• Willkommen im Linux Club - dem deutschsprachigen Supportforum für GNU/Linux. Registriere dich kostenlos, um alle Inhalte zu sehen und Fragen zu stellen.

Probleme mit Postfix als AntiSpamRelay

Status
Für weitere Antworten geschlossen.
A

andrew-the-webb

Newbie
Hallo Leute,

ich habe Suse 9.3 (inkl. Updates) und hier folgende SW installiert:
Postfix
AmavisDnew
Clamav
dspam

Es soll folgendes erreicht werden:

Mails werden abgeholt bzw. per SMTP an den LinuxPC geliefert.
Dort gehts folgendermassen weiter:

Virusfreie Mail - Postfix SMTP - smtp-amavis localhost:10024 - dspam localhost:10025 - postfix queue - MDA (in diesem Fall Exchange)

Mail mit Virus - Postfix SMTP - smtp-amavis localhost:10024 - localhost:10026 -- Mail in Quarantäneodrner verschieben - Mail an Virusadmin schicken, dass Mail in Quarantäne

Meine postconf -n:

Code: 
alias_maps = hash:/etc/aliases
biff = no
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports = 
disable_dns_lookups = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command = 
mailbox_size_limit = 0
mailbox_transport = 
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains = 
masquerade_exceptions = root
message_size_limit = 10240000
mydestination = $myhostname, localhost.$mydomain, 192.168.10.115
myhostname = mailsrv.local
mynetworks = 127.0.0.0/8, 192.168.10.0/24
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relayhost = delphi.rif.local
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = 
smtp_use_tls = no
smtpd_banner = ESMTP MS Exchange 2000
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_use_tls = no
strict_rfc821_envelopes = no
transport_maps = regexp:/etc/postfix/transport_regexp,		hash:/etc/postfix/transport.domain
unknown_local_recipient_reject_code = 550

Meine Master.cf

Code: 
# amavisd-new + clamav : virus checker
# dspam                : spam checker

smtp                 inet      n      -      n      -      -      smtpd -v -v
  -o content_filter=smtp-amavis:[127.0.0.1]:10024

proxymap  unix   -   -   n   -   -   proxymap

smtp-amavis          unix      -      -      n      -      2      lmtp -v -v
  -o smtp_send_xforward_command=yes
 
127.0.0.1:10025      inet      n      -      n      -      -      smtpd -v -v
  -o cleanup_service_name=pre-cleanup
  -o content_filter=dspam
  -o local_recipient_maps=
  -o relay_recipient_maps=
  -o smtpd_restriction_classes=
  -o smtpd_client_restrictions=
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject
  -o mynetworks=127.0.0.0/8
  -o strict_rfc821_envelopes=yes
  -o smtpd_error_sleep_time=0
  -o smtpd_soft_error_limit=1001
  -o smtpd_hard_error_limit=1000
                                                                                                                    
127.0.0.1:10026      inet      n      -      n      -      -      smtpd -v -v
  -o local_recipient_maps=
  -o relay_recipient_maps=
  -o smtpd_restriction_classes=
  -o smtpd_client_restrictions=
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject
  -o mynetworks=127.0.0.0/8
  -o strict_rfc821_envelopes=yes
  -o smtpd_error_sleep_time=0
  -o smtpd_soft_error_limit=1001
  -o smtpd_hard_error_limit=1000
                                                                                                                    


dspam		     unix	-	n	n	-	10	pipe -v -v
   flags=Rhq user=dspam argv=/usr/local/bin/dspam --mode=teft --deliver=innocent,spam --feature=chained,noise -i -f ${sender} -- %u --user ${recipient}

                                                                                                                    
cleanup              unix      n      -      n      -      0      cleanup
  -o header_checks=
  -o mime_header_checks=
  -o nested_header_checks=
  -o body_checks=
                                                                                                                    
pre-cleanup          unix      n      -      n      -      0      cleanup
  -o canonical_maps=
  -o sender_canonical_maps=
  -o recipient_canonical_maps=
  -o masquerade_domains=
  -o virtual_alias_maps=
  -o always_bcc=
  -o sender_bcc_maps=
  -o recipient_bcc_maps=
                                                                                                                   
