Hallo,
vielen Dank für den Hinweis. Auf den Tipp mit sender_canonical_maps statt smtp_generic_maps war ich inzwischen auch schon gekommen. Nützlich war der Zusatzhinweis auf die UCR-Variable /mail/postfix/local/header/rewrite/client static:all. Das habe ich auch gleich ausprobiert. Leider wieder ohne Erfolg.
Es muß noch an etwas anderem liegen. Ich würde erwarten, daß in der mail.log bei der Fehlermeldung “relay access denied” bei from ‘intern@domäne.local’ to 'extern@beispiel.com’ steht.
Die Adreßumsetzung scheint gar nicht stattzufinden.
So sieht meine main.cf im Moment aus:
[code]# Warning: This file is auto-generated and might be overwritten by
univention-config-registry.
Please edit the following file(s) instead:
Warnung: Diese Datei wurde automatisch generiert und kann durch
univention-config-registry überschrieben werden.
Bitte bearbeiten Sie an Stelle dessen die folgende(n) Datei(en):
/etc/univention/templates/files/etc/postfix/main.cf.d/10_general
/etc/univention/templates/files/etc/postfix/main.cf.d/30_maps
/etc/univention/templates/files/etc/postfix/main.cf.d/50_restrictions
/etc/univention/templates/files/etc/postfix/main.cf.d/60_tls
/etc/univention/templates/files/etc/postfix/main.cf.d/80_delivery
The message_size_limit parameter limits the total size in bytes of
a message, including envelope information. Default is 10240000
message_size_limit = 20480000
mailbox_size_limit limits the max. size of local mailboxes. Default is 51200000
#mailbox_size_limit = 0
some basic path definitions
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
program_directory = /usr/lib/postfix
some basic mail system settings
myhostname = ucs.emk.de
mydomain is unset - The default is to use $myhostname minus the first component.
myorigin = ucs.emk.de
smtp_helo_name = ucs.emk.de
append_dot_mydomain = no
inet_interfaces = all
inet_protocols = ipv4
mydestination = $myhostname, localhost.$mydomain, localhost
mynetworks =
masquerade_domains = $mydomain
masquerade_exceptions = root
transport_maps = hash:/etc/postfix/transport
we need to name a smtp relay host to which we forward non-local
mails. smtp authentication is also possible.
sender_dependent_relayhost_maps = hash:/etc/postfix/sender_relay
smtp_sender_dependent_authentication = yes
smtp_sasl_auth_enable = yes
smtp_sasl_security_options = noanonymous
smtp_sasl_password_maps = hash:/etc/postfix/smtp_auth
disable_vrfy_command = no
banner
local_header_rewrite_clients = static:all
sender_canonical_maps = hash:/etc/postfix/canonical
virtual_alias_domains =
virtual_alias_maps = hash:/etc/postfix/virtual,
ldap:/etc/postfix/ldap.groups,
ldap:/etc/postfix/ldap.distlist,
ldap:/etc/postfix/ldap.sharedfolderremote,
ldap:/etc/postfix/ldap.sharedfolderlocal,
ldap:/etc/postfix/ldap.virtual
virtual_mailbox_domains = ldap:/etc/postfix/ldap.virtualdomains
virtual_mailbox_maps = hash:/etc/postfix/virtual,
ldap:/etc/postfix/ldap.groups,
ldap:/etc/postfix/ldap.distlist,
ldap:/etc/postfix/ldap.sharedfolderremote,
ldap:/etc/postfix/ldap.sharedfolderlocal,
ldap:/etc/postfix/ldap.virtual
virtual_transport = lmtp:127.0.0.1:2003
canonical_maps = hash:/etc/postfix/canonical
relocated_maps = hash:/etc/postfix/relocated
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
reject_unlisted_recipient
smtpd_sender_restrictions is not defined since all relevant checks have been moved to
smtpd_recipient_restrictions and every mail has to pass smtpd_recipient_restrictions too.
#smtpd_sender_restrictions =
#TLS settings
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
smtpd_tls_cert_file = /etc/univention/ssl/ucs.emk.de/cert.pem
smtpd_tls_key_file = /etc/univention/ssl/ucs.emk.de/private.key
smtpd_tls_received_header = no
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtp client
smtp_tls_security_level = may
Support broken clients like Microsoft Outlook Express 4.x which expect AUTH=LOGIN instead of AUTH LOGIN
broken_sasl_auth_clients = yes
if virus scanning is desired, all mails can be redirected through amavis.
content_filter = smtp-amavis:[127.0.0.1]:10024
[/code]
Für weitere Hinweise bin ich dankbar.
Viele Grüße
