Jump to content
Froxlor Forum
  • 0

Postfix TLS Problem


where2go

Question

Hallo zusammen,
 
seit meinem umstieg auf postfix mit TLS habe ich Probleme von manchen email clients aus zu versenden.
IMAP (Dovecot) l?uft ohne Probleme von allen clients aus.
Von meinem lokalen Windows 7 Rechner mit Outlook 2013 oder Thunderbird ist das versenden kein Problem (Der Server befindet sich nicht in diesem Netzwerk).
Von zwei entfernten clients Windows 7 mit Outlook 2010 und Thunderbird sowie Mac OS X 10.8 und Apple Mail ist das versenden nicht m?glich bzw. das Einbinden des SMTP servers schon garnicht m?glich: "Outlook cannot connect to your outgoing SMTP email server ..."

 

Ich bin momentan ziemlich verzweifelt. Ich verstehe nicht warum ich von einem aus verbinden und vom anderen nicht verbinden kann. selbe settings etc. macht nicht viel sinn...
 
Installiert ist:

Debian 8.2
Froxlor 0.9.34
Postfix 2.11.3
 
Meine main.cf

# Global Postfix configuration file. This file lists only a subset
# of all parameters. For the syntax, and for a complete parameter
# list, see the postconf(5) manual page (command: "man 5 postconf").
#
# For common configuration examples, see BASIC_CONFIGURATION_README
# and STANDARD_CONFIGURATION_README. To find these documents, use
# the command "postconf html_directory readme_directory", or go to
# http://www.postfix.org/BASIC_CONFIGURATION_README.html etc.
#
# For best results, change no more than 2-3 parameters at a time,
# and test if Postfix still works after every change.

# SOFT BOUNCE
#
# The soft_bounce parameter provides a limited safety net for
# testing.  When soft_bounce is enabled, mail will remain queued that
# would otherwise bounce. This parameter disables locally-generated
# bounces, and prevents the SMTP server from rejecting mail permanently
# (by changing 5xx replies into 4xx replies). However, soft_bounce
# is no cure for address rewriting mistakes or mail routing mistakes.
#
#soft_bounce = no

# LOCAL PATHNAME INFORMATION
#
# The queue_directory specifies the location of the Postfix queue.
# This is also the root directory of Postfix daemons that run chrooted.
# See the files in examples/chroot-setup for setting up Postfix chroot
# environments on different UNIX systems.
#
#queue_directory = /var/spool/postfix

# The command_directory parameter specifies the location of all
# postXXX commands.
#
command_directory = /usr/sbin

# The daemon_directory parameter specifies the location of all Postfix
# daemon programs (i.e. programs listed in the master.cf file). This
# directory must be owned by root.
#
daemon_directory = /usr/lib/postfix

# The data_directory parameter specifies the location of Postfix-writable
# data files (caches, random numbers). This directory must be owned
# by the mail_owner account (see below).
#
data_directory = /var/lib/postfix

# QUEUE AND PROCESS OWNERSHIP
#
# The mail_owner parameter specifies the owner of the Postfix queue
# and of most Postfix daemon processes.  Specify the name of a user
# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS
# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM.  In
# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED
# USER.
#
#mail_owner = postfix

# The default_privs parameter specifies the default rights used by
# the local delivery agent for delivery to external file or command.
# These rights are used in the absence of a recipient user context.
# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER.
#
#default_privs = nobody

# INTERNET HOST AND DOMAIN NAMES
# 
# The myhostname parameter specifies the internet hostname of this
# mail system. The default is to use the fully-qualified domain name
# from gethostname(). $myhostname is used as a default value for many
# other configuration parameters.
#
myhostname = mail.$mydomain
#myhostname = virtual.domain.tld

# The mydomain parameter specifies the local internet domain name.
# The default is to use $myhostname minus the first component.
# $mydomain is used as a default value for many other configuration
# parameters.
#
mydomain = webs.DOMAIN.ca

# SENDING MAIL
# 
# The myorigin parameter specifies the domain that locally-posted
# mail appears to come from. The default is to append $myhostname,
# which is fine for small sites.  If you run a domain with multiple
# machines, you should (1) change this to $mydomain and (2) set up
# a domain-wide alias database that aliases each user to
# user@that.users.mailhost.
#
# For the sake of consistency between sender and recipient addresses,
# myorigin also specifies the default domain name that is appended
# to recipient addresses that have no @domain part.
#
# Debian GNU/Linux specific:  Specifying a file name will cause the
# first line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#
#myorigin = /etc/mailname
#myorigin = $myhostname
#myorigin = $mydomain

