[Postfixbuch-users] Postfix und Kaspersky

Do Feb 18 12:59:47 CET 2010

Danke für die Antwort und die Ideen.

Stefan Förster schrieb:
> * Tim Macholl <macholl at scienlab.de>:
>> 127.0.0.1:10025 inet    n       -       y       -       10       smtpd
>>         -o content_filter=kav4lms_filter:127.0.0.1:10026
> 
> Die fehlenden eckigen Klammern hier lösen jedesmal einen MX-Lookup
> aus.
> 
>> kav4lms_filter       unix    -       -       n        -      10      smtp
>>     -o smtp_send_xforward_command=yes
> 
> Kann der Kaspersky XFORWARD?
> 
Laut dem Handbuch sollte er das können.

>> postfix/smtp[8490]: 16B131FA341: to=<root at scienlab.de>,
>> relay=127.0.0.1[127.0.0.1]:10026, delay=300, delays=0/0.01/300/0,
>> dsn=4.4.2, status=deferred (conversation with 127.0.0.1[127.0.0.1] timed
>> out while receiving the initial server greeting)
>>
>> kavmd[7535]: app [3031464816] ERROR Error in filter connection. Socket
>> message: Socket read error: Connection could not be established or
>> failed unexpectedly
> 
> Pack doch einfach tcpdump, ngrep, (wire|t)shark oder was auch immer
> aus und hör mal am Loopback-Interface mit (mein Favorit ist da immer
> ngrep, am wenigsten zu tippen).
> 
Hier mal die Ausgabe von ngrep. Ist ein bisschen unübersichtlich, aber 
dafür der Komplette Vorgang.

T(6) 127.0.0.1:10024 -> 127.0.0.1:47772 [AP]
   220 [127.0.0.1] ESMTP amavisd-new service ready.. 

##
T(6) 127.0.0.1:47772 -> 127.0.0.1:10024 [AP]
   EHLO server.office.bo.. 

##
T(6) 127.0.0.1:10024 -> 127.0.0.1:47772 [AP]

250-[127.0.0.1]..250-VRFY..250-PIPELINING..250-SIZE..250-ENHANCEDSTATUSCODES..250-8BITMIME..250-DSN..250 
XFORWARD NAME ADDR PORT PROTO HELO SOURCE..
#
T(6) 127.0.0.1:47772 -> 127.0.0.1:10024 [AP]
   XFORWARD NAME=localhost ADDR=IPv6:::1 PORT=34680..XFORWARD 
PROTO=ESMTP HELO=[IPv6:::1] SOURCE=LOCAL..MAIL 
FROM:<macholl at scienlab.de> SIZE=545..RCPT TO:
   <root at scienlab.de> ORCPT=rfc822;root at scienlab.de..DATA.. 

#
T(6) 127.0.0.1:10024 -> 127.0.0.1:47772 [AP]
   250 2.5.0 Ok XFORWARD.. 

###
T(6) 127.0.0.1:10024 -> 127.0.0.1:47772 [AP]
   250 2.5.0 Ok XFORWARD..250 2.1.0 Sender <macholl at scienlab.de> OK..250 
2.1.5 Recipient <root at scienlab.de> OK..354 End data with 
<CR><LF>.<CR><LF>..
##
T(6) 127.0.0.1:47772 -> 127.0.0.1:10024 [AP]
   Received: from [IPv6:::1] (localhost [IPv6:::1])...by 
server.office.bo (Postfix) with ESMTP id 0003F1FA345...for 
<root at scienlab.de>; Thu, 18 F
   eb 2010 11:16:57 +0100 (CET)..Message-ID: 
<4B7D1399.600 at scienlab.de>..Date: Thu, 18 Feb 2010 11:16:57 +0100..From: 
Tim Macholl <macholl at scienlab.de>..U
   ser-Agent: Thunderbird 2.0.0.23 (X11/20090817)..MIME-Version: 
1.0..To: root at scienlab.de..Subject: test_kav2..Content-Type: text/plain; 
charset=ISO-8859
   -15..Content-Transfer-Encoding: 7bit....nochn test 
quasi.......................................QUIT.. 

############
T(6) 127.0.0.1:10025 -> 127.0.0.1:34515 [AP]
   220 server.office.bo ESMTP Postfix.. 

##
T(6) 127.0.0.1:34515 -> 127.0.0.1:10025 [AP]
   EHLO localhost.. 

##
T(6) 127.0.0.1:10025 -> 127.0.0.1:34515 [AP]
   250-server.office.bo..250-PIPELINING..250-SIZE 
25600000..250-VRFY..250-ETRN..250-ENHANCEDSTATUSCODES..250-8BITMIME..250 
DSN..
#
T(6) 127.0.0.1:34515 -> 127.0.0.1:10025 [AP]
   MAIL FROM:<macholl at scienlab.de> BODY=7BIT..RCPT TO:<root at scienlab.de> 
ORCPT=rfc822;root at scienlab.de..DATA.. 

#
T(6) 127.0.0.1:10025 -> 127.0.0.1:34515 [AP]
   250 2.1.0 Ok..250 2.1.5 Ok..354 End data with <CR><LF>.<CR><LF>.. 

#
T(6) 127.0.0.1:34515 -> 127.0.0.1:10025 [AP]
   X-Virus-Scanned: Debian amavisd-new at server.office.bo..Received: 
from server.office.bo ([127.0.0.1])...by localhost (server.office.bo 
[127.0.0.1])
   (amavisd-new, port 10024)...with ESMTP id C5xJl94k6MpB for 
<root at scienlab.de>;...Thu, 18 Feb 2010 11:16:58 +0100 (CET)..Receiv
   ed: from [IPv6:::1] (localhost [IPv6:::1])...by server.office.bo 
(Postfix) with ESMTP id 0003F1FA345...for <root at scienlab.de>; Thu, 18 
Feb 201
   0 11:16:57 +0100 (CET)..Message-ID: <4B7D1399.600 at scienlab.de>..Date: 
Thu, 18 Feb 2010 11:16:57 +0100..From: Tim Macholl 
<macholl at scienlab.de>..User-Ag
   ent: Thunderbird 2.0.0.23 (X11/20090817)..MIME-Version: 1.0..To: 
root at scienlab.de..Subject: test_kav2..Content-Type: text/plain; 
charset=ISO-8859-15..C
   ontent-Transfer-Encoding: 7bit....nochn test 
quasi.......................................
#
T(6) 127.0.0.1:10025 -> 127.0.0.1:34515 [AP]
   250 2.0.0 Ok: queued as 298CC1FA347.. 

####
T(6) 127.0.0.1:10024 -> 127.0.0.1:47772 [AP]
   250 2.0.0 Ok, id=15029-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: 
queued as 298CC1FA347.. 

##
T(6) 127.0.0.1:10024 -> 127.0.0.1:47772 [AP]
   221 2.0.0 [127.0.0.1] amavisd-new closing transmission channel.. 

#######################################################
T(6) 127.0.0.1:10025 -> 127.0.0.1:34515 [AP]
   421 4.4.2 server.office.bo Error: timeout exceeded.. 

###############################################

Jemand eine Idee?

> 
> Stefan

mfg

Tim