mails locally
> (on debian etch -with corresponding packages-)
> kolab version : 2.2.12

2.2.12 is the cyrus version, not kolab.

I suggest trying the OpenPKG based installation first, this
is much
easier to configure.

Thomas

-- 
Email: thomasintevation.de
http://intevation.de/~t
homas/

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Le mardi 17 octobre 2006 09:06, Thomas Arendsen Hein a
écrit :
> * Damien Ulrich <damsdomosys.org> [20061017
08:50]:
> > I've installed and configured
kolab(2)/postfix/ldap/...,
> > on a another computer,
> > working well with kontact/kmail/korganizer/...
> > which can only send mails locally
> > (on debian etch -with corresponding packages-)
> > kolab version : 2.2.12
>
> 2.2.12 is the cyrus version, not kolab.
ok,
on kolab-webadmin : 
Kolab2 Groupware Server Version: 2.0-unofficial (!?)
>
> I suggest trying the OpenPKG based installation first,
this is much
> easier to configure.
Is the latest version adding the feature I'm searching for ?
>
> Thomas

-- 
La sinusoïde est à l'échantillonnage, ce que l'Humain est au
Système.

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

* S4mdf0o1 <damsdomosys.org> [20061017 09:13]:
> Le mardi 17 octobre 2006 09:06, Thomas Arendsen Hein a
écrit :
> > 2.2.12 is the cyrus version, not kolab.
> on kolab-webadmin : 
> Kolab2 Groupware Server Version: 2.0-unofficial (!?)
>
> > I suggest trying the OpenPKG based installation
first, this is much
> > easier to configure.
> Is the latest version adding the feature I'm searching
for ?

This is just a matter of correct configuration and correct
authentication of the user trying to send mail. Maybe you
need to
configure your privileged networks.

All this depends on what you try to do (more details needed)
and
that Kolab server is installed correctly.

Thomas

-- 
Email: thomasintevation.de
http://intevation.de/~t
homas/

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Le mardi 17 octobre 2006 09:20, Thomas Arendsen Hein a
écrit :
> * S4mdf0o1 <damsdomosys.org> [20061017
09:13]:
> > Le mardi 17 octobre 2006 09:06, Thomas Arendsen
Hein a écrit :
> > > 2.2.12 is the cyrus version, not kolab.
> >
> > on kolab-webadmin :
> > Kolab2 Groupware Server Version: 2.0-unofficial
(!?)
> >
> > > I suggest trying the OpenPKG based
installation first, this is much
> > > easier to configure.
> >
> > Is the latest version adding the feature I'm
searching for ?
>
> This is just a matter of correct configuration and
correct
> authentication of the user trying to send mail. Maybe
you need to
> configure your privileged networks.
Well, ok 
I have no authentication (ldap) trouble,
nor network issues,
because of my internal DNS,
correctly working LDAP,
correct synchronisation between calendars, 
etc...
>
> All this depends on what you try to do (more details
needed) and
> that Kolab server is installed correctly.
I just have an "relay acces denied -554-" error
when trying to send from 
internal address to external one, with the smtp transport of
my kolab/postfix 
installation -whatever postfix (main.cf) configuration I
change- 
(or I hadn't found the correct option to change !?)
(with local customized DNS for domain MX right redirection)

I'm not certain of a kolab issue, but of a postfix one (!?)
Am I right ?
Or has the Kolab server it's own security
(internal/external) features ?
Or finally, is the kolab server self-configuring postfix ?
>
> Thomas

-- 

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Set your priviledged networks in the kolab web-administrator
to:
[yourlocalsubnet]/[mask]

Example:
192.168.0.0/24

That should do the trick...

Ger.

Op dinsdag 17 oktober 2006 09:43, schreef S4mdf0o1:
> Le mardi 17 octobre 2006 09:20, Thomas Arendsen Hein a
écrit :
> > * S4mdf0o1 <damsdomosys.org> [20061017
09:13]:
> > > Le mardi 17 octobre 2006 09:06, Thomas
Arendsen Hein a écrit :
> > > > 2.2.12 is the cyrus version, not kolab.
> > >
> > > on kolab-webadmin :
> > > Kolab2 Groupware Server Version:
2.0-unofficial (!?)
> > >
> > > > I suggest trying the OpenPKG based
installation first, this is much
> > > > easier to configure.
> > >
> > > Is the latest version adding the feature I'm
searching for ?
> >
> > This is just a matter of correct configuration and
correct
> > authentication of the user trying to send mail.
Maybe you need to
> > configure your privileged networks.
>
> Well, ok
> I have no authentication (ldap) trouble,
> nor network issues,
> because of my internal DNS,
> correctly working LDAP,
> correct synchronisation between calendars,
> etc...
>
> > All this depends on what you try to do (more
details needed) and
> > that Kolab server is installed correctly.
>
> I just have an "relay acces denied -554-"
error when trying to send from
> internal address to external one, with the smtp
transport of my
> kolab/postfix installation -whatever postfix (main.cf)
configuration I
> change-
> (or I hadn't found the correct option to change !?)
> (with local customized DNS for domain MX right
redirection)
>
> I'm not certain of a kolab issue, but of a postfix one
(!?)
> Am I right ?
> Or has the Kolab server it's own security
(internal/external) features ?
> Or finally, is the kolab server self-configuring
postfix ?
>
> > Thomas

