[Postfixbuch-users] recipient restrictions und access

[walhalla]

Stefan Förster schrieb:
> * walhalla <walhalla at w-4.de> wrote:
>> auf einem server, der nur mails annimmt, spam und viren scannt und dann
>> die mails per smtp (transport) an die empfaengermailserver weiterleitet,
>> hatte ich immer eine access - liste in der main.cf ->
> 
> Das ist schonmal suboptimal, eigentlich gibt es dafür doch
> relay_domains und relay_recipient_maps.

ja. aber in der access hab ich halt alles zusammen - absender blocken
und empfaenger filtern ...

>> smtpd_recipient_restrictions =
>>     permit_mynetworks,
>>     reject_invalid_hostname,
>>     reject_unauth_pipelining,
>>     permit_sasl_authenticated,
>>     check_recipient_access hash:/etc/postfix/access,
>>     reject_unauth_destination,
>>     reject_rbl_client cbl.abuseat.org,
>>     reject_rbl_client ix.dnsbl.manitu.net,
>>     permit
> [...]
>> aber die access interessiert den ueberhaupt nicht! ok, bin mittlerweile
>> etwas uebermuedet ... aber wieso geht das nicht mehr? hat mir jemand
>> bitte einen tip?
> 
> Ohne die Ausgabe von postconf -n ist das schwer zu beantworten - nimmt
> er denn alles an? Weist er alles ab? Obiges Setup wird für genügend

nimmt an.

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
body_checks = regexp:/etc/postfix/body_checks
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = amavis:[127.0.0.1]:10024
header_checks = regexp:/etc/postfix/header_checks
inet_interfaces = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mime_header_checks = regexp:/etc/postfix/mime_header_checks
mydestination = meiner.meine.de, localhost, localhost.localdomain
myhostname = meiner.meine.de
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
nested_header_checks = regexp:/etc/postfix/nested_header_checks
proxy_read_maps = $local_recipient_maps $mydestination
$virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps
$virtual_mailbox_domains $relay_recipient_maps $relay_domains
$canonical_maps $sender_canonical_maps $recipient_canonical_maps
$relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
receive_override_options = no_address_mappings
recipient_delimiter = +
relay_domains = mysql:/etc/postfix/mysql-virtual_relaydomains.cf
relayhost =
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_restrictions = check_client_access
mysql:/etc/postfix/mysql-virtual_client.cf
smtpd_recipient_restrictions = permit_mynetworks,
reject_invalid_hostname,    reject_unauth_pipelining,
permit_sasl_authenticated,    check_recipient_access
hash:/etc/postfix/access,    reject_unauth_destination,
reject_rbl_client cbl.abuseat.org,    reject_rbl_client list.dsbl.org,
  reject_rbl_client zen.spamhaus.org,    reject_rbl_client
ix.dnsbl.manitu.net,    permit
smtpd_sasl_auth_enable = yes
smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/access
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes
transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
virtual_alias_domains =
virtual_alias_maps =
proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf,
mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_gid_maps = static:5000
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_transport = maildrop
virtual_uid_maps = static:5000

danke!

jens


> ungeeignete Werte von mynetworks, relay_domains, mydestination und ein
> paar anderen Einstellungen zumindest mal alles annehmen.
> 
> 
> Ciao
> Stefan