> Please show "postconf -n" output and non-comment lines from master.cf.
[whitespace modified for readability]
>postconf -n
alias_database =
alias_maps =
append_dot_mydomain = no
biff = no
body_checks = regexp:$config_directory/tables/body_checks
config_directory = /etc/postfix
content_filter = lmtp-amavis:[127.0.0.1]:amavisd-maia
delay_warning_time = 4h
disable_vrfy_command = yes
header_checks = regexp:$config_directory/tables/header_checks-spam,
regexp:$config_directory/tables/header_checks-test
inet_protocols = all
local_recipient_maps =
local_transport = error:local mail delivery is disabled
masquerade_domains = $mydomain
message_size_limit = 15728640
milter_default_action = accept
mime_header_checks = regexp:$config_directory/tables/mime_header_checks
mydestination =
mydomain = dipswitch.net
myhostname = $smtpd_myhostname
mynetworks =
myorigin = $mydomain
recipient_delimiter = +
smtp_helo_name = $smtpd_myhostname
smtp_tls_CAfile = $smtpd_tls_CAfile
smtp_tls_note_starttls_offer = yes
smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache
smtp_use_tls = yes
smtpd_banner = $smtpd_myhostname ESMTP mail_transfer_service
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_etrn_restrictions = reject
smtpd_helo_required = yes
smtpd_recipient_restrictions =
reject_unknown_client_hostname,
reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname,
base_recipient_restrictions,
reject_unauth_destination,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client bl.spamcop.net,
check_policy_service inet:[localhost]:policyd,
permit
smtpd_restriction_classes =
base_recipient_restrictions,
smspd_recipient_restrictions-internal,
smspd_recipient_restrictions-external
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtpd_tls_cert_file = $config_directory/tls/mta.dipswitch.net-cert.pem
smtpd_tls_dh1024_param_file = $config_directory/tls/dh_1024.pem
smtpd_tls_dh512_param_file = $config_directory/tls/dh_512.pem
smtpd_tls_key_file = $config_directory/tls/mta.dipswitch.net-key.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
strict_rfc821_envelopes = yes
transport_maps = ldap:$config_directory/tables/transports.cf
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_local_recipient_reject_code = 554
unknown_relay_recipient_reject_code = 554
unverified_recipient_reject_code = 550
unverified_sender_reject_code = 550
virtual_alias_domains =
virtual_alias_maps =
ldap:$config_directory/tables/virtual_alias_maps-address_literals.cf,
ldap:$config_directory/tables/virtual_alias_maps-users.cf,
ldap:$config_directory/tables/virtual_alias_maps-domains.cf
virtual_gid_maps = $virtual_uid_maps
virtual_mailbox_base = /var/mail/virtual
virtual_mailbox_domains =
ldap:$config_directory/tables/virtual_mailbox_domains.cf
virtual_mailbox_maps = ldap:$config_directory/tables/virtual_mailbox_maps.cf
virtual_minimum_uid = 998
virtual_uid_maps = static:998
>egrep -v '(^[[:space:]]*#|^[[:space:]]*$)' /etc/postfix/master.cf
localhost:smsp inet n - - - - smspd
-o myhostname=$smspd_myhostname
-o smtpd_banner=$smspd_banner
-o smtpd_tls_security_level=$smspd_tls_security_level
-o smtpd_tls_key_file=$smspd_tls_key_file
-o smtpd_tls_cert_file=$smspd_tls_cert_file
-o smtpd_sasl_auth_enable=yes
-o smtpd_recipient_restrictions=smspd_recipient_restrictions-internal
50.33.151.70:smtp inet n - n - - smtpd
50.33.151.70:smsp inet n - - - - smspd
-o myhostname=$smspd_myhostname
-o smtpd_banner=$smspd_banner
-o smtpd_tls_security_level=$smspd_tls_security_level
-o smtpd_tls_key_file=$smspd_tls_key_file
-o smtpd_tls_cert_file=$smspd_tls_cert_file
-o smtpd_sasl_auth_enable=yes
-o smtpd_recipient_restrictions=smspd_recipient_restrictions-external
192.168.1.1:smsp inet n - - - - smspd
-o myhostname=$smspd_myhostname
-o smtpd_banner=$smspd_banner
-o smtpd_tls_security_level=$smspd_tls_security_level
-o smtpd_tls_key_file=$smspd_tls_key_file
-o smtpd_tls_cert_file=$smspd_tls_cert_file
-o smtpd_sasl_auth_enable=yes
-o smtpd_recipient_restrictions=smspd_recipient_restrictions-internal
