Loading ...
Sorry, an error occurred while loading the content.

232246Re: virtual transport overwrites recipient

Expand Messages
  • mouss
    Jan 2, 2008
      Ondrej Pachner wrote:
      > hi,
      >
      > On Wed, 2 Jan 2008, mouss wrote:
      >> Your first mission for this year would be to abandon giving bounce
      >> messages more importance than they deserve. the real infos are in
      >> postfix _logs_.
      >>
      >> make sure address rewrite is not disabled after the filter. you need
      >> to show: 'postconf -n' output and master.cf. feel free to hide private
      >> infos, but this coherently.
      >
      > postconf -n:
      >
      > alias_maps = hash:/etc/postfix/aliases
      > append_dot_mydomain = no
      > biff = no
      > broken_sasl_auth_clients = yes
      > config_directory = /etc/postfix
      > enable_original_recipient = yes
      > inet_interfaces = all
      > mailbox_command = procmail -a "$EXTENSION"
      > mailbox_size_limit = 0
      > message_size_limit = 20480000
      > mydestination = myserver.domain.tld, localhost.domain.tld, localhost
      > mydomain = domain.tld
      > myhostname = smtp.domain.tld
      > mynetworks = /etc/postfix/mynetworks
      > myorigin = domain.tld
      > recipient_delimiter = +
      > relay_domains = proxy:mysql:/etc/postfix/mysql_relay_domains_maps.cf
      > relayhost = smtp_tls_session_cache_database =
      > btree:${queue_directory}/smtp_scache
      > smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
      > smtpd_data_restrictions = reject_unauth_pipelining
      > smtpd_hard_error_limit = 10
      > smtpd_helo_required = yes
      > smtpd_recipient_restrictions = permit_mynetworks,
      > permit_sasl_authenticated, reject_unauth_destination,
      > reject_unlisted_recipient, check_recipient_access
      > hash:/etc/postfix/reject_over_quota, check_sender_access
      > hash:/etc/postfix/rbl_sender_exceptions, check_client_access
      > hash:/etc/postfix/rbl_client_exceptions, check_recipient_access
      > hash:/etc/postfix/rbl_recipient_exceptions, reject_rbl_client
      > sbl-xbl.spamhaus.org
      > smtpd_sasl_auth_enable = yes
      > smtpd_sasl_authenticated_header = yes
      > smtpd_sasl_local_domain = $myhostname
      > smtpd_sasl_security_options = noanonymous
      > smtpd_sender_restrictions = check_sender_access
      > hash:/etc/postfix/sender_access, reject_non_fqdn_sender,
      > reject_unknown_sender_domain
      > smtpd_soft_error_limit = 8
      > smtpd_tls_CAfile = /etc/postfix/ssl/cacert.domain.tld.pem
      > smtpd_tls_cert_file = /etc/postfix/ssl/cert.smtp.domain.tld.pem
      > smtpd_tls_key_file = /etc/postfix/ssl/privkey.smtp.domain.tld.pem
      > smtpd_tls_received_header = yes
      > smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
      > smtpd_use_tls = yes
      > transport_maps = hash:/etc/postfix/transport
      > virtual_alias_maps =
      > proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf,
      > hash:/etc/postfix/virtual
      > virtual_gid_maps = static:6060
      > virtual_mailbox_base = /var/vmail
      > virtual_mailbox_domains =
      > proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
      > virtual_mailbox_maps =
      > proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
      > virtual_minimum_uid = 6060
      > virtual_transport = maildrop
      > virtual_uid_maps = static:6060
      >
      > master.cf:
      >
      > #
      > # Postfix master process configuration file. For details on the format
      > # of the file, see the master(5) manual page (command: "man 5 master").
      > #
      > #
      > ==========================================================================
      > # service type private unpriv chroot wakeup maxproc command + args
      > # (yes) (yes) (yes) (never) (100)
      > #
      > ==========================================================================
      > smtp inet n - - - - smtpd
      > -o smtpd_use_tls=no
      > -o smtpd_sasl_auth_enable=no
      > -o content_filter=smtp-amavis:[127.0.0.1]:10024
      > # -o receive_override_options=no_address_mappings
      > # ^^^^^^^^^^^^^^^^ with this ine uncommented postfix doesn't deliver
      > # mail into catch-all box at all
      >
      > # If they want to relay, make them use port 587 (submission) or port 465
      > (smtps)
      > # If using submission port, configure client to use CRAM-MD5
      > submission inet n - - - - smtpd
      > -o smtpd_use_tls=no
      > -o smtpd_sasl_auth_enable=yes
      > -o smtpd_client_restrictions=permit_sasl_authenticated,reject
      > -o content_filter=smtp-amavis:[127.0.0.1]:10026
      > # -o receive_override_options=no_address_mappings # Outlook and OE (and
      > many others) expect smtpd_tls_wrappermode,
      > # so have them submit here (port 465):
      > smtps inet n - - - - smtpd
      > -o smtpd_enforce_tls=yes
      > -o smtpd_tls_wrappermode=yes
      > -o smtpd_sasl_auth_enable=yes
      > -o smtpd_client_restrictions=permit_sasl_authenticated,reject
      > -o content_filter=smtp-amavis:[127.0.0.1]:10026
      > # -o receive_override_options=no_address_mappings
      > # We will use port 4650 for clients that use STARTTLS:
      > 4650 inet n - - - - smtpd
      > -o smtpd_enforce_tls=yes
      > -o smtpd_sasl_auth_enable=yes
      > -o smtpd_client_restrictions=permit_sasl_authenticated,reject
      > -o content_filter=smtp-amavis:[127.0.0.1]:10026
      > # -o receive_override_options=no_address_mappings
      > #628 inet n - - - - qmqpd
      > pickup fifo n - - 60 1 pickup
      > -o content_filter=
      > cleanup unix n - - - 0 cleanup
      > amavis-cleanup unix n - - - 0 cleanup
      > -o virtual_alias_maps=

