On Wed, October 23, 2013 12:50 pm, Gilles Chehade wrote:
> On Wed, Oct 23, 2013 at 07:42:41AM -0000, Michiel van Es wrote:
>>
>> The config would be like this then right?
>>
>> listen on lo
>> listen on eth0 tls certificate mail.pragmasec.nl auth-optional hostname
>> mail.pragmasec.nl
>> listen on eth0 port 587 tls certificate mail.pragmasec.nl auth hostname
>> mail.pragmasec.nl
>> expire 7d
>> table vdomains "/usr/local/etc/vdomains"
>> table vusers "/usr/local/etc/users"
>> table aliases db:/usr/local/etc/aliases.db
>> # the works
>> listen on lo port 10025 tag CLAM
>> accept for local alias <aliases> deliver to mda "procmail -f -"
>> accept tagged CLAM from any for domain <vdomains> virtual <vusers>
>> deliver to mda "procmail -f -"
>> accept tagged CLAM for any relay
>> accept for any relay via smtp://127.0.0.1:10026
>>
>
> If you're accepting mail from the outside, then the last should be:
>
>   accept from any for any relay via smtp://127.0.0.1:10026

This makes a lot of sense!
Doh!

>          ^^^^^^^^
>
>> I get the following message:
>>
>> debug: session_start_ssl: switching to SSL
>> smtp-in: Started TLS on session 00000000ef04b129: version=TLSv1/SSLv3,
>> cipher=AES128-SHA, bits=128
>> smtp-in: Client certificate verification succeeded on session
>> 00000000ef04b129
>> smtp-in: Failed command on session 00000000ef04b129: "RCPT
>> TO:<[email protected]>" => 550 Invalid recipient
>> smtp-in: Closing session 00000000ef04b129
>> debug: smtp: 0x1874310: deleting session: done
>>
>> Somehow the vusers lookup goes wrong and my config is not working.
>> Do you know what I might be missing?
>>
>
> Can you run 'smtpd -dv -T lookup -T expand -T rules' and provide output
> log
> as you reproduce the issue ?

It works with the proposed from any for any rule!
Thanks a lot!

Michiel

>
>
> --
> Gilles Chehade
>
> https://www.poolp.org                                          @poolpOrg
>
> --
> You received this mail because you are subscribed to [email protected]
> To unsubscribe, send a mail to: [email protected]
>
>



-- 
You received this mail because you are subscribed to [email protected]
To unsubscribe, send a mail to: [email protected]

Reply via email to