PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Langsamer Mailserver



abalorio
21.06.08, 17:05
Hi Forum,
ich setze postfix, amavis, spamassassin und procmail ein. Seit einiger Zeit läuft der Server sehr langsam... . Meiner Meinung nach liegt dies am vielen Spam und eMails die angekommen und nicht zugestellt werden können.


mailq sagt im Moment:
1828 Requests


postconf sagt:
2bounce_notice_recipient = postmaster
access_map_reject_code = 554
address_verify_default_transport = $default_transport
address_verify_local_transport = $local_transport
address_verify_map =
address_verify_negative_cache = yes
address_verify_negative_expire_time = 3d
address_verify_negative_refresh_time = 3h
address_verify_poll_count = 3
address_verify_poll_delay = 3s
address_verify_positive_expire_time = 31d
address_verify_positive_refresh_time = 7d
address_verify_relay_transport = $relay_transport
address_verify_relayhost = $relayhost
address_verify_sender = postmaster
address_verify_service_name = verify
address_verify_transport_maps = $transport_maps
address_verify_virtual_transport = $virtual_transport
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_mail_to_commands = alias, forward
allow_mail_to_files = alias, forward
allow_min_user = no
allow_percent_hack = yes
allow_untrusted_routing = no
alternate_config_directories =
always_bcc =
anvil_rate_time_unit = 60s
anvil_status_update_time = 600s
append_at_myorigin = yes
append_dot_mydomain = yes
application_event_drain_time = 100s
authorized_flush_users = static:anyone
authorized_mailq_users = static:anyone
authorized_submit_users = static:anyone
backwards_bounce_logfile_compatibility = yes
berkeley_db_create_buffer_size = 16777216
berkeley_db_read_buffer_size = 131072
best_mx_transport =
biff = yes
body_checks =
body_checks_size_limit = 51200
bounce_notice_recipient = postmaster
bounce_queue_lifetime = 5d
bounce_service_name = bounce
bounce_size_limit = 50000
broken_sasl_auth_clients = no
canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
canonical_maps = hash:/etc/postfix/canonical
cleanup_service_name = cleanup
command_directory = /usr/sbin
command_execution_directory =
command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ
command_time_limit = 1000s
config_directory = /etc/postfix
connection_cache_service = scache
connection_cache_status_update_time = 600s
connection_cache_ttl_limit = 2s
content_filter =
daemon_directory = /usr/lib/postfix
daemon_timeout = 18000s
debug_peer_level = 2
debug_peer_list = meinedomain.de, 127.0.0.1, 82.xx.xx.xx
default_database_type = hash
default_delivery_slot_cost = 5
default_delivery_slot_discount = 50
default_delivery_slot_loan = 3
default_destination_concurrency_limit = 20
default_destination_recipient_limit = 50
default_extra_recipient_limit = 1000
default_minimum_delivery_slots = 3
default_privs = nobody
default_process_limit = 100
default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
default_recipient_limit = 10000
default_transport = smtp
default_verp_delimiters = +=
defer_code = 450
defer_service_name = defer
defer_transports =
delay_notice_recipient = postmaster
delay_warning_time = 0h
deliver_lock_attempts = 20
deliver_lock_delay = 1s
disable_dns_lookups = no
disable_mime_input_processing = no
disable_mime_output_conversion = no
disable_verp_bounces = no
disable_vrfy_command = no
dont_remove = 0
double_bounce_sender = double-bounce
duplicate_filter_limit = 1000
empty_address_recipient = MAILER-DAEMON
enable_original_recipient = yes
error_notice_recipient = postmaster
error_service_name = error
execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ
expand_owner_alias = no
export_environment = TZ MAIL_CONFIG
fallback_relay =
fallback_transport =
fast_flush_domains = $relay_domains
fast_flush_purge_time = 7d
fast_flush_refresh_time = 12h
fault_injection_code = 0
flush_service_name = flush
fork_attempts = 5
fork_delay = 1s
forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ
forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
hash_queue_depth = 1
hash_queue_names = deferred, defer
header_address_token_limit = 10240
header_checks = regexp:/etc/postfix/header_checks
header_size_limit = 102400
helpful_warnings = yes
home_mailbox = Maildir/
hopcount_limit = 50
html_directory = no
ignore_mx_lookup_error = no
import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY
in_flow_delay = 1s
inet_interfaces = all
inet_protocols = ipv4
initial_destination_concurrency = 5
invalid_hostname_reject_code = 501
ipc_idle = 100s
ipc_timeout = 3600s
ipc_ttl = 1000s
line_length_limit = 2048
lmtp_cache_connection = yes
lmtp_connect_timeout = 0s
lmtp_data_done_timeout = 600s
lmtp_data_init_timeout = 120s
lmtp_data_xfer_timeout = 180s
lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
lmtp_destination_recipient_limit = $default_destination_recipient_limit
lmtp_lhlo_timeout = 300s
lmtp_mail_timeout = 300s
lmtp_quit_timeout = 300s
lmtp_rcpt_timeout = 300s
lmtp_rset_timeout = 20s
lmtp_sasl_auth_enable = no
lmtp_sasl_password_maps =
lmtp_sasl_security_options = noplaintext, noanonymous
lmtp_send_xforward_command = no
lmtp_skip_quit_response = no
lmtp_tcp_port = 24
lmtp_xforward_timeout = 300s
local_command_shell =
local_destination_concurrency_limit = 4
local_destination_recipient_limit = 1
local_header_rewrite_clients = permit_inet_interfaces
local_recipient_maps =
local_transport = local:$myhostname
luser_relay =
mail_name = Postfix
mail_owner = postfix
mail_release_date = 20060221
mail_spool_directory = /var/mail
mail_version = 2.2.9
mailbox_command = /usr/bin/procmail -a $EXTENSION DEFAULT=$HOME/Maildir/ MAILDIR=$HOME/Maildir
mailbox_command_maps =
mailbox_delivery_lock = fcntl, dotlock
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains =
maps_rbl_reject_code = 554
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains = meinedomain.de, meinedomain2.de, meinedomain3.de, meinedomain4.de, meinedomain5.de, meinedomain6.de, meinedomain7.de
masquerade_exceptions = root
max_idle = 100s
max_use = 100
maximal_backoff_time = 4000s
maximal_queue_lifetime = 5d
message_size_limit = 104857600
mime_boundary_length_limit = 2048
mime_header_checks = $header_checks
mime_nesting_limit = 100
minimal_backoff_time = 120s
multi_recipient_bounce_reject_code = 550
mydestination = $myhostname, localhost.$mydomain, meinedomain.de, meinedomain2.de, meinedomain3.de, meinedomain4.de, meinedomain5.de
mydomain = meinedomain.de
myhostname = ns.meinedomain.de
mynetworks = 82.xx.xx.xx, 127.0.0.0/8
mynetworks_style = subnet
myorigin = $mydomain
nested_header_checks = $header_checks
newaliases_path = /usr/bin/newaliases
non_fqdn_reject_code = 504
notify_classes = resource, software
owner_request_special = yes
parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,perm it_mx_backup_networks,qmqpd_authorized_clients,rel ay_domains,smtpd_access_maps
permit_mx_backup_networks =
pickup_service_name = pickup
prepend_delivered_header = command, file, forward
process_id_directory = pid
propagate_unmatched_extensions = canonical, virtual
proxy_interfaces =
