postfix-users April 2012 archive

Main Archive Page > Month Archives > postfix-users archives

postfix-users: RE: postfix non-smtpd-command issues

RE: postfix non-smtpd-command issues

From: Larry G. Wapnitsky <LWapnitsky_at_nospam>
Date: Fri Apr 27 2012 - 14:59:38 GMT
To: <postfix-users@postfix.org>

Forgot the postconf - n:

alias_database = hash:/etc/aliases

alias_maps = hash:/etc/aliases

append_dot_mydomain = no

biff = no

config_directory = /etc/postfix

mailbox_size_limit = 0

message_size_limit = 0

milter_default_action = accept

milter_protocol = 6

mydestination = mailproc.wrtdesign.com, localhost.wrtdesign.com,
localhost

myhostname = mailproc.wrtdesign.com

mynetworks = 10.102.0.0/16, 192.168.0.0/24

myorigin = /etc/mailname

readme_directory = no

recipient_delimiter = +

relayhost = ph-svr-exch1.wrtdesign.com

smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)

smtpd_command_filter = pcre:/etc/postfix/bogus_commands

smtpd_milters = unix:/var/spool/RBL/RBLmilter.sock,
unix:/var/spool/EARS/EARSmilter.sock

smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem

smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key

smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache

smtpd_use_tls = yes

Larry G. Wapnitsky MBA, MCSE, MCP+I
IT SUPPORT & ADMINISTRATION COORDINATOR
WRT <http://www.wrtdesign.com/> | Wallace Roberts & Todd, LLC
<http://www.wrtdesign.com/>
1700 Market Street, 28th Fl
Philadelphia, PA 19103
T 215.430.5068
C 215.713.8635
E lwapnitsky@WRTdesign.com <mailto:lwapnitsky@WRTdesign.com>

From: Larry G. Wapnitsky
Sent: Friday, April 27, 2012 10:58 AM
To: postfix-users@postfix.org
Subject: postfix non-smtpd-command issues

As a follow-up to [this question][1], I have more issues appearing that
are related but a bit more complex than initially perceived.

[1]: http://serverfault.com/questions/379964/postfix-unknown-command

I have a postfix server set up to receive specific messages bounced from
an external mail gateway for milter processing. I'm noticing in the
logs that, in some cases (albeit rare ones), parts of the message are
being passed to SMTPD as commands. This, in turn, causes the milter to
partially fail.

example: (edited for content)

Apr 26 19:03:26 mailproc postfix/smtpd[12912]: connect from
mail-gw.MYDOMAIN.com[10.102.2.29]

Apr 26 19:03:26 mailproc postfix/smtpd[12912]: DBE686E612EE:
client=mail-gw.MYDOMAIN.com[10.102.2.29]

Apr 26 19:03:26 mailproc postfix/cleanup[13346]: DBE686E612EE:
message-id=<D04184B070A8014FAE433E611B370C25033A7C@SENDERDOMAIN-MAIL10.c
orp.SENDERDOMAIN.com>

Apr 26 19:03:26 mailproc postfix/smtpd[12912]:
mail-gw.MYDOMAIN.com[10.102.2.29]: replacing command "to, Emeryville,
Oakland." with ""

Apr 26 19:03:26 mailproc postfix/smtpd[12912]:
mail-gw.MYDOMAIN.com[10.102.2.29]: replacing command "res but do not
contain LID." with ""

Apr 26 19:03:26 mailproc postfix/qmgr[392]: DBE686E612EE:
from=<ajones@SENDERDOMAIN.com>, size=15945, nrcpt=1 (queue active)

Apr 26 19:03:27 mailproc postfix/smtp[13559]: DBE686E612EE:
to=<jsmith@sf.MYDOMAIN.com>,
relay=ph-svr-exch1.MYDOMAIN.com[10.102.2.30]:25, delay=0.15,
delays=0.07/0.03/0/0.04, dsn=2.6.0, status=s\

ent (250 2.6.0
<D04184B070A8014FAE433E611B370C25033A7C@SENDERDOMAIN-MAIL10.corp.SENDERD
OMAIN.com> Queued mail for delivery)

Apr 26 19:03:27 mailproc postfix/qmgr[392]: DBE686E612EE: removed

Apr 26 19:03:29 mailproc postfix/smtpd[12912]: warning: non-SMTP
command from mail-gw.MYDOMAIN.com[10.102.2.29]:
<http://www.MYDOMAIN.com/> | MYDOMAIN, LLC<http://www.w=

Apr 26 19:03:30 mailproc postfix/smtpd[12912]: disconnect from
mail-gw.MYDOMAIN.com[10.102.2.29]

Apr 26 19:03:50 mailproc postfix/smtpd[12912]: connect from
mailproc.MYDOMAIN.com[10.102.2.164]

Apr 26 19:03:50 mailproc postfix/smtpd[12912]: disconnect from
mailproc.MYDOMAIN.com[10.102.2.164]

Apr 26 19:04:41 mailproc postfix/smtpd[12912]: connect from
phsmtp.MYDOMAIN.com[10.102.2.29]

Apr 26 19:04:41 mailproc postfix/smtpd[12912]: CF9886E612EE:
client=phsmtp.MYDOMAIN.com[10.102.2.29]

Apr 26 19:04:41 mailproc postfix/cleanup[13346]: CF9886E612EE:
message-id=<D04184B070A8014FAE433E611B370C25033AA7@SENDERDOMAIN-MAIL10.c
orp.SENDERDOMAIN.com>

Apr 26 19:04:41 mailproc postfix/qmgr[392]: CF9886E612EE:
from=<ajones@SENDERDOMAIN.com>, size=16075, nrcpt=1 (queue active)

Apr 26 19:04:41 mailproc postfix/smtpd[12912]:
phsmtp.MYDOMAIN.com[10.102.2.29]: replacing command "to, Emeryville,
Oakland." with ""

Apr 26 19:04:41 mailproc postfix/smtpd[12912]:
phsmtp.MYDOMAIN.com[10.102.2.29]: replacing command "res but do not
contain LID." with ""

Apr 26 19:04:41 mailproc postfix/smtp[13559]: CF9886E612EE:
to=<jsmith@sf.MYDOMAIN.com>,
relay=ph-svr-exch1.MYDOMAIN.com[10.102.2.30]:25, delay=0.1,
delays=0.05/0/0/0.04, dsn=2.6.0, status=sent \

(250 2.6.0
<D04184B070A8014FAE433E611B370C25033AA7@SENDERDOMAIN-MAIL10.corp.SENDERD
OMAIN.com> Queued mail for delivery)

The "replacing command" notes you see from the log are replaced via
smtpd_command_filter

Thanks,

----wrtmail--%3423wrt%----

This message: [ Message body ]
Next message: Jim Reid: "Re: Can I improve the efficiency of my dnsbl reject configuration?"
Previous message: Ansgar Wiechers: "Re: Can I improve the efficiency of my dnsbl reject configuration?"
In reply to: Larry G. Wapnitsky: "postfix non-smtpd-command issues"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]