# RECEIVING MAIL

# The inet_interfaces parameter specifies the network interface
# addresses that this mail system receives mail on.  By default,
# the software claims all active interfaces on the machine. The
# parameter also controls delivery of mail to user@[ip.address].
#
# See also the proxy_interfaces parameter, for network addresses that
# are forwarded to us via a proxy or network address translator.
#
# Note: you need to stop/start Postfix when this parameter changes.
#
#inet_interfaces = all
#inet_interfaces = $myhostname
#inet_interfaces = $myhostname, localhost

# The proxy_interfaces parameter specifies the network interface
# addresses that this mail system receives mail on by way of a
# proxy or network address translation unit. This setting extends
# the address list specified with the inet_interfaces parameter.
#
# You must specify your proxy/NAT addresses when your system is a
# backup MX host for other domains, otherwise mail delivery loops
# will happen when the primary MX host is down.
#
#proxy_interfaces =
#proxy_interfaces = 1.2.3.4

# The mydestination parameter specifies the list of domains that this
# machine considers itself the final destination for.
#
# These domains are routed to the delivery agent specified with the
# local_transport parameter setting. By default, that is the UNIX
# compatible delivery agent that lookups all recipients in /etc/passwd
# and /etc/aliases or their equivalent.
#
# The default is $myhostname + localhost.$mydomain.  On a mail domain
# gateway, you should also include $mydomain.
#
# Do not specify the names of virtual domains - those domains are
# specified elsewhere (see VIRTUAL_README).
#
# Do not specify the names of domains that this machine is backup MX
# host for. Specify those names via the relay_domains settings for
# the SMTP server, or use permit_mx_backup if you are lazy (see
# STANDARD_CONFIGURATION_README).
#
# The local machine is always the final destination for mail addressed
# to user@[the.net.work.address] of an interface that the mail system
# receives mail on (see the inet_interfaces parameter).
#
# Specify a list of host or domain names, /file/name or type:table
# patterns, separated by commas and/or whitespace. A /file/name
# pattern is replaced by its contents; a type:table is matched when
# a name matches a lookup key (the right-hand side is ignored).
# Continue long lines by starting the next line with whitespace.
#
# See also below, section "REJECTING MAIL FOR UNKNOWN LOCAL USERS".
#
#mydestination = $myhostname, localhost.$mydomain, localhost
#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
#mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain,
#	mail.$mydomain, www.$mydomain, ftp.$mydomain

# REJECTING MAIL FOR UNKNOWN LOCAL USERS
#
# The local_recipient_maps parameter specifies optional lookup tables
# with all names or addresses of users that are local with respect
# to $mydestination, $inet_interfaces or $proxy_interfaces.
#
# If this parameter is defined, then the SMTP server will reject
# mail for unknown local users. This parameter is defined by default.
#
# To turn off local recipient checking in the SMTP server, specify
# local_recipient_maps = (i.e. empty).
#
# The default setting assumes that you use the default Postfix local
# delivery agent for local delivery. You need to update the
# local_recipient_maps setting if:
#
# - You define $mydestination domain recipients in files other than
#   /etc/passwd, /etc/aliases, or the $virtual_alias_maps files.
#   For example, you define $mydestination domain recipients in    
#   the $virtual_mailbox_maps files.
#
# - You redefine the local delivery agent in master.cf.
#
# - You redefine the "local_transport" setting in main.cf.
#
# - You use the "luser_relay", "mailbox_transport", or "fallback_transport"
#   feature of the Postfix local delivery agent (see local(8)).
#
# Details are described in the LOCAL_RECIPIENT_README file.
#
# Beware: if the Postfix SMTP server runs chrooted, you probably have
# to access the passwd file via the proxymap service, in order to
# overcome chroot restrictions. The alternative, having a copy of
# the system passwd file in the chroot jail is just not practical.
#
# The right-hand side of the lookup tables is conveniently ignored.
# In the left-hand side, specify a bare username, an @domain.tld
# wild-card, or specify a user@domain.tld address.
# 
#local_recipient_maps = unix:passwd.byname $alias_maps
#local_recipient_maps = proxy:unix:passwd.byname $alias_maps
#local_recipient_maps =

