jaydisc's questions -server

jaydisc

Asked: 2020-02-03 05:20:30 +0800 CST

Postfix "greeted me with my own hostname" only when `mail` command, works fine over smtp

1

Edit: Please note that unlike many other similar questions, this configuration works perfectly when the message is received via smtp. The problem is only when its sent via the mail command. The virtual_alias_domains and DNS are appear to be configured correctly, and are documented below.

I'm running Postfix 3.1.1, and I have just discovered that Postfix fails to delivery any local messages sent via the mail command on the server, but works fine via smtpd.

Here is a log transcript if the message arrives via smtp:

2020-02-02 23:06:34.048389+1000 0x72d3b  Info  25056  smtpd: 0BB1614AB18E: client=office.sendingdomain.com.au[203.2.2.2]
2020-02-02 23:06:34.066985+1000 0x72ee4  Info  25072  cleanup: 0BB1614AB18E: message-id=<[email protected]>
2020-02-02 23:06:34.068755+1000 0x722f6  Info  24886  qmgr: 0BB1614AB18E: from=<[email protected]>, size=889, nrcpt=1 (queue active)
2020-02-02 23:06:34.084680+1000 0x72d3b  Info  25056  smtpd: disconnect from office.sendingdomain.com.au[203.2.2.2] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
2020-02-02 23:06:36.482250+1000 0x72f12  Info  25079  smtpd: connect from localhost[127.0.0.1]
2020-02-02 23:06:36.489399+1000 0x72f12  Info  25079  smtpd: 774C714AB19C: client=localhost[127.0.0.1]
2020-02-02 23:06:36.492067+1000 0x72ee4  Info  25072  cleanup: 774C714AB19C: message-id=<[email protected]>
2020-02-02 23:06:36.493066+1000 0x72f12  Info  25079  smtpd: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
2020-02-02 23:06:36.493595+1000 0x722f6  Info  24886  qmgr: 774C714AB19C: from=<[email protected]>, size=1585, nrcpt=1 (queue active)
2020-02-02 23:06:36.531628+1000 0x72ee7  Info  25073  smtp: 0BB1614AB18E: to=<[email protected]>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=2.9, delays=0.45/0.09/0.04/2.3, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 774C714AB19C)

And here is the log transcript if I do mail [email protected] from the command-line on the mail server while logged in as root:

2020-02-02 23:08:56.102815+1000 0x732a3    Info        0x0                  25116  cleanup: 118E214AB263: message-id=<[email protected]>
2020-02-02 23:08:56.103991+1000 0x732a1    Info        0x0                  25115  qmgr: 118E214AB263: from=<[email protected]>, size=338, nrcpt=1 (queue active)
2020-02-02 23:08:56.155341+1000 0x72d3b    Info        0x0                  25056  smtpd: connect from home.mydomain.com[10.0.5.201]
2020-02-02 23:08:56.156441+1000 0x732a7    Default     0x0                  25118  smtp: warning: host home.mydomain.com[10.0.5.201]:25 greeted me with my own hostname home.mydomain.com
2020-02-02 23:08:56.157154+1000 0x732a7    Default     0x0                  25118  smtp: warning: host home.mydomain.com[10.0.5.201]:25 replied to HELO/EHLO with my own hostname home.mydomain.com
2020-02-02 23:08:56.186791+1000 0x732a7    Info        0x0                  25118  smtp: 118E214AB263: to=<[email protected]>, relay=home.mydomain.com[10.0.5.201]:25, delay=0.76, delays=0.7/0.03/0.02/0, dsn=5.4.6, status=bounced (mail for mydomain.com loops back to myself)
2020-02-02 23:08:56.187402+1000 0x72d3b    Info        0x0                  25056  smtpd: disconnect from home.mydomain.com[10.0.5.201] ehlo=1 quit=1 commands=2
2020-02-02 23:08:56.189190+1000 0x732a3    Info        0x0                  25116  cleanup: 2DF3614AB265: message-id=<[email protected]>
2020-02-02 23:08:56.190087+1000 0x732a1    Info        0x0                  25115  qmgr: 2DF3614AB265: from=<>, size=2383, nrcpt=1 (queue active)
2020-02-02 23:08:56.190987+1000 0x732a1    Info        0x0                  25115  qmgr: 118E214AB263: removed
2020-02-02 23:08:56.221747+1000 0x732a3    Info        0x0                  25116  cleanup: 35E4B14AB266: message-id=<[email protected]>
2020-02-02 23:08:56.222627+1000 0x732b0    Info        0x0                  25120  local: 2DF3614AB265: to=<[email protected]>, relay=local, delay=0.03, delays=0/0.03/0/0, dsn=2.0.0, status=sent (forwarded as 35E4B14AB266)
2020-02-02 23:08:56.222654+1000 0x732a1    Info        0x0                  25115  qmgr: 35E4B14AB266: from=<>, size=2533, nrcpt=1 (queue active)
2020-02-02 23:08:56.223659+1000 0x732a1    Info        0x0                  25115  qmgr: 2DF3614AB265: removed
2020-02-02 23:08:56.237912+1000 0x72d3b    Info        0x0                  25056  smtpd: connect from home.mydomain.com[10.0.5.201]
2020-02-02 23:08:56.238780+1000 0x732a7    Default     0x0                  25118  smtp: warning: host home.mydomain.com[10.0.5.201]:25 greeted me with my own hostname home.mydomain.com
2020-02-02 23:08:56.239572+1000 0x732a7    Default     0x0                  25118  smtp: warning: host home.mydomain.com[10.0.5.201]:25 replied to HELO/EHLO with my own hostname home.mydomain.com
2020-02-02 23:08:56.240770+1000 0x732a7    Info        0x0                  25118  smtp: 35E4B14AB266: to=<[email protected]>, orig_to=<[email protected]>, relay=home.mydomain.com[10.0.5.201]:25, delay=0.02, delays=0/0/0.02/0, dsn=5.4.6, status=bounced (mail for mydomain.com loops back to myself)
2020-02-02 23:08:56.241401+1000 0x72d3b    Info        0x0                  25056  smtpd: disconnect from home.mydomain.com[10.0.5.201] ehlo=1 quit=1 commands=2
2020-02-02 23:08:56.242120+1000 0x732a1    Info        0x0                  25115  qmgr: 35E4B14AB266: removed

The server's ONLY IP address is 10.0.5.201, so I do not understand why it is opening up an SMTP connection to itself. When I query the DNS, it all correctly resolves to that IP:

Here is the DNS resolution config

# cat /etc/resolv.conf 
search home.mydomain.com mydomain.com
nameserver 10.0.5.1

Here is a query to that nameserver for the MX hosts:

# host -t mx mydomain.com 10.0.5.1
Using domain server:
Name: 10.0.5.1
Address: 10.0.5.1#53
Aliases: 

mydomain.com mail is handled by 50 internet.mydomain.com.
mydomain.com mail is handled by 10 home.mydomain.com.

