Amavis + Postfix w/virtual domains creates large queue of rejected emails

Thread: Amavis + Postfix w/virtual domains creates large queue of rejected emails

Search this list only Search all lists
Amavis + Postfix w/virtual domains creates large queue of rejected emails
Canada	2007-04-27 13:15:53
Hi all, On my Debian box, I've got postfix, postfix-mysql and postfix-pcre (2.3.8-2+b1) all installed from packages. I've also got amavisd-new (2.4.2-5), and ClamAV (0.90.2-1). What I'm trying to do is pretty standard: filter all incoming mail through amavisd, then deliver "good" emails to either local or virtual accounts. What I see is that if a mail comes in for "foovirtual.com", where virtual.com is a domain on my system but where "foo" is not a valid user, the email gets left in the postfix queue with a message like: 45DAF28143 3568 Fri Apr 27 03:26:57 MAILER-DAEMON (host 127.0.0.1[127.0.0.1] said: 450 4.1.1 Failed, id=24239-09-6, from MTA([127.0.0.1]:10025): 450 4.1.1 <foovirtual.com>: Recipient address rejected: User unknown in virtual mailbox table (in reply to end of DATA command)) The messages pile up in the postfix queue and aren't ever deleted or bounce back. I think it's because postfix is trying to bounce them back to Amavis (?), but I'm not sure. What I'm I doing wrong? Frankly, if it is possible to check for non-existing accounts first, then send the message through Amavis, that would be preferable. Here is my postconf output, plus the relevant parts of my master.cf file. Let me know if I should post any other info. Thanks in advance! - Colin master.cf # ============================================================ ============ == # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) # ============================================================ ============ == smtp inet n - - - - smtpd -o content_filter=smtp-amavis:[127.0.0.1]:10024 2525 inet n - - - - smtpd -o smtpd_sasl_auth_enable=yes -o smtpd_enforce_tls=yes 50025 inet n - - - - smtpd -o smtpd_sasl_auth_enable=yes -o smtpd_enforce_tls=yes pickup fifo n - - 60 1 pickup cleanup unix n - - - 0 cleanup qmgr fifo n - n 300 1 qmgr tlsmgr unix - - - 1000? 1 tlsmgr rewrite unix - - - - - trivial-rewrite bounce unix - - - - 0 bounce defer unix - - - - 0 bounce trace unix - - - - 0 bounce verify unix - - - - 1 verify flush unix n - - 1000? 0 flush proxymap unix - - n - - proxymap smtp unix - - - - - smtp relay unix - - - - - smtp -o fallback_relay= # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 showq unix n - - - - showq error unix - - - - - error discard unix - - - - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - - - - lmtp anvil unix - - - - 1 anvil scache unix - - - - 1 scache maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d $ uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f $sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store $ $ $ mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py $ $ spamassassin unix - n n - - pipe user=spamd argv=/usr/bin/spamc -s 512000 -f -e /usr/sbin/ sendmail -oi -f $ $ smtp-amavis unix - - - - 1 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 127.0.0.1:10025 inet n - - - - smtpd -o content_filter= vacation unix - n n - - pipe flags=Rq user=vacation argv=/home/vacation/vacation.pl -f $ -- $ postconf 2bounce_notice_recipient = postmaster access_map_reject_code = 554 address_verify_default_transport = $default_transport address_verify_local_transport = $local_transport address_verify_map = address_verify_negative_cache = yes address_verify_negative_expire_time = 3d address_verify_negative_refresh_time = 3h address_verify_poll_count = 3 address_verify_poll_delay = 3s address_verify_positive_expire_time = 31d address_verify_positive_refresh_time = 7d address_verify_relay_transport = $relay_transport address_verify_relayhost = $relayhost address_verify_sender = postmaster address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps address_verify_service_name = verify address_verify_transport_maps = $transport_maps address_verify_virtual_transport = $virtual_transport alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases allow_mail_to_commands = alias, forward allow_mail_to_files = alias, forward