Vajan abi Pingviini serveri Postfixi seadistamisel - ASAP
Postitatud: 05.12.2006, 17:08
Pingviini server on hakkanud massiliselt saatma spämmi. Kusagil on mingi auk, mida mina leida ei suuda. Viitab asi sellele, et spämmi saadetakse läbi Apache. Samas peaks Postfix ja SpamAssasin selle likvideerima minu arust...
Praeguse seisuga enam meilid Pingviini serverist välja ei liigu.
Põhjus:
http://www.spamcop.net/bl.shtml?212.47.220.124
Minu Postfixi main.cf:
Minu Postfixi master.cf
Spamassasini local.cf fail:
Siin on minu vastav teema ka Gentoo foorumis, sealt saab ka lisainfot:
http://forums.gentoo.org/viewtopic-t-521659.html
Seega - kes tunneb Postfixi ja arvab, et saab aidata, siis abi teretulnud. Kui aga asi nüüd kiiresti lahendust ei leia - siis olen sunnitud serverist loobuma. Lihtsalt tuleb tunnistada - jõud ei käi üle.
Praeguse seisuga enam meilid Pingviini serverist välja ei liigu.
Põhjus:
http://www.spamcop.net/bl.shtml?212.47.220.124
Minu Postfixi main.cf:
Kood: Vali kõik
#
# Postfix MTA Manager Main Configuration File;
#
# Please do NOT edit this file manually;
#
#
# Postfix directory settings; These are critical for normal Postfix MTA functionallity;
#
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
program_directory = /usr/lib/postfix
#
# Some common configuration parameters;
#
mynetworks_style = host
mydomain = one.weblab.ee
myorigin = $mydomain
smtpd_banner = $myhostname VHCS2 2.4 Spartacus Managed ESMTP 2.4.6.2
setgid_group = postdrop
#
# Receiving messages parameters;
#
mydestination = $myhostname, $mydomain
append_dot_mydomain = no
append_at_myorigin = yes
local_transport = local
virtual_transport = virtual
transport_maps = hash:/etc/postfix/vhcs2/transport
#
# Delivering local messages parameters;
#
mail_spool_directory = /var/spool/mail
mailbox_size_limit = 0
mailbox_command = procmail -a "$EXTENSION"
biff = no
alias_database = hash:/etc/mail/aliases
local_destination_recipient_limit = 1
local_recipient_maps = unix:passwd.byname $alias_database
#
# Delivering virtual messages parameters;
#
virtual_mailbox_base = /var/spool/mail/virtual
virtual_mailbox_limit = 0
virtual_mailbox_domains = hash:/etc/postfix/vhcs2/domains
virtual_mailbox_maps = hash:/etc/postfix/vhcs2/mailboxes
virtual_alias_maps = hash:/etc/postfix/vhcs2/aliases
virtual_minimum_uid = 1000
virtual_uid_maps = static:1000
virtual_gid_maps = static:12
#
# SASL paramters;
#
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = vhcs.net
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions =
reject_unverified_sender,
permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
check_policy_service inet:127.0.0.1:10030
Kood: Vali kõik
#
# Postfix master process configuration file. For details on the format
# of the file, see the Postfix master(5) manual page.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
#
# ==========================================================================
#Järgmise rea lisasin ASSP jaoks. Lisasin ette ainult localhost
smtp inet n - - - - smtpd
#submission inet n - - - - smtpd
# -o smtpd_etrn_restrictions=reject
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#smtps inet n - - - - smtpd
# -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission inet n - - - - smtpd
# -o smtpd_etrn_restrictions=reject
# -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - - 300 1 qmgr
#qmgr fifo n - - 300 1 oqmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - n - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - - - - smtp
-o fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - - n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}
#
# vhcs delivery agent.
#
vhcs2-arpl unix - n n - - pipe flags=O user=vmail argv=/var/www/vhcs2/engine/messa$
Kood: Vali kõik
# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
# Only a small subset of options are listed below
#
###########################################################################
# Add *****SPAM***** to the Subject header of spam e-mails
#
# rewrite_header Subject *****SPAM*****
# Save spam messages as a message/rfc822 MIME attachment instead of
# modifying the original message (0: off, 2: use text/plain instead)
#
# report_safe 1
# Set which networks or hosts are considered 'trusted' by your mail
# server (i.e. not spammers)
#
# trusted_networks 212.17.35.
# Set file-locking method (flock is not safe over NFS, but is faster)
#
# lock_method flock
# Set the threshold at which a message is considered spam (default: 5.0)
#
# required_score 5.0
# Use Bayesian classifier (default: 1)
#
# use_bayes 1
# Bayesian classifier auto-learning (default: 1)
#
# bayes_auto_learn 1
# Set headers which may provide inappropriate cues to the Bayesian
# classifier
#
# bayes_ignore_header X-Bogosity
# bayes_ignore_header X-Spam-Flag
# bayes_ignore_header X-Spam-Status
blacklist_from *@winetime.co.kr
blacklist_from *@roseglen.demon.co.uk
blacklist_from *@juresa.com.br
blacklist_from *@bigmikes.org
blacklist_from *@zgplus.com
blacklist_from *@quatryxtatu.com
blacklist_from only@pingviin.org
blacklist_from weeks@one.weblab.ee
blacklist_from and@pingviin.org
blacklist_from t@one.weblab.ee
blacklist_from nitrite@pingviin.org
blacklist_from redos@one.weblab.ee
blacklist_from tucked@pingviin.org
score http://www.drecomla.com 1
header wight Subject =~ /You CAN lose weight safely and easily/
score wight 1
describe wight wight
blacklist_from *@AT-KC.COM
body tea /Scientific Breakthrough/
score tea 1
describe tea tea
blacklist_from *@centurytel.net
blacklist_from *@mxin3.lsn.net
blacklist_from jukwalter@t-online.de
blacklist_from *@grupodema.com.ar
blacklist_from TenPoundsInOneWeek@one.weblab.ee
http://forums.gentoo.org/viewtopic-t-521659.html
Seega - kes tunneb Postfixi ja arvab, et saab aidata, siis abi teretulnud. Kui aga asi nüüd kiiresti lahendust ei leia - siis olen sunnitud serverist loobuma. Lihtsalt tuleb tunnistada - jõud ei käi üle.