Finally, here is a query for the A record for that host.

# host home.mydomain.com 10.0.5.1
Using domain server:
Name: 10.0.5.1
Address: 10.0.5.1#53
Aliases: 

home.mydomain.com has address 10.0.5.201

So, the DNS looks pretty clean to me.

Since the problem is only occurring when using the mail command, is the problem somewhere in master.cf?

smtp      inet  n       -       n       -       1       postscreen
smtpd     pass  -       -       n       -       -       smtpd
dnsblog   unix  -       -       n       -       0       dnsblog
tlsproxy  unix  -       -       n       -       0       tlsproxy
submission inet n       -       n       -       -       smtpd
  -o smtpd_tls_security_level=encrypt
  -o smtpd_enforce_tls=yes
  -o smtpd_sasl_auth_enable=yes
  -o content_filter=
  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
smtp      unix  -       -       n       -       -       smtp

proxywrite unix -       -       n       -       1       proxymap

pickup    fifo  n       -       n       60      1       pickup
  -o content_filter=smtp-amavis:[127.0.0.1]:10024
cleanup   unix  n       -       n       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
sacl-cache unix -       -       n       -       1       sacl-cache
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay     unix  -       -       n       -       -       smtp
    -o smtp_fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
retry     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache

dovecot   unix  -       n       n       -       25      pipe
  flags=DRhu user=_dovecot:mail argv=/Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/dovecot-lda -d ${user}

policy    unix  -       n       n       -       -       spawn
  user=nobody:mail argv=/usr/bin/perl /Applications/Server.app/Contents/ServerRoot/usr/libexec/postfix/greylist.pl

smtp-amavis unix -      -       y       -       2       smtp
   -o smtp_data_done_timeout=1200
   -o smtp_send_xforward_command=yes
   -o disable_dns_lookups=yes
   -o max_use=20

127.0.0.1:10025 inet n  -       y       -       -       smtpd
   -o content_filter=
   -o smtpd_tls_security_level=none
   -o smtpd_delay_reject=no
   -o smtpd_client_restrictions=permit_mynetworks,reject
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o smtpd_data_restrictions=reject_unauth_pipelining
   -o smtpd_end_of_data_restrictions=
   -o smtpd_restriction_classes=
   -o mynetworks=127.0.0.0/8
   -o smtpd_error_sleep_time=0
   -o smtpd_soft_error_limit=1001
   -o smtpd_hard_error_limit=1000
   -o smtpd_client_connection_count_limit=0
   -o smtpd_client_connection_rate_limit=0
   -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
   -o local_header_rewrite_clients=
   -o smtpd_milters=
   -o local_recipient_maps=
   -o relay_recipient_maps=

And here are is the output of postconf -n:

alias_maps = hash:/Library/Server/Mail/Config/postfix/aliases hash:/Library/Server/Mail/Data/listserver/aliases/list_server_aliases
biff = no
command_directory = /Applications/Server.app/Contents/ServerRoot/usr/sbin
compatibility_level = 2
config_directory = /Library/Server/Mail/Config/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /Applications/Server.app/Contents/ServerRoot/usr/libexec/postfix
data_directory = /Library/Server/Mail/Data/mta
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
disable_vrfy_command = yes
dovecot_destination_recipient_limit = 1
enable_server_options = yes
header_checks = pcre:/Library/Server/Mail/Config/postfix/custom_header_checks
html_directory = /Applications/Server.app/Contents/ServerRoot/usr/share/doc/postfix/html
imap_submit_cred_file = /Library/Server/Mail/Config/postfix/submit.cred
inet_interfaces = all
inet_protocols = ipv4
mail_owner = _postfix
mailbox_size_limit = 0
mailbox_transport = dovecot
mailq_path = /Applications/Server.app/Contents/ServerRoot/usr/bin/mailq
manpage_directory = /Applications/Server.app/Contents/ServerRoot/usr/share/man
message_size_limit = 31457280
mydestination = home.mydomain.com, localhost
mydomain = home.mydomain.com
mydomain_fallback = localhost
myhostname = home.mydomain.com
mynetworks = 127.0.0.0/8, 10.0.5.1/32, 10.0.5.31/32, [::1]/128
newaliases_path = /Applications/Server.app/Contents/ServerRoot/usr/bin/newaliases
proxy_interfaces = 124.148.20.193
queue_directory = /Library/Server/Mail/Data/spool
readme_directory = /Applications/Server.app/Contents/ServerRoot/usr/share/doc/postfix
recipient_canonical_maps = hash:/Library/Server/Mail/Config/postfix/system_user_maps
recipient_delimiter = +
relayhost =
sample_directory = /Applications/Server.app/Contents/ServerRoot/usr/share/doc/postfix/examples
sendmail_path = /Applications/Server.app/Contents/ServerRoot/usr/sbin/sendmail
setgid_group = _postdrop
smtp_tls_CAfile = /Library/Server/Mail/Config/postfix/ca-certificates.pem
smtp_tls_loglevel = 1
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
smtp_tls_protocols = !SSLv2, !SSLv3
smtp_tls_security_level = may
smtpd_data_restrictions = reject_unauth_pipelining, permit
smtpd_enforce_tls = no
smtpd_helo_required = yes
smtpd_pw_server_security_options = cram-md5,digest-md5,gssapi,login,plain
smtpd_recipient_restrictions = permit_sasl_authenticated reject_non_fqdn_recipient check_recipient_access hash:/Library/Server/Mail/Config/postfix/access permit_mynetworks reject_unauth_destination reject_non_fqdn_sender check_sender_access hash:/Library/Server/Mail/Config/postfix/sender_access check_sender_access regexp:/Library/Server/Mail/Config/postfix/regexp_sender reject_non_fqdn_hostname reject_invalid_helo_hostname check_helo_access regexp:/Library/Server/Mail/Config/postfix/helo_access reject_rbl_client zen.spamhaus.org reject_rbl_client bl.spamcop.net permit
smtpd_require_virtual_map = yes
smtpd_sasl_auth_enable = yes
smtpd_tls_CAfile = /etc/certificates/home.mydomain.com.A892E14870AED314279463AACA7B5424BDA1C1D0.chain.pem
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/certificates/home.mydomain.com.A892E14870AED314279463AACA7B5424BDA1C1D0.cert.pem
smtpd_tls_ciphers = medium
smtpd_tls_exclude_ciphers = SSLv2, 3DES, aNULL, ADH, eNULL, EXPORT
smtpd_tls_key_file = /etc/certificates/home.mydomain.com.A892E14870AED314279463AACA7B5424BDA1C1D0.key.pem
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_protocols = !SSLv2, !SSLv3
smtpd_use_pw_server = yes
smtpd_use_tls = yes
soft_bounce = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
use_sacl_cache = yes
virtual_alias_domains = $virtual_alias_maps hash:/Library/Server/Mail/Config/postfix/virtual_domains
virtual_alias_maps = $virtual_maps hash:/Library/Server/Mail/Config/postfix/virtual regexp:/Library/Server/Mail/Config/postfix/regexp_virtual hash:/Library/Server/Mail/Config/postfix/virtual_users hash:/Library/Server/Mail/Data/listserver/aliases/list_server_virtual

mydomain.com is defined in virtual_domains:

mydomain.com            allow

[email protected] is defined in virtual_users:

[email protected]    jay

Why doesn't postfix realise that the message dropped off via mail is for local delivery and hand it off to dovecot like it does when the message is received via smtp?

jaydisc

Asked: 2019-03-29 18:42:08 +0800 CST

mod_rewrite on Debian Stretch breaks php7.0-fpm with AH01071: Got error 'Primary script unknown\n'

2

We've just built a new Debian 9.8 server to replace our 8.11 server in order to test and upgrade to php7. We've installed apache2, php7.0-fpm and brought over out existing virtual host config, which has this in it:

<Directory "${virtualhost_path}/public_html">
    Require all granted
    AllowOverride None
    Options FollowSymLinks

    <IfModule mod_rewrite.c>
        RewriteEngine On

        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteRule ^/?(.*)$ /index.php/$1 [L]
    </IfModule>
</Directory>

Here is the (stock, standard) php-fpm conf:

$ cat /etc/apache2/conf-enabled/php7.0-fpm.conf 

# Redirect to local php-fpm if mod_php is not available
<IfModule !mod_php7.c>
<IfModule proxy_fcgi_module>
    # Enable http authorization headers
    <IfModule setenvif_module>
    SetEnvIfNoCase ^Authorization$ "(.+)" HTTP_AUTHORIZATION=$1
    </IfModule>

    <FilesMatch ".+\.ph(p[3457]?|t|tml)$">
        SetHandler "proxy:unix:/run/php/php7.0-fpm.sock|fcgi://localhost"
    </FilesMatch>
    <FilesMatch ".+\.phps$">
        # Deny access to raw php sources by default
        # To re-enable it's recommended to enable access to the files
        # only in specific virtual host or directory
        Require all denied
    </FilesMatch>
    # Deny access to files without filename (e.g. '.php')
    <FilesMatch "^\.ph(p[3457]?|t|tml|ps)$">
        Require all denied
    </FilesMatch>
</IfModule>
</IfModule>

However, the rewriting does not seem to be working correctly. When we make this request, we get this result (in the browser, we just see "File Not Found"):

$ curl -I https://hostname/services/login

HTTP/1.1 404 Not Found
Date: Fri, 29 Mar 2019 02:32:01 GMT
Server: Apache/2.4.25 (Debian)
Content-Type: text/html; charset=UTF-8

And we see this in the log:

[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3f0a0/initial] [perdir /home/jay/online/public_html/] add path info postfix: /home/jay/online/public_html/services -> /home/jay/online/public_html/services/login
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3f0a0/initial] [perdir /home/jay/online/public_html/] strip per-dir prefix: /home/jay/online/public_html/services/login -> services/login
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3f0a0/initial] [perdir /home/jay/online/public_html/] applying pattern '^/?(.*)$' to uri 'services/login'
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3f0a0/initial] [perdir /home/jay/online/public_html/] rewrite 'services/login' -> '/index.php/services/login'
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3f0a0/initial] [perdir /home/jay/online/public_html/] trying to replace context docroot /home/jay/online/public_html with context prefix 
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3f0a0/initial] [perdir /home/jay/online/public_html/] internal redirect with /index.php/services/login [INTERNAL REDIRECT]
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3dc00/initial/redir#1] [perdir /home/jay/online/public_html/] add path info postfix: /home/jay/online/public_html/index.php -> /home/jay/online/public_html/index.php/services/login
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3dc00/initial/redir#1] [perdir /home/jay/online/public_html/] strip per-dir prefix: /home/jay/online/public_html/index.php/services/login -> index.php/services/login
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3dc00/initial/redir#1] [perdir /home/jay/online/public_html/] applying pattern '^/?(.*)$' to uri 'index.php/services/login'
[hostname/sid#7f0e8fd47d30][rid#7f0e8fc3dc00/initial/redir#1] [perdir /home/jay/online/public_html/] pass through /home/jay/online/public_html/index.php
[hostname/sid#7f0e8fd47d30][rid#7f0e8830a0a0/subreq] [perdir /home/jay/online/public_html/] add path info postfix: /home/jay/online/public_html/services -> /home/jay/online/public_html/services/login
[hostname/sid#7f0e8fd47d30][rid#7f0e8830a0a0/subreq] [perdir /home/jay/online/public_html/] strip per-dir prefix: /home/jay/online/public_html/services/login -> services/login
[hostname/sid#7f0e8fd47d30][rid#7f0e8830a0a0/subreq] [perdir /home/jay/online/public_html/] applying pattern '^/?(.*)$' to uri 'services/login'
[hostname/sid#7f0e8fd47d30][rid#7f0e8830a0a0/subreq] [perdir /home/jay/online/public_html/] rewrite 'services/login' -> '/index.php/services/login'
[hostname/sid#7f0e8fd47d30][rid#7f0e8830a0a0/subreq] [perdir /home/jay/online/public_html/] trying to replace context docroot /home/jay/online/public_html with context prefix 
[hostname/sid#7f0e8fd47d30][rid#7f0e8830a0a0/subreq] [perdir /home/jay/online/public_html/] internal redirect with /index.php/services/login [INTERNAL REDIRECT]
AH01071: Got error 'Primary script unknown\n'

It appears to be rewriting everything correctly according to the log, but it doesn't seem to be serving index.php as expected along with the correct PATH_INFO. If we manually include index.php in the URL, it serves the correct file:

$ curl -I https://hostname/index.php/services/login

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2019 02:35:13 GMT
Server: Apache/2.4.25 (Debian)
Content-Type: text/html; charset=UTF-8

But, the whole point of this configuration is to avoid having index.php in the URL.

