[Postfixbuch-users] Emails unbekannter Empfänger abweisen

[Michael Polenske]

Moin moin,

> Zeig master.cf, zeig postconf -n

Gern :-)

mail:~ # cat /etc/postfix/master.cf
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       n       -       -       smtpd
pickup    fifo  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
        -o fallback_relay=
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
smtp-amavis     unix    -       -       n       -       3       smtp
scache    unix  -       -       n       -       1       scache
#
10.10.12.3:10025 inet   n       -       n       -       -       smtpd
                -o content_filter=
#                 -o local_recipient_maps= ldap:ldapusers
                -o relay_recipient_maps=
                -o smtpd_restriction_classes=
                -o smtpd_client_restrictions=
                -o smtpd_helo_restrictions=
                -o smtpd_sender_restrictions=
                -o smtpd_recipient_restrictions=permit_mynetworks, 
permit_sasl_authenticated, reject_unauth_pipelining, 
reject_non_fqdn_recipient, reject_non_fqdn_sender, 
reject_unknown_sender_domain, reject_unknown_recipient_domain, 
reject_unauth_destination, reject_non_fqdn_hostname, reject_invalid_hostname, 
permit
                -o mynetworks=127.0.0.0/8,10.10.12.4/32
                -o strict_rfc821_envelopes=yes

#
cyrus     unix  -       n       n       -       -       pipe
  user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} 
${user}


mail:~ # postconf -n
alias_maps = hash:/etc/aliases,ldap:/etc/postfix/ldap/ldap-aliases.cf
biff = no
body_checks = regexp:/etc/postfix/header_checks
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[10.10.12.4]:10025
daemon_directory = /usr/lib/postfix
debug_peer_level = 4
defer_transports =
disable_dns_lookups = no
disable_mime_output_conversion = no
inet_interfaces = 127.0.0.1 193.141.139.212 10.10.12.3
inet_protocols = all
local_recipient_maps = ldap:/etc/postfix/ldap/ldap-users.cf
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 20480000
mydestination = localhost, $myhostname, localhost.
$mydomain,ldap:/etc/postfix/ldap/ldap-vdoms.cf
mydomain = hpce.nec.com
myhostname = mail.hpce.nec.com
mynetworks = /etc/postfix/mynetworks
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
recipient_delimiter = +
relocated_maps = hash:/etc/postfix/relocated
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = no
smtp_use_tls = yes
smtpd_banner = TESTSYSTEM - NOT IN USE
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_sasl_authenticated,       
permit_mynetworks,      check_sender_access hash:/etc/postfix/sender_access,    
check_recipient_access hash:/etc/postfix/recipient_access,   
reject_unverified_recipient,    reject_unauth_pipelining,       
reject_non_fqdn_recipient,      reject_unknown_recipient_domain,     
reject_non_fqdn_hostname,       reject_invalid_hostname,        
reject_unknown_sender_domain,   reject_non_fqdn_sender, 
reject_unauth_destination,   reject_rbl_client relays.ordb.org,      
reject_rbl_client cbl.abuseat.org,      reject_rbl_client list.dsbl.org,        
reject_rbl_client opm.blitzed.org,   reject_rbl_client sbl.spamhaus.org,     
reject_rhsbl_client blackhole.securitysage.com, reject_rhsbl_sender 
blackhole.securitysage.com, permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_tls_cert_file = /etc/ssl/private/mail.hpce.nec.com-cert.pem
smtpd_tls_key_file = /etc/ssl/private/mail.hpce.nec.com-key.pem
smtpd_tls_loglevel = 1
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
strict_8bitmime = no
strict_rfc821_envelopes = no
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 450
virtual_alias_maps = regexp:/etc/postfix/virtual_regexp,$alias_maps

Die ldap-Anfragen sollten durchgehen, der Bind läuft. Ich habe Amavis mal 
angehalten und Mails nur die erste Stufedurchlaufen lassen - ich sehe im ldap 
keinen Versuch eines Verbindungsaufbaus :(

Danke und viel Grüße,
Michael