access denied to watchdog@localhost; postfix restarts

leifnel

I see this in the watchdog log; two handfull ig lines like this, then postfix is restarted.

SMTP WARNING - Invalid response ‘554 5.7.1 <mailcowdockerized_watchdog-mailcow_1.mailcowdockerized_mailcow-network[172.22.1.5]>: Client host rejected: Access denied’ to command ‘RCPT TO:watchdog@localhost’

In postfix log I see this, dunno if it’s related.
postfix/trivial-rewrite[390]: warning: do not list domain localhost in BOTH mydestination and virtual_mailbox_domains

diekuh

You changed the extra.cf or main.cf and forgot to add the mailcow-internal network in mynetworks.

Furthermore mydestination == virtual_mailbox_domains should never be possible. Except for when, well, you change the extra.cf/main.cf with wrong values.

leifnel

I have
mydestination = localhost.localdomain, localhost mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 [fe80::]/10 10.0.5.0/24 virtual_mailbox_domains = proxy:mysql:/opt/postfix/conf/sql/mysql_virtual_domains_maps.cf

leifnel

I now removed localhost both in mydestination and as a domain alias.
I added the 172.22.1.0/24 to mynetworks

I still get SMTP WARNING - Invalid response '550 5.1.1 <watchdog@localhost>: Recipient address rejected: User unknown in virtual mailbox table' to command 'RCPT TO:watchdog@localhost' CRITICAL - Socket timeout

and watchdog kills and restarts postfix

diekuh

Why did you add these changes? They break your setup, that’s expected.

For the 10.0.5.0/24 network check the docs please. Search for “unauthenticated relaying”.

leifnel

diekuh Why did you add these changes? They break your setup, that’s expected.
I may be stupid, but what should I then have? Remove localhost.localdomain too?

For the 10.0.5.0/24 network check the docs please. Search for “unauthenticated relaying”.
I want relay from my hosts in that network. Those are physical hosts (well, vmware), that are natted to world addresses later.

diekuh

You are not stupid. 🙂 Remove everything. Just follow this afterwards: https://mailcow.github.io/mailcow-dockerized-docs/u_e-postfix-trust_networks/

diekuh

So in your case you would only add mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 [fe80::]/10 172.22.1.0/24 [fd4d:6169:6c63:6f77::]/64 10.0.5.0/24

leifnel

so mydestination = [empty]?

leifnel

Nope. Still
`
Sat Oct 2 12:40:05 UTC 2021 Postfix health level: 0% (0/8), health trend: -2
Sat Oct 2 12:40:06 UTC 2021 Postfix hit error limit

SMTP WARNING - Invalid response ‘550 5.1.1 <watchdog@localhost>: Recipient address rejected: User unknown in virtual mailbox table’ to command ‘RCPT TO:watchdog@localhost’
CRITICAL - Socket timeout
SMTP OK - 0.018 sec. response time|time=0.017618s;;;0.000000
`

leifnel

Can we start this again?
tried by hand:

rcpt to: watchdog@localhost
550 5.1.1 <watchdog@localhost>: Recipient address rejected: User unknown in virtual mailbox table