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
qmgr_clog_warn_time = 300s
qmgr_fudge_factor = 100
qmgr_message_active_limit = 20000
qmgr_message_recipient_limit = 20000
qmgr_message_recipient_minimum = 10
qmqpd_authorized_clients =
qmqpd_error_delay = 1s
qmqpd_timeout = 300s
queue_directory = /var/spool/postfix
queue_file_attribute_count_limit = 100
queue_minfree = 0
queue_run_delay = 1000s
queue_service_name = qmgr
rbl_reply_maps =
readme_directory = /usr/share/doc/packages/postfix/README_FILES
receive_override_options =
recipient_bcc_maps =
recipient_canonical_classes = envelope_recipient, header_recipient
recipient_canonical_maps =
recipient_delimiter =
reject_code = 554
relay_clientcerts =
relay_destination_concurrency_limit = $default_destination_concurrency_limit
relay_destination_recipient_limit = $default_destination_recipient_limit
relay_domains = $mydestination
relay_domains_reject_code = 554
relay_recipient_maps =
relay_transport = relay
relayhost =
relocated_maps = hash:/etc/postfix/relocated
remote_header_rewrite_domain =
require_home_directory = no
resolve_dequoted_address = yes
resolve_null_domain = no
rewrite_service_name = rewrite
sample_directory = /usr/share/doc/packages/postfix/samples
sender_based_routing = no
sender_bcc_maps =
sender_canonical_classes = envelope_sender, header_sender
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
service_throttle_time = 60s
setgid_group = maildrop
show_user_unknown_table_name = yes
showq_service_name = showq
smtp_always_send_ehlo = yes
smtp_bind_address =
smtp_bind_address6 =
smtp_cname_overrides_servername = yes
smtp_connect_timeout = 30s
smtp_connection_cache_destinations =
smtp_connection_cache_on_demand = yes
smtp_connection_cache_reuse_limit = 10
smtp_connection_cache_time_limit = 2s
smtp_data_done_timeout = 600s
smtp_data_init_timeout = 120s
smtp_data_xfer_timeout = 180s
smtp_defer_if_no_mx_address_found = no
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
smtp_destination_recipient_limit = $default_destination_recipient_limit
smtp_discard_ehlo_keyword_address_maps =
smtp_discard_ehlo_keywords =
smtp_enforce_tls = no
smtp_generic_maps =
smtp_helo_name = $myhostname
smtp_helo_timeout = 300s
smtp_host_lookup = dns
smtp_line_length_limit = 990
smtp_mail_timeout = 300s
smtp_mx_address_limit = 0
smtp_mx_session_limit = 2
smtp_never_send_ehlo = no
smtp_pix_workaround_delay_time = 10s
smtp_pix_workaround_threshold_time = 500s
smtp_quit_timeout = 300s
smtp_quote_rfc821_envelope = yes
smtp_randomize_addresses = yes
smtp_rcpt_timeout = 300s
smtp_rset_timeout = 20s
smtp_sasl_auth_enable = no
smtp_sasl_mechanism_filter =
smtp_sasl_password_maps =
smtp_sasl_security_options = noplaintext, noanonymous
smtp_sasl_tls_security_options = $var_smtp_sasl_opts
smtp_send_xforward_command = no
smtp_skip_5xx_greeting = yes
smtp_skip_quit_response = yes
smtp_starttls_timeout = 300s
smtp_tls_CAfile =
smtp_tls_CApath =
smtp_tls_cert_file =
smtp_tls_cipherlist =
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_enforce_peername = yes
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 0
smtp_tls_note_starttls_offer = no
smtp_tls_per_site =
smtp_tls_scert_verifydepth = 5
smtp_tls_session_cache_database =
smtp_tls_session_cache_timeout = 3600s
smtp_use_tls = no
smtp_xforward_timeout = 300s
smtpd_authorized_verp_clients = $authorized_verp_clients
smtpd_authorized_xclient_hosts =
smtpd_authorized_xforward_hosts =
smtpd_banner = WinPostamt
smtpd_client_connection_count_limit = 50
smtpd_client_connection_rate_limit = 0
smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetw orks}
smtpd_client_message_rate_limit = 0
smtpd_client_recipient_rate_limit = 0
smtpd_client_restrictions = reject_rbl_client ix.dnsbl.manitu.net
smtpd_data_restrictions =
smtpd_delay_reject = yes
smtpd_discard_ehlo_keyword_address_maps =
smtpd_discard_ehlo_keywords =
smtpd_end_of_data_restrictions =
smtpd_enforce_tls = no
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions =
smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
smtpd_forbidden_commands = CONNECT GET POST
smtpd_hard_error_limit = 20
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_history_flush_threshold = 100
smtpd_junk_command_limit = 100
smtpd_noop_commands =
smtpd_null_access_lookup_key = <>
smtpd_policy_service_max_idle = 300s
smtpd_policy_service_max_ttl = 1000s
smtpd_policy_service_timeout = 100s
smtpd_proxy_ehlo = $myhostname
smtpd_proxy_filter =
smtpd_proxy_timeout = 100s
smtpd_recipient_limit = 1000
smtpd_recipient_overshoot_limit = 1000
smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_destination, reject_rbl_client ix.dnsbl.manitu.net
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = no
smtpd_restriction_classes =
smtpd_sasl_application_name = smtpd
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks =
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sender_login_maps =
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_soft_error_limit = 10
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
smtpd_tls_CAfile =
smtpd_tls_CApath =
smtpd_tls_ask_ccert = no
smtpd_tls_auth_only = no
smtpd_tls_ccert_verifydepth = 5
smtpd_tls_cert_file =
smtpd_tls_cipherlist =
smtpd_tls_dcert_file =
smtpd_tls_dh1024_param_file =
smtpd_tls_dh512_param_file =
smtpd_tls_dkey_file = $smtpd_tls_dcert_file
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_loglevel = 0
smtpd_tls_received_header = no
smtpd_tls_req_ccert = no
smtpd_tls_session_cache_database =
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_wrappermode = no
smtpd_use_tls = no
soft_bounce = no
stale_lock_time = 500s
strict_7bit_headers = no
strict_8bitmime = no
strict_8bitmime_body = no
strict_mime_encoding_domain = no
strict_rfc821_envelopes = no
sun_mailtool_compatibility = no
swap_bangpath = yes
syslog_facility = mail
syslog_name = postfix
tls_daemon_random_bytes = 32
tls_random_bytes = 32
tls_random_exchange_name = ${config_directory}/prng_exch
tls_random_prng_update_period = 3600s
tls_random_reseed_period = 3600s
tls_random_source = dev:/dev/urandom
trace_service_name = trace
transport_maps = hash:/etc/postfix/transport
transport_retry_time = 60s
trigger_timeout = 10s
undisclosed_recipients_header = To: undisclosed-recipients:;
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 450
unknown_relay_recipient_reject_code = 550
unknown_virtual_alias_reject_code = 550
unknown_virtual_mailbox_reject_code = 550
unverified_recipient_reject_code = 450
unverified_sender_reject_code = 450
verp_delimiter_filter = -=+
virtual_alias_domains = $virtual_alias_maps
virtual_alias_expansion_limit = 1000
virtual_alias_maps = $virtual_maps
virtual_alias_recursion_limit = 1000
virtual_destination_concurrency_limit = $default_destination_concurrency_limit
virtual_destination_recipient_limit = $default_destination_recipient_limit
virtual_gid_maps =
virtual_mailbox_base =
virtual_mailbox_domains = $virtual_mailbox_maps
virtual_mailbox_limit = 51200000
virtual_mailbox_lock = fcntl
virtual_mailbox_maps =
virtual_minimum_uid = 100
virtual_transport = virtual
virtual_uid_maps =