local                unix      -      n      n      -      -      local
  -o content_filter=
  -o myhostname=localhost
  -o local_recipient_maps=
  -o relay_recipient_maps=
  -o mynetworks=127.0.0.0/8
  -o mynetworks_style=host
  -o smtpd_restriction_classes=
  -o smtpd_client_restrictions=
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject

dspam-add            unix      -      n      n      -      -      pipe
 --addspam
    flags=Rhq user=dspam argv=/usr/local/bin/dspam --mode=teft --user ${user}@${nexthop} --class=spam --source=error

dspam-del             unix      -      n      n      -      -      pipe 
--falsepositive  
    flags=Rhq user=dspam argv=/usr/local/bin/dspam --mode=teft --user ${user}@${nexthop} --class=innocent --source=error
Mein netstat -a
Code: 
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 *:dnp                   *:*                     LISTEN      
tcp        0      0 localhost:10024         *:*                     LISTEN      
tcp        0      0 localhost:10025         *:*                     LISTEN      
tcp        0      0 localhost:10026         *:*                     LISTEN      
tcp        0      0 *:mysql                 *:*                     LISTEN      
tcp        0      0 *:sunrpc                *:*                     LISTEN      
tcp        0      0 *:ndmp                  *:*                     LISTEN      
tcp        0      0 *:smtp                  *:*                     LISTEN      
tcp        0      0 *:www-http              *:*                     LISTEN      
tcp        0      0 *:ssh                   *:*                     LISTEN      
tcp        0      0 *:smtp                  *:*                     LISTEN      
tcp        0      0 pc001:ssh               pc001.rif.loca:udpradio ESTABLISHED 
tcp        0      0 minint-qint1l:ssh       pc001.rif.loca:ardusuni ESTABLISHED 
udp        0      0 *:ndmp                  *:*                                 
udp        0      0 *:dnp                   *:*                                 
udp        0      0 *:bootpc                *:*                                 
udp        0      0 *:sunrpc                *:*                                 
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  2      [ ACC ]     STREAM     LISTENING     16975  /var/run/powersave_clientsocket
unix  2      [ ACC ]     STREAM     LISTENING     16130  /var/lib/clamav/clamd-socket
unix  2      [ ACC ]     STREAM     LISTENING     16950  public/pre-cleanup
unix  2      [ ACC ]     STREAM     LISTENING     16958  private/dspam-add
unix  2      [ ACC ]     STREAM     LISTENING     15622  /var/run/.resmgr_socket
unix  2      [ ACC ]     STREAM     LISTENING     16581  /var/run/acpid.socket
unix  2      [ ACC ]     STREAM     LISTENING     16962  private/dspam-del
unix  2      [ ACC ]     STREAM     LISTENING     16183  /var/run/nscd/socket
unix  2      [ ACC ]     STREAM     LISTENING     16233  /var/lib/mysql/mysql.sock
unix  9      [ ]         DGRAM                    9051   /dev/log
unix  2      [ ACC ]     STREAM     LISTENING     17185  /var/spool/amavis/amavisd.sock
unix  2      [ ]         DGRAM                    17214  @/var/run/hal/hotplug_socket
unix  2      [ ]         DGRAM                    5747   @udevd
unix  2      [ ACC ]     STREAM     LISTENING     9077   /var/run/dbus/system_bus_socket
unix  2      [ ACC ]     STREAM     LISTENING     16946  public/cleanup
unix  2      [ ACC ]     STREAM     LISTENING     16926  private/proxymap
unix  2      [ ACC ]     STREAM     LISTENING     16954  private/local
unix  2      [ ACC ]     STREAM     LISTENING     16930  private/smtp-amavis
unix  2      [ ACC ]     STREAM     LISTENING     16942  private/dspam
unix  2      [ ACC ]     STREAM     LISTENING     16971  /var/run/powersave_socket
unix  3      [ ]         STREAM     CONNECTED     20326  
unix  3      [ ]         STREAM     CONNECTED     20325  
unix  3      [ ]         STREAM     CONNECTED     20324  
unix  3      [ ]         STREAM     CONNECTED     20323  
unix  3      [ ]         STREAM     CONNECTED     20280  
unix  3      [ ]         STREAM     CONNECTED     20279  
unix  3      [ ]         STREAM     CONNECTED     20278  
unix  3      [ ]         STREAM     CONNECTED     20277  
unix  2      [ ]         STREAM     CONNECTED     20134  
unix  2      [ ]         STREAM     CONNECTED     20132  
unix  2      [ ]         DGRAM                    17378  
unix  3      [ ]         STREAM     CONNECTED     17213  /var/run/dbus/system_bus_socket
unix  3      [ ]         STREAM     CONNECTED     17212  
unix  2      [ ]         DGRAM                    17162  
unix  2      [ ]         DGRAM                    16984  
unix  3      [ ]         STREAM     CONNECTED     16974  /var/run/acpid.socket
unix  3      [ ]         STREAM     CONNECTED     16973  
unix  3      [ ]         STREAM     CONNECTED     16965  
unix  3      [ ]         STREAM     CONNECTED     16964  
unix  3      [ ]         STREAM     CONNECTED     16961  
unix  3      [ ]         STREAM     CONNECTED     16960  
unix  3      [ ]         STREAM     CONNECTED     16957  
unix  3      [ ]         STREAM     CONNECTED     16956  
unix  3      [ ]         STREAM     CONNECTED     16953  
unix  3      [ ]         STREAM     CONNECTED     16952  
unix  3      [ ]         STREAM     CONNECTED     16949  
unix  3      [ ]         STREAM     CONNECTED     16948  
unix  3      [ ]         STREAM     CONNECTED     16945  
unix  3      [ ]         STREAM     CONNECTED     16944  
unix  3      [ ]         STREAM     CONNECTED     16941  
unix  3      [ ]         STREAM     CONNECTED     16940  
unix  3      [ ]         STREAM     CONNECTED     16937  
unix  3      [ ]         STREAM     CONNECTED     16936  
unix  3      [ ]         STREAM     CONNECTED     16933  
unix  3      [ ]         STREAM     CONNECTED     16932  
unix  3      [ ]         STREAM     CONNECTED     16929  
unix  3      [ ]         STREAM     CONNECTED     16928  
unix  3      [ ]         STREAM     CONNECTED     16925  
unix  3      [ ]         STREAM     CONNECTED     16924  
unix  2      [ ]         DGRAM                    16850  
unix  2      [ ]         DGRAM                    15954  
unix  2      [ ]         DGRAM                    15928  
unix  2      [ ]         DGRAM                    11279  
unix  3      [ ]         STREAM     CONNECTED     9080   
unix  3      [ ]         STREAM     CONNECTED     9079
(Bin gerade per SSH auf Rechner)

