postfix mailing lists">


List Info

Thread: "Blocked MTA-BLOCKED", fwd-connect error with amavisd<->postfix




"Blocked MTA-BLOCKED", fwd-connect error with amavisd<->postfix
user name
2007-12-26 14:58:23
Hi!


I have worked a lot on postfix, to migrate from qmail-ldap,
but amavisd 
but I have still an failure which I cant solve. Maybe
somebody on this 
list can help me out...

inject a mail by $ telnet 127.0.0.2 10025


Dec 26 21:50:23 srv postfix/smtpd[10455]: 5043111853AD: 
client=unknown[10.0.0.3]
Dec 26 21:50:25 srv postfix/cleanup[10459]: 5043111853AD: 
message-id=<20071226205023.5043111853ADsrv.intra.eyb.de>
Dec 26 21:50:25 srv postfix/qmgr[10451]: 5043111853AD: 
from=<mailexample.net>, size=336, nrcpt=1 (queue
active)

// so, the message is forwarded by postfix successfully to
amavisd-new.

Dec 26 21:50:25 srv amavis[8427]: (08427-12) LMTP::10024 
/var/amavis/tmp/amavis-20071226T131326-08427: <mailexample.net> -> 
<echotu-berlin.de> SIZE=336 Received: from
srv.intra.eyb.de 
([127.0.0.2]) by localhost (srv.intra.eyb.de [127.0.0.2])
(amavisd-new, 
port 10024) with LMTP for <echotu-berlin.de>; Wed, 26
Dec 2007 21:50:25 
+0100 (CET)


Dec 26 21:50:25 srv amavis[8427]: (08427-12) Checking:
CR+1uY9FkVEX 
[10.0.0.3] <mailexample.net> -> <echotu-berlin.de>
Dec 26 21:50:25 srv amavis[8427]: (08427-12) (!)FWD via
SMTP: 
<mailexample.net> -> <echotu-berlin.de>, 451 4.5.0
From 
MTA([[[127.0.0.2]]]:10025) during fwd-connect (errno=Invalid
argument): 
id=08427-12

// Here amavisd gets into trouble

Dec 26 21:50:25 srv amavis[8427]: (08427-12) Blocked
MTA-BLOCKED, LOCAL 
[10.0.0.3] [10.0.0.3] <mailexample.net> ->
<echotu-berlin.de>, 
Message-ID: <20071226205023.5043111853ADsrv.intra.eyb.de>, mail_id: 
CR+1uY9FkVEX, Hits: -, size: 336, 268 ms

// and explained why.. but I dont understand this. „BLOCKED
MTA“...
// I have injected by telnet on 127.0.0.2:10025 from
127.0.0.2 to
// postfix successfully a mail. Why amavisd-new fails
here??
// I guess, that 'fwd-connect' means, that amavis is trying
to send back
// the mail to postfix.
Dec 26 21:50:25 srv postfix/lmtp[10460]: 5043111853AD: 
to=<echotu-berlin.de>, relay=127.0.0.2[127.0.0.2]:10024,
delay=8.7, 
delays=8.4/0.04/0.01/0.28, dsn=4.5.0, status=deferred (host

127.0.0.2[127.0.0.2] said: 451 4.5.0 From
MTA([[[127.0.0.2]]]:10025) 
during fwd-connect (errno=Invalid argument): id=08427-12 (in
reply to 
end of DATA command))


Regards,
Oskar


here are some information


postconf -n

command_directory = /usr/local/sbin
config_directory = /usr/local/etc/postfix
daemon_directory = /usr/local/libexec/postfix
debug_peer_level = 2
header_checks =
pcre:/usr/local/etc/postfix/header_checks.pcre
html_directory = no
inet_interfaces = 127.0.0.2
mail_owner = postfix
mailq_path = /usr/local/bin/mailq
manpage_directory = /usr/local/man
masquerade_domains = $myhostname $mydomain
mydomain = eyb.de
myhostname = chuck.ath.cx
mynetworks = 10.0.0.0/24, 127.0.0.0/8
mynetworks_style = subnet
myorigin = $mydomain
newaliases_path = /usr/local/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
relay_domains =
proxy:mysql:/usr/local/etc/postfix/sql_relay_domains_maps.cf

relayhost = smtprelaypool.ispgateway.de
sample_directory = /usr/local/etc/postfix
sendmail_path = /usr/local/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/smtp_auth
smtp_sasl_security_options = noanonymous
smtpd_banner = $myhostname ESMTP (pri-mx1)
smtpd_client_restrictions = permit_mynetworks, 
permit_sasl_authenticated,    reject_rbl_client
dnsbl.sorbs.net, 
reject_rbl_client sbl-xbl.spamhaus.org,    reject_rbl_client