Hat jemand eine Ahnung wie ich die Abarbeitung beschleunigen kann? Meiner Meinung nach liegt die Belastung in den ganzen Nachrichten die der MAILER-DAEMON rausschicken muss. Wie gesagt mailq sagt: "-- 10899 Kbytes in 1839 Requests" und eigentlich alles solche eMails:



BFD231010E56 6794 Thu Jun 19 02:04:50 MAILER-DAEMON
(connect to mxa.xxx.net[206.xx.xx.214]: Connection refused)
ygvcuoccaas@bradxxstinger.com

BA9891012BF4 3054 Sat Jun 21 15:18:15 MAILER-DAEMON
(connect to mail.xxx.com[66.134.27.250]: Connection refused)
bemata1984@LRultrxxasonics.com

B7657100B427 3359 Sat Jun 21 16:52:40 MAILER-DAEMON
(Host or domain name not found. Name service error for name=boisxx.com.hk type=MX: Host not found, try again)
dym@bois.de.hk

BA6B61012BEC 4513 Sat Jun 21 14:05:03 MAILER-DAEMON
(delivery temporarily suspended: connect to mail.axxxforme.com[212.xx.xx.3]: Connection timed out)
c.gayton@axxxforme.com

B9BD61012BFF 4478 Sat Jun 21 14:05:01 MAILER-DAEMON
(delivery temporarily suspended: connect to mail.axxxforme.com[212.xx.xx.3]: Connection timed out)
c.gayton@axxxforme.com

B1C0F1012F86 4715 Sat Jun 21 17:39:15 MAILER-DAEMON
(delivery temporarily suspended: connect to cipafilter.woodxxwardps.net[164.xx.xx.18]: Connection refused)
ansmxxith@woodxxwardps.net

