Postfix: spamassasin transport failure



rasmeratus

New Member
Hallo Leute,

habe ein Problem mit meinem postfix welches ich auch nach tagelangem googeln nicht lösen kann.

Server: Debian Squeeze, 32Bit. Zarafa: letzte Version.

Der zarafa-Server läuft, ich kann mit der Weboberfläche arbeiten.
Ich kann nur keine eMails versenden/empfangen.

Meine main.cf:
Code:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version

# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA.s job.
append_dot_mydomain = no

# Uncomment the next line to generate .delayed mail. warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = server3.xxx.de
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
virtual_alias_maps = mysql:/etc/postfix/mysql-aliases.cf
myorigin = /etc/mailname
mydestination = xxxx.de , localhost
relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_transport = procmail:
procmail_destination_recipient_limit = 1
recipient_delimiter = +
inet_interfaces = all

smtpd_helo_required = yes
disable_vrfy_command = yes
strict_rfc821_envelopes = yes
invalid_hostname_reject_code = 554
multi_recipient_bounce_reject_code = 554
non_fqdn_reject_code = 554
relay_domains_reject_code = 554
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_local_recipient_reject_code = 554
unknown_relay_recipient_reject_code = 554
unknown_sender_reject_code = 554
unknown_virtual_alias_reject_code = 554
unknown_virtual_mailbox_reject_code = 554
unverified_recipient_reject_code = 554
unverified_sender_reject_code = 554
content_filter = scan:[127.0.0.1]:10025
receive_override_options = no_address_mappings
smtpd_recipient_restrictions = permit_sasl_authenticated,
reject_invalid_hostname =
    reject_unknown_recipient_domain,
    reject_unauth_pipelining,
permit_mynetworks, =
reject_unauth_destination=
    reject_rbl_client multi.uribl.com,
    reject_rbl_client dsn.rfc-ignorant.org,
    reject_rbl_client dul.dnsbl.sorbs.net,
    reject_rbl_client list.dsbl.org,
    reject_rbl_client sbl-xbl.spamhaus.org,
    reject_rbl_client bl.spamcop.net,
    reject_rbl_client dnsbl.sorbs.net,
    reject_rbl_client cbl.abuseat.org,
    reject_rbl_client ix.dnsbl.manitu.net,
    reject_rbl_client combined.rbl.msrbl.net,
    reject_rbl_client rabl.nuclearelephant.com,
    permit
smtpd_helo_restrictions =
   permit_mynetworks,
   permit_sasl_authenticated
   smtpd_sender_restrictions =
   permit_mynetworks,
   permit_sasl_authenticated
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname

Meine master.cf:

Code:
#
# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: “man 5 master”).
#
# Do not forget to execute “postfix reload” after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       -       -       -       smtpd -o content_filter=spamassassin
#submission inet n       -       -       -       -       smtpd
#  -o smtpd_tls_security_level=encrypt
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#smtps     inet  n       -       -       -       -       smtpd
#  -o smtpd_tls_wrappermode=yes
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#628       inet  n       -       -       -       -       qmqpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       -       300     1       oqmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay     unix  -       -       -       -       -       smtp -o smtp_fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing “lmtp” master.cf entry.
#
# Specify in cyrus.conf:
#   lmtp    cmd=”lmtpd -a” listen=”localhost:lmtp” proto=tcp4
#
# Specify in main.cf one or more of the following:
#  mailbox_transport = lmtp:inet:localhost
#  virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus     unix  -       n       n       -       -       pipe
#  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
# Old example of delivery via Cyrus.
#
#old-cyrus unix  -       n       n       -       -       pipe
#  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix    -    n    n    -    2    pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user}
procmail  unix  -       n       n       -       10       pipe flags= user=vmail argv=/usr/bin/procmail -a ${user}
# AV scan filter (used by content_filter)
scan      unix  -       -       n       -       16      smtp -o smtp_send_xforward_command=yes
# For injecting mail back into postfix from the filter
127.0.0.1:10026 inet  n -       n       -       16      smtpd -o content_filter= -o receive_override_options= -o no_unknown_recipient_checks= -o no_header_body_checks= -o smtpd_helo_restrictions= -o smtpd_client_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions= -o permit_mynetworks,reject= -o mynetworks_style=host -o smtpd_authorized_xforward_hosts=127.0.0.0/8
# SPAMASSASIN
spamassassin unix -     n       n       -       -       pipe user=spamd argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}