Hier das das voller Spannung erwartete Problem:

Ich sende eine Mail von einem Rechner an den LinuxMailgateway, hier die Ausgabe von mail.info:

Code: 
Jan 31 14:34:41 linux clamd[4976]: Daemon started.
Jan 31 14:34:41 linux clamd[4976]: clamd daemon 0.88 (OS: linux-gnu, ARCH: i386, CPU: i686)
Jan 31 14:34:41 linux clamd[4976]: Log file size limited to 2097152 bytes.
Jan 31 14:34:41 linux clamd[4976]: Running as user vscan (UID 65, GID 102)
Jan 31 14:34:41 linux clamd[4976]: Reading databases from /var/lib/clamav
Jan 31 14:34:41 linux freshclam[4979]: Daemon started.
Jan 31 14:34:41 linux freshclam[5041]: freshclam daemon 0.88 (OS: linux-gnu, ARCH: i386, CPU: i686)
Jan 31 14:34:41 linux freshclam[5041]: ClamAV update process started at Tue Jan 31 14:34:41 2006
Jan 31 14:34:42 linux freshclam[5041]: main.cvd is up to date (version: 35, sigs: 41649, f-level: 6, builder: tkojm)
Jan 31 14:34:42 linux freshclam[5041]: daily.cvd is up to date (version: 1262, sigs: 2229, f-level: 7, builder: diego)
Jan 31 14:34:42 linux freshclam[5041]: --------------------------------------
Jan 31 14:34:42 linux clamd[4976]: Protecting against 43878 viruses.
Jan 31 14:34:42 linux clamd[4976]: Unix socket file /var/lib/clamav/clamd-socket
Jan 31 14:34:42 linux clamd[4976]: Setting connection queue length to 15
Jan 31 14:34:42 linux clamd[4976]: Archive: Compression ratio limit set to 250.
Jan 31 14:34:42 linux clamd[4976]: Archive support enabled.
Jan 31 14:34:42 linux clamd[4976]: Archive: RAR support disabled.
Jan 31 14:34:42 linux clamd[4976]: Portable Executable support enabled.
Jan 31 14:34:42 linux clamd[4976]: Detection of broken executables enabled.
Jan 31 14:34:42 linux clamd[4976]: Mail files support enabled.
Jan 31 14:34:42 linux clamd[4976]: OLE2 support enabled.
Jan 31 14:34:42 linux clamd[4976]: HTML support enabled.
Jan 31 14:34:42 linux clamd[4976]: Self checking every 600 seconds.
Jan 31 14:34:49 linux postfix/postfix-script: starting the Postfix mail system
Jan 31 14:34:49 linux postfix/master[5293]: daemon started -- version 2.2.1, configuration /etc/postfix
Jan 31 14:34:52 linux amavis[5062]: user=, EUID: 0 (0);  group=, EGID: 0 (0)
Jan 31 14:34:52 linux amavis[5062]: INFO: no optional modules: Sys::Hostname::Long Mail::SPF::Query Razor2::Client Net::CIDR::Lite
Jan 31 14:34:52 linux amavis[5386]: Net::Server: Process Backgrounded
Jan 31 14:34:52 linux amavis[5386]: Net::Server: 2006/01/31-14:34:52 Amavis (type Net::Server::PreForkSimple) starting! pid(5386)
Jan 31 14:34:53 linux amavis[5386]: Net::Server: Binding to UNIX socket file /var/spool/amavis/amavisd.sock using SOCK_STREAM
Jan 31 14:34:53 linux amavis[5386]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
Jan 31 14:34:53 linux amavis[5386]: Net::Server: Setting gid to "102 102"
Jan 31 14:34:53 linux amavis[5386]: Net::Server: Setting uid to "65"
Jan 31 14:34:53 linux amavis[5386]: SpamControl: initializing Mail::SpamAssassin
Jan 31 14:34:55 linux amavis[5386]: SpamControl: done
Jan 31 14:34:55 linux amavis[5413]: TIMING [total 107 ms] - bdb-open: 107 (100%), rundown: 0 (0%)
Jan 31 14:34:55 linux amavis[5414]: TIMING [total 17 ms] - bdb-open: 17 (100%), rundown: 0 (0%)
Jan 31 14:36:02 linux postfix/smtpd[5636]: dict_update: content_filter = smtp-amavis:[127.0.0.1]:10024
Jan 31 14:36:02 linux postfix/smtpd[5636]: dict_lookup: syslog_facility = (notfound)
Jan 31 14:36:02 linux postfix/smtpd[5636]: mac_parse: mail
Jan 31 14:36:02 linux postfix/smtpd[5636]: dict_eval: const  mail
....
---------schnipp---------
.....
Jan 31 14:36:02 linux postfix/smtpd[5636]: dict_open: hash:/etc/postfix/virtual
Jan 31 14:36:02 linux postfix/smtpd[5636]: dict_register: hash:/etc/postfix/virtual(0,100) 1
