Need email server aid

[Markus Schönhaber]

22.04.2010 16:10, Chuck Kuecker:

> Markus Schönhaber wrote:

>> Above, you said that the embedded system is in your local network. But
>> this log excerpt shows a client connecting from 66.254.194.29, i. e. an
>> IP that is neither in 127.0.0.0/8 nor 192.168.0.0/16. Therefore it's not
>> contained in the IP ranges you configured as mynetworks and
>> permit_mynetworks doesn't apply.
>>
>>   
> OK. I see that. 66.254.194.29 is my static IP from my ISP. When I 
> resolve 'mail.ckent.org', that's what comes up. I certainly don't want 
> just anyone sending email to that IP to be able to relay!

That's all fine, but I don't see why your embedded device should connect
to your mail server *from* 66.254.194.29 - unless the mailserver the log
excerpt comes from is outside of your local net.

Maybe you should provide some info about how your network is set up and
which mailserver you try to access how.

> This is what confuses me - my Windoze PC has Thunderbird set up to 
> access email via 'mail.ckent.org', and it's on my local network, just 
> like the embedded gadget and the Linux box hosting 'mail.ckent.org'. Why 
> does the PC connect reliably, but the embedded gadget fails reliably?

Probably because Thunderbird on your PC is, as you said before,
configured to authenticate to the mail server, while your embedded
gadget isn't.
The smtpd_recipient_restrictions contains permit_sasl_authenticated
before reject_unauth_destination, which means that authenticated users
may relay.

-- 
Regards
  mks