B264A100AF9B 3074 Sat Jun 21 15:41:43 MAILER-DAEMON
(Host or domain name not found. Name service error for name=boulder.xx.au.com type=MX: Host not found, try again)
rodoa@xxboulder.au.com

B04801012F94 4762 Sat Jun 21 17:44:50 MAILER-DAEMON
(connect to mx1.innossserver.com[80.xx.xx.6]: server refused to talk to me: 451 too fast reconnects)
carr@sssigro.com

BC714100C413 4477 Sat Jun 21 08:12:52 MAILER-DAEMON
(delivery temporarily suspended: connect to webskkkinet.nl[217.xx.xx.245]: Connection timed out)
helpdesk@weeebskinet.nl

BA2021012BE1 5008 Sat Jun 21 15:14:32 MAILER-DAEMON
(connect to ns1.ceeereagro.net[200.xx.xx.34]: Connection timed out)
cHassai-prcereagrocereagro@cccereagro.de

B0E28100B4C4 3094 Sat Jun 21 11:40:59 MAILER-DAEMON
(host indignaaant.cnchost.com[207.xx.xx.190] said: 452 <pocketec47@fairfaxxxscitech.com>: Recipient address rejected: Domain not active [0N5Q8V1KCJ00] (in reply to RCPT TO command))
pocketec47@fairfaxxxscitech.com

B91C9100B236 4645 Sat Jun 21 17:59:39 MAILER-DAEMON
(connect to wanadoo.dk[212.xx.xx.15]: Connection timed out)
miss@waaanadoo.dk

B75691012F7E 4617 Sat Jun 21 17:59:43 MAILER-DAEMON
(connect to wanadoooo.dk[212.xx.xx.15]: Connection timed out)
miss@wanadoooo.dk

Gruß und danke für jede Hilfe!!!!

bla!zilla
21.06.08, 17:32
Kann es sein das deine Kiste da Spammails verschickt??

abalorio
21.06.08, 19:57
Nein, es werden ständig eMails an Adressen geschickt die es auf meinem Server nicht gibt. Die bekomme natürlich alle eine Nachricht vom Daemon. Eine eMail geht z.B. an "test@domaind.de, dfhajdfjad@domain.de, dfasdjhfad@domain.de, dfadkjhfkadhfjkad@domain.de". Die Adresse test2@domain.de gibt es die anderen nicht.

drcux
21.06.08, 20:05
Dann würde aber Postfix schon die Annahme verweigern. Ich denke auch, du versendest SPAM...

Roger Wilco
21.06.08, 20:11
Nein, es werden ständig eMails an Adressen geschickt die es auf meinem Server nicht gibt. Die bekomme natürlich alle eine Nachricht vom Daemon.
Solche E-Mails weist man noch während des SMTP-Dialogs ab. Ansonsten generierst du nur Backscatter, was genauso schlimm ist wie UCE/UBE.

abalorio
21.06.08, 21:47
Offensichtlich bei mir nicht. Er scheint selbst eMails zu bearbeiten, die an Adressen geschickt werden, die es nicht gibt. Siehe:



May 25 18:21:33 ns3 postfix/qmgr[3716]: 84473100B28F:
to=<creasingreestablish@domain.de>, relay=none, delay=1645, status=deferred
(delivery temporarily suspended: lost connection with 127.0.0.1[127.0.0.1]
while sending end of data -- message may be sent more than once)

Diese Adresse "creasingreestablish@domain.de" gibt es auch nicht auf dem Server.

403
22.06.08, 01:28
lol, sicher die kann ja jeder eingeben..., also lies mal nach dass unresolveable domains
ausgestellt wird!

abalorio
22.06.08, 09:51
lol, sicher die kann ja jeder eingeben..., also lies mal nach dass unresolveable domains
ausgestellt wird!

*lol*, und nun?? Wenn ich selbst eine eMail an "gibtesnicht@domain.de" sende, bekomme ich die natürlich vom Maildaemon eine Nachricht zurück. Trotzdem hab ich in der Queue Mails ohne Ende. Siehe die Ausgabe von mailq:


BA6B61012BEC 4513 Sat Jun 21 14:05:03 MAILER-DAEMON
(delivery temporarily suspended: connect to mail.xxx.com[212.xx.xx.3]: Connection timed out)
c.gayton@axxxforme.com

B1394101262A 4532 Thu Jun 19 20:55:40 MAILER-DAEMON
(delivery temporarily suspended: connect to mail.xxx.com[212.xx.xx.3]: Connection timed out)
c.gayton@axxxforme.com

B47ED10107C2 4475 Sat Jun 21 06:30:58 MAILER-DAEMON
(delivery temporarily suspended: connect to uk.xx.com[62.xx.xx.146]: Connection timed out)
DieterWerner@uk.xx.com

BC667100AF78 3355 Sat Jun 21 18:40:45 MAILER-DAEMON
(connect to h1.xx.net[65.xx.xx.34]: Connection timed out)
hiroyuki@xxx.com

B0E28100B4C4 3094 Sat Jun 21 11:40:59 MAILER-DAEMON
(host safeguard.cnxxost.com[207.xx.xx.195] said: 452 <pocketec47@fairfaxxxscitech.com>: Recipient address rejected: Domain not active [0R5S24N57300] (in reply to RCPT TO command))
pocketec47@fairfaxxxscitech.com

B2A8C100AC31 3324 Sat Jun 21 21:07:30 MAILER-DAEMON
(connect to smtp2.nesteoil.com[132.xx.xx.10]: Connection timed out)
murgatroyd@nesxxte.com

BDC7D1012C0A 7419 Fri Jun 20 18:07:03 MAILER-DAEMON
(connect to relay2.xx.com[144.xx.xx.36]: Connection timed out)
wgelliott@myxxxheartonline.de

-- 9890 Kbytes in 1689 Requests.


