Via the postfix list.

I have:

pickup     unix  n       -       n       60      1       pickup
    -o content_filter=

So local sendmail (e.g. the amavis test!) does not get filtered!

ARGH!

It works now....




On 2/8/19 12:16 PM, Robert Moskowitz wrote:


On 2/8/19 12:02 PM, Patrick Ben Koetter wrote:
Robert,

* Robert Moskowitz <[email protected]>:
The system is CentOS7.

My main.cf and master.cf reflect
http://www.shisaa.jp/postset/mailserver-1.html
please send output from these commands to the list:

$ postconf smtpd_milters content_filter smtpd_proxy_filter

smtpd_milters =
content_filter = amavisfeed:[127.0.0.1]:10024
smtpd_proxy_filter =


$ postconf -Mxf

pickup     unix  n       -       n       60      1       pickup
cleanup    unix  n       -       n       -       0       cleanup
qmgr       unix  n       -       n       300     1       qmgr
tlsmgr     unix  -       -       n       1000?   1       tlsmgr
rewrite    unix  -       -       n       -       - trivial-rewrite
bounce     unix  -       -       n       -       0       bounce
defer      unix  -       -       n       -       0       bounce
trace      unix  -       -       n       -       0       bounce
verify     unix  -       -       n       -       1       verify
flush      unix  n       -       n       1000?   0       flush
proxymap   unix  -       -       n       -       -       proxymap
proxywrite unix  -       -       n       -       1       proxymap
smtp       unix  -       -       n       -       -       smtp
relay      unix  -       -       n       -       -       smtp
showq      unix  n       -       n       -       -       showq
error      unix  -       -       n       -       -       error
retry      unix  -       -       n       -       -       error
discard    unix  -       -       n       -       -       discard
local      unix  -       n       n       -       -       local
virtual    unix  -       n       n       -       -       virtual
lmtp       unix  -       -       n       -       -       lmtp
anvil      unix  -       -       n       -       1       anvil
scache     unix  -       -       n       -       1       scache
Smtpd      pass  -       -       n       -       -       smtpd -v
submission inet  n       -       n       -       -       smtpd -v
    -o syslog_name=postfix/submission -o smtpd_tls_wrappermode=no
    -o smtpd_tls_security_level = encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_relay_restrictions=permit_mynetworks,permit_sasl_authenticated,defer_unauth_destination
    -o milter_macro_daemon_name=ORIGINATING
pickup     unix  n       -       n       60      1       pickup
    -o content_filter=
relay      unix  -       -       n       -       -       smtp
    -o fallback_relay=
maildrop   unix  -       n       n       -       -       pipe
    flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
uucp       unix  -       n       n       -       -       pipe
    flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
    ($recipient)
ifmail     unix  -       n       n       -       -       pipe
    flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp      unix  -       n       n       -       -       pipe
    flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop
    $recipient
amavisfeed unix  -       -       y       -       2       lmtp
    -o lmtp_data_done_timeout=1200 -o lmtp_send_xforward_command=yes
    -o disable_dns_lookups=yes -o max_use=20
127.0.0.1:10025 inet n   -       n       -       -       smtpd
    -o content_filter= -o smtpd_delay_reject=no
    -o smtpd_client_restrictions=permit_mynetworks,reject
    -o smtpd_helo_restrictions= -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o smtpd_data_restrictions=reject_unauth_pipelining
    -o smtpd_end_of_data_restrictions= -o smtpd_restriction_classes=
    -o mynetworks=127.0.0.0/8 -o smtpd_error_sleep_time=0
    -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000
    -o smtpd_client_connection_count_limit=0
    -o smtpd_client_connection_rate_limit=0
    -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters,no_address_mappings     -o local_header_rewrite_clients= -o smtpd_milters= -o local_recipient_maps=
    -o relay_recipient_maps=
dovecot    unix  -       n       n       -       -       pipe
    flags=DRhu user=vmail:mail argv=/usr/libexec/dovecot/deliver -d
    ${recipient}
vacation   unix  -       n       n       -       -       pipe
    flags=Rq user=vacation argv=/var/spool/vacation/vacation.pl -f ${sender} --
    ${recipient}




How did you configure amavis to receive mail from Postfix? Does it provide an SMTP/LMTP server on port 10024? Do you want it to receive messages via MILTER?

grep -r \$inet_socket_port /etc/amavisd
/etc/amavisd/amavisd.conf:               # option(s) -p overrides $inet_socket_port and $unix_socketname /etc/amavisd/amavisd.conf:$inet_socket_port = 10024;   # listen on this local TCP port(s) /etc/amavisd/amavisd.conf:# $inet_socket_port = [10024,10026];  # listen on multiple TCP ports

I would think I want to use MILTER.



When I run the test message from

/usr/share/doc/amavisd-new-2.11.1/test-messages

as

sendmail -i [email protected] < sample-virus-simple.txt

all I see in maillog is

Feb  8 11:11:45 klovia postfix/pickup[14472]: 3DD4059DA: uid=0 from=<root>
Feb  8 11:11:45 klovia postfix/cleanup[14478]: 3DD4059DA:
message-id=<[email protected]>
Feb  8 11:11:45 klovia postfix/qmgr[14473]: 3DD4059DA:
from=<[email protected]>, size=430, nrcpt=1 (queue active)
Feb  8 11:11:45 klovia dovecot: lda([email protected]): sieve:
msgid=<[email protected]>: stored mail into
mailbox 'INBOX'
Feb  8 11:11:45 klovia postfix/pipe[14484]: 3DD4059DA:
to=<[email protected]>, relay=dovecot, delay=1.1,
delays=0.8/0.05/0/0.22, dsn=2.0.0, status=sent (delivered via dovecot
service)
Feb  8 11:11:45 klovia postfix/qmgr[14473]: 3DD4059DA: removed

I can't seem to find why amavis is not being called.  HOw do I get debug turned on?  I have tried adding -v to the smtpd lines in master.cf and no
change.  Where do I look to get this working?
Once I have a better idea which setup you want and which you have actually
configured (see commands above) I will help you do debug.

thanks



Reply via email to