-- 
ARGOSS: your partner for atmospheric, marine & coastal
information
P O Box 61
8325ZH Vollenhove The Netherlands
tel +31-527-242299 fax +31-527-242016
Web http://www.argoss.nl

Confidentiality Notice & Disclaimer
The contents of this e-mail and any attachments are intended
only for the
use of the e-mail addressee(s) shown. If you are not that
person, or one of
those persons, you are not allowed to take any action based
upon it or to
copy it, forward, distribute or disclose the contents of it
and you should
please delete it from your system.

ARGOSS Holding BV and its subsidiaries do not accept any
liability for any
errors or omissions in the context of this e-mail or its
attachments which
arise as a result of Internet transmission, nor accept
liability for
statements which are those of the author and not clearly
made on behalf of
ARGOSS.

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Le mardi 17 octobre 2006 09:49, Ger Apeldoorn a écrit :
> Set your priviledged networks in the kolab
web-administrator to:
> [yourlocalsubnet]/[mask]
>
> Example:
> 192.168.0.0/24
>
> That should do the trick...
Hi,
It's already done :
'127.0.0.0/8 192.168.0.0/24'
I also added this to postfix/mynetworks option
It hadn't correct my problem

Thanks for the idea ;)
>
> Ger.
Dams
>
> Op dinsdag 17 oktober 2006 09:43, schreef S4mdf0o1:
> > Le mardi 17 octobre 2006 09:20, Thomas Arendsen
Hein a écrit :
> > > * S4mdf0o1 <damsdomosys.org> [20061017
09:13]:
> > > > Le mardi 17 octobre 2006 09:06, Thomas
Arendsen Hein a écrit :
> > > > > 2.2.12 is the cyrus version, not
kolab.
> > > >
> > > > on kolab-webadmin :
> > > > Kolab2 Groupware Server Version:
2.0-unofficial (!?)
> > > >
> > > > > I suggest trying the OpenPKG based
installation first, this is much
> > > > > easier to configure.
> > > >
> > > > Is the latest version adding the feature
I'm searching for ?
> > >
> > > This is just a matter of correct
configuration and correct
> > > authentication of the user trying to send
mail. Maybe you need to
> > > configure your privileged networks.
> >
> > Well, ok
> > I have no authentication (ldap) trouble,
> > nor network issues,
> > because of my internal DNS,
> > correctly working LDAP,
> > correct synchronisation between calendars,
> > etc...
> >
> > > All this depends on what you try to do (more
details needed) and
> > > that Kolab server is installed correctly.
> >
> > I just have an "relay acces denied
-554-" error when trying to send from
> > internal address to external one, with the smtp
transport of my
> > kolab/postfix installation -whatever postfix
(main.cf) configuration I
> > change-
> > (or I hadn't found the correct option to change
!?)
> > (with local customized DNS for domain MX right
redirection)
> >
> > I'm not certain of a kolab issue, but of a postfix
one (!?)
> > Am I right ?
> > Or has the Kolab server it's own security
(internal/external) features ?
> > Or finally, is the kolab server self-configuring
postfix ?
> >
> > > Thomas

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

>
> Hi,
> It's already done :
> '127.0.0.0/8 192.168.0.0/24'

Are you missing a comma?

127.0.0.0/8, 192.168.0.0/24


> I also added this to postfix/mynetworks option
> It hadn't correct my problem
>
> Thanks for the idea ;)
>


Andy

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Le mardi 17 octobre 2006 11:01, Andrew J. Kopciuch a écrit :
> > Hi,
> > It's already done :
> > '127.0.0.0/8 192.168.0.0/24'
>
> Are you missing a comma?
>
> 127.0.0.0/8, 192.168.0.0/24
no, it was my 'mynetworks' postfix's option, sorry !
I have the right format in kolab-webadmin's 'Priviledged
Networks' entry
>
> > I also added this to postfix/mynetworks option
> > It hadn't correct my problem
> >
> > Thanks for the idea ;)
>
Well viewed ! ;)
Thanks !
> Andy
Dams
>
PS : I've got the same question, as here :
http://www.intevation.de/pipermail/kolab
-users/2004-November/001420.html
(too old !? oO)
> _______________________________________________
> Kolab-users mailing list
> Kolab-userskolab.org
> https:
//kolab.org/mailman/listinfo/kolab-users

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Ok, I've found how to do the trick :
I changed, in postfix's main.cf :
smtpd_recipient_restrictions = permit_mynetworks,
reject_unauth_destination 
(from postconf)
to :
smtpd_recipient_restrictions = check_relay_domains

I think (not sure) I'll need to add security restrictions
for relaying
Any confirmation ? :P

Thanks to all for having helped me to concentrate on the
right problem !!!

Dams

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users