OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
"Blocked MTA-BLOCKED", fwd-connect error with amavisd<->postfix

From: Oskar Eyb (oskar-postfixeyb.de)
Date: Wed Dec 26 2007 - 06:23:09 CST


Hi!

I have worked a lot on postfix - amavisd but I have still an failure
which I cant solve.

inject a mail by $ telnet 127.0.0.2 10025

// so, the message is forwarded by postfix successfully to amavisd-new.

Dec 26 13:13:25 srv postfix/qmgr[8384]: 15B4A11852AA:
from=<(mysenderadr)>, size=370, nrcpt=1 (queue active)
Dec 26 13:13:26 srv amavis[8427]: (08427-01) LMTP::10024
/var/amavis/tmp/amavis-20071226T131326-08427: <(mysenderadr)> ->
<echofu-berlin.de> SIZE=370 Received: from srv.intra.eyb.de
([127.0.0.2]) by localhost (srv.intra.eyb.de [127.0.0.2]) (amavisd-new,
port 10024) with LMTP for <echofu-berlin.de>; Wed, 26 Dec 2007 13:13:26
+0100 (CET)

// Here amavisd gets into trouble

Dec 26 13:13:26 srv amavis[8427]: (08427-01) Checking: NJZugHtZUXfN
[127.0.0.2] <(mysenderadr)> -> <echofu-berlin.de>
Dec 26 13:13:26 srv amavis[8427]: (08427-01) (!)FWD via SMTP:
<(mysenderadr)> -> <echofu-berlin.de>, 451 4.5.0 From
MTA([[[127.0.0.2]]]:10025) during fwd-connect (errno=Invalid argument):
id=08427-01

// and explained why.. but I dont understand this. „BLOCKED MTA“...
// I have injected by telnet on 127.0.0.2:10025 from 127.0.0.2 to
// postfix successfully a mail. Why amavisd-new fails here??
// I guess, that 'fwd-connect' means, that amavis is trying to send back
// the mail to postfix.

Dec 26 13:13:26 srv amavis[8427]: (08427-01) Blocked MTA-BLOCKED, LOCAL
[127.0.0.2] [127.0.0.2] <(mysenderadr)> -> <echofu-berlin.de>,
Message-ID: <20071226121319.15B4A11852AAsrv.intra.eyb.de>, mail_id:
NJZugHtZUXfN, Hits: -, size: 370, 750 ms

Dec 26 13:13:26 srv postfix/lmtp[8470]: 15B4A11852AA:
to=<echofu-berlin.de>, relay=127.0.0.2[127.0.0.2]:10024, delay=14,
delays=13/0.06/0.05/0.73, dsn=4.5.0, status=deferred (host
127.0.0.2[127.0.0.2] said: 451 4.5.0 From MTA([[[127.0.0.2]]]:10025)
during fwd-connect (errno=Invalid argument): id=08427-01 (in reply to
end of DATA command))

Regards,
Oskar

masteer.cf
==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================

#628 inet n - n - - qmqpd
#pickup fifo n - n 60 1 pickup
#cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - n 300 1 oqmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - n - - smtp
         -o fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
#local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
#

pickup fifo n - n 60 1 pickup
   -o cleanup_service_name=pre-cleanup

smtp inet n - n - - smtpd
   -o cleanup_service_name=pre-cleanup
   -o content_filter=amavis-lmtp:[127.0.0.2]:10024

amavis-lmtp unix - - n - 2 lmtp
     -o lmtp_data_done_timeout=1200
     -o lmtp_send_xforward_command=yes
     -o disable_dns_lookups=yes
     -o max_use=20

127.0.0.1:10025 inet n - n - - smtpd
     -o content_filter=
     -o local_recipient_maps=
     -o relay_recipient_maps=
     -o smtpd_delay_reject=no
     -o smtpd_restriction_classes=
     -o smtpd_client_restrictions=
     -o smtpd_helo_restrictions=
     -o smtpd_sender_restrictions=
     -o smtpd_recipient_restrictions=permit_mynetworks,reject
     -o smtpd_data_restrictions=reject_unauth_pipelining
     -o smtpd_end_of_data_restrictions=
     -o mynetworks=127.0.0.0/8
     -o smtpd_error_sleep_time=0
     -o smtpd_soft_error_limit=1001
     -o smtpd_hard_error_limit=1000
     -o smtpd_client_connection_count_limit=0
     -o smtpd_client_connection_rate_limit=0
     -o
receive_override_options=no_header_body_checks,no_unknown_recipient_checks

dspam unix - n n - - pipe
   flags=Rhq user=dspam argv=/usr/local/bin/dspam --mode=teft --user
global \
   --deliver=innocent,spam --feature=chained,noise -i -f ${sender} --
${recipient}

dspam-spam unix - n n - - pipe
   flags=Rhq user=dspam argv=/usr/local/bin/dspam --mode=teft --user
global \
   --class=spam --source=error ${sender} --deliver=spam

dspam-notspam unix - n n - - pipe
   flags=Rhq user=dspam argv=/usr/local/bin/dspam --mode=teft --user
global \
   --class=innocent --source=error ${sender} --deliver=innocent

cleanup unix n - n - 0 cleanup
   -o header_checks=
   -o mime_header_checks=
   -o nested_header_checks=
   -o body_checks=

pre-cleanup unix n - n - 0 cleanup
   -o canonical_maps=
   -o sender_canonical_maps=
   -o recipient_canonical_maps=
   -o masquerade_domains=
   -o always_bcc=
   -o sender_bcc_maps=
   -o recipient_bcc_maps=

local unix - n n - - local
   -o content_filter=
   -o myhostname=HOSTNAME
   -o local_recipient_maps=
   -o relay_recipient_maps=
   -o mynetworks=127.0.0.0/8
   -o mynetworks_style=host
   -o smtpd_restriction_classes=
   -o smtpd_client_restrictions=
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject