Finale Zustellung mit Postfix
Klaus Tachtler
klaus at tachtler.net
Fr Aug 16 05:43:28 CEST 2024
Hallo Nico,
steht in /etc/hostname ein FQDN?
Du kannst das auch anders lösen, siehe auch z.B. was ich für mich mal notiert habe:
https://dokuwiki.tachtler.net/doku.php?id=tachtler:postfix_archlinux#myhostname1
Grüße
Klaus.
--
Diese Nachricht wurde von meinem Android-Gerät mit FairMail gesendet.
Von: Nico Funke via Postfixbuch-users <postfixbuch-users at listen.jpberlin.de>
An: postfixbuch-users at listen.jpberlin.de
Kopie: Nico Funke <nico.funke at spun-industries.de>
Datum: 16.08.2024 03:59:12
Betreff: Finale Zustellung mit Postfix
> Hallo zusammen,
>
> ich übersehe vermutlich eine Kleinigkeit und würde mich freuen wenn Ihr mir den Fehler zeigen könntet.
>
> Ich habe ein Postfix in der Installation als Relay konfiguriert und dies hat wie erwartet funktioniert.
> Die Mails wurden an den finalen Server geleitet, verarbeitet und zugestellt.
>
> Jetzt möchte ich das der Relay selbst final zustellt.
> Daher habe ich rekonfiguriert.
>
> Ich möchte somit erreichen, dass der Postfix nicht nur die Mails eventueller Tools bearbeitet sondern auch Systemmails welche meist von "root" verschickt werden extern zustellt.
> Jedoch habe ich hier einen Konfigurationsfehler, welchen ich ärgerlicherweise nicht zuordnen kann.
>
> Zum Test habe wollte ich mir eben mit dem Tool "Logwatch" eine Zusammenfassung der Log's per Mail senden lassen. Das selbe Ergebnis erhalte ich auch mit dem Befehl "echo Testmail | mail \ empfänger at domain.tld"
>
> *LOG's*:
> postfix/pickup[2410849]: 966A5445A4: uid=0 from=<root>
> postfix/cleanup[2415005]: 966A5445A4: message-id=<20240815094427.966A5445A4 at hostname>
> postfix/qmgr[1052296]: 966A5445A4: from=<root at domain.tld>, size=2369, nrcpt=1 (queue active)
> postfix/smtp[2415007]: 966A5445A4: to=<empfänger at domain.tld>, relay=mail.domain.tld[188.40.3.215]:25, delay=3.4, delays=0.34/0.02/3.1/0, dsn=5.0.0, status=bounced (host mail.domain.tld [188.40.3.215] said: 550 Please use a fully-qualified domain name for HELO/EHLO (in reply to MAIL FROM command))
> postfix/cleanup[2415005]: BA439445A6: message-id=<20240815094430.BA439445A6 at hostname>
> postfix/bounce[2415008]: 966A5445A4: sender non-delivery notification: BA439445A6
> postfix/qmgr[1052296]: BA439445A6: from=<>, size=4474, nrcpt=1 (queue active)
> postfix/qmgr[1052296]: 966A5445A4: removed
> postfix/smtp[2415007]: BA439445A6: to=<root at domain.tld>, relay=mail.domain.tld [188.40.30.86]:25, delay=3.1, delays=0.01/0/3.1/0, dsn=5.0.0, status=bounced (host mail.domain.tld [188.40.30.86] said: 550 Please use a fully-qualified domain name for HELO/EHLO (in reply to MAIL FROM command))
> postfix/qmgr[1052296]: BA439445A6: removed
>
>
> */etc/postfix/master.cf*:
> #
> # Postfix master process configuration file. For details on the format
> # of the file, see the master(5) manual page (command: "man 5 master" or
> # on-line: http://www.postfix.org/master.5.html).
> #
> # Do not forget to execute "postfix reload" after editing this file.
> #
> # ==========================================================================
> # service type private unpriv chroot wakeup maxproc command + args
> # (yes) (yes) (no) (never) (100)
> # ==========================================================================
> smtp inet n - y - - smtpd
> #smtp inet n - y - 1 postscreen
> #smtpd pass - - y - - smtpd
> #dnsblog unix - - y - 0 dnsblog
> #tlsproxy unix - - y - 0 tlsproxy
> # Choose one: enable submission for loopback clients only, or for any client.
> #127.0.0.1:submission inet n - y - - smtpd
> submission inet n - y - - smtpd
> # -o syslog_name=postfix/submission
> -o smtpd_tls_security_level=encrypt
> # -o smtpd_sasl_auth_enable=yes
> # -o smtpd_tls_auth_only=yes
> # -o smtpd_reject_unlisted_recipient=no
> # Instead of specifying complex smtpd_<xxx>_restrictions here,
> # specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
> # here, and specify mua_<xxx>_restrictions in main.cf (where
> # "<xxx>" is "client", "helo", "sender", "relay", or "recipient").
> -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> # -o smtpd_helo_restrictions=
> # -o smtpd_sender_restrictions=
> # -o smtpd_relay_restrictions=
> # -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
> # -o milter_macro_daemon_name=ORIGINATING
> # Choose one: enable submissions for loopback clients only, or for any client.
> #127.0.0.1:submissions inet n - y - - smtpd
> #submissions inet n - y - - smtpd
> # -o syslog_name=postfix/submissions
> # -o smtpd_tls_wrappermode=yes
> # -o smtpd_sasl_auth_enable=yes
> # -o smtpd_reject_unlisted_recipient=no
> # Instead of specifying complex smtpd_<xxx>_restrictions here,
> # specify "smtpd_<xxx>_restrictions=$mua_<xxx>_restrictions"
> # here, and specify mua_<xxx>_restrictions in main.cf (where
> # "<xxx>" is "client", "helo", "sender", "relay", or "recipient").
