From: Tait Grove (taitagentimage.com)
Date: Wed Jul 09 2008 - 14:18:42 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> Your error message above showed client 127.0.0.1. If that information
> is accurate, the offending proxy software is on your box, and not an
> external load balancer or other device.
> The postfix log entry will confirm this, but postfix can't tell what
> software is in front of postfix.
>
> What does your box respond when you telnet to port 25 from an external
> IP? What does postfix log during that time? Do all your postfix log
> entries show client=localhost[127.0.0.0] or do they show the correct
> client IP?
>
> ======================================================
>
> There are two local programs that could be proxies, Amavisd (AV scan only
> with CLAMAV) and the virtual vacation program 'vacation.pl'. My log
entries
> show the users IP address (client=dome.dnsr.name.tld[71.5.1.5]).
>
> -- T

>> OK, what amavisd variant is this and what version? (I hope
>> it's amavisd-new and not one of the many unmaintained programs
>> that have "amavis" as part of their name.) And what version
>> of postfix while you're at it.
>>
>> How is this amavisd plugged into postfix? content_filter,
>> smtpd_proxy_filter, or what? I didn't see any reference to it
>> in your postconf output, so maybe you've configured it in
>> main.cf.
>>
>> When you get these nested MAIL command errors, what does
>> postfix log? That's what we really need to see.
>>
>> Anything else you're not telling us?
>>
>> --
>> Noel Jones

Hey Noel,

>> OK, what amavisd variant is this and what version? (I hope
>> it's amavisd-new and not one of the many unmaintained programs
>> that have "amavis" as part of their name.) And what version
>> of postfix while you're at it.

I am running amavisd-new (v 1.4), I am using content_filter. My postfix
version is 2.5.1_2,1.

>> How is this amavisd plugged into postfix?
smtp inet n - n - - smtpd
    -o content_filter=smtp-amavis:[127.0.0.1]:10024

... AND ...

# AMAVIS Setup for the SpamAssasin system
smtp-amavis unix - - n - 30 smtp
    -o smtp_data_done_timeout=1200
    -o disable_dns_lookups=yes
127.0.0.1:10025 inet n - n - 30 smtpd
   -o content_filter=
   -o local_recipient_maps=
    -o relay_recipient_maps=
    -o smtpd_restriction_classes=
    -o smtpd_client_restrictions=
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o mynetworks=127.0.0.0/8,192.168.0.0/8,71.0.0.0/25
    -o smtpd_recipient_restrictions=permit_mynetworks,$transport_maps,reject
    -o strict_rfc821_envelopes=yes
proxywrite unix - - n - - proxymap

>> When you get these nested MAIL command errors, what does
>> postfix log?

I will look into the log to see if I can gather something for you. It is
going to be hard with the amount of traffic we get and how random this error
occurs on our servers (worst then a needle in haystack).

Thanks for all the help thus far, please let me know what other information
I can provide.

>> Anything else you're not telling us?
I just saved a ton of money on my car insurance by switching to Geico. J/K..
I did just notice this in my master.cf ('strict_rfc821_envelopes=yes') and
that is in the error message as well, can this be the culprit?

-- Tait

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]