Hab nun noch SPF (http://de.wikipedia.org/wiki/Sender_Policy_Framework) in Postfix implementiert. Scheint mir eine gute Möglichkeit zu sein den Server zu entlasten und unerwünschten Mist fernzuhalten.

bla!zilla
22.06.08, 11:01
Falscher Weg. Dein Server darf gar nicht erst Post annehmen, die nicht für ihn bestimmt ist. Deine Konfig ist also schlicht und ergreifend falsch. SPF ist da eher Kanonen auf Spatzen. Lies mal die Postfix Doku und schau dir das mal an:



smtpd_sender_restrictions = hash:/etc/postfix/access, reject_unknown_sender_domain
smtpd_client_restrictions = reject_rbl_client ix.dnsbl.manitu.net
smtpd_helo_required = yes
strict_rfc821_envelopes = no
smtpd_recipient_restrictions = permit_mynetworks reject_unauth_destination check_policy_service

Roger Wilco
22.06.08, 11:08
Falscher Weg. Dein Server darf gar nicht erst Post annehmen, die nicht für ihn bestimmt ist.
Naja, in diesem konkreten Fall war das Verhalten des MTA schon korrekt:
User schickt von seinem Account (sagen wir mal user@example.com) eine E-Mail mit einem normalen MUA an ein nicht existierendes Konto unter der gleichen Domain (sagen wir mal nonexistant@example.com). Dann generiert der MTA natürlich eine DSN an den Absender user@example.com. Bei E-Mails von fremden Benutzern an ein nicht existierendes Konto sollte (muss...) die Ablehnung im SMTP-Dialog erfolgen und von seinem MTA sollte (darf...) keine DSN generiert werden.

Grundsätzlich wäre die Lektüre von http://www.postfix.org/ADDRESS_VERIFICATION_README.html#recipient aber sicherlich nicht verkehrt für den OP.

bla!zilla
22.06.08, 11:24
Okay, in dem Fall ist das sicherlich korrekt. Müsste man mal mit dem Nutzer sprechen.

abalorio
22.06.08, 11:42
Falscher Weg. Dein Server darf gar nicht erst Post annehmen, die nicht für ihn bestimmt ist. Deine Konfig ist also schlicht und ergreifend falsch. SPF ist da eher Kanonen auf Spatzen. Lies mal die Postfix Doku und schau dir das mal an:



smtpd_sender_restrictions = hash:/etc/postfix/access, reject_unknown_sender_domain
smtpd_client_restrictions = reject_rbl_client ix.dnsbl.manitu.net
smtpd_helo_required = yes
strict_rfc821_envelopes = no
smtpd_recipient_restrictions = permit_mynetworks reject_unauth_destination check_policy_service


Thx, schau ich mir noch mal genau an. Wobei ich im Moment alle Angaben als korrekt ansehen würde. Auch laut Doku! Das einzige was ich jetzt bei mir noch eingestellt habe ist:


smtpd_helo_required = yes
Scheint mir sehr sinnvoll. Hatte ich vorher wohl übersehen.

abalorio
23.06.08, 16:13
Ich versteh das nicht Leute. Es landen noch immer eMails in der Queue, die auf dem Server gar nicht definiert sind. Eigentlich müsste er sie vorher abweisen. Weiß langsam echt nicht mehr weiter. Hat jemand von euch eine Idee?

Hier noch mal meine aktuelle Config (Ausgabe von postconf):