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: smtpd_access_maps ~? debug_peer_list
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: smtpd_access_maps ~? fast_flush_domains
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: smtpd_access_maps ~? mynetworks
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: smtpd_access_maps ~? permit_mx_backup_networks
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: smtpd_access_maps ~? qmqpd_authorized_clients
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: smtpd_access_maps ~? relay_domains
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: smtpd_access_maps ~? smtpd_access_maps
Jan 31 14:36:02 linux postfix/smtpd[5636]: dict_open: hash:/etc/postfix/access
Jan 31 14:36:02 linux postfix/smtpd[5636]: dict_register: hash:/etc/postfix/access 1
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: fast_flush_domains ~? debug_peer_list
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_string: fast_flush_domains ~? fast_flush_domains
Jan 31 14:36:02 linux postfix/smtpd[5636]: chroot (none) user postfix
Jan 31 14:36:02 linux postfix/smtpd[5636]: attr_clnt_create: transport=local endpoint=private/anvil
Jan 31 14:36:02 linux postfix/smtpd[5636]: watchdog_create: 0x80a9760 18000
Jan 31 14:36:02 linux postfix/smtpd[5636]: watchdog_stop: 0x80a9760
Jan 31 14:36:02 linux postfix/smtpd[5636]: watchdog_start: 0x80a9760
Jan 31 14:36:02 linux postfix/smtpd[5636]: connection established
Jan 31 14:36:02 linux postfix/smtpd[5636]: master_notify: status 0
Jan 31 14:36:02 linux postfix/smtpd[5636]: name_mask: resource
Jan 31 14:36:02 linux postfix/smtpd[5636]: name_mask: software
Jan 31 14:36:02 linux postfix/smtpd[5636]: connect from pc001.rif.local[192.168.10.50]
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_list_match: pc001.rif.local: no match
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_list_match: 192.168.10.50: no match
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_list_match: pc001.rif.local: no match
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_list_match: 192.168.10.50: no match
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_hostname: pc001.rif.local ~? 127.0.0.0/8
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_hostaddr: 192.168.10.50 ~? 127.0.0.0/8
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_hostname: pc001.rif.local ~? 192.168.10.0/24
Jan 31 14:36:02 linux postfix/smtpd[5636]: match_hostaddr: 192.168.10.50 ~? 192.168.10.0/24
Jan 31 14:36:02 linux postfix/smtpd[5636]: > pc001.rif.local[192.168.10.50]: 220 ESMTP MS Exchange 2000
Jan 31 14:36:02 linux postfix/smtpd[5636]: watchdog_pat: 0x80a9760
Jan 31 14:36:02 linux postfix/smtpd[5636]: < pc001.rif.local[192.168.10.50]: HELO pc001
Jan 31 14:36:02 linux postfix/smtpd[5636]: > pc001.rif.local[192.168.10.50]: 250 mailsrv.local
Jan 31 14:36:02 linux postfix/smtpd[5636]: watchdog_pat: 0x80a9760
Jan 31 14:36:02 linux postfix/smtpd[5636]: < pc001.rif.local[192.168.10.50]: RSET
Jan 31 14:36:02 linux postfix/smtpd[5636]: > pc001.rif.local[192.168.10.50]: 250 Ok
Jan 31 14:36:02 linux postfix/smtpd[5636]: watchdog_pat: 0x80a9760
Jan 31 14:36:02 linux postfix/smtpd[5636]: < pc001.rif.local[192.168.10.50]: MAIL FROM: <mailadresse@LABBER.de>
Jan 31 14:36:02 linux postfix/smtpd[5636]: extract_addr: input: <mailadresse@LABBER.de>
Jan 31 14:36:02 linux postfix/smtpd[5636]: smtpd_check_addr: addr=mailadresse@LABBER.de
Jan 31 14:36:02 linux postfix/smtpd[5636]: connect to subsystem private/rewrite: Connection refused
Jan 31 14:36:12 linux postfix/smtpd[5636]: connect to subsystem private/rewrite: Connection refused
Jan 31 14:36:22 linux postfix/smtpd[5636]: connect to subsystem private/rewrite: Connection refused