> # -o smtpd_client_restrictions=
> # -o smtpd_helo_restrictions=
> # -o smtpd_sender_restrictions=
> # -o smtpd_relay_restrictions=
> # -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
> # -o milter_macro_daemon_name=ORIGINATING
> #628 inet n - y - - qmqpd
> pickup unix n - y 60 1 pickup
> cleanup unix n - y - 0 cleanup
> qmgr unix n - n 300 1 qmgr
> #qmgr unix n - n 300 1 oqmgr
> tlsmgr unix - - y 1000? 1 tlsmgr
> rewrite unix - - y - - trivial-rewrite
> bounce unix - - y - 0 bounce
> defer unix - - y - 0 bounce
> trace unix - - y - 0 bounce
> verify unix - - y - 1 verify
> flush unix n - y 1000? 0 flush
> proxymap unix - - n - - proxymap
> proxywrite unix - - n - 1 proxymap
> smtp unix - - y - - smtp
> relay unix - - y - - smtp
> -o syslog_name=postfix/$service_name
> # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
> showq unix n - y - - showq
> error unix - - y - - error
> retry unix - - y - - error
> discard unix - - y - - discard
> local unix - n n - - local
> virtual unix - n n - - virtual
> lmtp unix - - y - - lmtp
> anvil unix - - y - 1 anvil
> scache unix - - y - 1 scache
> postlog unix-dgram n - n - 1 postlogd
> #
> # ====================================================================
> # Interfaces to non-Postfix software. Be sure to examine the manual
> # pages of the non-Postfix software to find out what options it wants.
> #
> # Many of the following services use the Postfix pipe(8) delivery
> # agent. See the pipe(8) man page for information about ${recipient}
> # and other message envelope options.
> # ====================================================================
> #
> # maildrop. See the Postfix MAILDROP_README file for details.
> # Also specify in main.cf: maildrop_destination_recipient_limit=1
> #
> maildrop unix - n n - - pipe
> flags=DRXhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
> #
> # ====================================================================
> #
> # Recent Cyrus versions can use the existing "lmtp" master.cf entry.
> #
> # Specify in cyrus.conf:
> # lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
> #
> # Specify in main.cf one or more of the following:
> # mailbox_transport = lmtp:inet:localhost
> # virtual_transport = lmtp:inet:localhost
> #
> # ====================================================================
> #
> # Cyrus 2.1.5 (Amos Gouaux)
> # Also specify in main.cf: cyrus_destination_recipient_limit=1
> #
> #cyrus unix - n n - - pipe
> # flags=DRX user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
> #
> # ====================================================================
> # Old example of delivery via Cyrus.
> #
> #old-cyrus unix - n n - - pipe
> # flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
> #
> # ====================================================================
> #
> # See the Postfix UUCP_README file for configuration details.
> #
> uucp unix - n n - - pipe
> flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
> #
> # Other external delivery methods.
> #
> ifmail unix - n n - - pipe
> flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
> bsmtp unix - n n - - pipe
> flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
> scalemail-backend unix - n n - 2 pipe
> flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
> mailman unix - n n - - pipe
> flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user}
>
>
> # See /usr/share/postfix/main.cf.dist for a commented, more complete version
>
>
> # Debian specific: Specifying a file name will cause the first
> # line of that file to be used as the name. The Debian default
> # is /etc/mailname.
> #myorigin = /etc/mailname
>
> smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
> biff = no
>
> # appending .domain is the MUA's job.
> append_dot_mydomain = no
>
> # Uncomment the next line to generate "delayed mail" warnings
> #delay_warning_time = 4h
>
> readme_directory = no
>
> # See http://www.postfix.org/COMPATIBILITY_README.html -- default to 3.6 on
> # fresh installs.
> compatibility_level = 3.6
>
>
> */etc/postfix/main.cf*
> # TLS parameters
> smtpd_tls_security_level=encrypt
> smtpd_tls_cert_file=/etc/ssl/ordner/certificate.crt
> smtpd_tls_key_file=/etc/ssl/ordner/name.key
> smtpd_tls_CAfile=/etc/ssl/ordner/
>
> #outgoing
> smtp_tls_protocols = !SSLv2, !SSLv3
> smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
> smtp_tls_ciphers = high
> smtp_tls_mandatory_ciphers = high
> #smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
> smtp_tls_cert_file=/etc/ssl/ordner/certificate.crt
> smtp_tls_key_file=/etc/ssl/ordner/name.key
> smtp_tls_CAfile=/etc/ssl/ordner/
> smtp_tls_CApath=/etc/ssl/certs
>
> # Enable additional Postfix SMTP server logging of TLS activity
> smtp_tls_loglevel = 1
>
> smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
> myhostname = der selbe Name wie unter /etc/hostname
> alias_maps = hash:/etc/aliases
> alias_database = hash:/etc/aliases
> myorigin = /etc/mailname
> mydestination = info at domain.tld, admin at domain.tld, hostname, localhost.localdomain, localhost
> relayhost =
> mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
> mailbox_size_limit = 0
> recipient_delimiter = +
> inet_interfaces = all
> inet_protocols = ipv4
>
>
> */etc/aliases *
> root: core
> postmaster: core
>
>
> Best,
>
> Nico
--
---------------------------------------
e-Mail : klaus at tachtler.net
Homepage: https://www.tachtler.net
DokuWiki: https://dokuwiki.tachtler.net
---------------------------------------
Mehr Informationen über die Mailingliste Postfixbuch-users