# The unknown_local_recipient_reject_code specifies the SMTP server
# response code when a recipient domain matches $mydestination or
# ${proxy,inet}_interfaces, while $local_recipient_maps is non-empty
# and the recipient address or address local-part is not found.
#
# The default setting is 550 (reject mail) but it is safer to start
# with 450 (try again later) until you are certain that your
# local_recipient_maps settings are OK.
#
unknown_local_recipient_reject_code = 550

# TRUST AND RELAY CONTROL

# The mynetworks parameter specifies the list of "trusted" SMTP
# clients that have more privileges than "strangers".
#
# In particular, "trusted" SMTP clients are allowed to relay mail
# through Postfix.  See the smtpd_recipient_restrictions parameter
# in postconf(5).
#
# You can specify the list of "trusted" network addresses by hand
# or you can let Postfix do it for you (which is the default).
#
# By default (mynetworks_style = subnet), Postfix "trusts" SMTP
# clients in the same IP subnetworks as the local machine.
# On Linux, this does works correctly only with interfaces specified
# with the "ifconfig" command.
# 
# Specify "mynetworks_style = class" when Postfix should "trust" SMTP
# clients in the same IP class A/B/C networks as the local machine.
# Don't do this with a dialup site - it would cause Postfix to "trust"
# your entire provider's network.  Instead, specify an explicit
# mynetworks list by hand, as described below.
#  
# Specify "mynetworks_style = host" when Postfix should "trust"
# only the local machine.
# 
#mynetworks_style = class
#mynetworks_style = subnet
#mynetworks_style = host

# Alternatively, you can specify the mynetworks list by hand, in
# which case Postfix ignores the mynetworks_style setting.
#
# Specify an explicit list of network/netmask patterns, where the
# mask specifies the number of bits in the network part of a host
# address.
#
# You can also specify the absolute pathname of a pattern file instead
# of listing the patterns here. Specify type:table for table-based lookups
# (the value on the table right-hand side is not used).
#
#mynetworks = 168.100.x.x/28, 127.0.0.0/8
#mynetworks = $config_directory/mynetworks
#mynetworks = hash:/etc/postfix/network_table
mynetworks = 127.0.0.0/8

# The relay_domains parameter restricts what destinations this system will
# relay mail to.  See the smtpd_recipient_restrictions description in
# postconf(5) for detailed information.
#
# By default, Postfix relays mail
# - from "trusted" clients (IP address matches $mynetworks) to any destination,
# - from "untrusted" clients to destinations that match $relay_domains or
#   subdomains thereof, except addresses with sender-specified routing.
# The default relay_domains value is $mydestination.
# 
# In addition to the above, the Postfix SMTP server by default accepts mail
# that Postfix is final destination for:
# - destinations that match $inet_interfaces or $proxy_interfaces,
# - destinations that match $mydestination
# - destinations that match $virtual_alias_domains,
# - destinations that match $virtual_mailbox_domains.
# These destinations do not need to be listed in $relay_domains.
# 
# Specify a list of hosts or domains, /file/name patterns or type:name
# lookup tables, separated by commas and/or whitespace.  Continue
# long lines by starting the next line with whitespace. A file name
# is replaced by its contents; a type:name table is matched when a
# (parent) domain appears as lookup key.
#
# NOTE: Postfix will not automatically forward mail for domains that
# list this system as their primary or backup MX host. See the
# permit_mx_backup restriction description in postconf(5).
#
#relay_domains = $mydestination

# INTERNET OR INTRANET

# The relayhost parameter specifies the default host to send mail to
# when no entry is matched in the optional transport(5) table. When
# no relayhost is given, mail is routed directly to the destination.
#
# On an intranet, specify the organizational domain name. If your
# internal DNS uses no MX records, specify the name of the intranet
# gateway host instead.
#
# In the case of SMTP, specify a domain, host, host:port, [host]:port,
# [address] or [address]:port; the form [host] turns off MX lookups.
#
# If you're connected via UUCP, see also the default_transport parameter.
#
#relayhost = $mydomain
#relayhost = [gateway.my.domain]
#relayhost = [mailserver.isp.tld]
#relayhost = uucphost
#relayhost = [an.ip.add.ress]

# REJECTING UNKNOWN RELAY USERS
#
# The relay_recipient_maps parameter specifies optional lookup tables
# with all addresses in the domains that match $relay_domains.
#
# If this parameter is defined, then the SMTP server will reject
# mail for unknown relay users. This feature is off by default.
#
# The right-hand side of the lookup tables is conveniently ignored.
# In the left-hand side, specify an @domain.tld wild-card, or specify
# a user@domain.tld address.
# 
#relay_recipient_maps = hash:/etc/postfix/relay_recipients