      This is it. The after the filter smtpd have no virtual_alias_maps.
      don't play games with *_maps when filtering. you should not need any
      setting like this.

      > qmgr fifo n - n 300 1 qmgr
      > #qmgr fifo n - - 300 1 oqmgr
      > tlsmgr unix - - - 1000? 1 tlsmgr
      > rewrite unix - - - - - trivial-rewrite
      > bounce unix - - - - 0 bounce
      > defer unix - - - - 0 bounce
      > trace unix - - - - 0 bounce
      > verify unix - - - - 1 verify
      > flush unix n - - 1000? 0 flush
      > proxymap unix - - n - - proxymap
      > smtp unix - - - - - smtp
      > # When relaying mail as backup MX, disable fallback_relay to avoid MX loops
      > relay unix - - - - - smtp
      > -o fallback_relay=
      > # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
      > showq unix n - - - - showq
      > error unix - - - - - error
      > discard unix - - - - - discard
      > local unix - n n - - local
      > virtual unix - n n - - virtual
      > lmtp unix - - - - - lmtp
      > anvil unix - - - - 1 anvil
      > scache unix - - - - 1 scache
      > #
      > # ====================================================================
      > # Interfaces to non-Postfix software. Be sure to examine the manual
      > # pages of the non-Postfix software to find out what options it wants.
      > #
      > # Many of the following services use the Postfix pipe(8) delivery
      > # agent. See the pipe(8) man page for information about ${recipient}
      > # and other message envelope options.
      > # ====================================================================
      > #
      > # maildrop. See the Postfix MAILDROP_README file for details.
      > # Also specify in main.cf: maildrop_destination_recipient_limit=1
      > #
      > #maildrop unix - n n - - pipe
      > # flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
      > maildrop unix - n n - - pipe
      > flags=DRhu user=vmail:daemon argv=/usr/bin/maildrop -w 90
      > -d ${user}@${nexthop} ${extension} ${recipient} ${user} ${nexthop}
      > vacation unix - n n - - pipe
      > flags=Rq user=vacation argv=/var/spool/vacation/vacation.pl
      > -f ${sender} -- ${recipient}
      > #
      > # See the Postfix UUCP_README file for configuration details.
      > #
      > uucp unix - n n - - pipe
      > flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
      > ($recipient)
      > #
      > # Other external delivery methods.
      > #
      > ifmail unix - n n - - pipe
      > flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
      > bsmtp unix - n n - - pipe
      > flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender
      > $recipient
      > scalemail-backend unix - n n - 2 pipe
      > flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
      > ${nexthop} ${user} ${extension}
      > mailman unix - n n - - pipe
      > flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
      > ${nexthop} ${user}
      > smtp-amavis unix - - n - 6 smtp
      > -o smtp_data_done_timeout=1200
      > -o smtp_send_xforward_command=yes
      > -o disable_dns_lookups=yes
      > -o
      > receive_override_options=no_header_body_checks,no_unknown_recipient_checks
      > 127.0.0.1:10025 inet n - n - - smtpd
      > -o cleanup_service_name=amavis-cleanup
      > -o content_filter=
      > -o local_recipient_maps=

