On 2017/3/5 09:14, Wietse Venema wrote:
Earl Killian:
(1) To use -o smtpd_client_restrictions in master.cf for the submission
port, I have been using
main.cf:
submission_client_restrictions = ...
master.cf
submission ... -o smtpd_client_restrictions =
$submission_client_restrictions
This seems to be necessary because of the space in "reject_rbl_client RBL".
This has been working in postfix 2.11 as far as I know. I recently tried
it with postfix 2.6 (the version provided by Amazon Linux, sigh) and it
doesn't seem to be working, though the problem may be something else (it
isn't an identical config).
You need to be more specific about the details if you want help.
You answered my question about user-defined parameters below. If I
decide to pursue what went wrong with my 2.6 attempts, I'll post a
proper query about what might have gone wrong, but I am inclined to try
building 3.2 from source, since 2.6 seems rather old.
Were user-defined parameters supported back in 2.6? (I notice postconf
-C doesn't exist in 2.6)
Supported long before Postfix was even released.
Got it. Thanks.
(2) I am considering whether to build postfix 3.2 from source on Amazon
Linux. If I bother, I want it to use a modern openssl (1.0.2k) built
from source. I would appreciate it if someone would explain how to
specify to the build where to find openssl (it would install in
/usr/local/ssl/{bin,lib}).
http://www.postfix.org/TLS_README.html (for CCARGS and AUXLIBS)
http://www.postfix.org/INSTALL.html (for openssl_path)
Thank you! I had not noticed the stuff at the end of TLS_README.html,
which helps.
I take it from reading the documentation that there isn't the equivalent
of "prefix=/usr/local", so I need to specify all the paths mentioned in
INSTALL.html. Here is what I used:
make tidy
make makefiles \
CCARGS='-DDEF_CONFIG_DIR=/usr/local/etc/postfix -DUSE_TLS
-I/usr/local/ssl/include -DNO_NIS -DNO_NISPLUS' \
AUXLIBS='/usr/local/ssl/lib/libssl.a /usr/local/ssl/lib/libcrypto.a' \
config_directory=/usr/local/etc/postfix \
meta_directory=/usr/local/etc/postfix \
command_directory=/usr/local/sbin \
daemon_directory=/usr/local/libexec/postfix \
mailq_path=/usr/local/bin/mailq \
newaliases_path=/usr/local/bin/newaliases \
openssl_path=/usr/local/ssl/bin/openssl \
sendmail_path=/usr/local/sbin/sendmail \
shlib_directory=/usr/local/lib/postfix
For others reading this thread, I found this generated these warnings:
<command-line>:0:0: warning: "DEF_CONFIG_DIR" redefined [enabled by default]
<command-line>:0:0: note: this is the location of the previous definition
<command-line>:0:0: warning: "DEF_SHLIB_DIR" redefined [enabled by default]
<command-line>:0:0: note: this is the location of the previous definition
presumably because the -DDEF_CONFIG_DIR in CCARGS was redundant with
config_directory= in the "make makefiles" (there was a line in
INSTALL.html that had me thinking the -DDEF_CONFIG_DIR was required).
-Earl