# INPUT RATE CONTROL
#
# The in_flow_delay configuration parameter implements mail input
# flow control. This feature is turned on by default, although it
# still needs further development (it's disabled on SCO UNIX due
# to an SCO bug).
# 
# A Postfix process will pause for $in_flow_delay seconds before
# accepting a new message, when the message arrival rate exceeds the
# message delivery rate. With the default 100 SMTP server process
# limit, this limits the mail inflow to 100 messages a second more
# than the number of messages delivered per second.
# 
# Specify 0 to disable the feature. Valid delays are 0..10.
# 
#in_flow_delay = 1s

# ADDRESS REWRITING
#
# The ADDRESS_REWRITING_README document gives information about
# address masquerading or other forms of address rewriting including
# username->Firstname.Lastname mapping.

# ADDRESS REDIRECTION (VIRTUAL DOMAIN)
#
# The VIRTUAL_README document gives information about the many forms
# of domain hosting that Postfix supports.

# "USER HAS MOVED" BOUNCE MESSAGES
#
# See the discussion in the ADDRESS_REWRITING_README document.

# TRANSPORT MAP
#
# See the discussion in the ADDRESS_REWRITING_README document.

# ALIAS DATABASE
#
# The alias_maps parameter specifies the list of alias databases used
# by the local delivery agent. The default list is system dependent.
#
# On systems with NIS, the default is to search the local alias
# database, then the NIS alias database. See aliases(5) for syntax
# details.
# 
# If you change the alias database, run "postalias /etc/aliases" (or
# wherever your system stores the mail alias file), or simply run
# "newaliases" to build the necessary DBM or DB file.
#
# It will take a minute or so before changes become visible.  Use
# "postfix reload" to eliminate the delay.
#
#alias_maps = dbm:/etc/aliases
#alias_maps = hash:/etc/aliases
#alias_maps = hash:/etc/aliases, nis:mail.aliases
#alias_maps = netinfo:/aliases

# The alias_database parameter specifies the alias database(s) that
# are built with "newaliases" or "sendmail -bi".  This is a separate
# configuration parameter, because alias_maps (see above) may specify
# tables that are not necessarily all under control by Postfix.
#
#alias_database = dbm:/etc/aliases
#alias_database = dbm:/etc/mail/aliases
#alias_database = hash:/etc/aliases
#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases

# ADDRESS EXTENSIONS (e.g., user+foo)
#
# The recipient_delimiter parameter specifies the separator between
# user names and address extensions (user+foo). See canonical(5),
# local(8), relocated(5) and virtual(5) for the effects this has on
# aliases, canonical, virtual, relocated and .forward file lookups.
# Basically, the software tries user+foo and .forward+foo before
# trying user and .forward.
#
#recipient_delimiter = +

# DELIVERY TO MAILBOX
#
# The home_mailbox parameter specifies the optional pathname of a
# mailbox file relative to a user's home directory. The default
# mailbox file is /var/spool/mail/user or /var/mail/user.  Specify
# "Maildir/" for qmail-style delivery (the / is required).
#
#home_mailbox = Mailbox
#home_mailbox = Maildir/
 
# The mail_spool_directory parameter specifies the directory where
# UNIX-style mailboxes are kept. The default setting depends on the
# system type.
#
#mail_spool_directory = /var/mail
#mail_spool_directory = /var/spool/mail

# The mailbox_command parameter specifies the optional external
# command to use instead of mailbox delivery. The command is run as
# the recipient with proper HOME, SHELL and LOGNAME environment settings.
# Exception:  delivery for root is done as $default_user.
#
# Other environment variables of interest: USER (recipient username),
# EXTENSION (address extension), DOMAIN (domain part of address),
# and LOCAL (the address localpart).
#
# Unlike other Postfix configuration parameters, the mailbox_command
# parameter is not subjected to $parameter substitutions. This is to
# make it easier to specify shell syntax (see example below).
#
# Avoid shell meta characters because they will force Postfix to run
# an expensive shell process. Procmail alone is expensive enough.
#
# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN
# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER.
#
#mailbox_command = /usr/bin/procmail
#mailbox_command = /usr/bin/procmail -a "$EXTENSION"

