[postfix-users] Problem mit MDR und Amavis/Postfix
Patrick Ben Koetter
p at sys4.de
Mo Jul 29 21:16:16 CEST 2013
* marcel-ml at irc-addicts.de <marcel-ml at irc-addicts.de>:
> Hallo zusammen,
>
> ich denke mal, hier kann mir jemand helfen.
>
> Ich nutze Postfix in Verbindung mit Amavis und soweit laeuft das
> auch alles perfekt. Mails werden ueberprueft und auch geblockt,
> falls notwendig.
>
> Nun habe ich aber folgendes Problem:
>
> Sobald eine Mail versendet wird, in der eine Empfangs- und
> Lesebestaetigung eingefordert wird, erhaelt der Absender, welcher
> ueber den Server versendet (Auth vorher geklappt und alles) die
> Empfangsbestaetigung nicht vom endgueltigen Server auf der die Mail
> landet, sondern von amavis. Bzw von Postfix, der mitteilt das die
> Mail lokal auf Port 10024 zugestellt wurde.
>
> Ich und auch die eigentlichen Absender haetten natuerlich gerne
> anstatt der Mitteilung das die Mail an Amavis weitergeleitet wurde
> die Meldung das ein externer Server die Mail angenommen hat. Kann
> mir hier jemand einen Tipp geben wonach ich schauen muss?
>
> Jeder Hinweis wird angenommen. =)
Hint ohne tiefes reingraben: Sieh dir $propagate_dsn_if_possible in amavis und
alles um *_dsn_* herum an. Ein Guter Ort [tm] dafür sind die RELEASE_NOTES.
Ich denke so ab "finer control on propagation of DSN" wird es spannend.
p at rick
>
> Meine master.cf sieht wie folgt aus:
>
>
> #
> # Postfix master process configuration file. For details on the format
> # of the file, see the master(5) manual page (command: "man 5 master").
> #
> # Do not forget to execute "postfix reload" after editing this file.
> #
> # ==========================================================================
> # service type private unpriv chroot wakeup maxproc command + args
> # (yes) (yes) (yes) (never) (100)
> # ==========================================================================
> smtp inet n - - - - smtpd
> #submission inet n - - - - smtpd
> # -o smtpd_tls_security_level=encrypt
> # -o smtpd_sasl_auth_enable=yes
> # -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> # -o milter_macro_daemon_name=ORIGINATING
> #smtps inet n - - - - smtpd
> # -o smtpd_tls_wrappermode=yes
> # -o smtpd_sasl_auth_enable=yes
> # -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> # -o milter_macro_daemon_name=ORIGINATING
> #628 inet n - - - - qmqpd
> pickup fifo n - - 60 1 pickup
> cleanup unix n - - - 0 cleanup
> qmgr fifo n - n 300 1 qmgr
> #qmgr fifo n - - 300 1 oqmgr
> tlsmgr unix - - - 1000? 1 tlsmgr
> rewrite unix - - - - - trivial-rewrite
> bounce unix - - - - 0 bounce
> defer unix - - - - 0 bounce
> trace unix - - - - 0 bounce
> verify unix - - - - 1 verify
> flush unix n - - 1000? 0 flush
> proxymap unix - - n - - proxymap
> proxywrite unix - - n - 1 proxymap
> smtp unix - - - - - smtp
> # When relaying mail as backup MX, disable fallback_relay to avoid
> MX loops
> relay unix - - - - - smtp
> -o smtp_fallback_relay=
> # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
> showq unix n - - - - showq
> error unix - - - - - error
> retry unix - - - - - error
> discard unix - - - - - discard
> local unix - n n - - local
> virtual unix - n n - - virtual
> lmtp unix - - - - - lmtp
> anvil unix - - - - 1 anvil
> scache unix - - - - 1 scache
> #
> # ====================================================================
> # Interfaces to non-Postfix software. Be sure to examine the manual
> # pages of the non-Postfix software to find out what options it wants.