Is there some change in apache for FPM between Debian 8 and 9 that is causing this? Is there any workaround?

jaydisc

Asked: 2018-04-27 17:37:31 +0800 CST

Postfix recipient rewriting from one domain to another

0

I have a situation where emails sent to [email protected] are configured to go to a listserver via virtual_alias_maps:

virtual_alias_maps = $virtual_maps hash:/Library/Server/Mail/Data/listserver/aliases/list_server_virtual

I also have emails to [email protected] go there as well, but the listserver sucks (I'm stuck with it), and refuses to accept anything that isn't addressed to domain1.com. So, I thought rewriting might be the solution. Unfortunately, I'm not sure that rewriting ACTUALLY rewrites the To: header, which is what I was expecting and what I need to occur (I'm assuming my expectations are flawed).

So, I added:

 recipient_canonical_maps = hash:/Library/Server/Mail/Config/postfix/canonical

And /Library/Server/Mail/Config/postfix/canonical contains:

 [email protected]               [email protected]

Now, emails sent to [email protected] are getting redirected ("rewritten"?) to [email protected], but when the email comes through, it still says "To: [email protected]".

So, to make things easier to troubleshoot, I updated canonical to rewrite [email protected] to come straight to me (bypassing any potential listserver confusion):

 [email protected]               [email protected]

But again, when emails are sent to: [email protected], they are correctly delivered to [email protected], but the headers still show "To: [email protected]"

Is there any way to get Postfix to literally rewrite the 'To:' header?

jaydisc

Asked: 2016-03-15 12:46:55 +0800 CST

Setting php_value in VirtualHost on Debian Squeeze Apache 2.4.10 + mod_proxy_fcgi + php-fpm?

2

After updating our server to Debian Jessie (8.3), I switched Apache 2.4.10 from mpm_worker/mod_php to mpm_event/proxy_fcgi/php-fpm. I have the handoff configured for all virtual hosts as such:

# cat conf-enabled/php5-fpm.conf 
<FilesMatch \.php$>
    SetHandler "proxy:unix:/var/run/php5-fpm.sock|fcgi://localhost/"
</FilesMatch>

I have also disabled mod_php. Because of that, apache will not let me have php_admin_value/php_value/php_flag directives in the VirtualHosts files.

Invalid command 'php_value', perhaps misspelled or defined by a module not included in the server configuration

I've read a bit about .user.ini files, but it doesn't sound like the directives I need to set will are supported in there, and I just successfully removed all the .htaccess files from my site for performance reasons, so this seems like a backward (and incompatible) approach.

The other common suggestion is to make a unique pool for each VirtualHost, but this concerns me for two reasons:

Complexity of setup - right now, the configuration is super-simple
Switching from socket to TCP? Am I correct in that that I need a unique TCP port per pool? Would I alternatively need a unique socket per pool?
Memory allocation! This server doesn't have as much RAM as I'd like. It seems wasteful to have a bunch of php-fpm instances spun-up for the lesser-visited sites on the server.

jaydisc

Asked: 2015-07-27 15:25:18 +0800 CST

Linux mail(x) command. Can't open or use. Just spits out old message and returns to prompt

0

(Debian Squeeze)

I was working on a shell script that piped output to the mail command. I must have done something wrong, as I am no longer able to use the command for anything. Even if I type "mail" with no arguments, it just spits out what appears to be the content I previously tried to email, but it then just returns me to a prompt. The same output occurs regardless of which arguments I use with the command.

We do not use local mail storage, and I have deleted all of the user files in /var/mail and /var/spool/mail (one is a link to the other), but for the life of me, I cannot figure out how to get use of this command back.

I'm struggling with any kind of searching for this problem as the search terms seem way too vague.

jaydisc

Asked: 2015-05-06 22:53:58 +0800 CST

Dovecot not working with added public namespace

2

we're running Dovecot 2.2.5 under OS X Server 4.1 (under 10.10.3). I'm trying to add a public namespace with some public folders without success.

doveconf -n:

