Happy Easter 🐣 - and thank you again for your support. I very much do appreciate that!
As to your precious points... see below,
Martin.
On Sunday, 31 March, 2024 00:47 CET, Wietse Venema via Postfix-users
<postfix-users@postfix.org> wrote:
Martin Stenzel:
> Awesome, incredibly fast, you are awesome
> But, when I put this definition into master.cf (as you explained
> wisely (postfix is overwhelming, in a positive way)) the
> X-Spamd-Result header is missing.
>
> When I put it in main.cf, it works as expected. This is the part of
> master.cf which is in the _non-working_ config.
I suppose there is a configuration mistake...
> submission inet n - n - - smtpd
> -o syslog_name=postfix/submission
> -o smtpd_tls_security_level=may
> -o smtpd_sasl_auth_enable=yes
> -o smtpd_sasl_type=dovecot
> -o smtpd_sasl_path=private/auth
> -o smtpd_sasl_local_domain=$myhostname
> -o smtpd_sasl_security_options=noanonymous
> ...too much tls stuff...
> -o { smtpd_milters = inet:localhost:10099 inet:localhost:11332 }
> -o { non_smtpd_milters = inet:localhost:10099 inet:localhost:11332 }
> -o { milter_mail_macros = i {mail_addr} {client_addr} {client_name}
> {auth_authen} }
> -o milter_default_action=tempfail
Caution: output from "postconf -Mf" is preferred over hand-edited
listings, because humans do make mistakes.
DO review the output from "postconf -Mf" and compare it to what you
expect it to be.
Note that these apply to the submission (TCP port 587) service only.
Other mail flows, such as /usr/sbin/sendmail, are not covered.
There is no black magic in how master.cf settings take precedence
over main.cf settings.
If rspamd does not work in the exact same way with settings in
master.cf, as it does work with settings in main.cf, then the mistake
could be:
- There is some important main.cf setting that you forgot to move
into master.cf.
This one I tackled successfully. I moved the rspamd milter entry into the
main.cf, and left the footer milter (tachtler/FooterMilter: Java implementation
of the Sendmail Milter protocol based on the project of org.nightcode.jmilter
from dmi...@nightcode.org to insert a footer/disclaimer at the end of the body
of an email. (github.com)) entry in the master.cf.
This change obviously does satisfy rspamd. Now I get the rspamd header scores
as expected.
I already thought this is going to be a find-the-needle-in-the-hay scenario,
but I was lucky!
- There is some important main.cf setting that cannot be moved into
an smtpd -o option, because that setting is implemented by a different program.
- Your mail flow does not go through the submission service.
- You forgot to "postfix reload" .
- You forgot to watch the log for warnings.
> Maybe you wonder why I need to put it into master.cf?
>
> Because I have this entry in master.cf
>
> ---
>
> 10.4.0.2:10026 inet n - n - - smtpd
> -o content_filter=
> -o local_recipient_maps=
> -o relay_recipient_maps=
> -o smtpd_restriction_classes=
> -o smtpd_client_restrictions=
> -o smtpd_helo_restrictions=
> -o smtpd_sender_restrictions=
> -o smtpd_recipient_restrictions=permit_mynetworks,reject
> -o mynetworks=127.0.0.1,10.4.0.1,10.4.0.2
> ---
>
> If I put the milter entries into main.cf the milters get run twice,
> which obviously is not what is desirable.
I suppose that you could add "-o smtpd_milters=" there.
> This is my scenario
>
> https://www.ciphermail.com/documentation/gateway-administration-guide/network-architecture.html#content-scanner-with-redirect
>
Before diving into that, let's look for simple mistakes first.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
--
Martin Stenzel · er/ihm · he/him
m.sten...@mail.xy-space.de
An der Drehscheibe 9
D-50733 Köln · Cologne
Deutschland · Germany
This message was checked by ESET Endpoint Antivirus for Linux. Detection Engine
Version: 28978 (20240329).
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