Ich bekomme im syslog folgende Fehler:

Code:
Sep 30 18:13:58 server3 postfix/master[30116]: warning: process /usr/lib/postfix/smtpd pid 7629 exit status 1
Sep 30 18:13:58 server3 postfix/master[30116]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
Sep 30 18:14:58 server3 postfix/smtpd[11289]: fatal: parameter "smtpd_recipient_restrictions": specify at least one working instance of: check_relay_domains, reject_unauth_destination, reject, defer or defer_if_permit

Ich habe mir schon die Finger wund gesucht, ich kann damit aber leider garnichts anfangen...

Hat jemand eine IDee?

Besten Dank.

Timo
 
Moin Timo
smtpd_recipient_restrictions = permit_sasl_authenticated,
reject_invalid_hostname =
reject_unknown_recipient_domain,
reject_unauth_pipelining,
permit_mynetworks, =
reject_unauth_destination=
reject_rbl_client multi.uribl.com,
reject_rbl_client dsn.rfc-ignorant.org,
reject_rbl_client dul.dnsbl.sorbs.net,
reject_rbl_client list.dsbl.org,
reject_rbl_client sbl-xbl.spamhaus.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client dnsbl.sorbs.net,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client ix.dnsbl.manitu.net,
reject_rbl_client combined.rbl.msrbl.net,
reject_rbl_client rabl.nuclearelephant.com,
permit
Du hast zu viele "=" in deiner main.cf und die "," an den falschen Stellen.

Thorashh
 
Last edited by a moderator:
Also, hab jetzt ein wenig rumgespielt.
Jetzt kommt bei folgender main.cf

Code:
virtual_alias_maps = mysql:/etc/postfix/mysql-aliases.cf
myorigin = /etc/mailname
mydestination = xxx.de , localhost
relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_transport = procmail:
procmail_destination_recipient_limit = 1
recipient_delimiter = +
inet_interfaces = all

smtpd_helo_required = yes
disable_vrfy_command = yes
strict_rfc821_envelopes = yes
invalid_hostname_reject_code = 554
multi_recipient_bounce_reject_code = 554
non_fqdn_reject_code = 554
relay_domains_reject_code = 554
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_local_recipient_reject_code = 554
unknown_relay_recipient_reject_code = 554
unknown_sender_reject_code = 554
unknown_virtual_alias_reject_code = 554
unknown_virtual_mailbox_reject_code = 554
unverified_recipient_reject_code = 554
unverified_sender_reject_code = 554
content_filter = scan:[127.0.0.1]:10025
receive_override_options = no_address_mappings
smtpd_recipient_restrictions = check_relay_domains, reject_unauth_destination, reject, defer or defer_if_permit
permit_mynetworks, =
 reject_unauth_destination,
 reject_rbl_client multi.uribl.com,
 reject_rbl_client dsn.rfc-ignorant.org,
 reject_rbl_client dul.dnsbl.sorbs.net,
 reject_rbl_client list.dsbl.org,
 reject_rbl_client sbl-xbl.spamhaus.org,
 reject_rbl_client bl.spamcop.net,
 reject_rbl_client dnsbl.sorbs.net,
 reject_rbl_client cbl.abuseat.org,
 reject_rbl_client ix.dnsbl.manitu.net,
 reject_rbl_client combined.rbl.msrbl.net,
 reject_rbl_client rabl.nuclearelephant.com,
permit =
 smtpd_helo_restrictions,
 permit_mynetworks,
 permit_sasl_authenticated,
 smtpd_sender_restrictions,
 permit_mynetworks,
 permit_sasl_authenticated
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname


dieser Fehler


Code:
Oct  1 11:06:42 server3 clamsmtpd: 1001FA: accepted connection from: 127.0.0.1
Oct  1 11:06:42 server3 postfix/smtpd[8045]: fatal: parameter "smtpd_recipient_restrictions": specify at least one working instance of: check_relay_domains, reject_unauth_destination, reject, defer or defer_if_permit
Oct  1 11:06:42 server3 clamsmtpd: 1001FB: accepted connection from: 127.0.0.1
Oct  1 11:06:42 server3 clamsmtpd: 1001FC: accepted connection from: 127.0.0.1
Oct  1 11:06:43 server3 postfix/master[8026]: warning: process /usr/lib/postfix/smtpd pid 8045 exit status 1
Oct  1 11:06:43 server3 postfix/master[8026]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
 
Last edited by a moderator:
Code:
smtpd_recipient_restrictions = check_relay_domains, reject_unauth_destination, reject, [b][u]defer or defer_if_permit[/u][/b]
permit_mynetworks, [b][u]=[/u][/b]
 reject_unauth_destination,
Da sind immer noch einige Fehler drin. Bitte einfach nochmal in Ruhe drüberschauen. Hier mal ein Beispiel zur Hilfestellung, wie der Eintrag aussehen sollte. (http://www.postfix-howto.de/konfiguration/postfix.htm)
 
Last edited by a moderator:
So, vielen Dank für den Link.
Habe das ganze nun formatiert.
Bei einigen malen /etc/init.d/postfix restart kommt der Fehler manchmal noch. Manchmal aber auch nicht. Ich kanns nicht nachvollziehen.

Jetzt kommt aber der nächste Kracher:

Code:
Oct  1 18:02:28 server3 postfix/master[16238]: daemon started -- version 2.7.1, configuration /etc/postfix
Oct  1 18:02:41 server3 postfix/smtpd[17504]: connect from server1.xxx.de[xxx]
Oct  1 18:02:41 server3 postfix/smtpd[17504]: 9B1C33AD0146: client=server1.xxxt.de[xxx]
Oct  1 18:02:41 server3 postfix/cleanup[17511]: 9B1C33AD0146: message-id=<[email protected]>
Oct  1 18:02:41 server3 postfix/qmgr[16244]: 9B1C33AD0146: from=<[email protected]>, size=5160, nrcpt=1 (queue active)
Oct  1 18:02:41 server3 postfix/smtpd[17504]: disconnect from server1.timo-brandt.de[81.20.139.151]
Oct  1 18:02:41 server3 spamd[30579]: spamd: connection from localhost [127.0.0.1] at port 33339
Oct  1 18:02:41 server3 spamd[30579]: spamd: setuid to spamd succeeded
Oct  1 18:02:41 server3 spamd[30579]: spamd: processing message <[email protected]> for spamd:999
Oct  1 18:02:42 server3 spamd[30579]: spamd: clean message (0.0/5.0) for spamd:999 in 0.4 seconds, 4991 bytes.
Oct  1 18:02:42 server3 spamd[30579]: spamd: result: . 0 - HTML_MESSAGE scantime=0.4,size=4991,user=spamd,uid=999,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=33339,mid=<[email protected]>,autolearn=ham
Oct  1 18:02:42 server3 spamd[30359]: prefork: child states: II
Oct  1 18:02:42 server3 postfix/pickup[16245]: 30D9A3BC3B70: uid=999 from=<[email protected]>
Oct  1 18:02:42 server3 postfix/pipe[17512]: 9B1C33AD0146: to=<[email protected]>, relay=spamassassin, delay=0.7, delays=0.21/0.01/0/0.47, dsn=2.0.0, status=sent (delivered via spamassassin service)
Oct  1 18:02:42 server3 postfix/qmgr[16244]: 9B1C33AD0146: removed
Oct  1 18:02:42 server3 postfix/cleanup[17511]: 30D9A3BC3B70: message-id=<[email protected]>
Oct  1 18:02:42 server3 postfix/qmgr[16244]: 30D9A3BC3B70: from=<[email protected]>, size=5483, nrcpt=1 (queue active)
Oct  1 18:02:42 server3 clamsmtpd: 100080: accepted connection from: 127.0.0.1
[B]Oct  1 18:02:42 server3 clamsmtpd: 100080: SERVER: couldn't connect to: 127.0.0.1:10026: Transport endpoint is not connected[/B]
Oct  1 18:02:42 server3 postfix/smtp[17519]: 30D9A3BC3B70: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10025, delay=0.16, delays=0.15/0.01/0/0, dsn=4.4.2, [B]status=deferred (lost connection with 127.0.0.1[127.0.0.1] while receiving the initial server greeting)[/B]


