List Info

Thread: Re: Amavisd-new in a separate machine




Re: Amavisd-new in a separate machine
country flaguser name
Canada
2007-09-06 18:12:31
> > I wanted to offload amavis to a separate machine.
[...]
> > Sep  6 15:19:04 postfixmailserver
postfix/smtp[6288]: connect to
> > 10.150.150.1[10.150.150.1]: Connection refused
(port 10024)
>
> amavisd.conf:
>
>   $inet_socket_bind = undef;
>   inet_acl = qw( 127.0.0.1 [::1] 10.150.150.0/24 );
>
>
>
> amavisd.conf-sample tells:
>
> # SMTP SERVER (INPUT) access control
> # - do not allow free access to the amavisd SMTP port
!!!
> #
> # when MTA is at the same host, use the following (one
or the
> other or both):
> #$inet_socket_bind = '127.0.0.1'; # limit socket bind
to loopback
> interface
>                                   # (default is
'127.0.0.1')
> inet_acl = qw(127.0.0.1 [::1]);  # allow SMTP access
only from
> localhost IP
>                                   # (default is
qw(127.0.0.1 [::1]) )
>
> # when MTA (one or more) is on a different host, use
the following:
> #inet_acl = qw(127.0.0.0/8 [::1] 10.1.0.1 10.1.0.2); 
# adjust
> list as needed
> #$inet_socket_bind = undef;       # bind to all IP
interfaces if undef
>
>   Mark

Thank you Mark,
I really appreciate your reply.

Now I think the connection is established. But I don't think
the amavis
server is passing the messages back to my original postfix
server (port
10025)

I get

Sep  6 16:10:33 amavis1 amavis[29474]: (29474-01) (!)rw_loop
read failed:
Connection refused
Sep  6 16:10:33 amavis1 amavis[29474]: (29474-01) (!)FWD via
SMTP:
<justinorbs.com> -> <justinorbs.com>, 451 4.5.0
From
MTA([127.0.0.1]:10025) during fwd-connect (Negative
greeting:  at (eval 42)
line 442, <GEN5> line 233.): id=29474-01
Sep  6 16:10:33 amavis1 amavis[29474]: (29474-01) Blocked
MTA-BLOCKED, LOCAL
[10.100.7.7] <justinorbs.com> -> <justinorbs.com>, Message-ID:
<00a701c7f0da$e8ba2ac0$0707640ajustinkim1>, mail_id:
2u9tlUoBjNvA,
Hits: -1.439, size: 8747, 245 ms

And I set the /etc/amavisd.conf


# OTHER MORE COMMON SETTINGS (defaults may suffice):

# $myhostname = 'host.example.com';  # must be a
fully-qualified domain
name!

# $notify_method  = 'smtp:[127.0.0.1]:10025';
# $forward_method = 'smtp:[127.0.0.1]:10025';  # set to
undef with milter!

$final_virus_destiny      = D_DISCARD;
$final_banned_destiny     = D_BOUNCE;
$final_spam_destiny       = D_PASS;
$final_bad_header_destiny = D_PASS;

# $os_fingerprint_method = 'p0f:127.0.0.1:2345';  # to query
p0f-analyzer.pl

Should I uncomment notify method and others too?

Thank you,

Justin



------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Re: Amavisd-new in a separate machine
country flaguser name
United States
2007-09-06 19:26:55
On Thu, Sep 06, 2007 at 04:12:31PM -0700, Justin Kim wrote:
> > > I wanted to offload amavis to a separate
machine. [...]
> > > Sep  6 15:19:04 postfixmailserver
postfix/smtp[6288]: connect to
> > > 10.150.150.1[10.150.150.1]: Connection
refused (port 10024)
> >
> > amavisd.conf:
> >
> >   $inet_socket_bind = undef;
> >   inet_acl = qw( 127.0.0.1 [::1] 10.150.150.0/24 );
> >
> > amavisd.conf-sample tells:
> >
> > # SMTP SERVER (INPUT) access control
> > # - do not allow free access to the amavisd SMTP
port !!!
> > #
> > # when MTA is at the same host, use the following
(one or the
> > other or both):
> > #$inet_socket_bind = '127.0.0.1'; # limit socket
bind to loopback
> > interface
> >                                   # (default is
'127.0.0.1')
> > inet_acl = qw(127.0.0.1 [::1]);  # allow SMTP access
only from
> > localhost IP
> >                                   # (default is
qw(127.0.0.1 [::1]) )
> >
> > # when MTA (one or more) is on a different host,
use the following:
> > #inet_acl = qw(127.0.0.0/8 [::1] 10.1.0.1 10.1.0.2); 
# adjust
> > list as needed
> > #$inet_socket_bind = undef;       # bind to all IP
interfaces if undef
> >
> >   Mark
> 
> Thank you Mark,
> I really appreciate your reply.
> 
> Now I think the connection is established. But I don't
think the amavis
> server is passing the messages back to my original
postfix server (port
> 10025)

  That's because it has no way to know that's what you
want?

  You need to look closely at the config lines you quote
below:
 
> Sep  6 16:10:33 amavis1 amavis[29474]: (29474-01)
(!)rw_loop read failed:
> Connection refused
> Sep  6 16:10:33 amavis1 amavis[29474]: (29474-01)
(!)FWD via SMTP:
> <justinorbs.com> -> <justinorbs.com>, 451 4.5.0 From
> MTA([127.0.0.1]:10025) during fwd-connect (Negative
greeting:  at (eval 42)
> line 442, <GEN5> line 233.): id=29474-01
..
> And I set the /etc/amavisd.conf
> 
> 
> # OTHER MORE COMMON SETTINGS (defaults may suffice):
> 
> # $myhostname = 'host.example.com';  # must be a
fully-qualified domain
> name!
> 
> # $notify_method  = 'smtp:[127.0.0.1]:10025';
> # $forward_method = 'smtp:[127.0.0.1]:10025';  # set to
undef with milter!

  So instead of 127.0.0.1, set these to the IP address where
you
actually want to send it.  Forward_method is for delivering
the mail,
set this to the IP address of your Postfix server. (Notify
is for
sending NDRs, so this also needs to point to a valid postfix
server.)

  Also, to forestall another round of trouble, before you
change this
you should check your Postfix server's master.cf and make
sure that
it has a listener on port 10025 and that it's bound to the
reachable IP
address you're using, not to 127.0.0.1.  (Otherwise amavisd
will try to
reach the correct server, but find it is not listening.)
 
  -- Clifton

-- 
    Clifton Royston  --  cliftonriandicomputing.com /
cliftonrlava.net
       President  - I and I Computing * http://www.iandicomput
ing.com/
 Custom programming, network design, systems and network
consulting services

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )