OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: TCP Port 10025 respond, but freeze.

From: Abivio Soares Pimenta (abiviounifor.br)
Date: Fri Apr 30 2004 - 06:59:16 CDT


Dear Wietse,
 
    As requested, I am ordering the configuration of the main.cf and of
the master.cf. I forgot to mention that when I comment the parameter
content_filter, everything works ok. Besides, in the logs of Amavisd,
the message is processed without problems. The parameters not mentioned
are with values default in main.cf

MASTER.CF:
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - y - - smtpd
pickup fifo n - y 60 1 pickup
cleanup unix n - y - 0 cleanup
qmgr fifo n - n 300 1 qmgr
rewrite unix - - y - - trivial-rewrite
bounce unix - - y - 0 bounce
defer unix - - n - 0 bounce
flush unix n - y 1000? 0 flush
proxymap unix - - y - - proxymap
smtp unix - - y - - smtp
relay unix - - n - - smtp
showq unix n - y - - showq
error unix - - y - - error
local unix - n n - - local
virtual unix - n y - - virtual
lmtp unix - - y - - lmtp
maildrop unix - n n - - pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
old-cyrus unix - n n - - pipe
  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
cyrus unix - n n - - pipe
  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp unix - n n - - pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
($recipient)
ifmail unix - n n - - pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop
$recipient
trace unix - - n - 0 bounce
verify unix - - n - 1
verifylmtp_mail_timeout = 300s
smtp-amavis unix - - y - 2 smtp
              -o smtp_data_done_timeout=1200
              -o disable_dns_lookups=yes
127.0.0.1:10025 inet n - y - - smtp -o content_filter= -o
local_recipi
ent_maps=
              -o relay_recipient_maps=
              -o smtpd_restriction_classes=
              -o smtpd_client_restrictions=
              -o smtpd_helo_restrictions=
              -o smtpd_sender_restrictions=
              -o
smtpd_recipient_restrictions=permit_mynetworks,reject_unauth_de
stination
              -o mynetworks=127.0.0.0/8