> #
> # Many of the following services use the Postfix pipe(8) delivery
> # agent. See the pipe(8) man page for information about ${recipient}
> # and other message envelope options.
> # ====================================================================
> #
> # maildrop. See the Postfix MAILDROP_README file for details.
> # Also specify in main.cf: maildrop_destination_recipient_limit=1
> #
> maildrop unix - n n - - pipe
> flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
> #
> # ====================================================================
> ##
> # ====================================================================
> #
> # Recent Cyrus versions can use the existing "lmtp" master.cf entry.
> #
> # Specify in cyrus.conf:
> # lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
> #
> # Specify in main.cf one or more of the following:
> # mailbox_transport = lmtp:inet:localhost
> # virtual_transport = lmtp:inet:localhost
> #
> # ====================================================================
> #
> # Cyrus 2.1.5 (Amos Gouaux)
> # Also specify in main.cf: cyrus_destination_recipient_limit=1
> #
> #cyrus unix - n n - - pipe
> # user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m
> ${extension} ${user}
> #
> # ====================================================================
> # Old example of delivery via Cyrus.
> #
> #old-cyrus unix - n n - - pipe
> # flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
> #
> # ====================================================================
> #
> # See the Postfix UUCP_README file for configuration details.
> #
> uucp unix - n n - - pipe
> flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
> ($recipient)
> #
> # Other external delivery methods.
> #
> ifmail unix - n n - - pipe
> flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
> bsmtp unix - n n - - pipe
> flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop
> -f$sender $recipient
> scalemail-backend unix - n n - 2 pipe
> flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
> ${nexthop} ${user} ${extension}
> mailman unix - n n - - pipe
> flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
> ${nexthop} ${user}
> dovecot unix - n n - - pipe
> flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f
> ${sender} -d ${recipient}
> tumgreyspf unix - n n - - spawn
> user=tumgreyspf argv=/usr/bin/tumgreyspf
> amavis unix - - - - 2 smtp
> -o smtp_data_done_timeout=1200
> -o smtp_send_xforward_command=yes
> -o disable_dns_lookups=yes
> -o max_use=20
> 127.0.0.1:10025 inet n - - - - smtpd
> -o content_filter=
> -o smtpd_delay_reject=no
> -o smtpd_client_restrictions=permit_mynetworks,reject
> -o smtpd_helo_restrictions=
> -o smtpd_sender_restrictions=
> -o smtpd_recipient_restrictions=permit_mynetworks,reject
> -o smtpd_data_restrictions=reject_unauth_pipelining
> -o smtpd_end_of_data_restrictions=
> -o smtpd_restriction_classes=
> -o mynetworks=127.0.0.0/8
> -o smtpd_error_sleep_time=0
> -o smtpd_soft_error_limit=1001
> -o smtpd_hard_error_limit=1000
> -o smtpd_client_connection_count_limit=0
> -o smtpd_client_connection_rate_limit=0
> -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
> -o local_header_rewrite_clients=
> vacation unix - n n - - pipe
> flags=Rq user=vacation argv=/var/spool/vacation/vacation.pl -f
> ${sender} -- ${recipient}
>
>
> und meine main.cf
>
> # See /usr/share/postfix/main.cf.dist for a commented, more complete
> version
>
>
> # Debian specific: Specifying a file name will cause the first
> # line of that file to be used as the name. The Debian default
> # is /etc/mailname.
> #myorigin = /etc/mailname
>
> smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
> biff = no
>
> # appending .domain is the MUA's job.
> append_dot_mydomain = no
>
> # Uncomment the next line to generate "delayed mail" warnings
> #delay_warning_time = 4h
>
> readme_directory = no
>
> # TLS parameters
> #smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
> #smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
> #smtpd_use_tls=yes
> #smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
> #smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
>
> # TLS PART START
>
> smtp_tls_CAfile = /etc/postfix/tls/root.crt
> smtp_tls_cert_file = /etc/postfix/tls/cert.pem
> smtp_tls_key_file = /etc/postfix/tls/privatekey.pem
> smtp_tls_session_cache_database =
> btree:$data_directory/smtp_tls_session_cache
> smtp_tls_security_level = may
> smtp_tls_loglevel = 1
>
> smtpd_tls_CAfile = /etc/postfix/tls/root.crt
> smtpd_tls_cert_file = /etc/postfix/tls/cert.pem
> smtpd_tls_key_file = /etc/postfix/tls/privatekey.pem
> smtpd_tls_session_cache_database =
> btree:$data_directory/smtpd_tls_session_cache
> smtpd_tls_security_level = may
> smtpd_tls_loglevel = 1
>
> smtpd_tls_received_header = yes
> smtpd_tls_ask_ccert = yes
>
> #smtpd_tls_auth_only = yes
>
> # TLS PART END
>
>
>
> # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc
> package for
> # information on enabling SSL in the smtp client.
>
> myhostname = server.de
> alias_maps = hash:/etc/aliases
> alias_database = hash:/etc/aliases
> myorigin = /etc/mailname
> mydestination = server.net-addicts.de, localhost.localdomain, ,
> localhost
> relayhost =
> mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
> mailbox_size_limit = 0
> recipient_delimiter = +
> inet_interfaces = all
> # Postfixadminaenderungen #
> virtual_mailbox_domains =
> proxy:mysql:/etc/postfix/sql/mysql_virtual_domains_maps.cf
> virtual_alias_maps =
> proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf,
> proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_maps.cf,
> proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_catchall_maps.cf
> virtual_mailbox_maps =
> proxy:mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf,
> proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_mailbox_maps.cf
> # Additional for quota support
> virtual_create_maildirsize = yes
> virtual_mailbox_extended = yes
> virtual_mailbox_limit_maps =
> mysql:/etc/postfix/sql/mysql_virtual_mailbox_limit_maps.cf
> virtual_mailbox_limit_override = yes
> virtual_maildir_limit_message = Sorry, the user's maildir has
> overdrawn his diskspace quota, please try again later.
> virtual_overquota_bounce = yes
> # Postfixadminaenderungen #
> # dovecot Anbindung #
> virtual_transport = dovecot
> dovecot_destination_recipient_limit = 1
> smtpd_sasl_type = dovecot
> smtpd_sasl_path = private/auth
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_authenticated_header = yes
> broken_sasl_auth_clients = yes
> smtpd_recipient_restrictions =
> reject_unknown_sender_domain
> reject_unknown_recipient_domain
> reject_unauth_pipelining
> permit_mynetworks
> permit_sasl_authenticated
> #reject_rbl_client dnsbl.sorbs.net
> reject_rbl_client bl.spamcop.net
> reject_rbl_client zen.spamhaus.org
> #reject_rbl_client dnsbl-1.uceprotect.net
> check_policy_service unix:private/tumgreyspf
> reject_unauth_destination
> check_client_access hash:/etc/postfix/ip-block
> smtpd_milters = inet:127.0.0.1:54321
> non_smtpd_milters = inet:127.0.0.1:54321
> milter_default_action = accept
> content_filter = amavis:[127.0.0.1]:10024
> receive_override_options = no_address_mappings
> smtpd_client_restrictions =
> permit_mynetworks
> permit_sasl_authenticated
> reject_unauth_pipelining
> reject_rbl_client bl.spamcop.net
> reject_rbl_client zen.spamhaus.org
> # reject_rbl_client list.dsbl.org
> header_checks = pcre:/etc/postfix/pcre/header_checks
> body_checks = pcre:/etc/postfix/pcre/body_checks
> transport_maps = hash:/etc/postfix/transport
> # ende
>
>
>
> Vielen Dank noch mal im Voraus.
>
> Gruesse,
>
> Marcel
> _______________________________________________
> postfix-users mailing list
> postfix-users at de.postfix.org
> http://de.postfix.org/cgi-bin/mailman/listinfo/postfix-users
--
[*] sys4 AG
http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein
Mehr Informationen über die Mailingliste postfix-users