allow_min_user = no allow_percent_hack = yes allow_untrusted_routing = no alternate_config_directories = always_bcc = anvil_rate_time_unit = 60s anvil_status_update_time = 600s append_at_myorigin = yes append_dot_mydomain = no application_event_drain_time = 100s authorized_flush_users = static:anyone authorized_mailq_users = static:anyone authorized_submit_users = static:anyone backwards_bounce_logfile_compatibility = yes berkeley_db_create_buffer_size = 16777216 berkeley_db_read_buffer_size = 131072 best_mx_transport = biff = no body_checks = body_checks_size_limit = 51200 bounce_notice_recipient = postmaster bounce_queue_lifetime = 5d bounce_service_name = bounce bounce_size_limit = 50000 bounce_template_file = broken_sasl_auth_clients = yes canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient canonical_maps = cleanup_service_name = cleanup command_directory = /usr/sbin command_execution_directory = command_expansion_filter = 1234567890!%-_=+:,./ abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ command_time_limit = 1000s config_directory = /etc/postfix connection_cache_protocol_timeout = 5s connection_cache_service_name = scache connection_cache_status_update_time = 600s connection_cache_ttl_limit = 2s content_filter = daemon_directory = /usr/lib/postfix daemon_timeout = 18000s debug_peer_level = 2 debug_peer_list = default_database_type = hash default_delivery_slot_cost = 5 default_delivery_slot_discount = 50 default_delivery_slot_loan = 3 default_destination_concurrency_limit = 20 default_destination_recipient_limit = 50 default_extra_recipient_limit = 1000 default_minimum_delivery_slots = 3 default_privs = nobody default_process_limit = 100 default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason} default_recipient_limit = 10000 default_transport = smtp default_verp_delimiters = += defer_code = 450 defer_service_name = defer defer_transports = delay_logging_resolution_limit = 2 delay_notice_recipient = postmaster delay_warning_time = 0h deliver_lock_attempts = 20 deliver_lock_delay = 1s disable_dns_lookups = no disable_mime_input_processing = no disable_mime_output_conversion = no disable_verp_bounces = no disable_vrfy_command = yes dont_remove = 0 double_bounce_sender = double-bounce duplicate_filter_limit = 1000 empty_address_recipient = MAILER-DAEMON enable_original_recipient = yes error_notice_recipient = postmaster error_service_name = error execution_directory_expansion_filter = 1234567890!%-_=+:,./ abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ expand_owner_alias = no export_environment = TZ MAIL_CONFIG LANG fallback_transport = fallback_transport_maps = fast_flush_domains = $relay_domains fast_flush_purge_time = 7d fast_flush_refresh_time = 12h fault_injection_code = 0 flush_service_name = flush fork_attempts = 5 fork_delay = 1s forward_expansion_filter = 1234567890!%-_=+:,./ abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ forward_path = $home/.forward$$, $home/.forward frozen_delivered_to = yes hash_queue_depth = 1 hash_queue_names = deferred, defer header_address_token_limit = 10240 header_checks = header_size_limit = 102400 helpful_warnings = yes home_mailbox = Maildir/ hopcount_limit = 50 html_directory = no ignore_mx_lookup_error = no import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C in_flow_delay = 1s inet_interfaces = all inet_protocols = ipv4 initial_destination_concurrency = 5 internal_mail_filter_classes = invalid_hostname_reject_code = 501 ipc_idle = 100s ipc_timeout = 3600s ipc_ttl = 1000s line_length_limit = 2048 lmtp_bind_address = lmtp_bind_address6 = lmtp_cname_overrides_servername = no lmtp_connect_timeout = 0s lmtp_connection_cache_destinations = lmtp_connection_cache_on_demand = yes lmtp_connection_cache_time_limit = 2s lmtp_connection_reuse_time_limit = 300s lmtp_data_done_timeout = 600s lmtp_data_init_timeout = 120s lmtp_data_xfer_timeout = 180s lmtp_defer_if_no_mx_address_found = no lmtp_destination_concurrency_limit = $default_destination_concurrency_limit lmtp_destination_recipient_limit = $default_destination_recipient_limit lmtp_discard_lhlo_keyword_address_maps = lmtp_discard_lhlo_keywords = lmtp_enforce_tls = no lmtp_generic_maps = lmtp_host_lookup = dns lmtp_lhlo_name = $myhostname lmtp_lhlo_timeout = 300s lmtp_line_length_limit = 0 lmtp_mail_timeout = 300s lmtp_mx_address_limit = 5 lmtp_mx_session_limit = 2 lmtp_pix_workaround_delay_time = 10s lmtp_pix_workaround_threshold_time = 500s lmtp_quit_timeout = 300s lmtp_quote_rfc821_envelope = yes lmtp_randomize_addresses = yes lmtp_rcpt_timeout = 300s lmtp_rset_timeout = 20s lmtp_sasl_auth_enable = no lmtp_sasl_mechanism_filter = lmtp_sasl_password_maps = lmtp_sasl_path = lmtp_sasl_security_options = noplaintext, noanonymous lmtp_sasl_tls_security_options = $lmtp_sasl_security_options lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options lmtp_sasl_type = cyrus lmtp_send_xforward_command = no lmtp_sender_dependent_authentication = no lmtp_skip_5xx_greeting = yes lmtp_starttls_timeout = 300s lmtp_tcp_port = 24 lmtp_tls_CAfile = lmtp_tls_CApath = lmtp_tls_cert_file = lmtp_tls_dcert_file = lmtp_tls_dkey_file = $lmtp_tls_dcert_file lmtp_tls_enforce_peername = yes lmtp_tls_exclude_ciphers = lmtp_tls_key_file = $lmtp_tls_cert_file lmtp_tls_loglevel = 0 lmtp_tls_mandatory_ciphers = medium lmtp_tls_mandatory_exclude_ciphers = lmtp_tls_mandatory_protocols = SSLv3, TLSv1 lmtp_tls_note_starttls_offer = no lmtp_tls_per_site = lmtp_tls_policy_maps = lmtp_tls_scert_verifydepth = 5 lmtp_tls_secure_cert_match = nexthop lmtp_tls_security_level = lmtp_tls_session_cache_database = lmtp_tls_session_cache_timeout = 3600s lmtp_tls_verify_cert_match = hostname lmtp_use_tls = no lmtp_xforward_timeout = 300s local_command_shell = local_destination_concurrency_limit = 2 local_destination_recipient_limit = 1 local_header_rewrite_clients = permit_inet_interfaces local_recipient_maps = proxy:unix:passwd.byname $alias_maps local_transport = local:$myhostname luser_relay = mail_name = Postfix mail_owner = postfix mail_release_date = 20070301 mail_spool_directory = /var/mail mail_version = 2.3.8 mailbox_command = procmail -a "$EXTENSION" mailbox_command_maps = mailbox_delivery_lock = fcntl, dotlock mailbox_size_limit = 0 mailbox_transport = mailbox_transport_maps = mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man maps_rbl_domains = maps_rbl_reject_code = 554 masquerade_classes = envelope_sender, header_sender, header_recipient masquerade_domains = masquerade_exceptions = max_idle = 100s max_use = 100 maximal_backoff_time = 4000s maximal_queue_lifetime = 5d message_reject_characters = message_size_limit = 15360000 message_strip_characters = milter_command_timeout = 30s milter_connect_macros = j v milter_connect_timeout = 30s milter_content_timeout = 300s milter_data_macros = i milter_default_action = tempfail milter_end_of_data_macros = i milter_helo_macros = milter_macro_daemon_name = $myhostname milter_macro_v = $mail_name $mail_version milter_mail_macros = i milter_protocol = 2 milter_rcpt_macros = i milter_unknown_command_macros = mime_boundary_length_limit = 2048 mime_header_checks = $header_checks mime_nesting_limit = 100 minimal_backoff_time = 1000s multi_recipient_bounce_reject_code = 550 mydestination = hash:/etc/postfix/maps/localdomains mydomain = viebrock.ca myhostname = coruscant.viebrock.ca mynetworks = 127.0.0.0/8 mynetworks_style = subnet myorigin = /etc/mailname nested_header_checks = $header_checks newaliases_path = /usr/bin/newaliases non_fqdn_reject_code = 504 non_smtpd_milters = notify_classes = resource, software owner_request_special = no parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_back up_networks, qmqpd_authorized_clients,relay_domains,smtpd_access_maps permit_mx_backup_networks = pickup_service_name = pickup plaintext_reject_code = 450 prepend_delivered_header = command, file, forward process_id_directory = pid propagate_unmatched_extensions = canonical, virtual proxy_interfaces = proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks qmgr_clog_warn_time = 300s qmgr_fudge_factor = 100 qmgr_message_active_limit = 20000 qmgr_message_recipient_limit = 20000 qmgr_message_recipient_minimum = 10 qmqpd_authorized_clients = qmqpd_error_delay = 1s qmqpd_timeout = 300s queue_directory = /var/spool/postfix queue_file_attribute_count_limit = 100 queue_minfree = 0 queue_run_delay = 1000s queue_service_name = qmgr