2bounce_notice_recipient = postmaster
access_map_reject_code = 554
address_verify_default_transport = $default_transport
address_verify_local_transport = $local_transport
address_verify_map =
address_verify_negative_cache = yes
address_verify_negative_expire_time = 3d
address_verify_negative_refresh_time = 3h
address_verify_poll_count = 3
address_verify_poll_delay = 3s
address_verify_positive_expire_time = 31d
address_verify_positive_refresh_time = 7d
address_verify_relay_transport = $relay_transport
address_verify_relayhost = $relayhost
address_verify_sender = postmaster
address_verify_service_name = verify
address_verify_transport_maps = $transport_maps
address_verify_virtual_transport = $virtual_transport
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_mail_to_commands = alias, forward
allow_mail_to_files = alias, forward
allow_min_user = no
allow_percent_hack = yes
allow_untrusted_routing = no
alternate_config_directories =
always_bcc =
anvil_rate_time_unit = 60s
anvil_status_update_time = 600s
append_at_myorigin = yes
append_dot_mydomain = yes
application_event_drain_time = 100s
authorized_flush_users = static:anyone
authorized_mailq_users = static:anyone
authorized_submit_users = static:anyone
backwards_bounce_logfile_compatibility = yes
berkeley_db_create_buffer_size = 16777216
berkeley_db_read_buffer_size = 131072
best_mx_transport =
biff = yes
body_checks =
body_checks_size_limit = 51200
bounce_notice_recipient = postmaster
bounce_queue_lifetime = 5d
bounce_service_name = bounce
bounce_size_limit = 50000
broken_sasl_auth_clients = no
canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
canonical_maps = hash:/etc/postfix/canonical
cleanup_service_name = cleanup
command_directory = /usr/sbin
command_execution_directory =
command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ
command_time_limit = 1000s
config_directory = /etc/postfix
connection_cache_service = scache
connection_cache_status_update_time = 600s
connection_cache_ttl_limit = 2s
content_filter =
daemon_directory = /usr/lib/postfix
daemon_timeout = 18000s
debug_peer_level = 2
debug_peer_list = domain.de, 127.0.0.1, 82.xx.xx.xx
default_database_type = hash
default_delivery_slot_cost = 5
default_delivery_slot_discount = 50
default_delivery_slot_loan = 3
default_destination_concurrency_limit = 20
default_destination_recipient_limit = 50
default_extra_recipient_limit = 1000
default_minimum_delivery_slots = 3
default_privs = nobody
default_process_limit = 100
default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
default_recipient_limit = 10000
default_transport = smtp
default_verp_delimiters = +=
defer_code = 450
defer_service_name = defer
defer_transports =
delay_notice_recipient = postmaster
delay_warning_time = 0h
deliver_lock_attempts = 20
deliver_lock_delay = 1s
disable_dns_lookups = no
disable_mime_input_processing = no
disable_mime_output_conversion = no
disable_verp_bounces = no
disable_vrfy_command = no
dont_remove = 0
double_bounce_sender = double-bounce
duplicate_filter_limit = 1000
empty_address_recipient = MAILER-DAEMON
enable_original_recipient = yes
error_notice_recipient = postmaster
error_service_name = error
execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ
expand_owner_alias = no
export_environment = TZ MAIL_CONFIG
fallback_relay =
fallback_transport =
fast_flush_domains = $relay_domains
fast_flush_purge_time = 7d
fast_flush_refresh_time = 12h
fault_injection_code = 0
flush_service_name = flush
fork_attempts = 5
fork_delay = 1s
forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX YZ
forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
hash_queue_depth = 1
hash_queue_names = deferred, defer
header_address_token_limit = 10240
header_checks = regexp:/etc/postfix/header_checks
header_size_limit = 102400
helpful_warnings = yes
home_mailbox = Maildir/
hopcount_limit = 50
html_directory = no
ignore_mx_lookup_error = no
import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY
in_flow_delay = 1s
inet_interfaces = all
inet_protocols = ipv4
initial_destination_concurrency = 5
invalid_hostname_reject_code = 501
ipc_idle = 100s
ipc_timeout = 3600s
ipc_ttl = 1000s
line_length_limit = 2048
lmtp_cache_connection = yes
lmtp_connect_timeout = 0s
lmtp_data_done_timeout = 600s
lmtp_data_init_timeout = 120s
lmtp_data_xfer_timeout = 180s
lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
lmtp_destination_recipient_limit = $default_destination_recipient_limit
lmtp_lhlo_timeout = 300s
lmtp_mail_timeout = 300s
lmtp_quit_timeout = 300s
lmtp_rcpt_timeout = 300s
lmtp_rset_timeout = 20s
lmtp_sasl_auth_enable = no
lmtp_sasl_password_maps =
lmtp_sasl_security_options = noplaintext, noanonymous
lmtp_send_xforward_command = no
lmtp_skip_quit_response = no
lmtp_tcp_port = 24
lmtp_xforward_timeout = 300s
local_command_shell =
local_destination_concurrency_limit = 4
local_destination_recipient_limit = 1
local_header_rewrite_clients = permit_inet_interfaces
local_recipient_maps =
local_transport = local:$myhostname
luser_relay =
mail_name = Postfix
mail_owner = postfix
mail_release_date = 20060221
mail_spool_directory = /var/mail
mail_version = 2.2.9
mailbox_command = /usr/bin/procmail -a $EXTENSION DEFAULT=$HOME/Maildir/ MAILDIR=$HOME/Maildir
mailbox_command_maps =
mailbox_delivery_lock = fcntl, dotlock
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains =
maps_rbl_reject_code = 554
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains = meinedomain.de, meinedomain1.de, meinedomain2.de, meinedomain3.de, meinedomain4.de
masquerade_exceptions = root
max_idle = 100s
max_use = 100
maximal_backoff_time = 4000s
maximal_queue_lifetime = 5d
message_size_limit = 104857600
mime_boundary_length_limit = 2048
mime_header_checks = $header_checks
mime_nesting_limit = 100
minimal_backoff_time = 120s
multi_recipient_bounce_reject_code = 550
mydestination = $myhostname, localhost.$mydomain, meinedomain.de, meinedomain1.de, meinedomain2.de, meinedomain3.de
mydomain = domain.de
myhostname = ns.domain.de
mynetworks = 82.xx.xx.xx, 127.0.0.0/8
mynetworks_style = subnet
myorigin = $mydomain
nested_header_checks = $header_checks
newaliases_path = /usr/bin/newaliases
non_fqdn_reject_code = 504
notify_classes = resource, software
owner_request_special = yes
parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,perm it_mx_backup_networks,qmqpd_authorized_clients,rel ay_domains,smtpd_access_maps
permit_mx_backup_networks =
pickup_service_name = pickup
prepend_delivered_header = command, file, forward
process_id_directory = pid
propagate_unmatched_extensions = canonical, virtual
proxy_interfaces =
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
qmgr_clog_warn_time = 300s
qmgr_fudge_factor = 100
qmgr_message_active_limit = 20000
qmgr_message_recipient_limit = 20000
qmgr_message_recipient_minimum = 10
qmqpd_authorized_clients =
qmqpd_error_delay = 1s
