Добрый день!
Система FreeBSD 6.2-RELEASE
Почтовик postfix-current-2.6.20090125,4 из портов.
в один из суровых дней, когда в Финляндии перерубили оптоволоконный канал на Европу, посыпались проблемы с провайдерским DNS'ом. и все бы ничего, но Postfix начал в очень маленьком проценте писем давать отлуп пользователям, ссылаясь на то, что не может определить куда деть письмо. (Большинство писем отправляются нормально).
Выглядит это примерно так:
Feb 24 12:44:58 proliantx postfix/smtpd[26456]: connect from unknown[192.168.0.56]
Feb 24 12:44:58 proliantx postfix/smtpd[26456]: BA6682885B: client=unknown[192.168.0.56]
Feb 24 12:45:02 proliantx postfix/smtpd[26456]: disconnect from unknown[192.168.0.56]
Feb 24 12:45:43 proliantx postfix/smtpd[26456]: connect from unknown[192.168.0.17]
Feb 24 12:45:43 proliantx postfix/smtpd[26456]: warning: SASL authentication failure: realm changed: authentication aborted
Feb 24 12:45:43 proliantx postfix/smtpd[26456]: warning: unknown[192.168.0.17]: SASL DIGEST-MD5 authentication failed: authentication failure
Feb 24 12:45:43 proliantx postfix/smtpd[26456]: NOQUEUE: reject: RCPT from unknown[192.168.0.17]: 451 4.3.0 <rvi@ctc-motors.ru>: Temporary lookup failure; from=<rvi@ctc-motors.ru> to=<kuznetsova@kelin.ru> proto=ESMTP helo=<WS383>
Feb 24 12:45:45 proliantx postfix/smtpd[26456]: disconnect from unknown[192.168.0.17]Помогает либо
#postfix stop
#postfix start
Что понятное дело - не вариант, либо (иногда) перезапуск почтового клиента.
Конфигурация postfix:
[root@proliantx /home/phoenix]# postconf -n
address_verify_sender = <>
alias_database = hash:/etc/mail/aliases
alias_maps = hash:/etc/mail/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/local/sbin
config_directory = /usr/local/etc/postfix
daemon_directory = /usr/local/libexec/postfix
data_directory = /var/db/postfix
debug_peer_list = 127.0.0.1, ctc-motors.ru, ctc-c.ru, umgb.ru
default_privs = nobody
disable_vrfy_command = yes
header_checks = regexp:$base/header_checks
html_directory = no
inet_interfaces = all
local_recipient_maps = $virtual_mailbox_maps, $virtual_alias_maps, $alias_maps
mail_owner = postfix
mailq_path = /usr/local/bin/mailq
manpage_directory = /usr/local/man
message_size_limit = 31457280
mydestination = $myhostname, localhost
mydomain = ctc-motors.ru
myhostname = ctc-c.ru
mynetworks = 192.168.0.0/24, 127.0.0.0/8
mynetworks_style = subnet
myorigin = $mydomain
newaliases_path = /usr/local/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
recipient_delimiter = +
sample_directory = /usr/local/etc/postfix
sendmail_path = /usr/local/sbin/sendmail
setgid_group = maildrop
show_user_unknown_table_name = no
smtp_always_send_ehlo = yes
smtp_helo_timeout = 60s
smtp_mail_timeout = 60s
smtp_rcpt_timeout = 90s
smtpd_banner = $myhostname ESMTP
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated,
check_client_access hash:$base/client_access, reject_unknown_client
smtpd_etrn_restrictions = reject
smtpd_hard_error_limit = 8
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
check_helo_access hash:$base/hello_access,
reject_invalid_hostname,
reject_non_fqdn_hostname
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
permit_auth_destination,
check_sender_access hash:$base/sender_access,
check_recipient_access hash:$base/recipient_access,
reject_unauth_destination,
reject_unlisted_recipient,
reject_unknown_recipient_domain,
reject_non_fqdn_recipient,
reject_unverified_recipient
smtpd_reject_unlisted_sender = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_mynetworks,
permit_sasl_authenticated,
check_sender_access hash:$base/sender_access,
reject_unknown_sender_domain,
reject_unlisted_sender,
reject_unverified_sender
smtpd_timeout = 120s
strict_rfc821_envelopes = yes
transport_maps = mysql:$base/mysqlLookupMaps/transport.conf
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:$base/mysqlLookupMaps/alias.conf
virtual_gid_maps = static:1981
virtual_mailbox_base = /var/spool/mail
virtual_mailbox_domains = mysql:$base/mysqlLookupMaps/domain.conf
virtual_mailbox_maps = mysql:$base/mysqlLookupMaps/mailbox.conf
virtual_minimum_uid = 1000
virtual_uid_maps = static:1981
[root@proliantx /home/phoenix]# cat /etc/resolv.conf
options timeout:4 attempts:3
domain ctc-motors.ru
nameserver 127.0.0.1
DNS - Кэширующий Bind (Собственно здесь, как мне кажется основная проблема)
хотя не помогали подстановки провайдерских DNS'ов или DNS'а внутри сети.