rbl_reply_maps = readme_directory = /usr/share/doc/postfix receive_override_options = recipient_bcc_maps = recipient_canonical_classes = envelope_recipient, header_recipient recipient_canonical_maps = recipient_delimiter = + reject_code = 554 relay_clientcerts = relay_destination_concurrency_limit = $default_destination_concurrency_limit relay_destination_recipient_limit = $default_destination_recipient_limit relay_domains = hash:/etc/postfix/maps/relay relay_domains_reject_code = 554 relay_recipient_maps = relay_transport = relay relayhost = mailout.easydns.com relocated_maps = remote_header_rewrite_domain = require_home_directory = no resolve_dequoted_address = yes resolve_null_domain = no resolve_numeric_domain = no rewrite_service_name = rewrite sample_directory = /usr/share/doc/postfix/examples sender_bcc_maps = sender_canonical_classes = envelope_sender, header_sender sender_canonical_maps = sender_dependent_relayhost_maps = sendmail_path = /usr/sbin/sendmail service_throttle_time = 60s setgid_group = postdrop show_user_unknown_table_name = yes showq_service_name = showq smtp_always_send_ehlo = yes smtp_bind_address = smtp_bind_address6 = smtp_cname_overrides_servername = no smtp_connect_timeout = 30s smtp_connection_cache_destinations = smtp_connection_cache_on_demand = yes smtp_connection_cache_time_limit = 2s smtp_connection_reuse_time_limit = 300s smtp_data_done_timeout = 600s smtp_data_init_timeout = 120s smtp_data_xfer_timeout = 180s smtp_defer_if_no_mx_address_found = no smtp_destination_concurrency_limit = $default_destination_concurrency_limit smtp_destination_recipient_limit = $default_destination_recipient_limit smtp_discard_ehlo_keyword_address_maps = smtp_discard_ehlo_keywords = smtp_enforce_tls = no smtp_fallback_relay = $fallback_relay smtp_generic_maps = smtp_helo_name = $myhostname smtp_helo_timeout = 30s smtp_host_lookup = dns smtp_line_length_limit = 0 smtp_mail_timeout = 300s smtp_mx_address_limit = 5 smtp_mx_session_limit = 2 smtp_never_send_ehlo = no smtp_pix_workaround_delay_time = 10s smtp_pix_workaround_threshold_time = 500s smtp_quit_timeout = 300s smtp_quote_rfc821_envelope = yes smtp_randomize_addresses = yes smtp_rcpt_timeout = 300s smtp_rset_timeout = 20s smtp_sasl_auth_enable = yes smtp_sasl_mechanism_filter = smtp_sasl_password_maps = hash:/etc/postfix/maps/smtp_auth smtp_sasl_path = smtp_sasl_security_options = smtp_sasl_tls_security_options = $smtp_sasl_security_options smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options smtp_sasl_type = cyrus smtp_send_xforward_command = no smtp_sender_dependent_authentication = no smtp_skip_5xx_greeting = yes smtp_skip_quit_response = yes smtp_starttls_timeout = 300s smtp_tls_CAfile = smtp_tls_CApath = smtp_tls_cert_file = smtp_tls_dcert_file = smtp_tls_dkey_file = $smtp_tls_dcert_file smtp_tls_enforce_peername = yes smtp_tls_exclude_ciphers = smtp_tls_key_file = $smtp_tls_cert_file smtp_tls_loglevel = 0 smtp_tls_mandatory_ciphers = medium smtp_tls_mandatory_exclude_ciphers = smtp_tls_mandatory_protocols = SSLv3, TLSv1 smtp_tls_note_starttls_offer = no smtp_tls_per_site = smtp_tls_policy_maps = smtp_tls_scert_verifydepth = 5 smtp_tls_secure_cert_match = nexthop, dot-nexthop smtp_tls_security_level = smtp_tls_session_cache_database = smtp_tls_session_cache_timeout = 3600s smtp_tls_verify_cert_match = hostname smtp_use_tls = yes smtp_xforward_timeout = 300s smtpd_authorized_verp_clients = $authorized_verp_clients smtpd_authorized_xclient_hosts = smtpd_authorized_xforward_hosts = smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_connection_count_limit = 50 smtpd_client_connection_rate_limit = 0 smtpd_client_event_limit_exceptions = $ {smtpd_client_connection_limit_exceptions:$mynetworks} smtpd_client_message_rate_limit = 0 smtpd_client_new_tls_session_rate_limit = 0 smtpd_client_recipient_rate_limit = 0 smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/ maps/client_access smtpd_data_restrictions = smtpd_delay_open_until_valid_rcpt = yes smtpd_delay_reject = yes smtpd_discard_ehlo_keyword_address_maps = smtpd_discard_ehlo_keywords = smtpd_end_of_data_restrictions = smtpd_enforce_tls = no smtpd_error_sleep_time = 1s smtpd_etrn_restrictions = smtpd_expansion_filter = t40!"