# The mailbox_transport specifies the optional transport in master.cf
# to use after processing aliases and .forward files. This parameter
# has precedence over the mailbox_command, fallback_transport and
# luser_relay parameters.
#
# Specify a string of the form transport:nexthop, where transport is
# the name of a mail delivery transport defined in master.cf.  The
# :nexthop part is optional. For more details see the sample transport
# configuration file.
#
# NOTE: if you use this feature for accounts not in the UNIX password
# file, then you must update the "local_recipient_maps" setting in
# the main.cf file, otherwise the SMTP server will reject mail for    
# non-UNIX accounts with "User unknown in local recipient table".
#
# Cyrus IMAP over LMTP. Specify ``lmtpunix      cmd="lmtpd"
# listen="/var/imap/socket/lmtp" prefork=0'' in cyrus.conf.
#mailbox_transport = lmtp:unix:/var/imap/socket/lmtp
#
# Cyrus IMAP via command line. Uncomment the "cyrus...pipe" and
# subsequent line in master.cf.
#mailbox_transport = cyrus

# The fallback_transport specifies the optional transport in master.cf
# to use for recipients that are not found in the UNIX passwd database.
# This parameter has precedence over the luser_relay parameter.
#
# Specify a string of the form transport:nexthop, where transport is
# the name of a mail delivery transport defined in master.cf.  The
# :nexthop part is optional. For more details see the sample transport
# configuration file.
#
# NOTE: if you use this feature for accounts not in the UNIX password
# file, then you must update the "local_recipient_maps" setting in
# the main.cf file, otherwise the SMTP server will reject mail for    
# non-UNIX accounts with "User unknown in local recipient table".
#
#fallback_transport = lmtp:unix:/file/name
#fallback_transport = cyrus
#fallback_transport =

# The luser_relay parameter specifies an optional destination address
# for unknown recipients.  By default, mail for unknown@$mydestination,
# unknown@[$inet_interfaces] or unknown@[$proxy_interfaces] is returned
# as undeliverable.
#
# The following expansions are done on luser_relay: $user (recipient
# username), $shell (recipient shell), $home (recipient home directory),
# $recipient (full recipient address), $extension (recipient address
# extension), $domain (recipient domain), $local (entire recipient
# localpart), $recipient_delimiter. Specify ${name?value} or
# ${name:value} to expand value only when $name does (does not) exist.
#
# luser_relay works only for the default Postfix local delivery agent.
#
# NOTE: if you use this feature for accounts not in the UNIX password
# file, then you must specify "local_recipient_maps =" (i.e. empty) in
# the main.cf file, otherwise the SMTP server will reject mail for    
# non-UNIX accounts with "User unknown in local recipient table".
#
#luser_relay = $user@other.host
#luser_relay = $local@other.host
#luser_relay = admin+$local
  
# JUNK MAIL CONTROLS
# 
# The controls listed here are only a very small subset. The file
# SMTPD_ACCESS_README provides an overview.

# The header_checks parameter specifies an optional table with patterns
# that each logical message header is matched against, including
# headers that span multiple physical lines.
#
# By default, these patterns also apply to MIME headers and to the
# headers of attached messages. With older Postfix versions, MIME and
# attached message headers were treated as body text.
#
# For details, see "man header_checks".
#
#header_checks = regexp:/etc/postfix/header_checks

# FAST ETRN SERVICE
#
# Postfix maintains per-destination logfiles with information about
# deferred mail, so that mail can be flushed quickly with the SMTP
# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld".
# See the ETRN_README document for a detailed description.
# 
# The fast_flush_domains parameter controls what destinations are
# eligible for this service. By default, they are all domains that
# this server is willing to relay mail to.
# 
#fast_flush_domains = $relay_domains

# SHOW SOFTWARE VERSION OR NOT
#
# The smtpd_banner parameter specifies the text that follows the 220
# code in the SMTP server's greeting banner. Some people like to see
# the mail version advertised. By default, Postfix shows no version.
#
# You MUST specify $myhostname at the start of the text. That is an
# RFC requirement. Postfix itself does not care.
#
#smtpd_banner = $myhostname ESMTP $mail_name
#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)


# PARALLEL DELIVERY TO THE SAME DESTINATION
#
# How many parallel deliveries to the same user or domain? With local
# delivery, it does not make sense to do massively parallel delivery
# to the same user, because mailbox updates must happen sequentially,
# and expensive pipelines in .forward files can cause disasters when
# too many are run at the same time. With SMTP deliveries, 10
# simultaneous connections to the same domain could be sufficient to
# raise eyebrows.
# 
# Each message delivery transport has its XXX_destination_concurrency_limit
# parameter.  The default is $default_destination_concurrency_limit for
# most delivery transports. For the local delivery agent the default is 2.

