<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.8.5">
</HEAD>
<BODY>
Hi Jim,<BR>
<BR>
>From your description, I think you have everything configured ok, but<BR>
for some reason, valvula is not being able to detect known valid<BR>
accounts because:<BR>
<BR>
<BR>
<BLOCKQUOTE>
<FONT COLOR="#003366">is sending with an </FONT><FONT COLOR="#003366"><B>unknown account mail from <<A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>> (mod-slm=valid-mail-from)</B></FONT><BR>
<BR>
</BLOCKQUOTE>
Can you right the following commands and paste output to give you<BR>
further indications?<BR>
<BR>
>> valvulad --version<BR>
>> valvulad -l <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A><BR>
<BR>
<BR>
<BR>
El vie, 09-06-2017 a las 16:30 -0400, Jim Bassett escribió:<BR>
<BLOCKQUOTE TYPE=CITE>
Hi. New to valvula and to the list. The software looks like exactly what I need. I am running postfix (w/ dovecot) on Centos 6.6. Installation was relatively easy. I am trying to setup mod-slm for the purpose of stopping "those situations where compromised accounts are used to send/relay content to recipients using source addresses that do not belong to the server”.<BR>
<BR>
Valvula is running. If I tail -f /var/log/maillog I can see it is logging. But I am not getting the behavior I expect. I’m not sure if this is because I have something wrong or if I’m not understanding the expected behavior.<BR>
<BR>
My issue is that when I connect to my server from my home machine, and try to send mail (through Apple mail.app) my mail is rejected. Here is the corresponding entry from /var/log/maillog:<BR>
<BR>
<BR>
Jun 9 15:59:59 oak valvulad[22026]: info: REJECT: <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A> -> <A HREF="mailto:redacted@gmail.com">redacted@gmail.com</A> (<A HREF="mailto:sasl_user=jim@datamantic.com">sasl_user=jim@datamantic.com</A>), port 3080, queue-id , from 98.14.xx.xxx: Rejecting because SASL username <<A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>> is sending with an unknown account mail from <<A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>> (mod-slm=valid-mail-from)<BR>
<BR>
<BR>
<A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A> is my real email account on the server (with an entry in the postfix mysql database). <BR>
<BR>
In /etc/postfix/main.cf I have only made one change:<BR>
<BR>
smtpd_sender_restrictions = check_policy_service inet:127.0.0.1:3080, reject_unknown_sender_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, permit<BR>
<BR>
And in /etc/valvula/main.cf I have, inside <general>:<BR>
<BR>
<listen host='127.0.0.1' port='3080'><BR>
<run module='mod-slm' /><BR>
</listen><BR>
<BR>
and inside <enviroment>:<BR>
<BR>
<sender-login-mismatch mode='valid-mail-from' allow-empty-mail-from='yes' /><BR>
<BR>
<BR>
And valvula seems to have access to the database because if I run:<BR>
<BR>
valvulad -b<BR>
<BR>
I get:<BR>
<BR>
INFO: Database connection working OK<BR>
<BR>
What I would expect to happen is that when I am logged in as the real email user <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>, that I would be able to send email that says it is from <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>, but be rejected only if I try to send email as <A HREF="mailto:some-nonexistent-account@datamantic.com">some-nonexistent-account@datamantic.com</A> or <A HREF="mailto:some-nonexistent-account@nonexistent-domain.com">some-nonexistent-account@nonexistent-domain.com</A>.<BR>
<BR>
I really appreciate any help! Thank you!<BR>
<BR>
<PRE>
_______________________________________________
Valvula mailing list
<A HREF="mailto:Valvula@lists.aspl.es">Valvula@lists.aspl.es</A>
<A HREF="http://lists.aspl.es/cgi-bin/mailman/listinfo/valvula">http://lists.aspl.es/cgi-bin/mailman/listinfo/valvula</A>
</PRE>
</BLOCKQUOTE>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<PRE>
--
Francis Brosnan Blázquez - ASPL
http://www.asplhosting.com/
http://www.aspl.es/
https://twitter.com/aspl_es
https://twitter.com/asplhosting
https://twitter.com/francisbrosnanb
https://es.linkedin.com/in/francis-brosnan-blázquez-1353a218
91 134 14 22 - 91 134 14 45 - 91 116 07 57
Av. Juan Carlos I 13, 2ºC, Torre Garena
28806 - Alcalá de Henares (España)
AVISO LEGAL
En virtud de lo dispuesto en la Ley Orgánica 15/1999, de 13 de
diciembre, de Protección de Datos de Carácter Personal, le informamos de
que sus datos de carácter personal, recogidos de fuentes accesibles al
público o datos que usted nos ha facilitado previamente, proceden de
bases de datos propiedad de Advanced Software Production Line, S.L.
(ASPL).
ASPL garantiza que los datos serán tratados con la finalidad de mantener
las oportunas relaciones comerciales o promocionales con usted o la
entidad que usted representa. No obstante, usted puede ejercitar sus
derechos de acceso, rectificación, cancelación y oposición dispuestos en
la mencionada Ley Orgánica, notificándolo por escrito a ASPL -
Protección Datos, Av. Juan Carlos I 13, 2ºC, Alcalá de Henares
(Madrid).
</PRE>
</TD>
</TR>
</TABLE>
</BODY>
</HTML>