qmqpd_timeout = 300s
queue_directory = /var/spool/postfix
queue_file_attribute_count_limit = 100
queue_minfree = 0
queue_run_delay = 1000s
queue_service_name = qmgr
rbl_reply_maps =
readme_directory = /usr/share/doc/packages/postfix/README_FILES
receive_override_options =
recipient_bcc_maps =
recipient_canonical_classes = envelope_recipient, header_recipient
recipient_canonical_maps =
recipient_delimiter =
reject_code = 554
relay_clientcerts =
relay_destination_concurrency_limit = $default_destination_concurrency_limit
relay_destination_recipient_limit = $default_destination_recipient_limit
relay_domains = $mydestination
relay_domains_reject_code = 554
relay_recipient_maps =
relay_transport = relay
relayhost =
relocated_maps = hash:/etc/postfix/relocated
remote_header_rewrite_domain =
require_home_directory = no
resolve_dequoted_address = yes
resolve_null_domain = no
rewrite_service_name = rewrite
sample_directory = /usr/share/doc/packages/postfix/samples
sender_based_routing = no
sender_bcc_maps =
sender_canonical_classes = envelope_sender, header_sender
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
service_throttle_time = 60s
setgid_group = maildrop
show_user_unknown_table_name = yes
showq_service_name = showq
smtp_always_send_ehlo = yes
smtp_bind_address =
smtp_bind_address6 =
smtp_cname_overrides_servername = yes
smtp_connect_timeout = 30s
smtp_connection_cache_destinations =
smtp_connection_cache_on_demand = yes
smtp_connection_cache_reuse_limit = 10
smtp_connection_cache_time_limit = 2s
smtp_data_done_timeout = 600s
smtp_data_init_timeout = 120s
smtp_data_xfer_timeout = 180s
smtp_defer_if_no_mx_address_found = no
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
smtp_destination_recipient_limit = $default_destination_recipient_limit
smtp_discard_ehlo_keyword_address_maps =
smtp_discard_ehlo_keywords =
smtp_enforce_tls = no
smtp_generic_maps =
smtp_helo_name = $myhostname
smtp_helo_timeout = 300s
smtp_host_lookup = dns
smtp_line_length_limit = 990
smtp_mail_timeout = 300s
smtp_mx_address_limit = 0
smtp_mx_session_limit = 2
smtp_never_send_ehlo = no
smtp_pix_workaround_delay_time = 10s
smtp_pix_workaround_threshold_time = 500s
smtp_quit_timeout = 300s
smtp_quote_rfc821_envelope = yes
smtp_randomize_addresses = yes
smtp_rcpt_timeout = 300s
smtp_rset_timeout = 20s
smtp_sasl_auth_enable = no
smtp_sasl_mechanism_filter =
smtp_sasl_password_maps =
smtp_sasl_security_options = noplaintext, noanonymous
smtp_sasl_tls_security_options = $var_smtp_sasl_opts
smtp_send_xforward_command = no
smtp_skip_5xx_greeting = yes
smtp_skip_quit_response = yes
smtp_starttls_timeout = 300s
smtp_tls_CAfile =
smtp_tls_CApath =
smtp_tls_cert_file =
smtp_tls_cipherlist =
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_enforce_peername = yes
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 0
smtp_tls_note_starttls_offer = no
smtp_tls_per_site =
smtp_tls_scert_verifydepth = 5
smtp_tls_session_cache_database =
smtp_tls_session_cache_timeout = 3600s
smtp_use_tls = no
smtp_xforward_timeout = 300s
smtpd_authorized_verp_clients = $authorized_verp_clients
smtpd_authorized_xclient_hosts =
smtpd_authorized_xforward_hosts =
smtpd_banner = WinPostamt
smtpd_client_connection_count_limit = 50
smtpd_client_connection_rate_limit = 0
smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetw orks}
smtpd_client_message_rate_limit = 0
smtpd_client_recipient_rate_limit = 0
smtpd_client_restrictions = reject_rbl_client ix.dnsbl.manitu.net
smtpd_data_restrictions =
smtpd_delay_reject = yes
smtpd_discard_ehlo_keyword_address_maps =
smtpd_discard_ehlo_keywords =
smtpd_end_of_data_restrictions =
smtpd_enforce_tls = no
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions =
smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
smtpd_forbidden_commands = CONNECT GET POST
smtpd_hard_error_limit = 20
smtpd_helo_required = yes
smtpd_helo_restrictions =
smtpd_history_flush_threshold = 100
smtpd_junk_command_limit = 100
smtpd_noop_commands =
smtpd_null_access_lookup_key = <>
smtpd_policy_service_max_idle = 300s
smtpd_policy_service_max_ttl = 1000s
smtpd_policy_service_timeout = 100s
smtpd_proxy_ehlo = $myhostname
smtpd_proxy_filter =
smtpd_proxy_timeout = 100s
smtpd_recipient_limit = 1000
smtpd_recipient_overshoot_limit = 1000
smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_destination, reject_unknown_sender_domain, reject_rbl_client ix.dnsbl.manitu.net
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = no
smtpd_restriction_classes =
smtpd_sasl_application_name = smtpd
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks =
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sender_login_maps =
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_soft_error_limit = 10
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
smtpd_tls_CAfile =
smtpd_tls_CApath =
smtpd_tls_ask_ccert = no
smtpd_tls_auth_only = no
smtpd_tls_ccert_verifydepth = 5
smtpd_tls_cert_file =
smtpd_tls_cipherlist =
smtpd_tls_dcert_file =
smtpd_tls_dh1024_param_file =
smtpd_tls_dh512_param_file =
smtpd_tls_dkey_file = $smtpd_tls_dcert_file
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_loglevel = 0
smtpd_tls_received_header = no
smtpd_tls_req_ccert = no
smtpd_tls_session_cache_database =
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_wrappermode = no
smtpd_use_tls = no
soft_bounce = no
stale_lock_time = 500s
strict_7bit_headers = no
strict_8bitmime = no
strict_8bitmime_body = no
strict_mime_encoding_domain = no
strict_rfc821_envelopes = no
sun_mailtool_compatibility = no
swap_bangpath = yes
syslog_facility = mail
syslog_name = postfix
tls_daemon_random_bytes = 32
tls_random_bytes = 32
tls_random_exchange_name = ${config_directory}/prng_exch
tls_random_prng_update_period = 3600s
tls_random_reseed_period = 3600s
tls_random_source = dev:/dev/urandom
trace_service_name = trace
transport_maps = hash:/etc/postfix/transport
transport_retry_time = 60s
trigger_timeout = 10s
undisclosed_recipients_header = To: undisclosed-recipients:;
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 450
unknown_relay_recipient_reject_code = 550
unknown_virtual_alias_reject_code = 550
unknown_virtual_mailbox_reject_code = 550
unverified_recipient_reject_code = 450
unverified_sender_reject_code = 450
verp_delimiter_filter = -=+
virtual_alias_domains = $virtual_alias_maps
virtual_alias_expansion_limit = 1000
virtual_alias_maps = $virtual_maps
virtual_alias_recursion_limit = 1000
virtual_destination_concurrency_limit = $default_destination_concurrency_limit
virtual_destination_recipient_limit = $default_destination_recipient_limit
virtual_gid_maps =
virtual_mailbox_base =
virtual_mailbox_domains = $virtual_mailbox_maps
virtual_mailbox_limit = 51200000
virtual_mailbox_lock = fcntl
virtual_mailbox_maps =
virtual_minimum_uid = 100
virtual_transport = virtual
virtual_uid_maps =


