Mailversand/Empfang scheitert mit "4.7.1 Tempfail - internal scan engine error."

[Oliver Dobler]

Hallo Liste,

ich habe einen Postfix-Server mit Rspamd und Dovecot auf einem Debian
11, dass ich auf Debian 12 geupgradet habe.

Seitdem kann ich keine Mails mehr versenden und einige Mails kommen
auch nicht herein.
Ich vermute dass das mit dkim und dem Rspamd zusammenhängt, finde aber
nicht den Fehler.

Habt Ihr Lösungsansätze, warum das Senden und teilweise Empfangen
nicht mehr geht?

Viele Grüße

Oliver

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
bounce_queue_lifetime = 1h
broken_sasl_auth_clients = yes
compatibility_level = 2
disable_vrfy_command = yes
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
inet_protocols = all
mailbox_size_limit = 0
maximal_backoff_time = 15m
maximal_queue_lifetime = 1h
message_size_limit = 52428800
milter_default_action = accept
milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen}
milter_protocol = 6
minimal_backoff_time = 5m
mua_client_restrictions = permit_mynetworks permit_sasl_authenticated reject
mua_relay_restrictions = reject_non_fqdn_recipient
reject_unknown_recipient_domai
n permit_mynetworks
permit_sasl_authenticated reject
mua_sender_restrictions = permit_mynetworks reject_non_fqdn_sender
reject_sender_login_mismatch permit_sasl_authenticated reject
mydestination = mx.example.com, localhost.example.com, localhost
myhostname = mx.example.com
mynetworks = 127.0.0.0/8 192.168.1.0/24  176.10.155.241 176.10.155.242
176.10.155.243 176.10.155.245 176.10.155.246
myorigin = /etc/mailname
non_smtpd_milters = inet:localhost:11332
plaintext_reject_code = 550
postscreen_access_list = permit_mynetworks cidr:/etc/postfix/postscreen_access
postscreen_bare_newline_enable = no
postscreen_blacklist_action = drop
postscreen_cache_cleanup_interval = 24h
postscreen_cache_map = proxy:btree:$data_directory/postscreen_cache
postscreen_dnsbl_action = enforce
postscreen_dnsbl_sites = b.barracudacentral.org=127.0.0.2*7
dnsbl.inps.de=127.0.0.2*7 bl.mailspike.net=127.0.0.2*5
bl.mailspike.net=127.0.0.[10;11;12]*4 dnsbl.sorbs.net=127.0.0.10*8
dnsbl.sorbs.net=127.0.0.5*6 dnsbl.sorbs.net=127.0.0.7*3
dnsbl.sorbs.net=127.0.0.8*2 dnsbl.sorbs.net=127.0.0.6*2
dnsbl.sorbs.net=127.0.0.9*2 zen.spamhaus.org=127.0.0.[4..7]*6
zen.spamhaus.org=127.0.0.3*4 zen.spamhaus.org=127.0.0.2*3
hostkarma.junkemailfilter.com=127.0.0.2*3
hostkarma.junkemailfilter.com=127.0.0.4*1
hostkarma.junkemailfilter.com=127.0.1.2*1
wl.mailspike.net=127.0.0.[18;19;20]*-2
hostkarma.junkemailfilter.com=127.0.0.1*-2
postscreen_dnsbl_threshold = 8
postscreen_dnsbl_ttl = 5m
postscreen_greet_action = enforce
postscreen_greet_banner = $smtpd_banner
postscreen_greet_ttl = 2d
postscreen_greet_wait = 3s
postscreen_non_smtp_command_enable = no
postscreen_pipelining_enable = no
proxy_read_maps =
proxy:mysql:/etc/postfix/sql/mysql_virtual_sender_acl.cf,
proxy:mysql:/etc/postfix/sql/mysql_tls_enforce_out_policy.cf,
proxy:mysql:/etc/postfix/sql/mysql_tls_enforce_in_policy.cf,
$local_recipient_maps $mydestination $virtual_alias_maps
$virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains
$relay_recipient_maps $relay_domains $canonical_maps
$sender_canonical_maps $recipient_canonical_maps $relocated_maps
$transport_maps $mynetworks $smtpd_sender_login_maps
queue_run_delay = 5m
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relay_domains = proxy:mysql:/etc/postfix/sql/mysql_virtual_mxdomain_maps.cf