# 2.2.5: /Library/Server/Mail/Config/dovecot/dovecot.conf
# OS: Darwin 14.3.0 x86_64  hfs
aps_topic = com.apple.mail.XServer.1e114df5-b7cb-47ba-b258-d4460742ed64
auth_mechanisms = cram-md5 digest-md5 plain login
auth_realms = office.example.com
auth_socket_path = /var/run/dovecot/auth-userdb
auth_username_format = %n
debug_log_path = /Library/Logs/Mail/mail-debug.log
default_internal_user = _dovecot
default_login_user = _dovenull
disable_plaintext_auth = no
first_valid_gid = 6
first_valid_uid = 6
imap_id_log = *
imap_id_send = "name" * "version" *
imap_urlauth_submit_user = submit
info_log_path = /Library/Logs/Mail/mail-info.log
log_path = /Library/Logs/Mail/mail-err.log
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
mail_access_groups = mail
mail_attribute_dict = file:/Library/Server/Mail/Data/attributes/attributes.dict
mail_debug = yes
mail_location = maildir:/Library/Server/Mail/Data/mail/%u
mail_log_prefix = "%s(pid %p user %u): "
mail_plugins = quota zlib acl fts fts_sk
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave
mdbox_rotate_size = 200 M
namespace acl-mailboxes {
  list = children
  location = maildir:/Library/Server/Mail/Data/mail/users/%%u:INDEX=/Library/Server/Mail/Data/mail/shared/%%u
  prefix = shared.%%u.
  separator = .
  subscriptions = no
  type = shared
}
namespace inbox {
  inbox = yes
  location = 
  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
  mailbox Trash {
    special_use = \Trash
  }
  prefix = 
  separator = .
  type = private
}
namespace list-archives {
  list = children
  location = maildir:/Library/Server/Mail/Data/listserver/messages/archive/lists/%%u:INDEX=/Library/Server/Mail/Data/listserver/messages/archive/shared/%%u
  prefix = archives.%%u.
  separator = .
  subscriptions = no
  type = shared
}
namespace public-junk {
  location = maildir:/Library/Server/Mail/Data/mail/public
  prefix = Public
  separator = .
  subscriptions = no
  type = public
}
passdb {
  driver = od
}
passdb {
  args = /Library/Server/Mail/Config/dovecot/submit.passdb
  driver = passwd-file
}
plugin {
  acl = vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300
  acl_shared_dict = file:/Library/Server/Mail/Data/shared/shared-mailboxes
  fts = sk
  quota = maildir:User quota
  quota_warning = storage=100%% quota-exceeded %u
  quota_warning2 = storage=80%% quota-warning %u
  sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve
  sieve_dir = /Library/Server/Mail/Data/rules/%u
  stats_refresh = 30 secs
  stats_track_cmds = yes
}
postmaster_address = [email protected]
protocols = imap pop3 lmtp sieve
quota_full_tempfail = yes
service auth {
  idle_kill = 15 mins
  unix_listener auth-userdb {
    user = _dovecot
  }
}
service dns_client {
  unix_listener dns-client {
    mode = 0600
  }
}
service imap-login {
  inet_listener imap {
    port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
  service_count = 0
}
service imap {
  client_limit = 5
  process_limit = 200
  service_count = 0
}
service indexer-worker {
  user = _dovecot
}
service lmtp {
  unix_listener lmtp {
    mode = 0600
  }
}
service managesieve-login {
  inet_listener sieve {
    port = 4190
  }
}
service pop3-login {
  inet_listener pop3 {
    port = 110
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}
service pop3 {
  client_limit = 5
  process_limit = 200
  service_count = 0
}
service quota-exceeded {
  executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh
  unix_listener quota-exceeded {
    group = mail
    mode = 0660
    user = _dovecot
  }
  user = _dovecot
}
service quota-warning {
  executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh
  unix_listener quota-warning {
    group = mail
    mode = 0660
    user = _dovecot
  }
  user = _dovecot
}
service stats {
  fifo_listener stats-mail {
    mode = 0600
    user = _dovecot
  }
}
ssl = required
ssl_ca = </etc/certificates/*.example.com.F1198B75044505AB8E75B3ABB079E94E955EB6C1.chain.pem
ssl_cert = </etc/certificates/*.example.com.F1198B75044505AB8E75B3ABB079E94E955EB6C1.cert.pem
ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL
ssl_key = </etc/certificates/*.example.com.F1198B75044505AB8E75B3ABB079E94E955EB6C1.key.pem
ssl_key_path = /etc/certificates/*.example.com.F1198B75044505AB8E75B3ABB079E94E955EB6C1.key.pem
ssl_protocols = !SSLv2 !SSLv3
userdb {
  args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf enforce_quotas=yes
  driver = od
}
userdb {
  args = /Library/Server/Mail/Config/dovecot/submit.passdb
  driver = passwd-file
}
verbose_proctitle = yes
protocol lmtp {
  mail_plugins = quota zlib acl fts fts_sk sieve push_notify
}
protocol lda {
  mail_plugins = quota zlib acl fts fts_sk sieve push_notify
}
protocol imap {
  mail_max_userip_connections = 20
  mail_plugins = quota zlib acl fts fts_sk imap_acl imap_quota imap_zlib
}
protocol pop3 {
  mail_max_userip_connections = 6
}

The bit I added was:

namespace public-junk {
  location = maildir:/Library/Server/Mail/Data/mail/public
  prefix = Public
  separator = .
  subscriptions = no
  type = public
}

After I restart it and try to log in , it states an internal error occurred:

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE XAPPLEPUSHSERVICE AUTH=CRAM-MD5 AUTH=DIGEST-MD5 AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
a1 LOGIN jay ***********
* BYE Internal error occurred. Refer to server log for more information.
closed

However, there is really nothing in the log that seems relevant:

May 06 16:41:38 imap(pid 54065 user jay): Debug: Effective uid=214, gid=6, home=
May 06 16:41:38 imap(pid 54065 user jay): Debug: Quota root: name=User quota backend=maildir args=
May 06 16:41:38 imap(pid 54065 user jay): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0
May 06 16:41:38 imap(pid 54065 user jay): Debug: Quota warning: bytes=0 (100%) messages=0 reverse=no command=quota-exceeded jay
May 06 16:41:38 imap(pid 54065 user jay): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning jay
May 06 16:41:38 imap(pid 54065 user jay): Debug: Quota grace: root=User quota bytes=0 (10%)
May 06 16:41:38 imap(pid 54065 user jay): Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/Library/Server/Mail/Data/mail/11BFFB08-A721-4134-8824-A99D66FEF4EE
May 06 16:41:38 imap(pid 54065 user jay): Debug: maildir++: root=/Library/Server/Mail/Data/mail/11BFFB08-A721-4134-8824-A99D66FEF4EE, index=, indexpvt=, control=, inbox=/Library/Server/Mail/Data/mail/11BFFB08-A721-4134-8824-A99D66FEF4EE, alt=
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: initializing backend with data: vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: acl username = jay
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: owner = 1
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl vfile: Global ACL directory: /Library/Server/Mail/Config/dovecot/global-acls
May 06 16:41:38 imap(pid 54065 user jay): Debug: Namespace acl-mailboxes: type=shared, prefix=shared.%u., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/Library/Server/Mail/Data/mail/users/%u:INDEX=/Library/Server/Mail/Data/mail/shared/%u
May 06 16:41:38 imap(pid 54065 user jay): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt=
May 06 16:41:38 imap(pid 54065 user jay): Debug: fts: Indexes disabled for namespace 'shared.%u.'
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: initializing backend with data: vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: acl username = jay
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: owner = 0
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl vfile: Global ACL directory: /Library/Server/Mail/Config/dovecot/global-acls
May 06 16:41:38 imap(pid 54065 user jay): Debug: Namespace list-archives: type=shared, prefix=archives.%u., sep=., inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/Library/Server/Mail/Data/listserver/messages/archive/lists/%u:INDEX=/Library/Server/Mail/Data/listserver/messages/archive/shared/%u
May 06 16:41:38 imap(pid 54065 user jay): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt=
May 06 16:41:38 imap(pid 54065 user jay): Debug: fts: Indexes disabled for namespace 'archives.%u.'
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: initializing backend with data: vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: acl username = jay
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: owner = 0
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl vfile: Global ACL directory: /Library/Server/Mail/Config/dovecot/global-acls
May 06 16:41:38 imap(pid 54065 user jay): Debug: Namespace public-junk: type=public, prefix=Public, sep=., inbox=no, hidden=no, list=yes, subscriptions=no location=maildir:/Library/Server/Mail/Data/mail/public
May 06 16:41:38 imap(pid 54065 user jay): Debug: maildir++: root=/Library/Server/Mail/Data/mail/public, index=, indexpvt=, control=, inbox=, alt=
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: initializing backend with data: vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: acl username = jay
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl: owner = 0
May 06 16:41:38 imap(pid 54065 user jay): Debug: acl vfile: Global ACL directory: /Library/Server/Mail/Config/dovecot/global-acls

Can anyone see what I'm doing wrong, or suggest where I can look for some more valuable information?

jaydisc

Asked: 2015-03-03 21:51:43 +0800 CST

Increase timeout for Postfix/Cyrus "Command time limit exceeded"?

