☰

Postfix IPv6 中继访问被拒绝

tag-icon • tag-icon postfix ipv6
Postfix IPv6 中继访问被拒绝

我最近为我的 postfix 服务器设置了 ipv4 和 ipv6。我注意到，每当我的其他服务器发送电子邮件并且 ipv6 上的 postfix 服务器收到它时，它都会记录“中继访问被拒绝”，并且邮件会被延迟/排队。最终，我的原始服务器将再次处理电子邮件并从 postfix 服务器获取 ipv4，然后邮件将通过。似乎 postfix 服务器不接受 ipv6。我不确定我在这里做错了什么。有人可以帮忙吗？

这是我的 postfix 配置：

alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
inet_protocols = all
local_transport = error:local delivery is disabled
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq.postfix
message_size_limit = 52428800
milter_default_action = accept
mydestination = localhost.localdomain,
    localhost, 
mydomain = my_domain.com
myhostname = my_hostname.com
mynetworks = 127.0.0.0/8 [::1]/128 Other specific ip's
newaliases_path = /usr/bin/newaliases.postfix
non_smtpd_milters = $smtpd_milters
policy_time_limit = 3600s
sendmail_path = /usr/sbin/sendmail.postfix
smtp_sasl_auth_enable = no
smtp_tls_CAfile = /etc/ssl/certs/ca-bundle.trust.crt
smtp_tls_ciphers = high
smtp_tls_exclude_ciphers = EXP, MEDIUM, LOW, DES, 3DES, SSLv2, RC4, aNULL
smtp_tls_loglevel = 1
smtp_tls_mandatory_protocols = !SSLv2,!SSLv3
smtp_tls_protocols = !SSLv2,!SSLv3
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_use_tls = yes
smtpd_client_restrictions = permit_mynetworks,permit_sasl_authenticated,
    reject_non_fqdn_helo_hostname,permit
smtpd_helo_restrictions = reject_unknown_helo_hostname
smtpd_milters = inet:127.0.0.1:8891, inet:127.0.0.1:8893
smtpd_tls_CAfile = /etc/postfix/ca.crt
smtpd_tls_cert_file = /etc/postfix/...crt
smtpd_tls_ciphers = high
smtpd_tls_exclude_ciphers = EXP, MEDIUM, LOW, DES, 3DES, SSLv2, RC4, aNULL
smtpd_tls_key_file = /etc/postfix/...key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3
smtpd_tls_protocols = !SSLv2,!SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
tls_high_cipherlist =
    kEECDH:+kEECDH+SHA:kEDH:+kEDH+SHA:+kEDH+CAMELLIA:kECDH:+kECDH+SHA:kRSA:+kRSA+SHA:+kRSA+CAMELLIA:!aNULL:!eNULL:!SSLv2:!RC4:!MD5:!DES:!EXP:!SEED:!IDEA:!3DES
tls_medium_cipherlist =
    kEECDH:+kEECDH+SHA:kEDH:+kEDH+SHA:+kEDH+CAMELLIA:kECDH:+kECDH+SHA:kRSA:+kRSA+SHA:+kRSA+CAMELLIA:!aNULL:!eNULL:!SSLv2:!MD5:!DES:!EXP:!SEED:!IDEA:!3DES
transport_maps = hash:/etc/postfix/transport

答案1

smtpd_relay_restrictions默认为：permit_mynetworks、permit_sasl_authenticated、defer_unauth_destination

mynetworks = 127.0.0.0/8 [::1]/128 Other specific ip's

你的 ipv6 地址（不仅仅是::1）是mynetworks变量吗？

相关内容