relay_recipient_maps =
proxy:mysql:/etc/postfix/sql/mysql_relay_recipient_maps.cf
relayhost =
sender_dependent_default_transport_maps =
proxy:mysql:/etc/postfix/sql/mysql_tls_enforce_out_policy.cf
smtp_bind_address6 = 2a01:4f8:120:4268::24
smtp_dns_support_level = dnssec
smtp_header_checks = pcre:/etc/postfix/submission_header_cleanup
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_tls_ciphers = high
smtp_tls_loglevel = 1
smtp_tls_policy_maps = mysql:/etc/postfix/sql/tls-policy.cf
smtp_tls_protocols = !SSLv2, !SSLv3
smtp_tls_security_level = dane
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname
smtpd_client_restrictions = permit_mynetworks check_client_access
hash:/etc/postfix/without_ptr reject_unknown_client_hostname
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_delay_reject = yes
smtpd_error_sleep_time = 10s
smtpd_hard_error_limit = ${stress?1}${stress:5}
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks
reject_invalid_helo_hostname reject_non_fqdn_helo_hostname
reject_unknown_helo_hostname
smtpd_milters = inet:localhost:11332
smtpd_proxy_timeout = 600s
smtpd_recipient_restrictions = check_sender_access
hash:/etc/postfix/check_sender_access, permit_sasl_authenticated,
permit_mynetworks, reject_invalid_helo_hostname,
reject_unknown_reverse_client_hostname, reject_unauth_destination
smtpd_relay_restrictions = reject_non_fqdn_recipient
reject_unknown_recipient_domain permit_mynetworks
reject_unauth_destination
smtpd_restriction_classes = mua_sender_restrictions
mua_client_restrictions mua_relay_restrictions
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = private/auth_dovecot
smtpd_sasl_type = dovecot
smtpd_sender_login_maps =
proxy:mysql:/etc/postfix/sql/mysql_virtual_sender_acl.cf
smtpd_sender_restrictions =
reject_authenticated_sender_login_mismatch, permit_mynetworks,
reject_sender_login_mismatch, permit_sasl_authenticated,
reject_unlisted_sender, reject_unknown_sender_domain
smtpd_soft_error_limit = 3
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/letsencrypt/live/mx.example.com/fullchain.pem
smtpd_tls_ciphers = high
smtpd_tls_dh1024_param_file = /etc/ssl/mail/dhparams_2048.pem
smtpd_tls_dh512_param_file = /etc/ssl/mail/dhparams_512.pem
smtpd_tls_eecdh_grade = strong
smtpd_tls_exclude_ciphers = ECDHE-RSA-RC4-SHA, RC4, aNULL
smtpd_tls_key_file = /etc/letsencrypt/live/mx.example.com/privkey.pem
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_exclude_ciphers = ECDHE-RSA-RC4-SHA, RC4, aNULL
smtpd_tls_mandatory_protocols = !SSLv3
smtpd_tls_protocols = !SSLv3
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
tls_high_cipherlist =
EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
tls_preempt_cipherlist = yes
tls_ssl_options = NO_COMPRESSION
virtual_alias_maps =
proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf,
proxy:mysql:/etc/postfix/sql/mysql_virtual_spamalias_maps.cf,
proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_maps.cf,
proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_catchall_maps.cf
virtual_gid_maps = static:5000
virtual_mailbox_base = /var/vmail/
virtual_mailbox_domains =
proxy:mysql:/etc/postfix/sql/mysql_virtual_domains_maps.cf
virtual_mailbox_maps =
proxy:mysql:/etc/postfix/sql/mysql_virtual_mailbox_maps.cf,
proxy:mysql:/etc/postfix/sql/mysql_virtual_alias_domain_mailbox_maps.cf
virtual_minimum_uid = 104
virtual_transport = lmtp:unix:private/dovecot-lmtp
virtual_uid_maps = static:5000


