From: Ondrej Pachner (oplam.cz)
Date: Wed Jan 02 2008 - 07:23:13 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

hi,

On Wed, 2 Jan 2008, mouss wrote:
> Your first mission for this year would be to abandon giving bounce messages
> more importance than they deserve. the real infos are in postfix _logs_.
>
> make sure address rewrite is not disabled after the filter. you need to show:
> 'postconf -n' output and master.cf. feel free to hide private infos, but this
> coherently.

postconf -n:

alias_maps = hash:/etc/postfix/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
enable_original_recipient = yes
inet_interfaces = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
message_size_limit = 20480000
mydestination = myserver.domain.tld, localhost.domain.tld, localhost
mydomain = domain.tld
myhostname = smtp.domain.tld
mynetworks = /etc/postfix/mynetworks
myorigin = domain.tld
recipient_delimiter = +
relay_domains = proxy:mysql:/etc/postfix/mysql_relay_domains_maps.cf
relayhost =
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_hard_error_limit = 10
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unlisted_recipient, check_recipient_access hash:/etc/postfix/reject_over_quota, check_sender_access hash:/etc/postfix/rbl_sender_exceptions, check_client_access hash:/etc/postfix/rbl_client_exceptions, check_recipient_access hash:/etc/postfix/rbl_recipient_exceptions, reject_rbl_client sbl-xbl.spamhaus.org
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/sender_access, reject_non_fqdn_sender, reject_unknown_sender_domain
smtpd_soft_error_limit = 8
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.domain.tld.pem
smtpd_tls_cert_file = /etc/postfix/ssl/cert.smtp.domain.tld.pem
smtpd_tls_key_file = /etc/postfix/ssl/privkey.smtp.domain.tld.pem
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf, hash:/etc/postfix/virtual
virtual_gid_maps = static:6060
virtual_mailbox_base = /var/vmail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 6060
virtual_transport = maildrop
virtual_uid_maps = static:6060

master.cf:

#
# Postfix master process configuration file. For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - - - - smtpd
    -o smtpd_use_tls=no
    -o smtpd_sasl_auth_enable=no
    -o content_filter=smtp-amavis:[127.0.0.1]:10024
# -o receive_override_options=no_address_mappings
# ^^^^^^^^^^^^^^^^ with this ine uncommented postfix doesn't deliver
# mail into catch-all box at all

# If they want to relay, make them use port 587 (submission) or port 465 (smtps)
# If using submission port, configure client to use CRAM-MD5
submission inet n - - - - smtpd
   -o smtpd_use_tls=no
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
   -o content_filter=smtp-amavis:[127.0.0.1]:10026
# -o receive_override_options=no_address_mappings
# Outlook and OE (and many others) expect smtpd_tls_wrappermode,
# so have them submit here (port 465):
smtps inet n - - - - smtpd
   -o smtpd_enforce_tls=yes
   -o smtpd_tls_wrappermode=yes
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
   -o content_filter=smtp-amavis:[127.0.0.1]:10026
# -o receive_override_options=no_address_mappings
# We will use port 4650 for clients that use STARTTLS:
4650 inet n - - - - smtpd
   -o smtpd_enforce_tls=yes
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_client_restrictions=permit_sasl_authenticated,reject
   -o content_filter=smtp-amavis:[127.0.0.1]:10026
# -o receive_override_options=no_address_mappings
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
   -o content_filter=
cleanup unix n - - - 0 cleanup
amavis-cleanup unix n - - - 0 cleanup
   -o virtual_alias_maps=
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - - 300 1 oqmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - - - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - - - - smtp
         -o fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
#maildrop unix - n n - - pipe
# flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
maildrop unix - n n - - pipe
   flags=DRhu user=vmail:daemon argv=/usr/bin/maildrop -w 90
   -d ${user}${nexthop} ${extension} ${recipient} ${user} ${nexthop}
vacation unix - n n - - pipe
   flags=Rq user=vacation argv=/var/spool/vacation/vacation.pl
   -f ${sender} -- ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp unix - n n - - pipe
   flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail unix - n n - - pipe
   flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
   flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
   flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
   flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
   ${nexthop} ${user}
smtp-amavis unix - - n - 6 smtp
   -o smtp_data_done_timeout=1200
   -o smtp_send_xforward_command=yes
   -o disable_dns_lookups=yes
   -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks
127.0.0.1:10025 inet n - n - - smtpd
   -o cleanup_service_name=amavis-cleanup
   -o content_filter=
   -o local_recipient_maps=
   -o relay_recipient_maps=
   -o smtpd_restriction_classes=
   -o smtpd_delay_reject=no
   -o smtpd_client_restrictions=permit_mynetworks,reject
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o smtpd_data_restrictions=reject_unauth_pipelining
   -o smtpd_end_of_data_restrictions=
   -o mynetworks=127.0.0.0/8
   -o smtpd_error_sleep_time=0
   -o smtpd_soft_error_limit=1001
   -o smtpd_hard_error_limit=1000
   -o smtpd_client_connection_count_limit=0
   -o smtpd_client_connection_rate_limit=0
   -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks

log output:

with -o receive_override_options=no_address_mappings (as shown upper)

Jan 2 14:16:51 smtp amavis[12465]: (12465-07) Passed CLEAN, MYNETS LOCAL [X.Y.Z.W] [X.Y.W.Q] <somesender.tld> -> <prdprddomain.tld>, Message-ID: <Pine.LNX.4.64.0801021405310.5021localhost>, mail_id: sR4aAPT26nQS, Hits: -2.459, queued_as: 2FE9F5417D, 1198 ms
Jan 2 14:16:51 smtp postfix/smtp[12968]: EBB0B5412C: to=<prdprddomain.tld>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.3, delays=0.09/0/0/1.2, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=12465-07, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 2FE9F5417D)
Jan 2 14:16:51 smtp postfix/pipe[13000]: 2FE9F5417D: to=<prdprddomain.tld>, relay=maildrop, delay=0.07, delays=0.05/0.01/0/0.01, dsn=5.1.1, status=bounced (user unknown. Command output: Invalid user specified. )

with -o receiv... commented:

Jan 2 13:26:31 smtp postfix/smtp[3135]: 4E4B654888:
to=<pikacudomain.tld>, orig_to=<prdprddomain.tld>,
relay=127.0.0.1[127.0.0.1]:10024, delay=1.4, delays=0.11/0/0/1.2,
dsn=2.6.0, status=sent (250 2.6.0 Ok, id=02776-06, from
MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8EBC454A3D)

BUT doesn't incude X-Original-To header :-(

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]