From: mouss (mlist.onlyfree.fr)
Date: Wed Jan 02 2008 - 07:46:41 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Ondrej Pachner wrote:
> hi,
>
> On Wed, 2 Jan 2008, mouss wrote:
>> Your first mission for this year would be to abandon giving bounce
>> messages more importance than they deserve. the real infos are in
>> postfix _logs_.
>>
>> make sure address rewrite is not disabled after the filter. you need
>> to show: 'postconf -n' output and master.cf. feel free to hide private
>> infos, but this coherently.
>
> postconf -n:
>
> alias_maps = hash:/etc/postfix/aliases
> append_dot_mydomain = no
> biff = no
> broken_sasl_auth_clients = yes
> config_directory = /etc/postfix
> enable_original_recipient = yes
> inet_interfaces = all
> mailbox_command = procmail -a "$EXTENSION"
> mailbox_size_limit = 0
> message_size_limit = 20480000
> mydestination = myserver.domain.tld, localhost.domain.tld, localhost
> mydomain = domain.tld
> myhostname = smtp.domain.tld
> mynetworks = /etc/postfix/mynetworks
> myorigin = domain.tld
> recipient_delimiter = +
> relay_domains = proxy:mysql:/etc/postfix/mysql_relay_domains_maps.cf
> relayhost = smtp_tls_session_cache_database =
> btree:${queue_directory}/smtp_scache
> smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
> smtpd_data_restrictions = reject_unauth_pipelining
> smtpd_hard_error_limit = 10
> smtpd_helo_required = yes
> smtpd_recipient_restrictions = permit_mynetworks,
> permit_sasl_authenticated, reject_unauth_destination,
> reject_unlisted_recipient, check_recipient_access
> hash:/etc/postfix/reject_over_quota, check_sender_access
> hash:/etc/postfix/rbl_sender_exceptions, check_client_access
> hash:/etc/postfix/rbl_client_exceptions, check_recipient_access
> hash:/etc/postfix/rbl_recipient_exceptions, reject_rbl_client
> sbl-xbl.spamhaus.org
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_authenticated_header = yes
> smtpd_sasl_local_domain = $myhostname
> smtpd_sasl_security_options = noanonymous
> smtpd_sender_restrictions = check_sender_access
> hash:/etc/postfix/sender_access, reject_non_fqdn_sender,
> reject_unknown_sender_domain
> smtpd_soft_error_limit = 8
> smtpd_tls_CAfile = /etc/postfix/ssl/cacert.domain.tld.pem
> smtpd_tls_cert_file = /etc/postfix/ssl/cert.smtp.domain.tld.pem
> smtpd_tls_key_file = /etc/postfix/ssl/privkey.smtp.domain.tld.pem
> smtpd_tls_received_header = yes
> smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
> smtpd_use_tls = yes
> transport_maps = hash:/etc/postfix/transport
> virtual_alias_maps =
> proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf,
> hash:/etc/postfix/virtual
> virtual_gid_maps = static:6060
> virtual_mailbox_base = /var/vmail
> virtual_mailbox_domains =
> proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
> virtual_mailbox_maps =
> proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
> virtual_minimum_uid = 6060
> virtual_transport = maildrop
> virtual_uid_maps = static:6060
>
> master.cf:
>
> #
> # Postfix master process configuration file. For details on the format
> # of the file, see the master(5) manual page (command: "man 5 master").
> #
> #
> ==========================================================================
> # service type private unpriv chroot wakeup maxproc command + args
> # (yes) (yes) (yes) (never) (100)
> #
> ==========================================================================
> smtp inet n - - - - smtpd
> -o smtpd_use_tls=no
> -o smtpd_sasl_auth_enable=no
> -o content_filter=smtp-amavis:[127.0.0.1]:10024
> # -o receive_override_options=no_address_mappings
> # ^^^^^^^^^^^^^^^^ with this ine uncommented postfix doesn't deliver
> # mail into catch-all box at all
>
> # If they want to relay, make them use port 587 (submission) or port 465
> (smtps)
> # If using submission port, configure client to use CRAM-MD5
> submission inet n - - - - smtpd
> -o smtpd_use_tls=no
> -o smtpd_sasl_auth_enable=yes
> -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> -o content_filter=smtp-amavis:[127.0.0.1]:10026
> # -o receive_override_options=no_address_mappings # Outlook and OE (and
> many others) expect smtpd_tls_wrappermode,
> # so have them submit here (port 465):
> smtps inet n - - - - smtpd
> -o smtpd_enforce_tls=yes
> -o smtpd_tls_wrappermode=yes
> -o smtpd_sasl_auth_enable=yes
> -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> -o content_filter=smtp-amavis:[127.0.0.1]:10026
> # -o receive_override_options=no_address_mappings
> # We will use port 4650 for clients that use STARTTLS:
> 4650 inet n - - - - smtpd
> -o smtpd_enforce_tls=yes
> -o smtpd_sasl_auth_enable=yes
> -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> -o content_filter=smtp-amavis:[127.0.0.1]:10026
> # -o receive_override_options=no_address_mappings
> #628 inet n - - - - qmqpd
> pickup fifo n - - 60 1 pickup
> -o content_filter=
> cleanup unix n - - - 0 cleanup
> amavis-cleanup unix n - - - 0 cleanup
> -o virtual_alias_maps=

This is it. The after the filter smtpd have no virtual_alias_maps.
don't play games with *_maps when filtering. you should not need any
setting like this.