#local_destination_concurrency_limit = 2
#default_destination_concurrency_limit = 20

# DEBUGGING CONTROL
#
# The debug_peer_level parameter specifies the increment in verbose
# logging level when an SMTP client or server host name or address
# matches a pattern in the debug_peer_list parameter.
#
debug_peer_level = 2

# The debug_peer_list parameter specifies an optional list of domain
# or network patterns, /file/name patterns or type:name tables. When
# an SMTP client or server host name or address matches a pattern,
# increase the verbose logging level by the amount specified in the
# debug_peer_level parameter.
#
debug_peer_list = 127.0.0.1

# The debugger_command specifies the external command that is executed
# when a Postfix daemon program is run with the -D option.
#
# Use "command .. & sleep 5" so that the debugger can attach before
# the process marches on. If you use an X-based debugger, be sure to
# set up your XAUTHORITY environment variable before starting Postfix.
#
#debugger_command =
#	 PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
#	 ddd $daemon_directory/$process_name $process_id & sleep 5

# If you can't use X, use this to capture the call stack when a
# daemon crashes. The result is in a file in the configuration
# directory, and is named after the process name and the process ID.
#
 debugger_command =
	PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont;
	echo where) | gdb $daemon_directory/$process_name $process_id 2>&1
	>$config_directory/$process_name.$process_id.log & sleep 5
#
# Another possibility is to run gdb under a detached screen session.
# To attach to the screen sesssion, su root and run "screen -r
# <id_string>" where <id_string> uniquely matches one of the detached
# sessions (from "screen -list").
#
# debugger_command =
#	PATH=/bin:/usr/bin:/sbin:/usr/sbin; export PATH; screen
#	-dmS $process_name gdb $daemon_directory/$process_name
#	$process_id & sleep 1

# INSTALL-TIME CONFIGURATION INFORMATION
#
# The following parameters are used when installing a new Postfix version.
# 
# sendmail_path: The full pathname of the Postfix sendmail command.
# This is the Sendmail-compatible mail posting interface.
# 
sendmail_path = /usr/sbin/sendmail

# newaliases_path: The full pathname of the Postfix newaliases command.
# This is the Sendmail-compatible command to build alias databases.
#
newaliases_path = /usr/bin/newaliases

# mailq_path: The full pathname of the Postfix mailq command.  This
# is the Sendmail-compatible mail queue listing command.
# 
mailq_path = /usr/bin/mailq

# setgid_group: The group for mail submission and queue management
# commands.  This must be a group name with a numerical group ID that
# is not shared with other accounts, not even with the Postfix account.
#
setgid_group = postdrop

# html_directory: The location of the Postfix HTML documentation.
#
html_directory = no

# manpage_directory: The location of the Postfix on-line manual pages.
#
manpage_directory = /usr/share/man

# sample_directory: The location of the Postfix sample configuration files.
# This parameter is obsolete as of Postfix 2.1.
#
sample_directory = /usr/share/doc/postfix

# readme_directory: The location of the Postfix README files.
#
readme_directory = /usr/share/doc/postfix
inet_protocols = ipv4

append_dot_mydomain = no
biff = no
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks,
	permit_sasl_authenticated,
	reject_unauth_destination,
	reject_unauth_pipelining,
	reject_non_fqdn_recipient
smtpd_sender_restrictions = permit_mynetworks,
	reject_sender_login_mismatch,
	permit_sasl_authenticated, 
	reject_unknown_helo_hostname, 
	reject_unknown_recipient_domain, 
	reject_unknown_sender_domain
smtpd_client_restrictions = permit_mynetworks,
	permit_sasl_authenticated,
	reject_unknown_client_hostname

# Postfix 2.10 requires this option. Postfix < 2.10 ignores this.
# The option is intentionally left empty.
smtpd_relay_restrictions = 

# Maximum size of Message in bytes (50MB)
message_size_limit = 52428800

## SASL Auth Settings
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes
## Dovecot Settings for deliver, SASL Auth and virtual transport
smtpd_sasl_type = dovecot
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1
smtpd_sasl_path = private/auth

