From: Bratyakin Sergey <sergey@zorya.com.ua>
To: sysadmins@lists.altlinux.org
Subject: [Sysadmins] Postfix in chroot can't resolv client name in ALT Server 4.0.1
Date: Wed, 19 Mar 2008 07:57:46 +0200
Message-ID: <47E0AB5A.60304@zorya.com.ua> (raw)
Помогите решить проблему.
Сервер 4.0.1
Установлен postfix, все работает, но
не определяет имена клиентов.
При подключении клиентов всегда пишет в лог такое:
Mar 17 15:28:38 smtp postfix/smtpd[17993]: disconnect from
unknown[83.4.217.144]
Mar 17 15:28:39 smtp postfix/smtpd[17991]: connect from
unknown[91.50.68.110]
Mar 17 15:28:44 smtp postfix/smtpd[17991]: 6483B30009E:
client=unknown[91.50.68.110]
Mar 17 15:28:45 smtp postfix/smtpd[17976]: connect from unknown[62.90.46.50]
Хотя при этом имена разрешаются
# host 91.50.68.110
110.68.50.91.in-addr.arpa domain name pointer p5B32446E.dip0.t-ipconnect.de.
Не определются клиенты вообще (а не просто этот)
Вообщем всегда - client unknown
В /var/spool/postfix/etc и /var/spool/postfix/lib
все в порядке, настройки верные, файлы на месте и права верные.
В /var/spool/postfix/ никто ничего не трогал.
Если выключить работу postfix из режима chrooted,
то имена клиентов нормально разрешаются и проблема эта как бы решается.
Но хотелось бы чтоб все работало в chroot.
Как найти в чем может быть дело?
В логах ничего не нашел.
# rpm -qa postfix
postfix-2.4.6-alt2
До этого был postfix-2.3.12-alt1 - проблема все равно была.
# postconf -n
alias_maps = mysql:/etc/postfix/mysql-aliases.cf
body_checks = regexp:/etc/postfix/body_checks
bounce_queue_lifetime = 1d
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
header_checks = regexp:/etc/postfix/header_checks
home_mailbox = Maildir/
local_recipient_maps = $alias_maps $virtual_mailbox_maps unix:passwd.byname
maximal_queue_lifetime = 1d
message_size_limit = 15482880
mydomain = test.mk.ua
myhostname = smtp.test.mk.ua
mynetworks = 127.0.0.0/8, 192.168.100.0/24, 10.0.1.2
mynetworks_style = host
myorigin = $myhostname
reject_code = 550
relay_domains = /etc/postfix/relay_domains
relay_domains_reject_code = 550
relocated_maps = mysql:/etc/postfix/mysql-relocated.cf
sender_canonical_maps = hash:/etc/postfix/sender_canonical
smtp_destination_concurrency_limit = 20
smtp_tls_CAfile = /var/lib/ssl/certs/pop3d.pem
smtp_tls_cert_file = $smtp_tls_CAfile
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 1
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = btree:/var/run/smtp_tls_session_cache
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP
smtpd_client_restrictions = permit_mynetworks,
permit_sasl_authenticated, check_client_access
regexp:/etc/postfix/client_checks
smtpd_helo_restrictions = permit_mynetworks,check_helo_access
hash:/etc/postfix/access_list, check_helo_access
regexp:/etc/postfix/helo_checks, reject_non_fqdn_hostname,
reject_invalid_hostname, permit
smtpd_recipient_limit = 50
smtpd_recipient_restrictions = permit_mynetworks,
reject_unauth_destination, permit_sasl_authenticated,
check_client_access hash:/etc/postfix/helo_client_exceptions,
check_recipient_access mysql:/etc/postfix/mysql-recipient.cf
check_sender_access regexp:/etc/postfix/access_checks,
reject_invalid_hostname, reject_unknown_recipient_domain,
check_client_access hash:/etc/postfix/rbl_client_exceptions,
reject_rbl_client list.dsbl.org, reject_rbl_client cbl.abuseat.org,
reject_rbl_client sbl.spamhaus.org, reject_rbl_client bl.spamcop.net,
reject_rbl_client list.dsbl.org, reject_rbl_client
dynablock.wirehub.net, reject_rbl_client blackholes.wirehub.net,
reject_rbl_client dnsbl.njabl.org, reject_rbl_client dul.ru, permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions =
permit_sasl_authenticated,check_sender_access
mysql:/etc/postfix/mysql-sender.cf
smtpd_tls_CAfile = /var/lib/ssl/certs/pop3d.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = $smtp_tls_CAfile
smtpd_tls_key_file = $smtp_tls_cert_file
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:/var/run/smtp_tls_session_cache
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
strict_mime_encoding_domain = yes
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
transport_maps = mysql:/etc/postfix/mysql-transport.cf
unknown_address_reject_code = 450
unknown_client_reject_code = 450
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual.cf
virtual_gid_maps = mysql:/etc/postfix/mysql-virtual-gid.cf
virtual_mailbox_base = /var/spool/vmail
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-maps.cf
virtual_transport = maildrop
virtual_uid_maps = mysql:/etc/postfix/mysql-virtual-uid.cf
next reply other threads:[~2008-03-19 5:57 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-03-19 5:57 Bratyakin Sergey [this message]
2008-03-19 6:16 ` Vladimir V. Kamarzin
2008-03-19 7:05 ` Bratyakin Sergey
2008-03-19 9:14 ` Vladimir V. Kamarzin
2008-03-19 10:02 ` Bratyakin Sergey
2008-03-19 7:14 ` Bratyakin Sergey
2008-03-19 10:07 ` Dmitry V. Levin
2008-03-19 10:21 ` Bratyakin Sergey
2008-03-19 10:26 ` Dmitry V. Levin
2008-03-19 10:55 ` Bratyakin Sergey
2008-03-19 11:28 ` Vladimir V. Kamarzin
2008-03-19 12:15 ` Bratyakin Sergey
2008-03-20 5:44 ` Bratyakin Sergey
2008-03-20 5:53 ` Dmitry V. Levin
2008-03-20 6:25 ` Bratyakin Sergey
2008-03-20 6:32 ` Peter Evdokimov
2008-03-20 7:24 ` Bratyakin Sergey
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=47E0AB5A.60304@zorya.com.ua \
--to=sergey@zorya.com.ua \
--cc=sysadmins@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux sysadmins discussion
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
public-inbox-index sysadmins
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sysadmins
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git