1

I have an old OS X Server 10.4.x running Postfix 2.1.5 which is configured to use cyrus as mailbox transport.

Here's postconf -n:

# postconf -n
alias_maps = hash:/etc/aliases,hash:/var/mailman/data/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
enable_server_options = yes
html_directory = no
inet_interfaces = all
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
luser_relay = 
mail_owner = postfix
mailbox_size_limit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains = 
message_size_limit = 15728640
mydestination = $myhostname,localhost.$mydomain,livingnow.com.au,localhost
mydomain = livingnow.com.au
mydomain_fallback = localhost
myhostname = server.livingnow.com.au
mynetworks = 127.0.0.1/32,192.168.16.0/24
mynetworks_style = host
newaliases_path = /usr/bin/newaliases
owner_request_special = no
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_client_restrictions = permit_mynetworks  reject_rbl_client sbl-xbl.spamhaus.org reject_rbl_client bl.spamcop.net permit
smtpd_pw_server_security_options = cram-md5,login,plain
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination,permit
smtpd_sasl_auth_enable = yes
smtpd_tls_key_file = 
smtpd_use_pw_server = yes
unknown_local_recipient_reject_code = 550

Every now and then, it needs a kickstart (replacing the entire server soon), but when it has issue, undeliverable notices are sent out with:

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; Command time limit exceeded:
   "/usr/bin/cyrus/bin/deliver"

In master.cf, that command is listed as:

# Also specify in main.cf: cyrus_destination_recipient_limit=1
cyrus     unix  -       n       n       -       10      pipe
  user=cyrusimap argv=/usr/bin/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}

We usually detect the problem and restart the services which resolves it, but we took an hour or two to detect it today, and many senders got this notice, which is less than ideal.

Is there any way to increase the command time limit?

jaydisc

Asked: 2014-03-05 15:20:57 +0800 CST

Postfix locally redirected mail from sender_restrictions doesn't seem to correctly pass through virtual aliases

0

I'm running Postfix 2.1.7 on Debian Squeeze.

I've setup a redirection based on a sender using sender restrictions.

/etc/postfix/sender_access:

domaintoredirect.com            REDIRECT [email protected]

/etc/postfix/main.cf:

smtpd_recipient_restrictions = 
    reject_non_fqdn_recipient, check_recipient_access hash:/etc/postfix/access, check_recipient_access hash:/etc/postfix/access_lindalane
    permit_mynetworks, reject_unauth_destination,
    reject_non_fqdn_sender, check_sender_access hash:/etc/postfix/sender_access,
    reject_non_fqdn_hostname, reject_invalid_helo_hostname, check_helo_access hash:/etc/postfix/helo_access,
    reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, permit

virtual_alias_domains = hash:/etc/postfix/virtual_domains
virtual_alias_maps = hash:/etc/postfix/virtual, regexp:/etc/postfix/regexp_virtual

[email protected] is a virtual user on this server, defined in /etc/postfix/virtual:

[email protected]          user

So, I send an email to the server from [email protected] (to [email protected]), and an undeliverable report gets returned to [email protected]:

<[email protected]> (expanded from <[email protected]>): User unknown in virtual alias table

Sending directly to [email protected] works perfectly.

If I change the redirected destination an email address NOT hosted on this server, it also works fine.

Is something occurring during the redirect process if the destination is on the same host that prevents the destination address from being checked against the virtual aliases?

Here's the full postconf -n if needed:

# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
disable_vrfy_command = yes
inet_interfaces = all
mailbox_command = /usr/lib/dovecot/deliver
mailbox_size_limit = 0
message_size_limit = 20480000
mydestination = internet.example.com, localhost.example.com, , localhost
myhostname = internet.example.com
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
myorigin = /etc/mailname
readme_directory = no
recipient_delimiter = +
relay_domains = 
relayhost = 
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_data_restrictions = reject_unauth_pipelining, permit
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_recipient, check_recipient_access hash:/etc/postfix/access, permit_mynetworks, reject_unauth_destination,    reject_non_fqdn_sender, check_sender_access hash:/etc/postfix/sender_access,    reject_non_fqdn_hostname, reject_invalid_helo_hostname, check_helo_access hash:/etc/postfix/helo_access,    reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, permit
smtpd_sasl_auth_enable = no
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/example.com.2014.chain
smtpd_tls_key_file = /etc/ssl/private/example.com.key.insecure.pem
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
virtual_alias_domains = hash:/etc/postfix/virtual_domains
virtual_alias_maps = hash:/etc/postfix/virtual, regexp:/etc/postfix/regexp_virtual

jaydisc

Asked: 2013-08-30 16:26:45 +0800 CST

Trouble with case-sensitive LDAP user logins to Dovecot

1

I asked this to the dovecot list to no avail, so will try here too. Please forgive the crosspost.

I have a client running Dovecot-Postfix on Debian Squeeze. I'm using Dovecot from the Squeeze repository.

# dovecot --version
1.2.15

I've implemented a central mail_location and am using one vmail user, as I thought this would be be the best approach for when it came time to implement Shared and Public Mailboxes.

