On Jan 17, 2006, at 12:42 PM, Mark Martinec wrote:
Mark Nernberg,
Using Amavisd-new 2.3.3, on FreeBSD 6.0, with Postfix 2.3 (snap).
I have made no changes to the system lately.
However, recently, I've begun receiving the following error from
Amavis:
Jan 17 10:58:22 postoffice amavis[16449]: (16449-01) ESMTP: 504
5.5.4 RCPT
command parameter not implemented: ORCPT=rfc822;[EMAIL PROTECTED];
PENALIZE: RCPT TO:<[EMAIL PROTECTED]>
ORCPT=rfc822;[EMAIL PROTECTED]
The setup is: postfix on port 25 -> smtpd_proxy_filter on
localhost:10023
(amavisd-new) -> postfix on localhost:10025 -> delivery.
The message is being rejected by amavisd in the middle -- however,
it only
appears to be happening with certain specific servers.
This happens because amavisd-new is not a transparent smtp proxy,
yet you are using it as a proxy content filter.
In-depth reason is that your Postfix offers DSN support in its
response
to EHLO, but amavisd-new 2.3.0 does not support this SMTP extension.
When a client sees that DSN is offered and decides to make use of it,
it provides ORCPT (and three other) parameteres to MAIL FROM and
RCPT TO
commands, which Postfix passes on to amavisd-new, but amavisd-new does
not know how to deal with that and rightfully rejects the command
(it never announced DSN support in its EHLO response, so should not
be given DSN optional parameters by the client).
The simple answer is: do not use amavisd-new in an unsupported setup.
A possible workaround solution is to configure Postfix
to not offer DSN support:
smtpd_discard_ehlo_keywords = silent-discard, dsn
This works. Only 1 change -- no spaces.
In /etc/postfix/master.cf:
my.ip.add.ress:smtp inet n - n - - smtpd
-o smtpd_discard_ehlo_keywords=silent-discard,dsn
-o smtpd_proxy_filter=127.0.0.1:10023
I feel its important to use before-queue filtering, as it prevents
backscatter.
Another possible workaround is to wait for amavisd-new 2.4.0,
which will offer DSN support.
Will definitely upgrade when the time comes.
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
