[Postfixbuch-users] content filter

Di Apr 29 14:10:37 CEST 2008

Die Emails kommen in der Reihenfolge an:
Postfix->clamsmtpd->Postfix->proxsmtpd->Postfix

Die Ports 125 und 225 sind für die Rückführung der Mails von den Proxy's an den Postfix da.
clamsmtpd sitzt auf Port 10025 und proxsmtpd auf Port 10026.

Die Ausgabe von postconf -n ist im Anhang.

####Test mit PIPELINING:

bash-3.1# nc localhost 25
220 exa.example.de ESMTP Postfix
ehlo exa.example.de
250-exa.example.de
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from: test at exa.example.de
250 2.1.0 Ok
rcpt to: generalstone at exa.example.de
250 2.1.5 Ok
rcpt to: webmaster at exa.example.de
250 2.1.5 Ok
rcpt to: postmaster at exa.example.de
250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
Test
..
250 2.0.0 Ok: queued as 269C41528246

Im Logfile steht dann folgendes:

Apr 29 13:48:54 generalstone postfix/smtpd[21768]: connect from localhost[127.0.0.1]
Apr 29 13:49:11 generalstone postfix/smtpd[21768]: 269C41528246: client=localhost[127.0.0.1]
Apr 29 13:49:55 generalstone postfix/cleanup[21772]: 269C41528246: message-id=<20080429114911.269C41528246 at exa.example.de>
Apr 29 13:49:55 generalstone postfix/qmgr[1475]: 269C41528246: from=<test at exa.example.de>, size=347, nrcpt=3 (queue active)
Apr 29 13:49:55 generalstone postfix/local[21774]: 269C41528246: to=<generalstone at exa.example.de>, relay=local, delay=51, delays=51/0.01/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Apr 29 13:49:55 generalstone postfix/local[21774]: 269C41528246: to=<webmaster at exa.example.de>, relay=local, delay=51, delays=51/0.03/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Apr 29 13:49:55 generalstone postfix/local[21775]: 269C41528246: to=<postmaster at exa.example.de>, relay=local, delay=51, delays=51/0.03/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Apr 29 13:49:55 generalstone postfix/qmgr[1475]: 269C41528246: removed
Apr 29 13:49:56 generalstone postfix/smtpd[21768]: disconnect from localhost[127.0.0.1]

####Test Mail an nur eine User:

bash-3.1# nc localhost 25
220 generalstone.kicks-ass.net ESMTP Postfix
ehlo exa.example.de
250-generalstone.kicks-ass.net
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from: test at exa.example.de
250 2.1.0 Ok
rcpt to: postmaster at exa.example.de
250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
Test
..
250 2.0.0 Ok: queued as 999C71528246

Im Logfile steht dann folgendes:

Apr 29 14:00:34 generalstone postfix/smtpd[25480]: connect from localhost[127.0.0.1]
Apr 29 14:00:57 generalstone postfix/smtpd[25480]: 999C71528246: client=localhost[127.0.0.1]
Apr 29 14:01:09 generalstone postfix/smtpd[25480]: 999C71528246: filter: END-OF-MESSAGE from localhost[127.0.0.1]: <postmaster at exa.example.de>: Recipient address triggers FILTER virus_filter:localhost:10025; from=<test at exa.example.de> to=<postmaster at exa.example.de> proto=ESMTP helo=<exa.example.de>
Apr 29 14:01:09 generalstone postfix/cleanup[25483]: 999C71528246: message-id=<20080429120057.999C71528246 at exa.example.de>
Apr 29 14:01:09 generalstone postfix/qmgr[1475]: 999C71528246: from=<test at exa.example.de>, size=391, nrcpt=1 (queue active)
Apr 29 14:01:09 generalstone clamsmtpd: 1000CF: accepted connection from: 127.0.0.1
Apr 29 14:01:09 generalstone postfix/smtpd[25486]: connect from localhost[127.0.0.1]
Apr 29 14:01:09 generalstone postfix/smtpd[25486]: 61B411528282: client=localhost[127.0.0.1]
Apr 29 14:01:09 generalstone postfix/cleanup[25483]: 61B411528282: message-id=<20080429120057.999C71528246 at exa.example.de>
Apr 29 14:01:09 generalstone postfix/smtpd[25486]: 61B411528282: filter: END-OF-MESSAGE from localhost[127.0.0.1]: <postmaster at exa.example.de>: Recipient address triggers FILTER spam_filter:localhost:10026; from=<test at exa.example.de> to=<postmaster at exa.example.de> proto=ESMTP helo=<exa..example.de>
Apr 29 14:01:09 generalstone clamsmtpd: 1000CF: from=test at exa.example.de, to=postmaster at exa.example.de, status=CLEAN
Apr 29 14:01:09 generalstone postfix/qmgr[1475]: 61B411528282: from=<test at exa.example.de>, size=653, nrcpt=1 (queue active)
Apr 29 14:01:09 generalstone postfix/qmgr[1475]: 999C71528246: removed
Apr 29 14:01:09 generalstone postfix/smtp[25484]: 999C71528246: to=<postmaster at exa.example.de>, relay=localhost[127.0.0.1]:10025, delay=19, delays=19/0.03/0.08/0.06, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 61B411528282)
Apr 29 14:01:09 generalstone postfix/smtpd[25486]: disconnect from localhost[127.0.0.1]
Apr 29 14:01:09 generalstone proxsmtpd: 1000AE: accepted connection from: 127.0.0.1
Apr 29 14:01:09 generalstone postfix/smtpd[25490]: connect from localhost[127.0.0.1]
Apr 29 14:01:09 generalstone postfix/smtpd[25490]: 8ACCA1528246: client=localhost[127.0.0.1]
Apr 29 14:01:09 generalstone spamd[1998]: spamd: connection from localhost [127.0.0.1] at port 34557
Apr 29 14:01:09 generalstone spamd[1998]: spamd: using default config for spamassassin: /var/lib/spamassassin/users/postmaster/user_prefs
Apr 29 14:01:09 generalstone spamd[1998]: spamd: processing message <20080429120057.999C71528246 at exa.example.de> for spamassassin:124
Apr 29 14:01:09 generalstone spamd[1998]: spamd: clean message (2.7/5.0) for spamassassin:124 in 0.1 seconds, 653 bytes.
Apr 29 14:01:09 generalstone spamd[1998]: spamd: result: . 2 - ALL_TRUSTED,MISSING_SUBJECT,TVD_SPACE_RATIO scantime=0.1,size=653,user=spamassassin,uid=124,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=34557,mid=<20080429120057.999C71528246 at exa.example.de>,autolearn=no,shortcircuit=no
Apr 29 14:01:09 generalstone spamd[1980]: prefork: child states: II
Apr 29 14:01:09 generalstone postfix/cleanup[25483]: 8ACCA1528246: message-id=<20080429120057.999C71528246 at exa.example.de>
Apr 29 14:01:09 generalstone postfix/qmgr[1475]: 8ACCA1528246: from=<test at exa.example.de>, size=982, nrcpt=1 (queue active)
Apr 29 14:01:09 generalstone postfix/qmgr[1475]: 61B411528282: removed
Apr 29 14:01:09 generalstone postfix/smtp[25488]: 61B411528282: to=<postmaster at exa.example.de>, relay=localhost[127.0.0.1]:10026, delay=0.45, delays=0.06/0.03/0.08/0.28, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 8ACCA1528246)
Apr 29 14:01:09 generalstone proxsmtpd: 1000AE: from=test at exa.example.de, to=postmaster at exa.example.de, status=FILTERED
Apr 29 14:01:09 generalstone postfix/smtpd[25490]: disconnect from localhost[127.0.0.1]
Apr 29 14:01:09 generalstone postfix/local[25493]: 8ACCA1528246: to=<postmaster at exa.example.de>, relay=local, delay=0.3, delays=0.27/0.01/0/0.02, dsn=2.0.0, status=sent (delivered to mailbox)
Apr 29 14:01:09 generalstone postfix/qmgr[1475]: 8ACCA1528246: removed
Apr 29 14:01:10 generalstone postfix/smtpd[25480]: disconnect from localhost[127.0.0.1]