2023-07-28T10:25:07.930900+02:00 mx postfix/cleanup[4058]:
BE522120092: milter-reject: END-OF-MESSAGE from
unknown[2a01:4f8:120:4268::10]: 4.7.1 Tempfail - internal scan engine
error. (support-id BE522120092); from=<it-projekte at example.com>
to=<info at example.com> proto=ESMTP helo=<crm.example.com>
2023-07-28T10:36:58.229056+02:00 mx postfix/cleanup[5025]:
8230B120092: milter-reject: END-OF-MESSAGE from
mail-db8eur05on20601.outbound.protection.outlook.com[2a01:111:f400:7e1a::601]:
4.7.1 Tempfail - internal scan engine error. (support-id 8230B120092);
from=<vs at stingel-consulting.de> to=<it-projekte at example.com>
proto=ESMTP helo=<EUR05-DB8-obe.outbound.protection.outlook.com>
2023-07-28T10:38:11.692443+02:00 mx postfix/cleanup[5025]:
46E29120092: milter-reject: END-OF-MESSAGE from
mail-db5eur02on2072.outbound.protection.outlook.com[40.107.249.72]:
4.7.1 Tempfail - internal scan engine error. (support-id 46E29120092);
from=<vs at stingel-consulting.de> to=<it-projekte at example.com>
proto=ESMTP helo=<EUR02-DB5-obe.outbound.protection.outlook.com>
2023-07-28T10:46:23.587562+02:00 mx postfix/cleanup[5852]:
78090120092: milter-reject: END-OF-MESSAGE from
unknown[2a01:4f8:120:4268::10]: 4.7.1 Tempfail - internal scan engine
error. (support-id 78090120092); from=<it-projekte at example.com>
to=<info at example.com> proto=ESMTP helo=<crm.example.com>
2023-07-28T10:55:43.596435+02:00 mx postfix/cleanup[6601]:
91910120092: milter-reject: END-OF-MESSAGE from
listi.jpberlin.de[91.198.250.5]: 4.7.1 Tempfail - internal scan engine
error. (support-id 91910120092);
from=<postfixbuch-users-bounces at listen.jpberlin.de>
to=<postfix.user at example.com> proto=ESMTP helo=<listi.jpberlin.de>
2023-07-28T10:55:47.797358+02:00 mx postfix/cleanup[6614]:
3BD83120092: milter-reject: END-OF-MESSAGE from unknown[192.168.1.10]:
4.7.1 Tempfail - internal scan engine error. (support-id 3BD83120092);
from=<it-projekte at example.com> to=<info at example.com> proto=ESMTP
helo=<crm.example.com>
2023-07-28T10:55:57.696891+02:00 mx postfix/cleanup[6601]:
0351A120092: milter-reject: END-OF-MESSAGE from
listi.jpberlin.de[91.198.250.5]: 4.7.1 Tempfail - internal scan engine
error. (support-id 0351A120092);
from=<postfixbuch-users-bounces at listen.jpberlin.de>
to=<postfix.user at example.com> proto=ESMTP helo=<listi.jpberlin.de>
2023-07-28T11:02:20.944195+02:00 mx postfix/cleanup[7128]:
7BCCB120092: milter-reject: END-OF-MESSAGE from
p5ddcf01a.dip0.t-ipconnect.de[93.220.240.26]: 4.7.1 Tempfail -
internal scan engine error. (support-id 7BCCB120092);
from=<it-projekte at example.com> to=<it-projekte at example.com>
proto=ESMTP helo=<nairobi.localnet>
2023-07-28T11:05:41.283052+02:00 mx postfix/cleanup[7390]:
3263A120092: milter-reject: END-OF-MESSAGE from
listi.jpberlin.de[91.198.250.5]: 4.7.1 Tempfail - internal scan engine
error. (support-id 3263A120092);
from=<postfixbuch-users-bounces at listen.jpberlin.de>
to=<postfix.user at example.com> proto=ESMTP helo=<listi.jpberlin.de>
2023-07-28T11:23:00.749182+02:00 mx postfix/cleanup[1352]:
20AF1120092: milter-reject: END-OF-MESSAGE from
mail.ablegroup.de[212.211.178.98]: 4.7.1 Tempfail - internal scan
engine error. (support-id 20AF1120092); from=<reutlingen at ferchau.com>
to=<it-projekte at example.com> proto=ESMTP helo=<mail.ablegroup.de>
2023-07-28T11:24:35.739342+02:00 mx postfix/cleanup[1995]:
47563120092: milter-reject: END-OF-MESSAGE from
p5ffckdw1a.dip0.t-ipconnect.de[93.220.236.86]: 4.7.1 Tempfail -
internal scan engine error. (support-id 47563120092);
from=<it-projekte at example.com> to=<it-projekte at example.com>
proto=ESMTP helo=<nairobi.localnet>