Dotaz: UBUNTU + Postfix

[irenicus]

Dobry den postfix mi nebere v potaz nektara nastaveni v konfiguracnim souboru, napr. jakmile nastavim v

/etc/postfix/main.cf

nasledujici omezeni:

smptd_recipient_restrictions = rejectsd_non_fqdn_sender,
        reject_non_fqdn_recipient,
        reject_non_fqdn_sender,
        reject_unknown_recipient_domain,
        reject_unknown_sender_domain,
        permit_sasl_authenticated,
        permit_mynetworks,
        reject_unauth_destination,
        reject_nonfqdn_hostname,
        reject_invalid_hostname,
        reject_rhsbl_sender zen.spamhaus.org,
        reject_rhsbl_sender sbl-xbl.spamhaus.org,
        reject_rhsbl_sender countries.blackholes.us,
        reject_unverified_sender 

a znovu zavedu postfix pomoci

postfix reload

a zadam

postconf -d | grep smtpd_recipient_restrictions

dostanu jako vystup toto

smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination

Nevite jakto ze postfix neakceptuje ma omezeni ?

Odpovědi

[Jirka]

Nevim zda-li to pomuze, ale hned v prvnim radku je preklep (to ...sd je navic):

smptd_recipient_restrictions = rejectsd_non_fqdn_sender,

[irenicus]

To byl umyslny preklep. Chtel sem vedet zda postfix zareaguje na chybny parapetr pri svem znovuzavedeni. Nic, proste

smptd_recipient_restrictions

mi v main.cf totalne ignoruje. Sem uz soufaly.

[wow]

Mas recipient_restrictions ale aj sender_restrictions atd, mas to zmixovane dokopy. smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_non_fqdn_sender reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_pipelining reject_unauth_destination reject_rbl_client bl.spamcop.net reject_rbl_client zen.spamhaus.org reject_rbl_client list.dsbl.org reject_rbl_client cbl.abuseat.org reject_rbl_client list.dsbl.org reject_rbl_client sbl.spamhaus.org reject_rbl_client pbl.spamhaus.org check_policy_service inet:127.0.0.1:60000

smtpd_sender_restrictions = permit_mynetworks permit_sasl_authenticated # reject_unknown_sender_domain

smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated # reject takze rozdelit, lebo postfix je blb z toho gulasu -)

[kiwi]

Měl jsem podobnou záhadu s postfixem. Nakonec jsem zjistil, že postfix nemá rád v konfiguračním souboru na začátku řádku prázdné znaky - jako např. mezery. Zkusil bych napsat celý tento odstavec znovu aby na začátku řádku nebyla žádná mezera ani tabelátor (případně vše do jednoho řádku...) Pak to podle mne vezme.

 

 

[wow]

Pozri si pastnem ti z postfix dokumentacie: Sender address restrictions The smtpd_sender_restrictions parameter restricts what sender addresses this system accepts in MAIL FROM commands.

By default, this restriction is applied when the client sends the RCPT TO command. In order to have the restriction take effect as soon as possible, specify smtpd_delay_reject = no in the Postfix main.cf configuration file. Doing so may cause unexpected results with poorly implemented client software.

Default: smtpd_sender_restrictions =

By default, the Postfix SMTP server accepts any sender address.

Syntax: Specify a list of zero or more restrictions, separated by whitespace or commas. Restrictions are applied in the order as specified; the first restriction that matches wins.

In addition to restrictions that are specific to sender mail addresses, you can also specify restrictions based on the information passed with the HELO/EHLO command , on the client hostname or network address , or on the recipient address . The recipient restrictions take effect only if smtpd_delay_reject = yes so that all restrictions are evaluated after the RCPT TO command.

Example: smtpd_sender_restrictions = hash:/etc/postfix/access, reject_unknown_sender_domain

Z toho jasne vyplyva,ze treba rozoznavat sender_restr recipient_restrict etc. ma to zmixovane. reject_unknown_sender_domain NEMOZE byt v recipientrestrictions napriklad.To nezoberie nikdy.