      nor do you need this.

      > -o relay_recipient_maps=

      nor this.

      > -o smtpd_restriction_classes=
      > -o smtpd_delay_reject=no
      > -o smtpd_client_restrictions=permit_mynetworks,reject
      > -o smtpd_helo_restrictions=
      > -o smtpd_sender_restrictions=
      > -o smtpd_recipient_restrictions=permit_mynetworks,reject
      > -o smtpd_data_restrictions=reject_unauth_pipelining
      > -o smtpd_end_of_data_restrictions=
      > -o mynetworks=127.0.0.0/8
      > -o smtpd_error_sleep_time=0
      > -o smtpd_soft_error_limit=1001
      > -o smtpd_hard_error_limit=1000
      > -o smtpd_client_connection_count_limit=0
      > -o smtpd_client_connection_rate_limit=0
      > -o
      > receive_override_options=no_header_body_checks,no_unknown_recipient_checks
      >
      >
      > log output:
      >
      > with -o receive_override_options=no_address_mappings (as shown upper)
      >
      > Jan 2 14:16:51 smtp amavis[12465]: (12465-07) Passed CLEAN, MYNETS
      > LOCAL [X.Y.Z.W] [X.Y.W.Q] <some@...> -> <prdprd@...>,
      > Message-ID: <Pine.LNX.4.64.0801021405310.5021@localhost>, mail_id:
      > sR4aAPT26nQS, Hits: -2.459, queued_as: 2FE9F5417D, 1198 ms
      > Jan 2 14:16:51 smtp postfix/smtp[12968]: EBB0B5412C:
      > to=<prdprd@...>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.3,
      > delays=0.09/0/0/1.2, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=12465-07,
      > from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 2FE9F5417D)
      > Jan 2 14:16:51 smtp postfix/pipe[13000]: 2FE9F5417D:
      > to=<prdprd@...>, relay=maildrop, delay=0.07,
      > delays=0.05/0.01/0/0.01, dsn=5.1.1, status=bounced (user unknown.
      > Command output: Invalid user specified. )
      >
      > with -o receiv... commented:
      >
      > Jan 2 13:26:31 smtp postfix/smtp[3135]: 4E4B654888:
      > to=<pikacu@...>, orig_to=<prdprd@...>,
      > relay=127.0.0.1[127.0.0.1]:10024, delay=1.4, delays=0.11/0/0/1.2,
      > dsn=2.6.0, status=sent (250 2.6.0 Ok, id=02776-06, from
      > MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8EBC454A3D)
      >
      > BUT doesn't incude X-Original-To header :-(
    • Show all 11 messages in this topic