________________________________
From: Reindl Harald <h.rei...@thelounge.net>
To: postfix-users@postfix.org
Sent: Friday, October 21, 2011 10:39 AM
Subject: Re: First Insallation, Bouncing Emails


I'm on CentOS, not Debian

[root@13gems postfix]# /usr/sbin/postconf -d | grep mail_version
mail_version = 2.8.5
milter_macro_v = $mail_name $mail_version
[root@13gems postfix]# /usr/sbin/postconf -n
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavisfeed:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debug_peer_list = 127.0.0.1
disable_vrfy_command = yes
home_mailbox = Mailbox
html_directory = no
inet_interfaces = localhost, $myhostname
invalid_hostname_reject_code = 450
local_transport = virtual
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
maps_rbl_reject_code = 450
mydestination = localhost.$mydomain, localhost, $myhostname
mydomain = 13gems.com
myhostname = 13gems.com
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases
non_fqdn_reject_code = 450
queue_directory = /var/spool/postfix
readme_directory = no
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
show_user_unknown_table_name = no
smtpd_data_restrictions = reject_unauth_pipelining,        
reject_multi_recipient_bounce,        permit
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_sasl_authenticated        
reject_unauth_destination        reject_invalid_helo_hostname        
warn_if_reject reject_non_fqdn_helo_hostname        warn_if_reject 
reject_unknown_helo_hostname        warn_if_reject reject_unknown_client        
reject_non_fqdn_sender        reject_non_fqdn_recipient        
reject_unknown_sender_domain        reject_unknown_recipient_domain        
reject_rbl_client zen.spamhaus.org        reject_rbl_client 
bl.spamcop.net        reject_rbl_client dnsbl.sorbs.net=127.0.0.2        
reject_rbl_client dnsbl.sorbs.net=127.0.0.3        reject_rbl_client 
dnsbl.sorbs.net=127.0.0.4        reject_rbl_client 
dnsbl.sorbs.net=127.0.0.5        reject_rbl_client 
dnsbl.sorbs.net=127.0.0.7        reject_rbl_client 
dnsbl.sorbs.net=127.0.0.9        reject_rbl_client
 dnsbl.sorbs.net=127.0.0.11        reject_rbl_client 
dnsbl.sorbs.net=127.0.0.12        warn_if_reject reject_rhsbl_sender 
dsn.rfc-ignorant.org        warn_if_reject reject_rhsbl_sender 
abuse.rfc-ignorant.org        warn_if_reject reject_rhsbl_sender 
whois.rfc-ignorant.org        warn_if_reject reject_rhsbl_sender 
bogusmx.rfc-ignorant.org        warn_if_reject reject_rhsbl_sender 
postmaster.rfc-ignorant.org        permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = /var/spool/postfix/private/auth
smtpd_sasl_security_options = noanonymous, nodictionary
smtpd_sasl_tls_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_auth_only = yes
unknown_local_recipient_reject_code = 550
virtual_alias_maps = proxy:mysql:$config_directory/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:89
virtual_mailbox_base = /var/vmail
virtual_mailbox_domains = 
proxy:mysql:$config_directory/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = 
proxy:mysql:$config_directory/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 89
virtual_transport = dovecot
virtual_uid_maps = static:89


MASTER.CF
smtp      inet  n       -       n       -       -       smtpd
        -o content_filter=spamfilter:dummy
127.0.0.1:10025 inet n    -       n       -       -     smtpd
    -o content_filter=
    -o smtpd_delay_reject=no
    -o smtpd_client_restrictions=permit_mynetworks,reject
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o smtpd_data_restrictions=reject_unauth_pipelining
    -o smtpd_end_of_data_restrictions=
    -o smtpd_restriction_classes=
    -o mynetworks=127.0.0.0/8
    -o smtpd_error_sleep_time=0
    -o smtpd_soft_error_limit=1001
    -o smtpd_hard_error_limit=1000
    -o smtpd_client_connection_count_limit=0
    -o smtpd_client_connection_rate_limit=0
    -o 
receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters,no_address_mappings
    -o local_header_rewrite_clients=
    -o smtpd_milters=
    -o local_recipient_maps=
    -o relay_recipient_maps=
amavisfeed unix    -       -       n        -      2     lmtp
    -o lmtp_data_done_timeout=1200
    -o lmtp_send_xforward_command=yes
    -o disable_dns_lookups=yes
    -o max_use=20
587     inet    n       -       n       -       -       smtpd
pickup    fifo  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
        -o fallback_relay=
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
retry     unix  -       -       n       -       -       error
proxywrite unix -       -       n       -       1       proxymap
#smtp      inet  n       -       n       -       1       postscreen
#smtpd     pass  -       -       n       -       -       smtpd
#dnsblog   unix  -       -       n       -       0       dnsblog
#tlsproxy  unix  -       -       n       -       0       tlsproxy
dovecot   unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail:mail argv=/usr/libexec/dovecot/deliver -d ${recipient}
spamfilter unix - n n - - pipe
  flags=Rq user=spamfilter argv=/usr/local/bin/spamfilter -f ${sender} -- 
${recipient}


Ralf Hildebrandt writes:

>> Oct 20 10:13:57 example postfix/proxymap[28446]: warning: mysql query 
>> failed: You have an error in your SQL syntax; check the manual that 
>> corresponds to your MySQL server version f
>> or the right syntax to use near '??gifteatszone.com??? AND active = 1' at 
>> line 1
>> Oct 20 10:13:57 example postfix/proxymap[28444]: warning: mysql query 
>> failed: You have an error in your SQL syntax; check the manual that 
>> corresponds to your MySQL server version f
>> or the right syntax to use near '??awakelunch.info??? AND active = 1' at 
>> line 1

> Check those

That error appears to come from a file called 
/etc/postfix/mysql_virtual_alias_maps.cf that has this line:
SELECT goto FROM alias WHERE address = ‘%s’ AND active = 1
Therefore, the address has question marks in it. Looks like a hacker, no?

TIA,
Jack

Reply via email to