as many milters also amavisd-milter cannot set owner and permissions for the
miltersocket.
2 versions:
1. place the socket in a separate directory and 'open' it via umask
MILTER_USER=amavis
MAILER_GROUP=postfix
install -d -m 0750 -o ${MILTER_USER} -g ${MAILER_GROUP} ~postfix/amavisd-milter/
umask 000
exec env - /usr/bin/setuidgid ${MILTER_USER} /usr/sbin/amavisd-milter \
-f \
-s ~postfix/amavisd-milter/socket
2. use an inet socket
exec env - /usr/bin/setuidgid ${MILTER_USER} /usr/sbin/amavisd-milter \
-f \
-s inet:p...@localhost
the second version is much smarter because it's possible use different machines
for
postfix an amavis.
Additionaly you may have more than one amavis maschine by setting up an dnsname
containing 2 adresses of amavis-milter instances. postfix manages loadbalancing
and
failover the same way as unreachable mx servers are handled.
Ontop your connection mailer <-> amavis is ready for IPv6 ;-)
Andreas
Am 20.04.2010 11:37 schrieb Marc Patermann:
> Hi,
>
> I testing amavisd-milter 1.4.1 now. Postfix is 2.5.6 and amavisd-new is
> 2.6.2.
>
> Socket is /var/spool/amavis/amavisd-milter.sock
> amavisd-m 23207 vscan 3u unix 0xffff88063b520080 0t0
> 3565772 /var/spool/amavis/amavisd-milter.sock
> amavisd-m 23207 vscan 4u unix 0xffff88063b5213c0 0t0
> 3565774 socket
>
> I changed the rights to
> # l /var/spool/amavis/amavisd-milter.sock
> srwxrwxrwx 1 vscan maildrop 0 Apr 20 09:41
> /var/spool/amavis/amavisd-milter.sock=
>
> But postfix still complains:
> Apr 20 11:32:54 texs099 postfix/cleanup[5302]: warning: connect to
> Milter service unix:/var/spool/amavis/amavisd-milter.sock: Permission denied
>
> Can anyone give me a hin?
>
> Marc
>
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/
--
Andreas Schulze
Internetdienste | P532
DATEV eG
90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196
E-Mail info @datev.de | Internet www.datev.de
Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg
Nr.70
Vorstand
Prof. Dieter Kempf (Vorsitzender)
Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender)
Dipl.-Kfm. Michael Leistenschneider
Jörg Rabe v. Pappenheim
Dipl.-Vw. Eckhard Schwarzer
Vorsitzender des Aufsichtsrates: Reinhard Verholen
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