# Virtual delivery settings
virtual_mailbox_base = /var/customers/mail/
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailbox_maps.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_mailbox_domains.cf
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf
smtpd_sender_login_maps = mysql:/etc/postfix/mysql-virtual_sender_permissions.cf
virtual_uid_maps = static:2000
virtual_gid_maps = static:2000

# Local delivery settings
local_transport = local
alias_maps = $alias_database

# Default Mailbox size, is set to 0 which means unlimited!
mailbox_size_limit = 0
virtual_mailbox_limit = 0

### TLS settings
###
## TLS for outgoing mails from the server to another server
smtp_tls_security_level = may
smtp_tls_note_starttls_offer = yes
## TLS for incoming connections (clients or other mail servers)
smtpd_tls_security_level = may
smtpd_tls_cert_file = /etc/ssl/MYDOMAIN/ssl.crt
smtpd_tls_key_file = /etc/ssl/MYDOMAIN/ssl.key
smtpd_tls_CAfile = /etc/ssl/MYDOMAIN/ca.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
#smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_auth_only = yes

Meine master.cf

#
# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: "man 5 master" or
# on-line: http://www.postfix.org/master.5.html).
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       -       -       -       smtpd -v
#smtp      inet  n       -       -       -       1       postscreen
#smtpd     pass  -       -       -       -       -       smtpd
#dnsblog   unix  -       -       -       -       0       dnsblog
#tlsproxy  unix  -       -       -       -       0       tlsproxy
submission inet n       -       -       -       -       smtpd -v
#  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
  -o smtpd_client_restrictions=permit_sasl_authenticated,permit_mynetworks,check_relay_domains,reject
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       -       -       -       -       smtpd -v
  -o syslog_name=postfix/smtps
#  -o smtpd_tls_wrappermode=yes
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#628       inet  n       -       -       -       -       qmqpd
pickup    unix  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr
#qmgr     unix  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
#
# Specify in cyrus.conf:
#   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of the following:
#  mailbox_transport = lmtp:inet:localhost
#  virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus     unix  -       n       n       -       -       pipe
#  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
# Old example of delivery via Cyrus.
#
#old-cyrus unix  -       n       n       -       -       pipe
#  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix	-	n	n	-	2	pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}
# Dovecot LDA
dovecot	  unix	-	n	n	-	-	pipe
	flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient}

mail.warn

Nov  3 00:52:10 webs postfix/smtpd[17425]: warning: database /etc/aliases.db is older than source file /etc/aliases
Nov  3 00:52:10 webs postfix/smtpd[17425]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:52:10 webs postfix/smtpd[17425]: error: unsupported dictionary type: A?
Nov  3 00:52:10 webs postfix/smtpd[17425]: error: unsupported dictionary type: ??
Nov  3 00:52:10 webs postfix/smtpd[17425]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:52:11 webs postfix/master[16865]: warning: process /usr/lib/postfix/smtpd pid 17425 exit status 1
Nov  3 00:52:11 webs postfix/master[16865]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
Nov  3 00:52:22 webs postfix/smtp[17431]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:52:22 webs postfix/smtp[17431]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:52:23 webs postfix/master[16865]: warning: process /usr/lib/postfix/smtp pid 17431 exit status 1
Nov  3 00:52:23 webs postfix/master[16865]: warning: /usr/lib/postfix/smtp: bad command startup -- throttling
Nov  3 00:53:11 webs postfix/smtpd[17451]: warning: database /etc/aliases.db is older than source file /etc/aliases
Nov  3 00:53:11 webs postfix/smtpd[17451]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:53:11 webs postfix/smtpd[17451]: error: unsupported dictionary type: A?
Nov  3 00:53:11 webs postfix/smtpd[17451]: error: unsupported dictionary type: ??
Nov  3 00:53:11 webs postfix/smtpd[17451]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:53:12 webs postfix/master[16865]: warning: process /usr/lib/postfix/smtpd pid 17451 exit status 1
Nov  3 00:53:12 webs postfix/master[16865]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
Nov  3 00:53:23 webs postfix/smtp[17454]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:53:23 webs postfix/smtp[17454]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:53:24 webs postfix/master[16865]: warning: process /usr/lib/postfix/smtp pid 17454 exit status 1
Nov  3 00:53:24 webs postfix/master[16865]: warning: /usr/lib/postfix/smtp: bad command startup -- throttling
Nov  3 00:54:12 webs postfix/smtpd[17499]: warning: database /etc/aliases.db is older than source file /etc/aliases
Nov  3 00:54:12 webs postfix/smtpd[17499]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:54:12 webs postfix/smtpd[17499]: error: unsupported dictionary type: A?
Nov  3 00:54:12 webs postfix/smtpd[17499]: error: unsupported dictionary type: ??
Nov  3 00:54:12 webs postfix/smtpd[17499]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:54:13 webs postfix/master[16865]: warning: process /usr/lib/postfix/smtpd pid 17499 exit status 1
Nov  3 00:54:13 webs postfix/master[16865]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
Nov  3 00:54:24 webs postfix/smtp[17502]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:54:24 webs postfix/smtp[17502]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:54:25 webs postfix/master[16865]: warning: process /usr/lib/postfix/smtp pid 17502 exit status 1
Nov  3 00:54:25 webs postfix/master[16865]: warning: /usr/lib/postfix/smtp: bad command startup -- throttling
Nov  3 00:55:13 webs postfix/smtpd[17533]: warning: database /etc/aliases.db is older than source file /etc/aliases
Nov  3 00:55:13 webs postfix/smtpd[17533]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:55:13 webs postfix/smtpd[17533]: error: unsupported dictionary type: A?
Nov  3 00:55:13 webs postfix/smtpd[17533]: error: unsupported dictionary type: ??
Nov  3 00:55:13 webs postfix/smtpd[17533]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:55:14 webs postfix/master[16865]: warning: process /usr/lib/postfix/smtpd pid 17533 exit status 1
Nov  3 00:55:14 webs postfix/master[16865]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
Nov  3 00:55:25 webs postfix/smtp[17536]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:55:25 webs postfix/smtp[17536]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:55:26 webs postfix/master[16865]: warning: process /usr/lib/postfix/smtp pid 17536 exit status 1
Nov  3 00:55:26 webs postfix/master[16865]: warning: /usr/lib/postfix/smtp: bad command startup -- throttling