-------------- nächster Teil --------------
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
body_checks = pcre:/etc/postfix/body_checks
canonical_maps = hash:/etc/postfix/canonical
config_directory = /etc/postfix
header_checks = pcre:/etc/postfix/header_checks
mailbox_size_limit = 0
masquerade_domains = exa.example.de
masquerade_exceptions = 
mime_header_checks = pcre:/etc/postfix/mime_header_checks
mydestination = exa.example.de
myhostname = exa.example.de
mynetworks = 127.0.0.1
myorigin = /etc/mailname
nested_header_checks = pcre:/etc/postfix/nested_header_checks
recipient_bcc_maps = hash:/etc/postfix/recipient_bcc
recipient_canonical_maps = hash:/etc/postfix/recipient_canonical
recipient_delimiter = +
remote_header_rewrite_domain = exa.example.de
sender_bcc_maps = hash:/etc/postfix/sender_bcc
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sender_dependent_relayhost_maps = hash:/etc/postfix/sender_dependent_relayhost
smtp_generic_maps = hash:/etc/postfix/smtp_generic
smtp_sasl_auth_enable = yes
smtp_sasl_mechanism_filter = plain, login
smtp_sasl_password_maps = hash:/etc/postfix/smtp_sasl_password
smtp_sasl_security_options = noanonymous
smtp_tls_CApath = /etc/ssl/certs
smtp_tls_mandatory_ciphers = export
smtp_tls_mandatory_protocols = TLSv1
smtp_tls_session_cache_database = hash:${queue_directory}/smtp_tls_session_cache
smtp_use_tls = yes
smtpd_client_restrictions = check_client_access hash:/etc/postfix/client_access, permit_mynetworks, permit_sasl_authenticated, reject_unknown_client_hostname, reject_rbl_client zen.spamhaus.org
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_end_of_data_restrictions = check_recipient_access hash:/etc/postfix/end_of_data_recipient_access
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_helo_hostname, permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname
smtpd_recipient_restrictions = reject_non_fqdn_recipient, check_recipient_access hash:/etc/postfix/recipient_access, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_security_options = noanonymous
smtpd_sender_login_maps = hash:/etc/postfix/smtpd_sender_login
smtpd_sender_restrictions = reject_non_fqdn_sender, check_client_access hash:/etc/postfix/client_sender_access, reject_unauthenticated_sender_login_mismatch, reject_authenticated_sender_login_mismatch, check_sender_access hash:/etc/postfix/sender_access, permit_mynetworks, permit_sasl_authenticated
smtpd_tls_CApath = /etc/ssl/certs
smtpd_tls_cert_file = /etc/ssl/certs/generalstone_cert.pem
smtpd_tls_key_file = /etc/ssl/private/generalstone_privkey.pem
smtpd_tls_mandatory_ciphers = export
smtpd_tls_mandatory_protocols = TLSv1
smtpd_tls_session_cache_database = hash:${queue_directory}/smtpd_tls_session_cache
smtpd_use_tls = yes
tls_export_cipherlist = DHE-RSA-AES256-SHA
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = hash:/etc/postfix/virtual_alias