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
-o smtp_fallback_relay=
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop}
${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}
lmtp-amavis unix - - n - 5 lmtp
-o lmtp_data_done_timeout=1200
-o lmtp_send_xforward_command=yes
-o disable_dns_lookups=yes
localhost:smtp-reinject inet n - - - - reinject
-o smtpd_banner=$smtpd_reinjection_banner
-o mynetworks=127.0.0.1/32
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o strict_rfc821_envelopes=yes
-o smtpd_error_sleep_time=0
-o smtpd_soft_error_limit=1001
-o smtpd_hard_error_limit=1000
-o non_smtpd_milters=inet:localhost:8891
-o smtpd_milters=inet:localhost:8891
additionally, here is another example of the behavior, with only the gmail
recipient address obfuscated:
>cat headers
Received: from mta.dipswitch.net ([127.0.0.1])
by localhost (mta.dipswitch.net [127.0.0.1]) (amavisd-maia, port 10024)
with LMTP id 15339-07 for <u...@gmail.com>;
Sun, 24 Apr 2011 23:12:28 -0400 (EDT)
Received: by mta.dipswitch.net (Postfix, from userid 0)
id 368CE416DE; Sun, 24 Apr 2011 23:12:28 -0400 (EDT)
>
>cat message
From: ben thielsen <b...@bitrate.net>
To: u...@gmail.com
Subject: test
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Date: Sun, 24 Apr 2011 23:06:05 -0400
Mime-Version: 1.0 (Apple Message framework v1084)
X-Mailer: Apple Mail (2.1084)
message
>
>cat headers message | postmap -hq - pcre:./header_checks-test
Received: from mta.dipswitch.net ([127.0.0.1])
by localhost (mta.dipswitch.net [127.0.0.1]) (amavisd-maia, port 10024)
with LMTP id 15339-07 for <u...@gmail.com>;
Sun, 24 Apr 2011 23:12:28 -0400 (EDT) warn
Received: by mta.dipswitch.net (Postfix, from userid 0)
id 368CE416DE; Sun, 24 Apr 2011 23:12:28 -0400 (EDT) warn
>
>cat header_checks-test
/^Received:\s+by\s+mta\.dipswitch\.net\s+\(Postfix, from userid \d+\)\s+id/
warn
/^Received:\s+from\s+mta\.dipswitch\.net\s+\(\[127\.0\.0\.1\]\)\s+by\s+localhost\s+\(mta\.dipswitch\.net\s+\[127\.0\.0\.1\]\)\s+\(amavisd-maia\,\s+port
10024\)*/ warn
>
>cat message | sendmail -r 'b...@bitrate.net' -f 'b...@bitrate.net'
>'u...@gmail.com'
>
mail.log:
Apr 24 23:24:23 flip postfix/pickup[19753]: 20883416E2: uid=0
from=<b...@bitrate.net>
Apr 24 23:24:24 flip postfix/cleanup[21833]: 20883416E2:
message-id=<20110425032423.2088341...@mta.dipswitch.net>
Apr 24 23:24:24 flip postfix/qmgr[19752]: 20883416E2: from=<b...@bitrate.net>,
size=457, nrcpt=1 (queue active)
Apr 24 23:24:24 flip postfix/reinject[21838]: connect from localhost[127.0.0.1]
Apr 24 23:24:24 flip postfix/reinject[21838]: E96FA416E1:
client=localhost[127.0.0.1]
Apr 24 23:24:24 flip postfix/cleanup[21833]: E96FA416E1: warning: header
Received: from mta.dipswitch.net ([127.0.0.1])? by localhost (mta.dipswitch.net
[127.0.0.1]) (amavisd-maia, port 10024)? with LMTP id 15153-09 for
<u...@gmail.com>;? Sun, 24 Apr 2011 23:24:24 -040 from localhost[127.0.0.1];
from=<b...@bitrate.net> to=<u...@gmail.com> proto=ESMTP helo=<localhost>
Apr 24 23:24:25 flip postfix/cleanup[21833]: E96FA416E1:
message-id=<20110425032423.2088341...@mta.dipswitch.net>
Apr 24 23:24:25 flip dkim-filter[3488]: E96FA416E1 mode select: signing
Apr 24 23:24:25 flip dkim-filter[3488]: E96FA416E1 "DKIM-Signature" header added
Apr 24 23:24:25 flip postfix/qmgr[19752]: E96FA416E1: from=<b...@bitrate.net>,
size=932, nrcpt=1 (queue active)
Apr 24 23:24:25 flip postfix/reinject[21838]: disconnect from
localhost[127.0.0.1]
Apr 24 23:24:25 flip postfix/lmtp[21835]: 20883416E2: to=<u...@gmail.com>,
relay=127.0.0.1[127.0.0.1]:10024, delay=2.1, delays=0.99/0.01/0/1.1, dsn=2.6.0,
status=sent (250 2.6.0 Ok, id=15153-09, from MTA: 250 2.0.0 Ok: queued as
E96FA416E1)
Apr 24 23:24:25 flip postfix/qmgr[19752]: 20883416E2: removed
Apr 24 23:24:27 flip postfix/smtp[21839]: E96FA416E1: to=<u...@gmail.com>,
relay=gmail-smtp-in.l.google.com[74.125.95.27]:25, delay=2.6,
delays=0.58/0.03/0.58/1.4, dsn=2.0.0, status=sent (250 2.0.0 OK 1303701867
c21si12034422ibh.75)
Apr 24 23:24:27 flip postfix/qmgr[19752]: E96FA416E1: removed
