<br><font size=2 face="sans-serif">Hallo zusammen,</font>
<br>
<br><font size=2 face="sans-serif">habe meine main.cf nochmal mit Ralfs
und Sandys Vorschlägen überarbeitet. Sieht nun so aus (postconf -n):</font>
<br>
<br><font size=2 face="sans-serif">alias_database = hash:/etc/aliases</font>
<br><font size=2 face="sans-serif">alias_maps = hash:/etc/aliases</font>
<br><font size=2 face="sans-serif">biff = no</font>
<br><font size=2 face="sans-serif">config_directory = /etc/postfix</font>
<br><font size=2 face="sans-serif">content_filter = amavis:[127.0.0.1]:10024</font>
<br><font size=2 face="sans-serif">local_recipient_maps = hash:/etc/postfix/local_recipients</font>
<br><font size=2 face="sans-serif">mailbox_command =</font>
<br><font size=2 face="sans-serif">mailbox_size_limit = 0</font>
<br><font size=2 face="sans-serif">mydestination = $mydomains, localhost.$mydomain</font>
<br><font size=2 face="sans-serif">myhostname = smtp.domain.de</font>
<br><font size=2 face="sans-serif">mynetworks = 127.0.0.1/8, 192.168.0.2/32</font>
<br><font size=2 face="sans-serif">myorigin = $mydomain</font>
<br><font size=2 face="sans-serif">recipient_canonical_maps = hash:/etc/postfix/recipient_canonical</font>
<br><font size=2 face="sans-serif">recipient_delimiter = +</font>
<br><font size=2 face="sans-serif">smtpd_banner = $myhostname ESMTP
#muss ja niemand wissen,
dass postfix dahinter steckt</font>
<br><font size=2 face="sans-serif">smtpd_helo_required = yes</font>
<br>
<br><font size=2 face="sans-serif">smtpd_recipient_restrictions = </font>
<br><font size=2 face="sans-serif"> reject_unauth_pipelining,
</font>
<br><font size=2 face="sans-serif"> reject_unauth_destination,</font>
<br><font size=2 face="sans-serif"> permit_mynetworks,
</font>
<br><font size=2 face="sans-serif"> check_sender_access
hash:/etc/postfix/map_sender_access_fakelocal </font>
<br><font size=2 face="sans-serif"> check_sender_access
hash:/etc/postfix/sender_access, </font>
<br><font size=2 face="sans-serif"> check_recipient_access
hash:/etc/postfix/access, </font>
<br><font size=2 face="sans-serif"> reject_non_fqdn_sender,
reject_invalid_hostname, </font>
<br><font size=2 face="sans-serif"> reject_non_fqdn_hostname
</font>
<br><font size=2 face="sans-serif"> reject_unknown_recipient_domain,
</font>
<br><font size=2 face="sans-serif"> reject_non_fqdn_recipient,
</font>
<br><font size=2 face="sans-serif"> reject_unknown_recipient_domain,
</font>
<br><font size=2 face="sans-serif"> reject_unknown_sender_domain,
</font>
<br><font size=2 face="sans-serif"> reject_rbl_client
relays.ordb.org, </font>
<br><font size=2 face="sans-serif"> reject_rbl_client
blackholes.mail-abuse.org, </font>
<br><font size=2 face="sans-serif"> reject_rbl_client
ix.dnsbl.manitu.net, </font>
<br><font size=2 face="sans-serif"> reject_rbl_client
sbl-xbl.spamhaus.org, </font>
<br><font size=2 face="sans-serif"> reject_rbl_client
dnsbl.njabl.org, </font>
<br><font size=2 face="sans-serif"> reject_rbl_client
relays.ordb.org, </font>
<br><font size=2 face="sans-serif"> reject_rbl_client
dnsbl.njabl.org, </font>
<br>
<br><font size=2 face="sans-serif">check_policy_service inet:127.0.0.1:60000</font>
<br><font size=2 face="sans-serif">transport_maps = hash:/etc/postfix/transport</font>
<br>
<br>
<br><font size=2 face="sans-serif">Und hier die master.cf:</font>
<br>
<br><font size=2 face="sans-serif"># ==========================================================================</font>
<br><font size=2 face="sans-serif"># service type private unpriv
chroot wakeup maxproc command + args</font>
<br><font size=2 face="sans-serif">#
(yes) (yes) (yes) (never) (100)</font>
<br><font size=2 face="sans-serif"># ==========================================================================</font>
<br><font size=2 face="sans-serif">smtp inet n
- - -
- smtpd</font>
<br><font size=2 face="sans-serif">#submission inet n -
- - -
smtpd</font>
<br><font size=2 face="sans-serif"># -o smtpd_etrn_restrictions=reject</font>
<br><font size=2 face="sans-serif">#628 inet n
- - -
- qmqpd</font>
<br><font size=2 face="sans-serif">pickup fifo n
- - 60
1 pickup</font>
<br><font size=2 face="sans-serif">cleanup unix n
- - -
0 cleanup</font>
<br><font size=2 face="sans-serif">qmgr fifo n
- - 300
1 qmgr</font>
<br><font size=2 face="sans-serif">#qmgr fifo n
- - 300
1 oqmgr</font>
<br><font size=2 face="sans-serif">rewrite unix -
- - -
- trivial-rewrite</font>
<br><font size=2 face="sans-serif">bounce unix -
- - -
0 bounce</font>
<br><font size=2 face="sans-serif">defer unix -
- - -
0 bounce</font>
<br><font size=2 face="sans-serif">trace unix -
- - -
0 bounce</font>
<br><font size=2 face="sans-serif">verify unix -
- - -
1 verify</font>
<br><font size=2 face="sans-serif">flush unix n
- - 1000?
