[Postfixbuch-users] Postscreen mit AmaVisNew koppeln

Nomfundo Ojok Nomfundo.Ojok at gmx.de
Di Aug 2 09:22:55 CEST 2011


Hi,

ich möchte die neue Funktion Postscreen unter Postfix ausprobieren und gleichzeitig nicht auf AmaVis verzichten.
AmaVis habe ich bisher über "content_filter = smtp:[127.0.0.1]:10024" und den Eintrag in der master.cf gelöst.

Wie verbinde ich jetzt postscreen mit der obigen Lösung? Oder geht das gar nicht mehr?

main.cf:
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = mail.example.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
#myorigin = /etc/mailname
myorigin = $mydomain
mydestination = 
  $mydomain
  $myhostname
  localhost
  localhost.$mydomain
  example.de
  example.eu
relayhost = 
mynetworks = 
  192.168.1.0/24
  127.0.0.0/8 
  [::ffff:127.0.0.0]/104 
  [::1]/128
mailbox_transport = cyrus
mailbox_size_limit = 0
message_size_limit = 25971520
recipient_delimiter = +

address_verify_sender = postmaster@$myorigin

virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps
smtpd_client_message_rate_limit = 50
anvil_rate_time_unit = 60s

content_filter = smtp:[127.0.0.1]:10024

smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noanonymous
smtp_sasl_password_maps = hash:/etc/postfix/smtp_auth

smtpd_helo_required = yes

smtpd_client_restrictions =
  permit_sasl_authenticated
  check_sender_access hash:/etc/postfix/access
  permit_mynetworks
  permit

canonical_maps = hash:/etc/postfix/canonical


smtpd_recipient_restrictions =
  reject_non_fqdn_recipient
  reject_non_fqdn_sender
  reject_unknown_sender_domain
  reject_unknown_recipient_domain
  permit_sasl_authenticated
  reject_unauth_destination
  permit_mynetworks
  reject_sender_login_mismatch
  check_recipient_access hash:/etc/postfix/roleaccount_exceptions
  reject_multi_recipient_bounce
  reject_non_fqdn_hostname
  reject_invalid_hostname

inet_interfaces = all
inet_protocols = all



#### POLICYD-WEIGHT

  check_policy_service inet:127.0.0.1:12525
  check_helo_access pcre:/etc/postfix/helo_checks
  check_sender_access hash:/etc/postfix/common_spam_senderdomains
  check_sender_access regexp:/etc/postfix/common_spam_senderdomain_keywords
  permit


#### POSTSCREEN

# Static Lists
postscreen_access_list = permit_mynetworks, cdir:/etc/postfix/postscreen_access.cdir
postscreen_blacklist_action = drop

# DNS Blackhole Lists
postscreen_dnsbl_threshold = 3
postscreen_dnsbl_sites = zen.spamhaus.org*2, bl.spamcop.net*1,
postscreen_dnsbl_action = enforce

# Postgreeting
postscreen_greet_banner = $smtpd_banner
postscreen_greet_action = enforce

# Further Postscreen tests
postscreen_bare_newline_enable = no
postscreen_non_smtp_command_enable = yes
postscreen_non_smtp_command_action = drop
postscreen_pipelining_enable = no

master.cf:
smtpd     pass  -       -       n       -       -       smtpd
smtp      inet  n       -       n       -       1       postscreen
 
localhost:10025   inet  n       -       n       -       -       smtpd
   -o content_filter=
   -o smtpd_proxy_filter=
   -o mynetworks=127.0.0.0/8
   -o smtpd_client_restrictions=
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o smtpd_data_restrictions=
   -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
   
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
        -o smtp_fallback_relay=
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}
cyrus     unix  -       n       n       -       -       pipe
  flags=R user=cyrus argv=/usr/sbin/cyrdeliver -e -m ${extension} ${user}


Grüße und vielen Dank

Nomfundo

-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de



Mehr Informationen über die Mailingliste Postfixbuch-users