# dovecot -n
# 1.2.15: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-5-xen-686 i686 Debian 6.0.7 ext3
log_timestamp: %Y-%m-%d %H:%M:%S 
protocols: imap imaps pop3s managesieve
listen(default): 127.0.0.1:143
listen(imap): 127.0.0.1:143
listen(pop3): 127.0.0.1:110
listen(managesieve): *
ssl_listen(default): *:993
ssl_listen(imap): *:993
ssl_listen(pop3): *:995
ssl_listen(managesieve): 
ssl_ca_file: /etc/ssl/certs/RapidSSL_CA_bundle.pem
ssl_cert_file: /etc/ssl/certs/mail.example.com.2013.chain.pem
ssl_key_file: /etc/ssl/private/example.2013.key
login_dir: /var/run/dovecot/login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
login_executable(managesieve): /usr/lib/dovecot/managesieve-login
mail_max_userip_connections(default): 40
mail_max_userip_connections(imap): 40
mail_max_userip_connections(pop3): 10
mail_max_userip_connections(managesieve): 10
mail_privileged_group: mail
mail_uid: vmail
mail_gid: vmail
mail_location: maildir:/var/spool/dovecot/%d/%u
mbox_write_locks: fcntl dotlock
mail_executable(default): /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_executable(managesieve): /usr/lib/dovecot/managesieve
mail_plugins(default): quota imap_quota
mail_plugins(imap): quota imap_quota
mail_plugins(pop3): 
mail_plugins(managesieve): 
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3
mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve
namespace:
 type: private
 separator: /
 inbox: yes
 list: yes
 subscriptions: yes
lda:
 postmaster_address: [email protected]
 mail_plugins: sieve quota
 log_path: /var/log/dovecot-deliver.log
 info_log_path: /var/log/dovecot-deliver.log
auth default:
 mechanisms: plain login
 passdb:
   driver: ldap
   args: /etc/dovecot/dovecot-ldap.conf
 userdb:
   driver: ldap
   args: /etc/dovecot/dovecot-ldap-userdb.conf
 socket:
   type: listen
   client:
     path: /var/spool/postfix/private/auth
     mode: 432
     user: postfix
     group: postfix
   master:
     path: /var/run/dovecot/auth-master
     mode: 384
     user: vmail
     group: vmail
plugin:
 quota: maildir:User
 quota_rule: *:storage=1200M
 quota_rule2: Deleted Messages:storage=10%%
 quota_rule3: Deleted Items:storage=10%%
 quota_rule4: Trash:storage=10%%
 sieve: /var/spool/sieve/%d/%u/.dovecot.sieve
 sieve_dir: /var/spool/sieve/%d/%u

All of the mail users are LDAP users only (not local UNIX users - not using nsswitch). dovecot-ldap-userdb.conf is a symbolic link to dovecot-ldap.conf

# grep -v '^ *\(#.*\)\?$' /etc/dovecot/dovecot-ldap.conf 
uris = ldaps://mail.example.com/
dn = uid=mail,ou=Services,dc=example,dc=com
dnpass = ******************
tls_require_cert = hard
auth_bind = yes
base = ou=People,dc=example,dc=com
user_attrs = quota=quota_rule=*:storage=%$M
user_filter = (&(objectClass=posixAccount)(mail=%u))
pass_attrs = uid=mail,userPassword=password
pass_filter = (&(objectClass=posixAccount)(mail=%u))

Now, mail addressed to [email protected] and [email protected] correctly gets delivered to the correct mail location of /var/spool/dovecot/example.com/user, but the problem occurs when the user creates their email account in an IMAP client with uppercase characters in their username, e.g. [email protected]. This creates a new directory at /var/spool/dovecot/exaMPLE.com/user, which never receives any mail. Is it possible to ignore the case the user enters in their mail client and always land them at the lowercase mail directory? Where would this be done?

jaydisc

Asked: 2013-08-23 16:16:46 +0800 CST

Tracking down the cause of a Postfix "Recipient address rejected: Access denied" error

8

We're having a situation where inbound emails from a specific company to legitimate recipients are bouncing with "Recipient address rejected: Access denied":

Aug 23 09:15:27 extranet postfix/smtpd[20228]: NOQUEUE: reject: RCPT from sender.com[8.9.10.11]: 554 5.7.1 <[email protected]>: Recipient address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mg01d1.sender.com>

postconf -d | grep mail_version

mail_version = 2.7.1

postconf -n

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_percent_hack = no
allow_untrusted_routing = yes
append_dot_mydomain = no
biff = no
bounce_queue_lifetime = 24h
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
delay_warning_time = 4h
disable_vrfy_command = yes
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mailbox_size_limit = 0
maximal_queue_lifetime = 24h
mydestination = mail.example.com, extranet.example.com, localhost
myhostname = mail.example.com
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
myorigin = /etc/mailname
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relay_domains = $mydestination
relayhost = 
smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_data_restrictions = reject_unauth_pipelining, permit
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_recipient, permit_mynetworks, reject_unauth_destination, check_recipient_access hash:/etc/postfix/access,    reject_non_fqdn_sender, check_sender_access hash:/etc/postfix/sender_access,    reject_non_fqdn_hostname, reject_invalid_hostname, check_helo_access hash:/etc/postfix/helo_access, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, permit
smtpd_sasl_auth_enable = no
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/mail.example.com.2013.chain.pem
smtpd_tls_key_file = /etc/ssl/private/example.2013.key
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_use_tls = no
virtual_alias_domains = example.co.uk, example.co
virtual_alias_maps = hash:/etc/postfix/virtual, ldap:/etc/postfix/ldap_virtual_alias_maps.cf, ldap:/etc/postfix/ldap_virtual_groups.cf
virtual_mailbox_domains = ldap:/etc/postfix/ldap_virtual_domains.cf
virtual_mailbox_maps = ldap:/etc/postfix/ldap_virtual_mailbox_maps.cf
virtual_transport = dovecot

Now, we only use smtpd_recipient_restrictions because we're pretty particular about the order of client, helo, recipient restrictions being applied. But, by my (obviously limited) understanding, the only directive in there that should be generating that error is the check_recipient_access hash:/etc/postfix/access directive, but that file is only used to block some commonly spammed addresses at one of our virtual alias domains:

[email protected]   REJECT Recipient address rejected. This domain name is only an alias. Please email postmaster @ the primary domain or the mail server hostname.
[email protected]        REJECT Recipient address rejected. This domain name is only an alias. Please email abuse @ the primary domain or the mail server hostname.
[email protected]  REJECT Recipient address rejected. This domain name is only an alias. Please email support @ the primary domain or the mail server hostname.

/etc/postfix/sender_access is empty (lying in wait) and helo_access only contains:

extranet.example.com        REJECT You are not me
www.example.com     REJECT You are not me
mail.example.com        REJECT You are not me

All of the other directives seem to be correctly fulfilled, or I would at least be expecting a different error, like Helo command rejected, User unknown in virtual mailbox table, Service unavailable; Client host [2.3.4.5] blocked using zen.spamhaus.org, etc.

