Hi,
I've got a small issue with our Postfix Relay which doesn't use the
Policyd-Weight daemon or Tumgreyspf which it should. The Policy-Weight
daemon is running and listen if I test it and the config has no errors
but still Postfix just ignores the policy service and proceeds the
mail to Amavis.
There must be an error (had it working some weeks ago) but I can't
find any in the logfiles. Maybe you can help me out.
Thanks,
Marc
postconf -n:
append_dot_mydomain = no
biff = no
bounce_queue_lifetime = 3d
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
cyrus_sasl_config_path = /etc/postfix/sasl
debug_peer_list = smtpd_access_maps
disable_vrfy_command = yes
header_checks = regexp:/etc/postfix/smtp_header_checks
inet_interfaces = all
local_recipient_maps =
message_size_limit = 26214400
mydestination = $myhostname localhost
myhostname = host.domain
mynetworks = 127.0.0.0/8 10.XX.XX.0/24 172.XX.XX.0/24
parent_domain_matches_subdomains =
readme_directory = no
receive_override_options = no_address_mappings
recipient_delimiter = +
relay_domains = hash:/etc/postfix/relaydomains
smtp_host_lookup = native, dns
smtpd_banner = $myhostname ESMTP Mailserver
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks, reject_unauth_destination, check_recipient_access
hash:/etc/postfix/relaydomains, check_policy_service
unix:private/tumgreyspf, check_policy_service inet:127.0.0.1:12525
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/ssl/certs/postfix.pem
smtpd_tls_cert_file = /etc/ssl/certs/postfix.pem
smtpd_tls_key_file = /etc/ssl/private/postfix.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/transport
relaydomains:
## allowed Domains
bla.domain OK
hey.domain OK
transport:
bla.domain smtp:[exchange-srv]
.bla.domain smtp:[exchange-srv]
hey.domain smtp:[exchange-srv]
.hey.domain smtp:[exchange-srv]