Hier jemand eine IDee? :)
 
Nächster Erfolg.
Nun taucht folgendes im Syslog auf:

Code:
Oct  1 22:46:46 server3 postfix/smtp[14311]: B145137E1B07: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10025, delay=0.49, delays=0.13/0.01/0.06/0.28, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as D4CA337E1AF3)
Oct  1 22:46:46 server3 postfix/qmgr[13854]: B145137E1B07: removed
Oct  1 22:46:46 server3 postfix/smtpd[14313]: disconnect from localhost[127.0.0.1]
Oct  1 22:46:46 server3 postfix/pipe[14316]: D4CA337E1AF3: to=<[email protected]>, relay=zarafa, delay=0.57, delays=0.28/0.01/0/0.28, dsn=5.3.0, status=bounced (internal software error. Command output: procmail: Skipped "_" procmail: Program failure (70) of "/usr/bin/zarafa-dagent" )
Oct  1 22:46:46 server3 postfix/cleanup[14302]: 6C54837E1B07: message-id=<[email protected]>
Oct  1 22:46:46 server3 postfix/qmgr[13854]: 6C54837E1B07: from=<>, size=3958, nrcpt=1 (queue active)
Oct  1 22:46:46 server3 postfix/bounce[14321]: D4CA337E1AF3: sender non-delivery notification: 6C54837E1B07
Oct  1 22:46:46 server3 postfix/qmgr[13854]: D4CA337E1AF3: removed
Oct  1 22:46:46 server3 postfix/smtp[14322]: 6C54837E1B07: to=<[email protected]>, relay=timo-brandt.de[81.20.139.151]:25, delay=0.08, delays=0.04/0.01/0.01/0.02, dsn=2.0.0, status=sent (250 ok 1349124406 qp 5583)
Oct  1 22:46:46 server3 postfix/qmgr[13854]: 6C54837E1B07: removed

Und im dagent.log von zarafa:

Code:
Mon Oct  1 22:35:05 2012: [17765] Starting zarafa-dagent LMTP mode version 7,1,0,36420 (36420), pid 17765
Mon Oct  1 22:43:35 2012: [ 7353] Failed to resolve recipient
Mon Oct  1 22:44:39 2012: [ 9567] Failed to resolve recipient
Mon Oct  1 22:46:46 2012: [14318] Failed to resolve recipient


Danke schonmal für die bisher tolle Hilfe!!! =)

Edit: senden geht wunderbar! :)
 
Last edited by a moderator:
Bitte gern geschehen.

Der procmail-error geht aber offensichtlich auf Zarafa zurück. An der Stelle ist dann leider für mich Schluss, denn mit dem von Dir eingesetzten Zafara kenne ich mich nicht aus.

Aber lt. google scheint der Fehler nicht gänzlich unbekannt zu sein.
 
So, ander letzten Sache war folgende Zeile in der master.cf schuld:

sie war:
Code:
zarafa    unix  -       n       n       -       10      pipe
  flags= user=vmail argv=/usr/bin/zarafa-dagent ${user}

und muss heißen:

Code:
zarafa     unix   -   n   n   -   10   pipe
    flags=DRhu  user=vmail  argv=/usr/bin/zarafa-dagent -R ${recipient}

Vielen Dank nochmal für eure Hilfe.
Immerhin läufts jetzt und ich muss nicht auch noch die nächsten Nächte vor dem PC sitzen.


Hoffentlich hilfts auch anderen :).

So long.
 
Back
Top