[Postfixbuch-users] Problem mit Net::Server::Mail::ESMTP und Postfix

[Christian Felsing]

Das Perl Skript soll einfach alle Mail, die rein kommen überprüfen, ob  
sie mit GnuPG verschlüsselt sind. Es versucht die Mail dann mit dem  
vorhandenen Key zu entschlüsseln. Ist die Mail nicht verschlüsselt  
oder schlägt die Entschlüsselung fehl, dann wird die Mail einfach an  
Amavis weitergegeben.

#
# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
#smtp      inet  n       -       -       -       -       smtpd
192.168.0.1:smtp      inet  n       -       -       -       100      smtpd
         -o smtpd_proxy_filter=127.0.0.1:31337
         -o smtpd_client_connection_count_limit=10
	-o smtp_bind_address=192.168.0.1
# localhost (is always internal)
127.0.0.1:smtp      inet  n       -       -       -       100      smtpd
         -o smtpd_proxy_filter=127.0.0.1:10026
         -o smtpd_client_connection_count_limit=50

#628      inet  n       -       -       -       -       qmqpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       -       300     1       oqmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay     unix  -       -       -       -       -       smtp
	-o smtp_fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
   flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
   flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail  
($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
   flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
   flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender  
$recipient
scalemail-backend unix	-	n	n	-	2	pipe
   flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store  
${nexthop} ${user} ${extension}
#mailman   unix  -       n       n       -       -       pipe
#  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
#  ${nexthop} ${user}
#
# Dovecot
#
dovecot   unix  -       n       n       -       10      pipe
   flags=DRhu user=vmail:vmail argv=/opt/dovecot/libexec/dovecot/deliver
   -f ${sender} -d ${user}@${nexthop} -n -m ${extension}
   #-f ${sender} -d ${recipient}
#
# Amavis
#
smtp-amavis unix -      -       n       -       2       smtp
	-o smtp_data_done_timeout=1200
	-o smtp_send_xforward_command=yes
	-o disable_dns_lookups=yes
	-o smtp_bind_address=127.0.0.1

127.0.0.1:10025 inet n  -       n       -       -       smtpd
	-o content_filter=
	-o local_recipient_maps=
	-o relay_recipient_maps=
	-o smtpd_restriction_classes=
	-o smtpd_client_restrictions=
	-o smtpd_helo_restrictions=
	-o smtpd_sender_restrictions=
	-o smtpd_recipient_restrictions=permit_mynetworks,reject
	-o mynetworks=127.0.0.0/8
	-o strict_rfc821_envelopes=yes
	-o smtpd_error_sleep_time=0
	-o smtpd_soft_error_limit=1001
	-o smtpd_hard_error_limit=1000


Die Config läuft einwandfrei, wenn der Amavis statt dem decrypt Skript  
angesprochen wird, demnach dürfte die Config gar nicht so falsch  
sein... Aus meiner ursprünglichen Mail sollte aus dem postconf -n  
schon hervorgehen, dass es um content_filter geht.

Viele Grüße
Christian

Zitat von Andreas Schulze <andreas.schulze at datev.de>:

> was willst Du machen ?
> wozu ein Perlscript vor Amavis ?
>
> zeige mal die master.cf
>
> willst Du content_filter oder smtpd_proxy_filter nutzen.
> Bei letztem könnte es Probleme geben.
>


----------------------------------------------------------------
Powered by http://www.taunusstein.net
Wir speichern nicht