Hi,

On Wed, 2016-04-13 at 11:07 -0600, LaMont Jones wrote:
> On Mon, Apr 11, 2016 at 11:58:39PM +1000, Nikolai Lusan wrote:
> > 
> > After upgrade to 3.1.0 the mail.log file fills with the following
> > alert:
> > Apr 11 23:42:23 lutsk postfix/master[8473]: warning: process
> > /usr/libexec/postfix/smtpd pid 9583 exit status 127
> > Apr 11 23:42:23 lutsk postfix/master[8473]: warning:
> > /usr/libexec/postfix/smtpd: bad command startup -- throttling
> What revision did you upgrade from?  and can you attach:

Upgraded from 3.0.4-5, I also checked all the 3.0 backwards
compatibility issues, they are resolved.

> 1) the contents of /etc/postfix/main.cf
FWIW I based this on the default main.cf, most of the comments are from
that, and not me being nasty :)

/etc/postfix/main.cf:

# See /usr/share/postfix/main.cf.dist for a commented, more complete version

smtpd_banner = $myhostname ESMTP $mail_name
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Fix problem caused by package maintainer.
daemon_directory = /usr/libexec/postfix


# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
delay_warning_time = 7d

# TLS parameters
smtpd_tls_cert_file = /etc/ssl/private/lusan.id.au-alphassl_wildcard.pem
smtpd_tls_key_file = /etc/ssl/private/lusan.id.au-alphassl_wildcard.key
smtp_tls_CApath = /etc/ssl/private
smtp_tls_security_level = may
smtpd_tls_security_level = may
smtp_tls_mandatory_ciphers = high
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_protocols = !SSLv2, !SSLv3
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
smtp_tls_protocols = !SSLv2, !SSLv3
smtpd_tls_mandatory_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL
smtpd_tls_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL
smtp_tls_mandatory_exclude_ciphers = MD5, DES, ADH, RC4, PSD, SRP, 3DES, eNULL
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_always_issue_session_ids = no

smtpd_tls_eecdh_grade = strong
tls_preempt_cipherlist = yes
tls_daemon_random_bytes = 32
tls_random_source = dev:/dev/urandom
tls_random_bytes = 32
tls_random_reseed_period = 3600s
tls_random_exchange_name = /var/lib/postfix/prng_exch
tls_random_prng_update_period = 3600s
tls_append_default_CA = no
tls_high_cipherlist = 
EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA

smtpd_recipient_restrictions =
        permit_mynetworks,
        reject_non_fqdn_recipient,
        reject_non_fqdn_sender,
        reject_rbl_client zen.spamhaus.org,
        reject_rbl_client bl.spamcop.net,
        reject_rbl_client cbl.abuseat.org,
        reject_unknown_reverse_client_hostname,
        reject_unauth_pipelining,
        reject_unauth_destination,
        check_policy_service unix:private/policyd-spf,
        #check_policy_service inet:127.0.0.1:10031

policyd-spf_time_limit = 3600
smtpd_helo_required = yes
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = lutsk.lusan.id.au
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = lutsk.lusan.id.au, li32-61.members.linode.com, localhost
relay_domains = </SNIP_MY_VALID_DOMAINS>
smtp_address_preference=any
relayhost =
mynetworks = 127.0.0.0/8, </SNIP_LIST_OF_PERSONAL_HOSTS>
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

# Temp setting while kiev is down
maximal_queue_lifetime = 21d
smtpd_relay_restrictions = permit_mynetworks

milter_protocol = 2
milter_default_action = accept
smtpd_milters = inet:localhost:12301
non_smtpd_milters = inet:localhost:12301
compatibility_level = 2

> 2) the output of: postconf | grep directory

root@lutsk:/etc/postfix# postconf | grep directory
address_verify_map = btree:$data_directory/verify_cache
command_directory = /usr/sbin
command_execution_directory =
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
execution_directory_expansion_filter = 
1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
html_directory = /usr/share/doc/postfix/html
mail_spool_directory = /var/mail
manpage_directory = /usr/share/man
meta_directory = /etc/postfix
postscreen_cache_map = btree:$data_directory/postscreen_cache
process_id_directory = pid
queue_directory = /var/spool/postfix
readme_directory = no
require_home_directory = no
sample_directory = /etc/postfix
shlib_directory = /usr/lib/postfix


Thanks for the response.
-- 
Nikolai Lusan <[email protected]>

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to