#$%&'()*+,-./0123456789:;<=>? ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrst uvwxyz{\|}~ smtpd_forbidden_commands = CONNECT GET POST smtpd_hard_error_limit = 20 smtpd_helo_required = yes smtpd_helo_restrictions = smtpd_history_flush_threshold = 100 smtpd_junk_command_limit = 100 smtpd_milters = smtpd_noop_commands = smtpd_null_access_lookup_key = <> smtpd_peername_lookup = yes smtpd_policy_service_max_idle = 300s smtpd_policy_service_max_ttl = 1000s smtpd_policy_service_timeout = 100s smtpd_proxy_ehlo = $myhostname smtpd_proxy_filter = smtpd_proxy_timeout = 100s smtpd_recipient_limit = 1000 smtpd_recipient_overshoot_limit = 1000 smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_sender_access hash:/etc/postfix/maps/spammers smtpd_reject_unlisted_recipient = yes smtpd_reject_unlisted_sender = no smtpd_restriction_classes = smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = no smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous, noplaintext smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot smtpd_sender_login_maps = smtpd_sender_restrictions = reject_non_fqdn_sender smtpd_soft_error_limit = 10 smtpd_starttls_timeout = 300s smtpd_timeout = 300s smtpd_tls_CAfile = smtpd_tls_CApath = smtpd_tls_always_issue_session_ids = yes smtpd_tls_ask_ccert = no smtpd_tls_auth_only = yes smtpd_tls_ccert_verifydepth = 5 smtpd_tls_cert_file = /etc/ssl/certs/postfix.pem smtpd_tls_dcert_file = smtpd_tls_dh1024_param_file = smtpd_tls_dh512_param_file = smtpd_tls_dkey_file = $smtpd_tls_dcert_file smtpd_tls_exclude_ciphers = smtpd_tls_key_file = /etc/ssl/private/postfix.pem smtpd_tls_loglevel = 2 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = SSLv3, TLSv1 smtpd_tls_received_header = yes smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_use_tls = yes soft_bounce = yes stale_lock_time = 500s strict_7bit_headers = no strict_8bitmime = no strict_8bitmime_body = no strict_mime_encoding_domain = no strict_rfc821_envelopes = no sun_mailtool_compatibility = no swap_bangpath = yes syslog_facility = mail syslog_name = postfix tls_daemon_random_bytes = 32 tls_export_cipherlist = ALL:+RC4:STRENGTH tls_high_cipherlist = ALL:!EXPORT:!LOW:!MEDIUM:+RC4:STRENGTH tls_low_cipherlist = ALL:!EXPORT:+RC4:STRENGTH tls_medium_cipherlist = ALL:!EXPORT:!LOW:+RC4:STRENGTH tls_null_cipherlist = !aNULL:eNULL+kRSA tls_random_bytes = 32 tls_random_exchange_name = $/prng_exch tls_random_prng_update_period = 3600s tls_random_reseed_period = 3600s tls_random_source = dev:/dev/urandom trace_service_name = trace transport_maps = hash:/etc/postfix/maps/transport transport_retry_time = 60s trigger_timeout = 10s undisclosed_recipients_header = To: undisclosed-recipients:; unknown_address_reject_code = 550 unknown_client_reject_code = 450 unknown_hostname_reject_code = 450 unknown_local_recipient_reject_code = 550 unknown_relay_recipient_reject_code = 550 unknown_virtual_alias_reject_code = 550 unknown_virtual_mailbox_reject_code = 550 unverified_recipient_reject_code = 450 unverified_sender_reject_code = 450 verp_delimiter_filter = -=+ virtual_alias_domains = $virtual_alias_maps virtual_alias_expansion_limit = 1000 virtual_alias_maps = hash:/etc/postfix/maps/virtual, regexp:/etc/ postfix/maps/mylists-regex, hash:/etc/postfix/maps/mylists, hash:/var/ lib/mailman/data/virtual-mailman, proxy:mysql:/etc/postfix/mysql/ virtual_alias_maps.cf virtual_alias_recursion_limit = 1000 virtual_destination_concurrency_limit = $default_destination_concurrency_limit virtual_destination_recipient_limit = $default_destination_recipient_limit virtual_gid_maps = static:1011 virtual_mailbox_base = /var/mail/vhosts virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/ virtual_domains_maps.cf virtual_mailbox_limit = 51200000 virtual_mailbox_lock = fcntl virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/ virtual_mailbox_maps.cf virtual_minimum_uid = 1011 virtual_transport = virtual virtual_uid_maps = static:1011 - Colin ------------------------------------------------------------ ------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourcefor ge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-userlists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amav is.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/ho wto/

