Dotaz: Konfigurace postfix pro exchange

[Mirekh]

Zdravim,

ve firme nam bezi qmail na debianu, ktery predava dorucenou postu na Exchange server pro vetsinu uzivatelu a nektere dorucuje lokalne.

Rad bych qmail nahradil postfixem. Ale nejsem si jisty s jeho nastavenim.

Stav: - zpracovavat 1 domenu (domena.tld)

- maily pro vetsinu uzivatelu (asi 80) by postfix jen predaval na exchange na lokalni siti

- dale by se pro nekolik (asi 10) posta dorucovala lokalne - na linuxu - zde je to hlavne kvuli spousteni urcitych scriptu po prichodu emailu.

Na jinem serveru mam Postfix jiz rozchozen. Ten je nastaven jako gateway pro exchange - tedy ze veskerou postu na nej preposila k tomu pouzivam parametry

relay_domains = atx.cz

transport_maps = hash:/etc/postfix/transport

relay_recipient_maps = hash:/etc/postfix/relay_recipients

- a to funguje.

Ale tady bych potreboval aby nekteri se predavali na exchange a nekteri se dorucovali lokalne.

Odpovědi

[NN]

Zrovna dneska jsem to delal, nemuzes to skazit, nejdrive:

http://www.postfix.org/BASIC_CONFIGURATION_README.html

a potom

http://www.postfix.org/STANDARD_CONFIGURATION_README.html

jeste si do toho pridel stress konfiguraci, ze serialu tady na foru a mas to horovo. Nezpomen na prikazy:

postconf ...
postmap ...

NN

[Mirekh]

Dik za informaci,

takze by to mohlo vypadat takto ?:

relay_domains = server.exchange.cz

transport_maps = hash:/etc/postfix/maps/transport

virtual_alias_maps = hash:/etc/postfix/maps/virtual_alias

transport

server.exchange.cz smtp:[xx.xx.xx.xx]:25

a virtual_alias_maps bude mit

jan.novak@domena.cz jan.novak@server.exchange.cz

co ty na to ? nebo jinak ?

[NN]

smtpd_banner = $myhostname ESMTP
biff = no
append_dot_mydomain = no
readme_directory = no

# TLS

smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# ACL

smtp_recipient_restriction =
 permit_mynetworks
 reject_unauth_destination

# STRESS

smtpd_timeout = ${stress?10}${stress:300}

smtpd_soft_error_limit = ${stress?1}${stress:10}
smtpd_hard_error_limit = ${stress?1}${stress:20}
smtpd_junk_command_limit = ${stress?1}${stress:100}

smtpd_client_connection_rate_limit = ${stress?10}${stress:0}
smtpd_client_message_rate_limit = ${stress?30}${stress:0} 
smtpd_client_recipient_rate_limit = ${stress?300}${stress:0}
smtpd_recipient_overshoot_limit = ${stress?10}${stress:1000}

# DEFAULT

mydomain = exchange.cz
myhostname = server.exchange.cz
myorigin = $mydomain

inet_interfaces = all
inet_protocols = all

mydestination =

virtual_recipient_maps = hash:/etc/postfix/virtual

mynetworks = EXCHANGE_IP 195.113.83.0/26 127.0.0.0/8 [xxxxxx::]/64 [::ffff:127.0.0.0]/104 [::1]/128

relay_domains = $mydomain
relay_recipient_maps = hash:/etc/postfix/relay_recipients
transport_maps = hash:/etc/postfix/transport

--------
virtual

root     root@localhost
jan.novak jan.novak@localhost
...

--------
transport

exchange.cz   smtp:[inside-gateway.example.com]

-------
relay_recipients

@exchange.cz x

Problem bude v tom, ze maily budou prichazet lokalne, ale budou odchaze z domenou exchange.cz podle, $myorigin, ale to se da zmenit na $myhostname.

NN

[Mirekh]

A to ti takto funguje ?

Myslim kdyz server.exchange.cz prijme email z Internetu na adresu jan.novak@exchange.cz tak ze se doruci do maildir uzivatele jan.novak ?

[Mirekh]

.... a navic jsem v dokumentaci postfixu parametr virtual_recipient_maps nenasel .....-:)

[NN]

Jsem se upsal, ale tady to mas:

http://www.postfix.org/STANDARD_CONFIGURATION_README.html#some_local

NN

[pupu]

Tak to bych tedy tak uplne nedoporucoval - bez dalsich uprav. Rozhodne doporucuji pridat overovani existence adresata - bud dotazem pres LDAP (do Exchangiho AD), nebo primym dotazem pres smtp (hledej 'man 5 postconf : reject_unverified_recipient, pripadne ADDRESS_VERIFICATION_README). Usetris si hromadu problemu.