Where should I be looking next to see why I'm getting "Recipient address rejected: Access denied"? Would any of those other directives in smtpd_recipient_restrictions issue that error in the case of failure?

jaydisc

Asked: 2013-06-05 22:01:17 +0800 CST

Postfix using LDAP lookup works for virtual_mailbox_maps, but fails for virtual_mailbox_domains

0

I'm setting up a Postfix/Dovecot/LDAP server on Debian Squeeze with all virtual mailboxes (as opposed to aliases). I've successfully setup Dovecot, and have Postfix correctly looking to ldap for virtual_mailbox_maps, but once I connect up virtual_mailbox_domains, I get these errors and no delivery:

Jun  5 15:52:51 extranet postfix/smtpd[2090]: warning: problem talking to service rewrite: Success
Jun  5 15:52:51 extranet postfix/master[1432]: warning: process /usr/lib/postfix/trivial-rewrite pid 2219 killed by signal 6
Jun  5 15:52:51 extranet postfix/master[1432]: warning: /usr/lib/postfix/trivial-rewrite: bad command startup -- throttling

Here's postconf -d mail_version:

# postconf -d mail_version
mail_version = 2.7.1

Here's postconf -n:

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_percent_hack = no
allow_untrusted_routing = yes
append_dot_mydomain = no
biff = no
bounce_queue_lifetime = 24h
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
debug_peer_level = 2
debug_peer_list = 124.149.148.61
delay_warning_time = 4h
disable_vrfy_command = yes
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mailbox_size_limit = 0
maximal_queue_lifetime = 24h
mydestination = mail.example.com, extranet.example.com, localhost
myhostname = mail.example.com
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
myorigin = /etc/mailname
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relay_domains = $mydestination
relayhost = 
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_data_restrictions = reject_unauth_pipelining, permit
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_recipient,
    permit_mynetworks, reject_unauth_destination,
    check_recipient_access hash:/etc/postfix/access,
    reject_non_fqdn_sender, check_sender_access hash:/etc/postfix/sender_access,
    reject_non_fqdn_hostname, reject_invalid_hostname, check_helo_access hash:/etc/postfix/helo_access,
    reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, permit
smtpd_sasl_auth_enable = no
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/mail.example.com.2013.chain.pem
smtpd_tls_key_file = /etc/ssl/private/exampl.2013.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = no
virtual_mailbox_domains = ldap:/etc/postfix/ldap_virtual_domains.cf
virtual_mailbox_maps = ldap:/etc/postfix/ldap_virtual_maps.cf
virtual_transport = dovecot

/etc/postfix/ldap_virtual_maps.cf:

server_host = ldaps://mail.example.com/
search_base = ou=People,dc=example,dc=com
version = 3
bind_dn = uid=mail,ou=Services,dc=example,dc=com
bind_pw = *************
query_filter = (&(objectclass=inetOrgPerson)(mail=%s))
result_attribute = mail

And here is /etc/postfix/ldap_virtual_domains.cf:

server_host = ldaps://mail.example.com/
search_base = ou=Domains,dc=example,dc=com
version = 3
bind_dn = uid=mail,ou=Services,dc=example,dc=com
bind_pw = ************
query_filter = associatedDomain=%s
result_attribute = associatedDomain

If I run a manual check using postmap, I get a response:

# postmap -q example.com ldap:/etc/postfix/ldap_virtual_domains.cf
example.com

Manual ldapsearches work fine too. I'm using the same credentials for the successful virtual_mailbox_maps, which is working, so I'm quite perplexed.

P.S. The ldap lookup for virtual_mailbox_maps was also not working. The dovecot virtual_transport was working. For some reason, that was overlooked, so no LDAP queries were working from postfix, but they were working for postmap.

jaydisc

Asked: 2013-02-13 03:39:03 +0800 CST

Is there any way to mask the INBOX label for Dovecot 1.2x Shared Mailboxes?

0

I'm setting up a new Dovecot sever to replace an old Cyrus server, and need to keep things as consistent as possible. I have a couple local accounts, like junkmail and notjunkmail that users get shared access to, and can drop things in to train sa-update. However, when users share over junkmail's inbox, it's displayed in the hierarchy:

Other Users
- junkmail
  - INBOX

Is there any way to get junkmail's INBOX to just show up at Other Users/junkmail and not require that extra depth?

Other Users
- junkmail

I'm running Debian Squeeze and the standard dovecot package available therein:

# uname -a
Linux internet.digitalquay.com.au 2.6.32-5-xen-amd64 #1 SMP Sun Sep 23 13:49:30 UTC 2012 x86_64 GNU/Linux
#dovecot --version
1.2.15

I'm running in a configuration where all mail is owned by the vmail user, due to the impression I'm under that it's a better way if there are shared mailboxes.

Relevant bits of dovecot -n:

mail_uid: vmail
mail_gid: vmail
mail_location: maildir:/var/spool/dovecot/user/%u
mail_plugins: acl imap_acl
namespace:
  type: private
  separator: /
  inbox: yes
  list: yes
  subscriptions: yes
namespace:
  type: shared
  separator: /
  prefix: Other Users/%%u/
  location: maildir:/var/spool/dovecot/user/%%u:INDEX="/var/spool/dovecot/user/%u/Other\ Users/%%u"
  list: children
auth default:
  passdb:
    driver: ldap
    args: /etc/dovecot/dovecot-ldap.conf
  userdb:
    driver: passwd
    args: uid=vmail gid=vmail blocking=yes mail=maildir:/var/spool/dovecot/user/%u

Am I barking up the wrong tree, or is this possible?

Postfix "greeted me with my own hostname" only when `mail` command, works fine over smtp

mod_rewrite on Debian Stretch breaks php7.0-fpm with AH01071: Got error 'Primary script unknown\n'

Postfix recipient rewriting from one domain to another

Setting php_value in VirtualHost on Debian Squeeze Apache 2.4.10 + mod_proxy_fcgi + php-fpm?

Linux mail(x) command. Can't open or use. Just spits out old message and returns to prompt

Dovecot not working with added public namespace

Increase timeout for Postfix/Cyrus "Command time limit exceeded"?

Postfix locally redirected mail from sender_restrictions doesn't seem to correctly pass through virtual aliases

Trouble with case-sensitive LDAP user logins to Dovecot

Tracking down the cause of a Postfix "Recipient address rejected: Access denied" error

Postfix using LDAP lookup works for virtual_mailbox_maps, but fails for virtual_mailbox_domains

Is there any way to mask the INBOX label for Dovecot 1.2x Shared Mailboxes?

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

Ping a Specific Port

Check if port is open or closed on a Linux server?

How to automate SSH login with password?

How do I tell Git for Windows where to find my private RSA key?

What's the default superuser username/password for postgres after a new install?

What port does SFTP use?

Command line to list users in a Windows Active Directory group?

What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats?

How to determine if a bash variable is empty?