_________________________________________________________________

MAIN.CF

local_destination_concurrency_limit = 1
local_destination_recipient_limit = 1
local_recipient_maps =
local_transport = local:$myhostname
content_filter = smtp-amavis:[127.0.0.1]:10024
home_mailbox = Maildir/
mail_name = Postfix
mail_owner = postfix
mail_release_date = 20040422
mail_spool_directory = /var/mail
mail_version = 2.1.0
mailbox_command = /usr/lib/courier-imap/bin/deliverquota -w 90 ~/Maildir
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_backoff_time = 4000s
maximal_queue_lifetime = 5d
message_size_limit = 10240000
mime_boundary_length_limit = 2048
mime_header_checks = $header_checks
mime_nesting_limit = 100
minimal_backoff_time = 1000s
multi_recipient_bounce_reject_code = 550
mydestination = $myhostname, localhost.$mydomain
mydomain = unifor.br
myhostname = edu.unifor.br
mynetworks = 127.0.0.0/8
mynetworks_style = subnet
myorigin = $myhostname
nested_header_checks = $header_checks
newaliases_path = /usr/bin/newaliases.postfix
non_fqdn_reject_code = 504
notify_classes = resource, software
owner_request_special = yes
queue_directory = /var/spool/postfix
queue_file_attribute_count_limit = 100
queue_minfree = 0
queue_run_delay = 1000s
queue_service_name = qmgr
sample_directory = /usr/share/doc/postfix-2.0.16/samples
sendmail_path = /usr/sbin/sendmail.postfix
service_throttle_time = 60s
setgid_group = postdrop
show_user_unknown_table_name = yes
showq_service_name = showq
smtp_always_send_ehlo = yes
smtp_connect_timeout = 30s
smtp_data_done_timeout = 600s
smtp_data_init_timeout = 120s
smtp_data_xfer_timeout = 180s
smtp_defer_if_no_mx_address_found = no
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
smtp_destination_recipient_limit = $default_destination_recipient_limit
smtp_helo_name = $myhostname
smtp_helo_timeout = 300s
smtp_host_lookup = dns
smtp_line_length_limit = 990
smtp_mail_timeout = 300s
smtp_mx_address_limit = 0
smtp_mx_session_limit = 2
smtp_never_send_ehlo = no
smtp_pix_workaround_delay_time = 10s
smtp_pix_workaround_threshold_time = 500s
smtp_quit_timeout = 300s
smtp_quote_rfc821_envelope = yes
smtp_randomize_addresses = yes
smtp_rcpt_timeout = 300s
smtp_rset_timeout = 120s
smtp_send_xforward_command = no
smtp_skip_5xx_greeting = yes
smtp_skip_quit_response = yes
smtp_xforward_timeout = 300s
smtpd_authorized_verp_clients = $authorized_verp_clients
smtpd_authorized_xclient_hosts =
smtpd_authorized_xforward_hosts =
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 50
smtpd_client_connection_limit_exceptions = $mynetworks
smtpd_client_connection_rate_limit = 0
smtpd_delay_reject = yes
smtpd_error_sleep_time = 1s
smtpd_expansion_filter =
\t\40!"#$%&'()*+,-./0123456789:;<=>?ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
smtpd_hard_error_limit = 20
smtpd_helo_required = no
smtpd_proxy_ehlo = $myhostname
smtpd_proxy_timeout = 100s
smtpd_recipient_limit = 1000
smtpd_recipient_overshoot_limit = 1000
smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = no
smtpd_restriction_classes =
smtpd_sender_login_maps =
smtpd_sender_restrictions =
smtpd_soft_error_limit = 10
smtpd_timeout = 300s
soft_bounce = no
stale_lock_time = 500s
strict_7bit_headers = no
strict_8bitmime = no
strict_8bitmime_body = no
strict_mime_encoding_domain = no
strict_rfc821_envelopes = no
sun_mailtool_compatibility = no
swap_bangpath = yes
syslog_facility = mail
syslog_name = postfix
trace_service_name = trace
transport_retry_time = 60s
trigger_timeout = 10s
undisclosed_recipients_header = To: undisclosed-recipients:;
verp_delimiter_filter = -=+

Wietse Venema escreveu:

>Abivio Soares Pimenta:
>
>
>>Greetings,
>>
>> I have a server with RedHat Fedora, PostFix 2.1, and Amavisd-new.
>>After following the installation instructions, I made some tests and I
>>noticed that the messages were not forward PostFix after passing for the
>>filter. In the file /var/log/maillog appears:
>>
>>APR 29 19:20:30 EDU POSTFIX/QMGR[1847]: CB08EC833:
>>from=<marceloedu.unifor.br>, size=692, nrcpt=1 (queue active)
>>Apr 29 19:25:32 edu postfix/smtp[1849]: 9DDB1C826:
>>to=<rootedu.unifor.br>, orig_to=<root>, relay=127.0.0.1[127.0.0.1],
>>delay=141811, status=deferred (host 127.0.0.1[127.0.0.1] said: 450 4.4.1
>>Can't connect to 127.0.0.1 port 10025, attn /usr/sbin/amavisd line 2852,
>><GEN4> line 244., id=01790-01 (in reply to end of DATES command))
>>Apr 29 19:30:31 edu postfix/smtp[1877]: warning: unexpected end-of-input
>>from 127.0.0.1:10025 socket while reading input attribute name
>>Apr 29 19:30:31 edu postfix/smtp[1877]: warning: deliver_request_get:
>>error receiving common attributes
>>
>>And when testing the TCP port 10025, I obtain:
>>
>>[rootedu root] #telnet localhost 10025
>>Trying 127.0.0.1...
>>Connected to localhost.
>>Escape character i ' ^] '.
>>status0 <----------------------- not answer any command!!!!
>>
>>Some idea of the one what can be happening?
>>
>>
>
>How can we tell what's wrong when you give no
>configuration information?
>
>My glass sphere says you mis-configured the smtp client.
>
> Wietse
>
> Wietse
>
>