> qmgr fifo n - n 300 1 qmgr
> #qmgr fifo n - - 300 1 oqmgr
> tlsmgr unix - - - 1000? 1 tlsmgr
> rewrite unix - - - - - trivial-rewrite
> bounce unix - - - - 0 bounce
> defer unix - - - - 0 bounce
> trace unix - - - - 0 bounce
> verify unix - - - - 1 verify
> flush unix n - - 1000? 0 flush
> proxymap unix - - n - - proxymap
> smtp unix - - - - - smtp
> # When relaying mail as backup MX, disable fallback_relay to avoid MX loops
> relay unix - - - - - smtp
> -o fallback_relay=
> # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
> showq unix n - - - - showq
> error unix - - - - - error
> discard unix - - - - - discard
> local unix - n n - - local
> virtual unix - n n - - virtual
> lmtp unix - - - - - lmtp
> anvil unix - - - - 1 anvil
> scache unix - - - - 1 scache
> #
> # ====================================================================
> # Interfaces to non-Postfix software. Be sure to examine the manual
> # pages of the non-Postfix software to find out what options it wants.
> #
> # Many of the following services use the Postfix pipe(8) delivery
> # agent. See the pipe(8) man page for information about ${recipient}
> # and other message envelope options.
> # ====================================================================
> #
> # maildrop. See the Postfix MAILDROP_README file for details.
> # Also specify in main.cf: maildrop_destination_recipient_limit=1
> #
> #maildrop unix - n n - - pipe
> # flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
> maildrop unix - n n - - pipe
> flags=DRhu user=vmail:daemon argv=/usr/bin/maildrop -w 90
> -d ${user}${nexthop} ${extension} ${recipient} ${user} ${nexthop}
> vacation unix - n n - - pipe
> flags=Rq user=vacation argv=/var/spool/vacation/vacation.pl
> -f ${sender} -- ${recipient}
> #
> # See the Postfix UUCP_README file for configuration details.
> #
> uucp unix - n n - - pipe
> flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
> ($recipient)
> #
> # Other external delivery methods.
> #
> ifmail unix - n n - - pipe
> flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
> bsmtp unix - n n - - pipe
> flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender
> $recipient
> scalemail-backend unix - n n - 2 pipe
> flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
> ${nexthop} ${user} ${extension}
> mailman unix - n n - - pipe
> flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
> ${nexthop} ${user}
> smtp-amavis unix - - n - 6 smtp
> -o smtp_data_done_timeout=1200
> -o smtp_send_xforward_command=yes
> -o disable_dns_lookups=yes
> -o
> receive_override_options=no_header_body_checks,no_unknown_recipient_checks
> 127.0.0.1:10025 inet n - n - - smtpd
> -o cleanup_service_name=amavis-cleanup
> -o content_filter=
> -o local_recipient_maps=

nor do you need this.

> -o relay_recipient_maps=

nor this.

> -o smtpd_restriction_classes=
> -o smtpd_delay_reject=no
> -o smtpd_client_restrictions=permit_mynetworks,reject
> -o smtpd_helo_restrictions=
> -o smtpd_sender_restrictions=
> -o smtpd_recipient_restrictions=permit_mynetworks,reject
> -o smtpd_data_restrictions=reject_unauth_pipelining
> -o smtpd_end_of_data_restrictions=
> -o mynetworks=127.0.0.0/8
> -o smtpd_error_sleep_time=0
> -o smtpd_soft_error_limit=1001
> -o smtpd_hard_error_limit=1000
> -o smtpd_client_connection_count_limit=0
> -o smtpd_client_connection_rate_limit=0
> -o
> receive_override_options=no_header_body_checks,no_unknown_recipient_checks
>
>
> log output:
>
> with -o receive_override_options=no_address_mappings (as shown upper)
>
> Jan 2 14:16:51 smtp amavis[12465]: (12465-07) Passed CLEAN, MYNETS
> LOCAL [X.Y.Z.W] [X.Y.W.Q] <somesender.tld> -> <prdprddomain.tld>,
> Message-ID: <Pine.LNX.4.64.0801021405310.5021localhost>, mail_id:
> sR4aAPT26nQS, Hits: -2.459, queued_as: 2FE9F5417D, 1198 ms
> Jan 2 14:16:51 smtp postfix/smtp[12968]: EBB0B5412C:
> to=<prdprddomain.tld>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.3,
> delays=0.09/0/0/1.2, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=12465-07,
> from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 2FE9F5417D)
> Jan 2 14:16:51 smtp postfix/pipe[13000]: 2FE9F5417D:
> to=<prdprddomain.tld>, relay=maildrop, delay=0.07,
> delays=0.05/0.01/0/0.01, dsn=5.1.1, status=bounced (user unknown.
> Command output: Invalid user specified. )
>
> with -o receiv... commented:
>
> Jan 2 13:26:31 smtp postfix/smtp[3135]: 4E4B654888:
> to=<pikacudomain.tld>, orig_to=<prdprddomain.tld>,
> relay=127.0.0.1[127.0.0.1]:10024, delay=1.4, delays=0.11/0/0/1.2,
> dsn=2.6.0, status=sent (250 2.6.0 Ok, id=02776-06, from
> MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8EBC454A3D)
>
> BUT doesn't incude X-Original-To header :-(

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]