• [^] # Re: alors alors ....

    Posté par . En réponse au message Problème avec mon serveur mail (mails externes entrants). Évalué à 1.

    C'est encore moi ...

    Alors coté "main.cf", j'en suis là :
    smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
    biff = no
    append_dot_mydomain = no
    myhostname = mail.yent.eu
    mydomain = yent.eu
    alias_maps = hash:/etc/aliases
    alias_database = hash:/etc/aliases
    myorigin = $mydomain
    mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
    mynetworks = 127.0.0.0/8
    recipient_delimiter = +
    home_mailbox = Maildir/
    notify_classes = 2bounce, bounce, delay, policy, protocol, resource, software
    smtpd_helo_required = yes
    strict_rfc821_envelopes = yes
    virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf
    virtual_gid_maps = static:20001
    virtual_mailbox_base = /home/virtual
    virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
    virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
    virtual_minimum_uid = 20001
    virtual_uid_maps = static:20001
    proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_recipient_restrictions $smtpd_sender_login_maps proxy:mysql:/etc/postfix/mysql-hello.cf proxy:mysql:/etc/postfix/mysql-sender.cf proxy:mysql:/etc/postfix/mysql-client.cf
    message_size_limit = 50240000
    smtpd_sender_login_maps = proxy:mysql:/etc/postfix/mysql-sasl-sender-check.cf

    smtpd_sender_restrictions =
    reject_authenticated_sender_login_mismatch

    smtpd_reject_unlisted_sender = yes

    smtpd_restriction_classes =
    has_our_domain_as_sender

    has_our_domain_as_sender =
    check_sender_access hash:/etc/postfix/our_domain_as_sender,
    rejectsmtpd_recipient_restrictions =
    reject_non_fqdn_recipient,
    reject_unknown_sender_domain,
    reject_non_fqdn_sender,
    reject_unknown_recipient_domain,
    reject_invalid_helo_hostname,
    reject_unlisted_recipient,
    reject_unlisted_sender,
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_non_fqdn_helo_hostname,
    reject_unauth_destination,
    check_client_access hash:/etc/postfix/internal_networks,
    check_sender_access hash:/etc/postfix/not_our_domain_as_sender,
    check_helo_access proxy:mysql:/etc/postfix/mysql-hello.cf,
    check_sender_access proxy:mysql:/etc/postfix/mysql-sender.cf,
    check_client_access proxy:mysql:/etc/postfix/mysql-client.cf,
    reject_rbl_client list.dsbl.org,
    reject_rbl_client zen.spamhaus.org,
    permitsmtpd_data_restrictions =
    reject_unauth_pipelining,
    permit
    virtual_transport = maildrop
    maildrop_destination_recipient_limit = 1
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_security_options = noanonymous
    smtpd_sasl_local_domain =
    broken_sasl_auth_clients = yes
    smtpd_sasl_authenticated_header = yes
    smtp_tls_CAfile = /etc/postfix/tls/cacert.pem
    smtp_tls_security_level = may
    smtp_tls_session_cache_database = btree:${queue_directory}/smtp_tls_session_cache
    smtpd_tls_security_level = may
    smtpd_tls_auth_only = yes
    smtpd_tls_key_file = /etc/postfix/tls/yent-key.pem
    smtpd_tls_cert_file = /etc/postfix/tls/yent-cert.pem
    smtpd_tls_CAfile = /etc/postfix/tls/cacert.pem
    smtpd_tls_loglevel = 1
    smtpd_tls_received_header = yes
    smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_tls_session_cache
    tls_random_source = dev:/dev/urandom
    header_checks = regexp:/etc/postfix/header_checks.cf
    body_checks = regexp:/etc/postfix/body_checks.cf
    mime_header_checks = regexp:/etc/postfix/mime_headers_checks.cf
    content_filter = smtp-amavis:[127.0.0.1]:10024



    J'ai du ajouter les trois dernières inscriptions à "proxy_read_maps" car postfix me les demandais (malgré le fait qu'elles n'étaient pas mise dans le tuto ...)

    Le problème c'est que maintenant j'ai une erreur de ce style :
    YenTserver:~# more /var/log/mail.log
    Jun 5 17:18:03 YenTserver postfix/smtpd[10845]: connect from smtp15.orange.fr[1
    93.252.23.84]
    Jun 5 17:18:03 YenTserver postfix/trivial-rewrite[10849]: warning: do not list
    domain yent.eu in BOTH mydestination and virtual_mailbox_domains
    Jun 5 17:18:03 YenTserver postfix/smtpd[10845]: 6111C43856F: client=smtp15.oran
    ge.fr[193.252.23.84]
    Jun 5 17:18:03 YenTserver postfix/cleanup[10850]: 6111C43856F: message-id=<3314
    5621.3096951212676140673.JavaMail.www@wwinf1535>
    Jun 5 17:18:03 YenTserver postfix/smtpd[10845]: disconnect from smtp15.orange.f
    r[193.252.23.84]
    Jun 5 17:18:03 YenTserver postfix/qmgr[10837]: 6111C43856F: from=<yent666@wanad
    oo.fr>, size=1433, nrcpt=1 (queue active)
    Jun 5 17:18:03 YenTserver postfix/smtp[10851]: connect to 127.0.0.1[127.0.0.1]:
    Connection refused (port 10024)
    Jun 5 17:18:03 YenTserver postfix/smtp[10851]: 6111C43856F: to=<admin@yent.eu>,
    relay=none, delay=0.2, delays=0.17/0.03/0/0, dsn=4.4.1, status=deferred (connec
    t to 127.0.0.1[127.0.0.1]: Connection refused)


    Donc :
    - mydomain = yent.eu lui plait pas car cette valeur est aussi fournie par la requète MySQL des domaines virtuels ...
    - il y a une histoire de connexion refusée sur le port 10024, rapport avec l'antivirus amavis je pense (main.cf : "content_filter = smtp-amavis:[127.0.0.1]:10024").

    Maintenant les mails arrivent, c'est juste qu'ils passent pas ... Grrr ...