Meine einzelnen Postfächer hab ich in /etc/postfix/virtual gespeichert mit folgender Syntax:


7@meinedomain.de user
6@meinedomain.de user
5@meinedomain.de user
4@meinedomain.de user
3@meinedomain.de user
2@meinedomain.de user
1@meinedomain.de user@meine-gmx-domain.de

Oder stimmt meine master.conf nicht:


smtp inet n - n - - smtpd
-o content_filter=amavis:[127.0.0.1]:10024
-o receive_override_options=no_address_mappings
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
-o fallback_relay=
showq unix n - n - - showq
error unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
127.0.0.1:10025 inet n - n - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_delay_reject=no
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,rej ect
-o smtpd_data_restrictions=reject_unauth_pipelining
-o smtpd_end_of_data_restrictions=
-o mynetworks=127.0.0.0/8
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o smtpd_client_connection_count_limit=0
-o smtpd_client_connection_rate_limit=0
-o receive_override_options=no_unknown_recipient_chec ks
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
cyrus unix - n n - - pipe
user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
procmail unix - n n - - pipe
flags=R user=nobody argv=/usr/bin/procmail -t -m /etc/procmailrc ${sender} ${recipient}
spamd unix - n n - - pipe
user=spam argv=/usr/bin/spamc -f
-e /usr/sbin/sendmail -oi -f $(sender) ${recipient}
amavis unix - - n - 10 lmtp
-o smtp_data_done_timeout=600
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
-o max_use=20
policy unix - n n - - spawn
user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-spf-perl

Sieht irgendjemand etwas was das logisch erklären würde? Ich seh nämlich nichts (hab wohl schon zu lange drauf geschaut)!!! Bin über jede Hilfe DANKBAR!!!!!!

abalorio
24.06.08, 06:50
Soo, ich hab jetzt auch noch


relay_recipient_maps = hash:/etc/postfix/relay_recipients

in main.conf aufgenommen und die virtual mit cp zu "relay_recipients" kopiert und anschließend mit postmap die db erzeugt. Er scheint trotzdem Mails erstmal zu bearbeiten, sie kommen in die Queue und dann werden Sie irgendwann als unzustellbar abgelehnt, da User unknow obwohl das schon beim ersten Kontakt passieren sollte.

balduin222
24.06.08, 09:02
Was steht denn in
/etc/postfix/relay_recipients drin? Ich hab das mit virtual_alias_maps gemacht. Als Beispiel mal:


user1@domain.de user1@domain.local

Ich hab hier insgesamt 4 verschieden Domains eingerichtet auf dem Server, pro Tag werden allein 25000 rejectet, wenn die alle durchkommen würden, wäre meine Mailqueue auch voll.

abalorio
24.06.08, 11:35
Was steht denn in
/etc/postfix/relay_recipients drin? Ich hab das mit virtual_alias_maps gemacht. Als Beispiel mal:


user1@domain.de user1@domain.local

Ich hab hier insgesamt 4 verschieden Domains eingerichtet auf dem Server, pro Tag werden allein 25000 rejectet, wenn die alle durchkommen würden, wäre meine Mailqueue auch voll.

Jip, genau das passiert bei mir anscheinend. Der nimmt alle an, verarbeitet die und schickt dann erst die Info raus: "MAILER-DAEMON@domain.de <jocularity@domain.de>: unknown user:" zum Beispiel.

"relay_recipients" ist eine Kopie von "virtual" und somit steht dort folgendes drin (hier mein eine Beispielzeile):


info@domain.de sysuser

So hatte ich es in einer Beschreibung gefunden bzw. wurde gesagt, dass dies so auch funktioniert und es ist ja einfacher, wenn man immer die virtual einfach kopiert, anschließend "postmap relay_recipients" und fertig.

Wo ist der Unterschied zu "virtual_alias_maps"????

abalorio
27.06.08, 08:55
Hat keiner eine Idee was falsch sein könnte?