Viktor,
Sure, you may count on me for this!
POSTFIX logs using DOCKER non-chrooted and message_file=/dev/sdtout
Output extracted using "docker logs container-name"
Nov 05 18:09:53 smtp41 postfix/smtpd[390]: connect from smtp41.myisp.com
[A.B.C.D]
Nov 05 18:09:53 smtp41 postfix/smtpd[390]: 294FC16269A: client=
smtp41.myisp.com[A.B.C.D]
Nov 05 18:09:53 smtp41 postfix/cleanup[394]: 294FC16269A: message-id=<
240f662dd54f6ef64b4e30bcdff41...@gama.myisp.com>
Nov 05 18:09:53 smtp41 postfix/qmgr[389]: 294FC16269A: from=<
raf...@myemail.com>, size=611, nrcpt=1 (queue active)
Nov 05 18:09:53 smtp41 postfix/smtp[395]: 294FC16269A: to=<
rafa...@myemail.com>, relay=mail.myisp.com[A.B.C.D]:25, delay=0.31,
delays=0.22/0.01/0.03/0.05, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as
00BC8C6E60)
Nov 05 18:09:53 smtp41 postfix/qmgr[389]: 294FC16269A: removed
Nov 05 18:09:53 smtp41 postfix/smtpd[390]: disconnect from
smtp41.myisp.com[A.B.C.D]
ehlo=1 mail=1 rcpt=1 data=1 rset=1 quit=1 commands=6
root@6aafe5618945:/# postconf -Mf
smtp inet n - n - - smtpd
pickup unix n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr unix n - n 300 1 qmgr
tlsmgr unix - - y 1000? 1 tlsmgr
rewrite unix - - y - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - y - 0 bounce
verify unix - - y - 1 verify
flush unix n - y 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
-o syslog_name=postfix/$service_name
showq unix n - y - - showq
error unix - - n - - error
retry unix - - y - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - y - - lmtp
anvil unix - - y - 1 anvil
scache unix - - y - 1 scache
postlog unix-dgram n - n - 1 postlogd
maildrop unix - n n - - pipe flags=DRhu
user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp unix - n n - - pipe flags=Fqhu
user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe flags=F
user=ftn
argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe flags=Fq.
user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe flags=R
user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop}
${user} ${extension}
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
compatibility_level = 2
inet_interfaces = all
inet_protocols = all
mailbox_size_limit = 0
maillog_file = /dev/stdout
mydestination = $myhostname, /etc/mailname, localhost,
localhost.localdomain,
localhost
myhostname = smtp41.myisp.com
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104
[::1]/128
myorigin = smtp41.myisp.com
readme_directory = no
recipient_delimiter = +
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_relay_restrictions = permit_mynetworks \ permit_sasl_authenticated \
defer_unauth_destination
BR,
Rafael
Em sex., 5 de nov. de 2021 às 17:59, Rafael Azevedo <raf...@gmail.com>
escreveu:
> Viktor,
>
> I was able to use ISO-DATE format through SYSLOG-NG, but lost the
> milliseconds.
>
> This is a non-chroot smtp log using syslog-ng
>
> 2021-11-05T17:51:25.000000-03:00 smtp21 postfix/smtp 251 - [meta
> sequenceId="77"] 8323E60BE3: to=<x...@hotmail.com>, relay=
> hotmail-com.olc.protection.outlook.com[104.47.57.161]:25, delay=2.6,
> delays=0.25/0.01/0.78/1.6, dsn=2.6.0, status=sent (250 2.6.0 <
> 4f8fccc2f1fb0f9d21570f80923c9...@xxx.com> [InternalId=47772921241407,
> Hostname=FR1PR80MB5195.lamprd80.prod.outlook.com] 7863 bytes in 0.248,
> 30.907 KB/sec Queued mail for delivery -> 250 2.1.5)
>
> BR,
>
> R
>
> Em sex., 5 de nov. de 2021 às 17:37, Rafael Azevedo <raf...@gmail.com>
> escreveu:
>
>> Hi Viktor,
>> Thanks for the reply!
>>
>> SELinux is off, but AppArmor on.
>>
>> Any further suggestions?
>>
>> Thanks
>>
>> Em sex., 5 de nov. de 2021 às 17:20, Viktor Dukhovni <
>> postfix-us...@dukhovni.org> escreveu:
>>
>>> On Fri, Nov 05, 2021 at 12:00:56PM -0400, Wietse Venema wrote:
>>> > Rafael Azevedo:
>>> > > After disabling chroot, it worked!
>>> >
>>> > LINUX bites, if chroot breaks relative pathnames for UNIX-domain
>>> > DGRAM sockets.
>>>
>>> As a test, I'd suggest instead of disabling chroot for the delivery
>>> agents, to also enable chroot for qmgr, and see whether the qmgr logs
>>> then also fail to show up.
>>>
>>> Also is there something like SELinux or AppArmor on this system?
>>> Between Docker and chroot, the policies might not be sophisticated
>>> enough to allow access to the postlog socket.
>>>
>>> --
>>> Viktor.
>>>
>>
