Den 14. des. 2011 23:58, skrev Andreas Berton:
>
>
> On Wed, 14 Dec 2011, Håkon Alstadheim wrote:
>
>> I've built the dspam package from debian testing (which is also used for
>> building in backports I presume) on my server now. Had to install
>> debhelper from backports. If anybody has suggestions for debug
>> statements that could be inserted somewhere, I might be able to try them
>> out. To recap, the problem is that --user argument to the dspam binary
>> ends up mangled when dspam delivers back through smtp to postfix. Like
>> so, turning "firmapost" into "??D?n" :
>>
>> Dec 13 22:44:01 garbo dspam.cgi: Piping into |/usr/bin/dspam
>> --deliver=innocent --class=innocent --source=error --user
>> firmap...@alstadheim.priv.no -d %u
>> Dec 13 22:44:02 garbo postfix/smtpd[14180]: connect from
>> localhost[127.0.0.1]
>> Dec 13 22:44:02 garbo postfix/smtpd[14180]: NOQUEUE: reject: RCPT from
>> localhost[127.0.0.1]: 550 5.1.1 < D n...@alstadheim.priv.no>: Recipient
>> address rejected: User unknown in local recipient table; from=<>
>> to=<??D?n...@alstadheim.priv.no> proto=SMTP helo=<localhost>
>> Dec 13 22:44:02 garbo dspam[14179]: Got error 550 in response to RCPT
>> TO: 550 5.1.1 < D n...@alstadheim.priv.no>: Recipient address rejected:
>> User unknown in local recipient table
>> Dec 13 22:44:02 garbo postfix/smtpd[14180]: disconnect from
>> localhost[127.0.0.1]
>> hi
> Would you try disconnect dspam and send blank mail through postfix and
> post the log output. Also including the connection prefernce for dspam
> from you master.cf. And does this happend only when bouncing,
> everything else is working except this.
Not quite sure I understand what you mean. It is only the mails that I
release from quarantine that get mangled. Regular spam-filtering works OK.
**** Regular incoming mail goes this way: ***
- >postfix on port 25 (with a detour through policyd on port 10031)
-> dkimproxy.in on port 10026
-> postfix on port 10027
-> dspam unix socket
-> postfix on port 10025
-> mailman/procmail/Maildir
The sendoff to dspam is achieved with this in my master.cf:
-----------------
127.0.0.1:10027 inet n - n - 20 smtpd
-o myhostname=dkchecked.alstadheim.priv.no
-o receive_override_options=no_address_mappings
-o
receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-o smtpd_helo_restrictions=
-o smtpd_client_restrictions=
-o smtpd_sender_restrictions=
-o mynetworks=127.0.0.0/8
-o smtpd_milters=
-o smtp_send_xforward_command=yes
-o smtpd_authorized_xforward_hosts=127.0.0.0/8
-o
smtpd_recipient_restrictions=reject_unauth_destination,check_incoming_policies
---------------
and main.cf contains this:
--------
check_incoming_policies = check_recipient_access
pcre:/etc/postfix/dspam-filter-pcre, defer_if_reject
------------
and the pcre file picks out only domains in mydestination, and hands
them off to dspmam-filter on a socket:
--------
/^[^@]*@alstadheim.priv.no$/ FILTER dspam-filter:unix:/tmp/dspam.sock
/^[^@]*@alstadheim.no$/ FILTER dspam-filter:unix:/tmp/dspam.sock
/^[^@]*@stjordalvenstre.no$/ FILTER dspam-filter:unix:/tmp/dspam.sock
-----------
dspam-filter is defined in master.cf: (I have no idea if the parameters
here have any effect, never quite got my mind around the master.cf )
---------
dspam-filter unix - - n - - lmtp
-o smtp_send_xforward_command=yes
-o smtp_discard_ehlo_keywords=8bitmime
-o disable_mime_output_conversion=yes
-o dspam-filter_destination_recipient_limit=1
-o lmtp_destination_recipient_limit=1
-o destination_recipient_limit=1
---------
**** Quarantine release goes ****
-> dspam.cgi: Piping into |/usr/bin/dspam --deliver=innocent
--class=innocent --source=error --user localuser@localdomain.dummytld -d %u
-> postfix on port 10025
-> mailman/procmail/Maildir
I tried the latter from a command-line with a copy from a quarantine
mailbox (a single mail from the 'from' line until, not including the
next 'from' line)
This latter path makes a garbled recipient-name appear in my mail.log,
rejected with unknown user, and the mail gets dropped. I have verified
that the dspam executable and the .so files it uses are coming from
legitimate packages installed to my computer.
The difference between quarantine-release and regular incoming is, as
far as I can tell, that the Quarantine release goes through a pipe to
stdin on a command, whereas the regular mail path is thorough a unix
socket to a running daemon.
---
Regards, Håkon
------------------------------------------------------------------------------
10 Tips for Better Server Consolidation
Server virtualization is being driven by many needs.
But none more important than the need to reduce IT complexity
while improving strategic productivity. Learn More!
http://www.accelacomm.com/jaw/sdnl/114/51507609/
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user
