[postfix-users] Mailqueue läuft voll

[Ralf Hildebrandt]

* Hans Rembeck <hrembec at fh-landshut.de>:
 
> mydestination = $myhostname
> mydomain = xxx
> myhostname = xxx
> mynetworks = 127.0.0.0/8, xxx
> myorigin = $myhostname

> relay_domains = $mydestination
> relay_recipient_maps = hash:/etc/postfix/relay_recipients

Also ich weiss nicht. Ist die Domain nun in mydestination oder eine
relay_domain?

> smtpd_recipient_restrictions = 
> check_recipient_access hash:/etc/postfix/x-employees
> check_sender_access hash:/etc/postfix/rhsbl_sender_exeptions
> reject_non_fqdn_recipient 
> reject_non_fqdn_sender 
> reject_unknown_recipient_domain 
> reject_unknown_sender_domain 
> permit_mynetworks 
> check_client_access hash:/var/lib/pop-before-smtp/hosts
> check_sender_access hash:/etc/postfix/access
> permit_sasl_authenticated 
> reject_unauth_destination
> check_recipient_access hash:/etc/postfix/roleaccount_exeptions
> reject_invalid_hostname 
> check_helo_access pcre:/etc/postfix/helo_checks
> check_sender_mx_access cidr:/etc/postfix/bogus_mx
> reject_unverified_sender c
> heck_policy_service inet:127.0.0.1:60000
> reject_rbl_client zen.spamhaus.org 
> reject_rbl_client bl.spamcop.net
> reject_rbl_client bogons.cymru.com
> permit 

Würde ich umstellen zu:

smtpd_recipient_restrictions =
   check_recipient_access hash:/etc/postfix/x-employees
   reject_non_fqdn_recipient
   reject_non_fqdn_sender
   reject_unknown_recipient_domain
   reject_unknown_sender_domain
   permit_mynetworks
   check_client_access hash:/var/lib/pop-before-smtp/hosts
   permit_sasl_authenticated
   reject_unauth_destination
   check_sender_access hash:/etc/postfix/rhsbl_sender_exeptions
   check_sender_access hash:/etc/postfix/access
   check_recipient_access hash:/etc/postfix/roleaccount_exeptions
   reject_invalid_hostname
   check_helo_access pcre:/etc/postfix/helo_checks
   check_sender_mx_access cidr:/etc/postfix/bogus_mx
   reject_rbl_client zen.spamhaus.org 
   reject_rbl_client bl.spamcop.net
   reject_rbl_client bogons.cymru.com
   check_policy_service inet:127.0.0.1:60000
   reject_unverified_sender

Wobei mir die beiden check_sender_access nicht geheuer sind.
   
> smtpd_sasl_auth_enable = yes 


> smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access

Weg damit, ist doppelt, höchstens das
reject_unauthenticated_sender_login_mismatch
und das kann auch in smtpd_recipient_restrictions

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebrandt at charite.de | http://www.charite.de