list.dsbl.org,    permit
smtpd_data_restrictions = permit_mynetworks, 
reject_unauth_pipelining,    permit
smtpd_helo_restrictions = permit_mynetworks, 
permit_sasl_authenticated,    reject_invalid_hostname, 
reject_non_fqdn_hostname,    permit
smtpd_recipient_restrictions =
reject_unknown_recipient_domain, 
reject_non_fqdn_recipient,    permit_mynetworks, 
permit_sasl_authenticated,    reject_unauth_destination, 
check_policy_service inet:127.0.0.2:10023,    permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = reject_unknown_sender_domain, 
reject_non_fqdn_sender,    permit_mynetworks, 
permit_sasl_authenticated,    reject_rhsbl_sender
rhsbl.sorbs.net, 
reject_rhsbl_sender dsn.rfc-ignorant.org,    permit
smtpd_tls_CAfile = /usr/local/etc/postfix/ssl/smtpd.pem
smtpd_tls_cert_file = /usr/local/etc/postfix/ssl/smtpd.pem
smtpd_tls_key_file = /usr/local/etc/postfix/ssl/smtpd.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
soft_bounce = yes
tls_random_source = dev:/dev/urandom
transport_maps =
mysql:/usr/local/etc/postfix/sql_transport_maps.cf, 
pcre:/usr/local/etc/postfix/transport.pcre
unknown_local_recipient_reject_code = 550
virtual_alias_maps =
mysql:/usr/local/etc/postfix/sql_virtual_alias_maps.cf
virtual_gid_maps = static:130
virtual_mailbox_base = /data/maildirs
virtual_mailbox_domains = 
mysql:/usr/local/etc/postfix/sql_virtual_domains_maps.cf
virtual_mailbox_limit = 51200000
virtual_mailbox_limit_maps = 
mysql:/usr/local/etc/postfix/sql_virtual_mailbox_limit_maps.
cf
virtual_mailbox_limit_override = yes
virtual_mailbox_maps = $transport_maps, 
mysql:/usr/local/etc/postfix/sql_virtual_mailbox_maps.cf
virtual_maildir_limit_message = Sorry, the user's maildir
has overdrawn 
his diskspace quota, please try again later.
virtual_minimum_uid = 130
virtual_overquota_bounce = yes
virtual_transport = virtual
virtual_uid_maps = static:130

------------------------------------------------------------
---------------------

master.cf

============================================================
==============
# service type  private unpriv  chroot  wakeup  maxproc
command + args
#               (yes)   (yes)   (yes)   (never) (100)
#
============================================================
==============

#628      inet  n       -       n       -       -      
qmqpd
#pickup    fifo  n       -       n       60      1      
pickup
#cleanup   unix  n       -       n       -       0      
cleanup
qmgr      fifo  n       -       n       300     1      
qmgr
#qmgr     fifo  n       -       n       300     1      
oqmgr
tlsmgr    unix  -       -       n       1000?   1      
tlsmgr
rewrite   unix  -       -       n       -       -      
trivial-rewrite
bounce    unix  -       -       n       -       0      
bounce
defer     unix  -       -       n       -       0      
bounce
trace     unix  -       -       n       -       0      
bounce
verify    unix  -       -       n       -       1      
verify
flush     unix  n       -       n       1000?   0      
flush
proxymap  unix  -       -       n       -       -      
proxymap
smtp      unix  -       -       n       -       -      
smtp
# When relaying mail as backup MX, disable fallback_relay to
avoid MX loops
relay     unix  -       -       n       -       -      
smtp
         -o fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       n       -       -      
showq
error     unix  -       -       n       -       -      
error
retry     unix  -       -       n       -       -      
error
discard   unix  -       -       n       -       -      
discard
#local     unix  -       n       n       -       -      
local
virtual   unix  -       n       n       -       -      
virtual
lmtp      unix  -       -       n       -       -      
lmtp
anvil     unix  -       -       n       -       1      
anvil
scache    unix  -       -       n       -       1      
scache


pickup               fifo      n      -      n      60     1
     pickup
   -o cleanup_service_name=pre-cleanup


smtp                 inet      n      -      n      -      -
     smtpd
         -o cleanup_service_name=pre-cleanup
         -o content_filter=amavis-lmtp:127.0.0.2:10024
         -o receive_override_options=no_address_mappings


amavis-lmtp    unix  -       -       n       -       2      
lmtp
     -o lmtp_data_done_timeout=1200
     -o lmtp_send_xforward_command=yes
     -o disable_dns_lookups=yes
     -o max_use=20

127.0.0.1:10025 inet n  -       n       -       -      
smtpd
         -o content_filter=
         -o local_recipient_maps=
         -o relay_recipient_maps=
         -o smtpd_restriction_classes=
         -o smtpd_client_restrictions=
         -o smtpd_helo_restrictions=
         -o smtpd_sender_restrictions=
         -o
smtpd_recipient_restrictions=permit_mynetworks,reject
         -o mynetworks=127.0.0.0/8
         -o strict_rfc821_envelopes=yes
         -o disable_dns_lookups=yes


dspam                unix   -   n   n   -   -   pipe
   flags=Rhq user=dspam argv=/usr/local/bin/dspam
--mode=teft --user 
global 
   --deliver=innocent,spam --feature=chained,noise -i -f
$ -- 
$


dspam-spam           unix   -   n   n   -   -   pipe
   flags=Rhq user=dspam argv=/usr/local/bin/dspam
--mode=teft --user 
global 
   --class=spam --source=error $ --deliver=spam

dspam-notspam        unix   -   n   n   -   -   pipe
   flags=Rhq user=dspam argv=/usr/local/bin/dspam
--mode=teft --user 
global 
   --class=innocent --source=error $
--deliver=innocent

cleanup              unix      n      -      n      -      0
     cleanup
   -o header_checks=
   -o mime_header_checks=
   -o nested_header_checks=
   -o body_checks=

pre-cleanup          unix      n      -      n      -      0
     cleanup
   -o canonical_maps=
   -o sender_canonical_maps=
   -o recipient_canonical_maps=
   -o masquerade_domains=
   -o always_bcc=
   -o sender_bcc_maps=
   -o recipient_bcc_maps=

local                unix      -      n      n      -      -
     local
   -o content_filter=
   -o myhostname=HOSTNAME
   -o local_recipient_maps=
   -o relay_recipient_maps=
   -o mynetworks=127.0.0.0/8
   -o mynetworks_style=host
   -o smtpd_restriction_classes=
   -o smtpd_client_restrictions=
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject


------------------------------------------------------------
-------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

[1]

about | contact  Other archives ( Real Estate discussion Medical topics )