Re: Amavis + Postfix w/virtual domains creates largequeue of rejected emails
United States	2007-04-27 13:54:22
> Hi all, > > On my Debian box, I've got postfix, postfix-mysql and postfix-pcre > (2.3.8-2+b1) all installed from packages. I've also got > amavisd-new (2.4.2-5), and ClamAV (0.90.2-1). What I'm > trying to do is pretty > standard: filter all incoming mail through amavisd, then > deliver "good" emails to either local or virtual accounts. > > What I see is that if a mail comes in for "foovirtual.com", > where virtual.com is a domain on my system but where "foo" is > not a valid user, the email gets left in the postfix queue > with a message like: > > 45DAF28143 3568 Fri Apr 27 03:26:57 MAILER-DAEMON > (host 127.0.0.1[127.0.0.1] said: 450 4.1.1 Failed, > id=24239-09-6, from MTA([127.0.0.1]:10025): 450 4.1.1 > <foovirtual.com>: Recipient address rejected: User unknown > in virtual mailbox table (in reply to end of DATA command)) You have soft_bounce = yes, which generates a temporary failure code. This is fine for debugging and catching what would be permanent bounces while you work out the kinks. > > The messages pile up in the postfix queue and aren't ever > deleted or bounce back. I think it's because postfix is > trying to bounce them back to Amavis (?), but I'm not sure. > What I'm I doing wrong? Servers will continue to retry delivery of a 450 temp failure, by default, 5 days. > > Frankly, if it is possible to check for non-existing accounts > first, then send the message through Amavis, that would be preferable. Yes, and you should. Recipient validation should occur before accepting the message and passing to the content filter. After that, its too late - you've already accepted the message, so all you could do is bounce it (and for almost all spam, you become a backscatter source). > > Here is my postconf output, plus the relevant parts of my > master.cf file. Let me know if I should post any other info. > Thanks in advance! > Please send output of postconf -n, which provides only the non-default settings. There is too much to look through below. MrC > master.cf > > # > ------------------------------------------------------------ ------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourcefor ge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-userlists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amav is.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/ho wto/

Re: Amavis + Postfix w/virtual domains creates largequeue of rejected emails
Canada	2007-04-27 15:21:59
On 27-Apr-07, at 2:54 PM, MrC wrote: >> 45DAF28143 3568 Fri Apr 27 03:26:57 MAILER-DAEMON >> (host 127.0.0.1[127.0.0.1] said: 450 4.1.1 Failed, >> id=24239-09-6, from MTA([127.0.0.1]:10025): 450 4.1.1 >> <foovirtual.com>: Recipient address rejected: User unknown >> in virtual mailbox table (in reply to end of DATA command)) > > You have soft_bounce = yes, which generates a temporary failure > code. This > is fine for debugging and catching what would be permanent bounces > while you > work out the kinks. Okay, so I'm guessing I should set soft_bounce = no. >> The messages pile up in the postfix queue and aren't ever >> deleted or bounce back. I think it's because postfix is >> trying to bounce them back to Amavis (?), but I'm not sure. >> What I'm I doing wrong? > > Servers will continue to retry delivery of a 450 temp failure, by > default, 5 > days. Right. But shouldn't a "user unknown" be a permanent failure, not temp? Is that what soft_bounce is doing? >> Frankly, if it is possible to check for non-existing accounts >> first, then send the message through Amavis, that would be >> preferable. > > Yes, and you should. Recipient validation should occur before > accepting the > message and passing to the content filter. After that, its too late - > you've already accepted the message, so all you could do is bounce > it (and > for almost all spam, you become a backscatter source). Excellent. Here is the output of postconf -n (sorry for the full listing before). Can you advise on how to configure my machine to do recipient validation