[postfix-users] Amavis und Dkim

Mi Jan 14 18:09:24 CET 2009

Hallo Liste,

seit ich Dkim verwende, habe ich ein Problem mit einer
Absenderadresse und einem Empfaenger.

Der Empfaenger hat eine Weiterleitung von seinem Uni Account zu einem
Freemailer.

Ausgehende Mails werden erst durch Amavis geschickt, kommen ueber Port 10029
zurueck und werden dann signiert.

Dkim-milter zum Signieren wird nicht von Amavis aufgerufen, sondern
von postfix.

Amavis Version:
amavisd-new-2.5.4-1.el4.rf.x86_64

Dkim:
dkim-milter-2.2.1-1.x86_64

master.cf:

192.168.0.108:10029 inet	n	-	n	-	-	smtpd
         -o content_filter=
         -o local_recipient_maps=
	-o mynetworks=192.168.0.0/24
         -o smtpd_helo_restrictions=
         -o milter_default_action=accept
         -o milter_macro_daemon_name=ORIGINATING
         -o smtpd_milters=inet:127.0.0.1:4445
         -o smtpd_recipient_restrictions=permit_mynetworks,reject

Von Amavis kommen diese Fehlermeldungen (level 5 debug)
Jan 14 12:01:49 smtp2 amavis[18222]: (18222-01) lookup  
(spam_tag_level) => true,  "USER at gmx.net" matches, result="2",  
matching_key="(constant:2)"
Jan 14 12:01:51 smtp2 amavis[18222]: (18222-01) lookup  
(spam_tag2_level) => true,  "USER at gmx.net" matches, result="5",  
matching_key="(constant:5)"
Jan 14 12:01:52 smtp2 amavis[18222]: (18222-01) headers CLUSTERING:  
NEW CLUSTER <USER at gmx.net>: score=-1.206, tag=0, tag2=0, local=0, bl=,  
s=, mangle=
Jan 14 12:01:55 smtp2 amavis[18222]: (18222-01) header: Received: from  
smtp1.rz.uni-hohenheim.de ([192.168.0.108])\n\tby localhost  
(smtp2.rz.uni-hohenheim.de [192.168.0.107]) (amavisd-new, port  
10028)\n\twith ESMTP id rMuUvSxdtQX8 for <USER at gmx.net>;\n\tWed, 14  
Jan 2009 11:59:19 +0100 (CET)\n
Jan 14 12:01:56 smtp2 amavis[18222]: (18222-01) (about to connect to  
[192.168.0.108]:10029) FWD via SMTP:  
<ABSENDER at zentrale.uni-hohenheim.de> -> <USER at gmx.net>
Jan 14 12:02:11 smtp2 amavis[18222]: (18222-01) smtp cmd> RCPT  
TO:<USER at gmx.net> ORCPT=rfc822;USER at uni-hohenheim.de
Jan 14 12:02:15 smtp2 amavis[18222]: (18222-01) rw_loop send 131> MAIL  
FROM:<ABSENDER at zentrale.uni-hohenheim.de> BODY=7BIT\r\nRCPT  
TO:<USER at gmx.net> ORCPT=rfc822;USER at uni-hohenheim.de\r\nDATA\r\n
Jan 14 12:02:20 smtp2 amavis[18222]: (18222-01) smtp resp to RCPT  
(pip) (<USER at gmx.net>): 250 2.1.5 Ok, id=18222-01, from  
MTA([192.168.0.108]:10029): 250 2.1.5 Ok
Jan 14 12:02:58 smtp2 amavis[18222]: (18222-01) smtp resp to data-dot  
(<USER at gmx.net>): 451 4.7.1 Service unavailable - try again later
Jan 14 12:03:00 smtp2 amavis[18222]: (18222-01) Negative SMTP resp. to  
data-dot (<USER at gmx.net>): 451 4.7.1 Service unavailable - try again  
later
Jan 14 12:03:03 smtp2 amavis[18222]: (18222-01) (!)FWD via SMTP:  
<ABSENDER at zentrale.uni-hohenheim.de> -> <USER at gmx.net>,BODY=7BIT 451  
4.6.0 Failed, id=18222-01, from MTA([192.168.0.108]:10029): 451 4.7.1  
Service unavailable - try again later
Jan 14 12:03:07 smtp2 amavis[18222]: (18222-01) dsn: from MTA 451  
MTA-TempFailed <ABSENDER at zentrale.uni-hohenheim.de> -> <USER at gmx.net>:  
on_succ=0, on_dly=1, on_fail=1, never=0, warn_sender=,  
DSN_passed_on=0, mta_resp: "451 4.7.1 Service unavailable - try again  
later"
Jan 14 12:03:08 smtp2 amavis[18222]: (18222-01) DSN: TMPFAIL from MTA  
451 MTA-TempFailed, need not be reported:  
<ABSENDER at zentrale.uni-hohenheim.de> -> <USER at gmx.net>
Jan 14 12:03:18 smtp2 amavis[18222]: (18222-01) Blocked MTA-BLOCKED,  
ORIGINATING [144.41.37.122] <ABSENDER at zentrale.uni-hohenheim.de> ->  
<USER at gmx.net>, quarantine: badh-rMuUvSxdtQX8, Message-ID:  
<20090112093604.D9A66240077 at mailserv.rz.uni-hohenheim.de>, mail_id:  
rMuUvSxdtQX8, Hits: -1.206, size: 90560, 256860 ms

Postqueue -p zeigt folgendes:
CE1C311DAC4  2361998 Mon Jan 12 13:42:35  ABSENDER at zentrale.uni-hohenheim.de
(host 192.168.0.107[192.168.0.107] said: 451 4.7.1 Service unavailable  
- try again l
ater (in reply to end of DATA command))
                                          USER at gmx.net

Das Problem betrifft nur einen Absender und den auch nicht immer.
Nur wenn der Absender eine Mail an mehrere Empfaenger verschickt.

Der Header sieht etwas seltsam aus:
Delivered-To: bad-header-quarantine
X-Envelope-From: <ABSENDER at zentrale.uni-hohenheim.de>
X-Envelope-To: <USER at gmx.net>
X-Quarantine-ID: <rMuUvSxdtQX8>
X-Amavis-Alert: BAD HEADER Header field occurs more than once: "To" occurs 62
         times

Fuer jeden Empfaenger gibt es eine "To:" Zeile

Viele Gruesse
Helga Mayer