> On Oct 31, 2016, at 8:49 PM, Bill Cole > <postfixlists-070...@billmail.scconsult.com> wrote: > > On 31 Oct 2016, at 22:04, @lbutlr wrote: > >> >>> On 31 Oct 2016, at 17:08, wilfried.es...@essignetz.de wrote: >>> >>> Am 31.10.2016 um 23:51 schrieb @lbutlr: >>> ... >>> No loglines of the denied mail? >> >> Sure. Ut gives the same error as in the DND email. >> >> Oct 31 09:34:19 mail postfix/smtpd[35893]: 3t6z1R27xYzKXmh: >> client=localhost[127.0.0.1] >> Oct 31 09:34:19 mail postfix/smtpd[35893]: 3t6z1R27xYzKXmh: permit: DATA >> from localhost[127.0.0.1]: action=permit for Data command=DATA ; >> from=<virusal...@covisp.net> to=<virusal...@covisp.net> proto=ESMTP >> helo=<mail.covisp.net> >> Oct 31 09:34:19 mail postfix/cleanup[35866]: 3t6z1R27xYzKXmh: >> message-id=<valec8gtk8d...@mail.covisp.net> >> Oct 31 09:34:19 mail postfix/qmgr[1309]: 3t6z1R27xYzKXmh: >> from=<virusal...@covisp.net>, size=3114, nrcpt=1 (queue active) >> Oct 31 09:34:19 mail postfix/local[35894]: 3t6z1R27xYzKXmh: >> to=<virusal...@covisp.net>, relay=local, delay=0.13, >> delays=0.08/0.03/0/0.02, dsn=5.1.1, status=bounced (unknown user: >> "virusalert") >> Oct 31 09:34:19 mail postfix/bounce[35895]: 3t6z1R27xYzKXmh: sender >> non-delivery notification: 3t6z1R33w3zKYKC >> >>>> If I manually send a mail to virusal...@covisp.net >>> >>> What do you mean with "manually”? >> >> Sent it myself from remote email (gmail or iCloud) >> >>> (What is the difference to the denied mail?) >> >> virusalert is the email that amavis sends to, but it is postfix that is >> rejecting it. >> >>> PLease, provide output of postconf -n and postconf -Mf. >> >> OK, But I don’t think that is going to be helpful in this case. the user is >> valid. The user maps properly via postmap -q, so there is something else >> that is causing this. >> >> There are no errors, panics, or fatal messages and the only warning messages >> are rbl-related. > > But I see 2 possible issues. The first almost certain: > >> mydestination = $myhostname, localhost.$mydomain, $mydomain, localhost, >> ns1.$mydomain, ns2.$mydomain, mail.$mydomain, www.$mydomain, >> webmail.$mydomain >> mydomain = covisp.net > [...] >> virtual_alias_domains = kreme.com >> virtual_alias_maps = hash:$config_directory/virtual >> proxy:mysql:$config_directory/mysql_virtual_alias_maps.cf > > So: on what basis would you expect virusal...@covisp.net to be mapped as a > virtual alias? You've told Postfix that covisp.net is a local domain and that > only kreme.com addresses should be mapped via virtual aliases. I don't see > how this can ever work…
And yet it works in every case except amavisd sending the mail. I can sit at the command line of the mail server and send a mail to the account and it is delivered. Oct 31 23:38:11 mail postfix/smtp[87418]: 3t7Kl66CDqzKXmY: to=<ad...@covisp.net>, orig_to=<virusal...@covisp.net>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.46, delays=0.02/0.02/0/0.41, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3t7Kl725lkzKXmh) Oct 31 23:38:21 mail postfix/smtp[87418]: 3t7KlK0L21zKYP8: to=<ad...@covisp.net>, orig_to=<virusalert>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.43, delays=0.01/0/0/0.42, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3t7KlK3C2vzKYPB) So, local with domain, local without domain, and remote with domain all get delivered but for some reason when amazes injects the email, postfix decides the username is invalid. > Also, I bet you'd see what's happening more clearly with syslog_name set in a > '-o' line for this service: OK, but I think amazes logs pretty well as amavisd. >> 127.0.0.1:10025 inet n - n - - smtpd >> -o content_filter= >> -o local_recipient_maps= >> -o relay_recipient_maps= >> -o smtpd_restriction_classes= >> -o smtpd_client_restrictions= >> -o smtpd_helo_restrictions= >> -o smtpd_sender_restrictions= >> -o smtpd_recipient_restrictions=permit_mynetworks,reject >> -o mynetworks=127.0.0.0/8 >> -o strict_rfc821_envelopes=yes >> -o smtpd_error_sleep_time=0 >> -o smtpd_soft_error_limit=1001 >> -o smtpd_hard_error_limit=1000 >> -o >> receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_address_mappings > > I suspect no_address_mappings isn't appropriate here. It disables virtual > aliases, so you're doing that ahead of amavisd, which may be OK but to quote > postconf(5): That is the amavis port, and it breaks without no_address_map > This is typically specified BEFORE an external content filter.