0 flush</font>
<br><font size=2 face="sans-serif">proxymap unix -
- n -
- proxymap</font>
<br><font size=2 face="sans-serif">smtp unix -
- - -
- smtp</font>
<br><font size=2 face="sans-serif">relay unix -
- - -
- smtp</font>
<br><font size=2 face="sans-serif"># -o smtp_helo_timeout=5
-o smtp_connect_timeout=5</font>
<br><font size=2 face="sans-serif">showq unix n
- - -
- showq</font>
<br><font size=2 face="sans-serif">error unix -
- - -
- error</font>
<br><font size=2 face="sans-serif">local unix -
n n -
- local</font>
<br><font size=2 face="sans-serif">virtual unix -
n n -
- virtual</font>
<br><font size=2 face="sans-serif">lmtp unix -
- n -
- lmtp</font>
<br><font size=2 face="sans-serif">anvil unix -
- n -
1 anvil</font>
<br>
<br><font size=2 face="sans-serif">maildrop unix -
n n -
- pipe</font>
<br><font size=2 face="sans-serif"> flags=DRhu user=vmail argv=/usr/local/bin/maildrop
-d ${recipient}</font>
<br><font size=2 face="sans-serif">uucp unix -
n n -
- pipe</font>
<br><font size=2 face="sans-serif"> flags=Fqhu user=uucp argv=uux
-r -n -z -a$sender - $nexthop!rmail ($recipient)</font>
<br><font size=2 face="sans-serif">ifmail unix -
n n -
- pipe</font>
<br><font size=2 face="sans-serif"> flags=F user=ftn argv=/usr/lib/ifmail/ifmail
-r $nexthop ($recipient)</font>
<br><font size=2 face="sans-serif">bsmtp unix -
n n -
- pipe</font>
<br><font size=2 face="sans-serif"> flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp
-d -t$nexthop -f$sender $recipient</font>
<br><font size=2 face="sans-serif">scalemail-backend unix -
n n -
2 pipe</font>
<br><font size=2 face="sans-serif"> flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
${nexthop} ${user} ${extension}</font>
<br>
<br>
<br><font size=2 face="sans-serif">amavis unix - - - - 2 smtp</font>
<br><font size=2 face="sans-serif"> -o smtp_data_done_timeout=1200</font>
<br><font size=2 face="sans-serif"> -o smtp_send_xforward_command=yes</font>
<br>
<br><font size=2 face="sans-serif">127.0.0.1:10025 inet n - - - - smtpd</font>
<br><font size=2 face="sans-serif"> -o content_filter=</font>
<br><font size=2 face="sans-serif"> -o local_recipient_maps=</font>
<br><font size=2 face="sans-serif"> -o relay_recipient_maps=</font>
<br><font size=2 face="sans-serif"> -o smtpd_restriction_classes=</font>
<br><font size=2 face="sans-serif"> -o smtpd_client_restrictions=</font>
<br><font size=2 face="sans-serif"> -o smtpd_helo_restrictions=</font>
<br><font size=2 face="sans-serif"> -o smtpd_sender_restrictions=</font>
<br><font size=2 face="sans-serif"> -o smtpd_recipient_restrictions=permit_mynetworks,reject</font>
<br><font size=2 face="sans-serif"> -o mynetworks=127.0.0.0/8</font>
<br><font size=2 face="sans-serif"> -o strict_rfc821_envelopes=yes</font>
<br><font size=2 face="sans-serif"> -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks</font>
<br>
<br>
<br><font size=2 face="sans-serif">Eingetragene Absendernamen in /etc/postfix/sender_access
werden entsprechend durchgelassen, für den Fall dass es mit den Filterungen
probleme gibt, ist ja auch so erwünscht.</font>
<br><font size=2 face="sans-serif">Ansonsten funktioniert die Sache nach
den ersten Tests nach Vorstellung.</font>
<br>
<br><font size=2 face="sans-serif">Gibt es der Konfiguration noch etwas
hinzuzufügen oder zu ändern? Das System soll möglichst effektiv den entstehenden
Spam abwehren.</font>
<br>
<br><font size=2 face="sans-serif">Ein gravierendes Problem habe ich aber
noch:</font>
<br><font size=2 face="sans-serif">Der Mailserver, welcher in der main.cf
unter mynetworks eingetragen ist, kann keine Mails über diesen Postfix
nach draussen versenden. Ich erhalte immer 554, Relaying denied, obwohl
eben der Eintrag unter mynetworks zu finden ist, ich finde den Haken an
der Sache einfach nicht. Auch das Hinzufügen des Host in der master.cf
brachte keine Verbesserung.</font>
<br>
<br><font size=2 face="sans-serif">Woran könnte das liegen?</font>
<br>
<br><font size=2 face="sans-serif">Gruss</font>
<br><font size=2 face="sans-serif">Thomas</font>