[postfix-jp:03841] Re: 外部へ 対してのメール送信が不可

[Takeshi Kawamoto <ipnet@xxxxxxxxxxxxxxxx>]

河本です。

本山さん、まつもとさんのアドバイスから少しチェックを行ってみました。
長文になりますが、ご了承くださいませ。

$ ネットワーク図(DMZ未使用)
ROUTER-------(MyRoom)----8PORT S-HUB-----Server
| | |                    ||||||
OTHER ROOM               CRIENT

$ dig mx ariela.jp
; <<>> DiG 9.2.1 <<>> mx ariela.jp
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26094
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; QUESTION SECTION:
;ariela.jp.                     IN      MX

;; ANSWER SECTION:
ariela.jp.              900     IN      MX      0 ariela.jp.

;; AUTHORITY SECTION:
ariela.jp.              900     IN      NS      ns0.mydns.jp.

;; ADDITIONAL SECTION:
ariela.jp.              900     IN      A       211.132.67.182
ns0.mydns.jp.           30567   IN      A       210.197.74.200

;; Query time: 57 msec
;; SERVER: 202.216.224.67#53(202.216.224.67)
;; WHEN: Tue Jan 13 13:15:05 2004
;; MSG SIZE  rcvd: 108

digでMXレコードを引くことは出来ました。
ですので、DNSの問題では無いのかなと思いました。

そして、最後にpostconf -n の出力内容です。
まだ設定できていない項目(TLS関連)が少し気になります。

# postconf -n
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
allow_untrusted_routing = no
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
defer_code = 450
home_mailbox = Maildir/
invalid_hostname_reject_code = 501
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maps_rbl_reject_code = 550
mydestination = $myhostname, localhost.$mydomain, $mydomain
mydomain = ariela.jp
myhostname = ariela.jp
mynetworks = 192.168.12.0/28, 127.0.0.0/8
mynetworks_style = subnet
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
rbl_reply_maps = 
readme_directory = /etc/postfix/README_FILES
reject_code = 550
relay_domains = $mydestination
relay_domains_reject_code = 550
sample_directory = /etc/postfix/samples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_sasl_auth_enable = no
smtp_sasl_password_maps = hash:/etc/postfix/saslpass
smtp_sasl_security_options = noplaintext
smtp_sasl_tls_security_options = $smtp_sasl_security_options
smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options
smtp_tls_CAfile = /etc/postfix/CAcert.pem
smtp_tls_CApath = /etc/postfix/certs
smtp_tls_cert_file = /etc/postfix/client.pem
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 0
smtp_tls_note_starttls_offer = yes
smtp_tls_per_site = hash:/etc/postfix/tls_per_site
smtp_tls_session_cache_database = sdbm:/etc/postfix/smtp_scache
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_restrictions = 
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions = 
smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
smtpd_hard_error_limit = 20
smtpd_helo_required = no
smtpd_helo_restrictions = 
smtpd_history_flush_threshold = 100
smtpd_noop_commands = 
smtpd_recipient_limit = 1000
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sender_restrictions = 
smtpd_soft_error_limit = 10
smtpd_timeout = 300s
smtpd_tls_CAfile = /usr/local/certs/ca.crt
smtpd_tls_CApath = /usr/local/certs
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /usr/local/certs/server.crt
smtpd_tls_key_file = /usr/local/certs/server.key
smtpd_tls_loglevel = 1
smtpd_tls_session_cache_database = sdbm:/etc/postfix/smtpd_scache
smtpd_use_tls = yes
strict_rfc821_envelopes = no
tls_daemon_random_source = egd:/var/run/egd-pool
tls_random_source = dev:/dev/urandom
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 550

他に必要な情報等、また心当たりが御座いましたら、是非ご教授お願いいたしま
す。
# Googleをもっと活用してみます。