Also (lt. meiner Meinung) kann der Postfix die Mails nicht an amavis zur Überprüfung weiterleiten.

Lt. netstat laufen auf den Ports bzw. Sockets aber die Dienste.

Verbinden per Telnet auf 25/10024/10025/10026 geht auch (127.0.0.1)
Auch auf Port 25 vom entfernten Rechner geht.

Wo kann ich ansetzen bzw. dem Postfix beibringen, mir mehr Informationen als die letzten 3 Zeilen zu geben?

Vielen lieben Dank für Eure Hilfe.

André
 
ThomasF

ThomasF

Hacker
Hi,

ohne mir Deine Files jetzt näher angeschaut zu haben würde ich sagen Du brauchst nicht mehr Logs von Postfix sondern von Amavis bzw. Deinem Dspam.

In Amavis weiß ich wo in der /etc/amavis.conf der Loglevel höher gestellt wird. Dspam kenne ich noch nicht ...

Grundsätzlich würde ich erstmal Postfix nur mit Amavis und dem Virenscanner zum laufen bringen und dann erst später den Dspam mit einbauen (falls Du das dann noch willst )

Zum Thema Postfix und Amavis gibt es außerdem jede menge Doku ...

So long

ThomasF
 
dermichel

dermichel

Advanced Hacker
ich habe mir die files angesehen. der fehler liegt an fehlenden eintraegen in der master.cf..... vertrau dem fachmann :)
 
Status
Für weitere Antworten geschlossen.
Oben