[Jirka]

Zkusi bych nastavit jen pro test treba:

smptd_recipient_restrictions = reject_non_fqdn_sender

Zmena se provede?

 

[wow]

no....smptd_recipient_restrictions = reject_non_fqdn_sender a co tak logicky : smptd_SENDER_restrictions = reject_non_fqdn_sender??

Z toho je jasne, ze chceme restriktibne obmedzovat, ale logiku to postrada -))

[hysterix]

Vsechna omezeni opravdu mohou (ale nemusi) byt az v smptd_recipient_restrictions. To je popisovane a nekterymi i doporucovane nastaveni.

[irenicus]

Asi prostuduji ENG manual. Postupoval sem dle knihy Postfix (Ral Hildebrandt a Patric Koettler) a kde meli obdobne nastavena zminela omezeni .

[irenicus]

Ne, stale se drzi sveho nastaveni.

[wow]

pastnem ti moje : smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_pipelining reject_unauth_destination reject_rbl_client bl.spamcop.net reject_rbl_client zen.spamhaus.org reject_rbl_client list.dsbl.org reject_rbl_client cbl.abuseat.org reject_rbl_client list.dsbl.org reject_rbl_client sbl.spamhaus.org reject_rbl_client pbl.spamhaus.org check_policy_service inet:127.0.0.1:60000

smtpd_sender_restrictions = reject_non_fqdn_sender reject_rhsbl_sender bl.spamcop.net reject_rhsbl_sender zen.spamhaus.org reject_unknown_sender_domain permit_mynetworks permit_sasl_authenticated

smtpd_client_restrictions = reject_unknown_client_hostname reject_rhsbl_client bl.spamcop.net reject_rhsbl_client zen.spamhaus.org permit_mynetworks permit_sasl_authenticated # reject

smtpd_data_restrictions = reject_unauth_pipelining

a postconf -n : postconf -n |grep restr smtpd_client_restrictions = reject_unknown_client_hostname reject_rhsbl_client bl.spamcop.net reject_rhsbl_client zen.spamhaus.org permit_mynetworks permit_sasl_authenticated smtpd_data_restrictions = reject_unauth_pipelining smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_pipelining reject_unauth_destination reject_rbl_client bl.spamcop.net reject_rbl_client zen.spamhaus.org reject_rbl_client list.dsbl.org reject_rbl_client cbl.abuseat.org reject_rbl_client list.dsbl.org reject_rbl_client sbl.spamhaus.org reject_rbl_client pbl.spamhaus.org check_policy_service inet:127.0.0.1:60000 smtpd_sender_restrictions = reject_non_fqdn_sender reject_rhsbl_sender bl.spamcop.net reject_rhsbl_sender zen.spamhaus.org reject_unknown_sender_domain permit_mynetworks permit_sasl_authenticated

[Jirka]

A co zmena jineho parametru, mynetworks atd, proste cokoliv, jde jen o test. Pokud se to drzi stale sveho nastaveni, tak je problem nekde jinde nez v kombinaci konfiguracnich parametru.

 

[hysterix]

man postconf: -d Print default parameter settings instead of actual settings

[wow]

koniec koncov vela vyriesi tail -f -n 30 /var/log/mail.log ....a cumenie do toho -)

[irenicus]

Nakjonec muj problem vyresily zlate tri R ... retry reboot reinstal Preinstaloval jsme kompletne postfix nahral konfiguracni soubory zpet a uz to jede

[hysterix]

Pokud postconf -d | grep smtpd_recipient_restrictions ukazuje neco jineho nez predtim, tak to musis hlasit ve Vatikanu. Ocekavej pak davy poutniku.

[irenicus]

Ano to zobrazuje . Zmyslil sem se ve svem dotazu postconf -d zobrazuje defautni nastaveni a nikoliv aktualni. Nicmene nyni vse funguje jak ma a postfix ma omezeni v smtpd_recipient_restrictions jiz bere konecne v potaz.