first, then pass things to amavis (which is tagging or discarding spam), then deliver to either local account or virtual ones? This is exactly what I'm looking for! - Colin postconf -n: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix disable_vrfy_command = yes home_mailbox = Maildir/ mailbox_command = procmail -a "$EXTENSION" mailbox_size_limit = 0 message_size_limit = 15360000 mydestination = hash:/etc/postfix/maps/localdomains mynetworks = 127.0.0.0/8 myorigin = /etc/mailname owner_request_special = no recipient_delimiter = + relay_domains = hash:/etc/postfix/maps/relay relayhost = mailout.easydns.com smtp_helo_timeout = 30s smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/maps/smtp_auth smtp_sasl_security_options = smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/ maps/client_access smtpd_helo_required = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_sender_access hash:/etc/postfix/maps/spammers smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous, noplaintext smtpd_sasl_type = dovecot smtpd_sender_restrictions = reject_non_fqdn_sender smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/postfix.pem smtpd_tls_key_file = /etc/ssl/private/postfix.pem smtpd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes soft_bounce = yes tls_random_source = dev:/dev/urandom transport_maps = hash:/etc/postfix/maps/transport unknown_address_reject_code = 550 unknown_local_recipient_reject_code = 550 virtual_alias_maps = hash:/etc/postfix/maps/virtual, regexp:/etc/ postfix/maps/mylists-regex, hash:/etc/postfix/maps/mylists, hash:/var/ lib/mailman/data/virtual-mailman, proxy:mysql:/etc/postfix/mysql/ virtual_alias_maps.cf virtual_gid_maps = static:1011 virtual_mailbox_base = /var/mail/vhosts virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/ virtual_domains_maps.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/ virtual_mailbox_maps.cf virtual_minimum_uid = 1011 virtual_transport = virtual virtual_uid_maps = static:1011 ------------------------------------------------------------ ------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourcefor ge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-userlists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amav is.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/ho wto/

Re: Amavis + Postfix w/virtual domains creates largequeue of rejected emails
Germany	2007-04-27 15:34:47
* Colin Viebrock <colinviebrock.ca>: > Okay, so I'm guessing I should set soft_bounce = no. Yes, it should always be set to "no", unless testing a new setup! > Right. But shouldn't a "user unknown" be a permanent failure, not > temp? Yes, but with soft_bounce = yes ALL failures become temporary. -- Ralf Hildebrandt (i.A. des IT-Zentrums) Ralf.Hildebrandtcharite.de Charite - Universitätsmedizin Berlin Tel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-Berlin Fax. +49 (0)30-450 570-962 IT-Zentrum Standort CBF send no mail to plonkcharite.de ------------------------------------------------------------ ------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourcefor ge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-userlists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amav is.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/ho wto/

Re: Amavis + Postfix w/virtual domains creates largequeue of rejected emails
Germany	2007-04-28 14:17:39
* Colin Viebrock <colinviebrock.ca>: > I suppose the "right way" to handle this would be to duplicate all > the "domain1.tld" aliases as "domain2.tld", instead of wildcards? Yes. -- Ralf Hildebrandt (i.A. des IT-Zentrums) Ralf.Hildebrandtcharite.de Charite - Universitätsmedizin Berlin Tel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-Berlin Fax. +49 (0)30-450 570-962 IT-Zentrum Standort CBF send no mail to plonkcharite.de ------------------------------------------------------------ ------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourcefor ge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-userlists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amav is.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/ho wto/

[1-5]

about | contact Other archives ( Real Estate discussion Medical topics )