mail.err

Nov  3 00:53:11 webs postfix/smtpd[17451]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:53:23 webs postfix/smtp[17454]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:53:23 webs postfix/smtp[17454]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:54:12 webs postfix/smtpd[17499]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:54:12 webs postfix/smtpd[17499]: error: unsupported dictionary type: A?
Nov  3 00:54:12 webs postfix/smtpd[17499]: error: unsupported dictionary type: ??
Nov  3 00:54:12 webs postfix/smtpd[17499]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:54:24 webs postfix/smtp[17502]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:54:24 webs postfix/smtp[17502]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:55:13 webs postfix/smtpd[17533]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:55:13 webs postfix/smtpd[17533]: error: unsupported dictionary type: A?
Nov  3 00:55:13 webs postfix/smtpd[17533]: error: unsupported dictionary type: ??
Nov  3 00:55:13 webs postfix/smtpd[17533]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:55:25 webs postfix/smtp[17536]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:55:25 webs postfix/smtp[17536]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:56:14 webs postfix/smtpd[17551]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:56:14 webs postfix/smtpd[17551]: error: unsupported dictionary type: A?
Nov  3 00:56:14 webs postfix/smtpd[17551]: error: unsupported dictionary type: ??
Nov  3 00:56:14 webs postfix/smtpd[17551]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:56:26 webs postfix/smtp[17556]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:56:26 webs postfix/smtp[17556]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:57:15 webs postfix/smtpd[17568]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:57:15 webs postfix/smtpd[17568]: error: unsupported dictionary type: A?
Nov  3 00:57:15 webs postfix/smtpd[17568]: error: unsupported dictionary type: ??
Nov  3 00:57:15 webs postfix/smtpd[17568]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:57:27 webs postfix/smtp[17569]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:57:27 webs postfix/smtp[17569]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:58:16 webs postfix/smtpd[17570]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:58:16 webs postfix/smtpd[17570]: error: unsupported dictionary type: A?
Nov  3 00:58:16 webs postfix/smtpd[17570]: error: unsupported dictionary type: ??
Nov  3 00:58:16 webs postfix/smtpd[17570]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:58:28 webs postfix/smtp[17571]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:58:28 webs postfix/smtp[17571]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:59:17 webs postfix/smtpd[17601]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:59:17 webs postfix/smtpd[17601]: error: unsupported dictionary type: A?
Nov  3 00:59:17 webs postfix/smtpd[17601]: error: unsupported dictionary type: ??
Nov  3 00:59:17 webs postfix/smtpd[17601]: fatal: match_list_parse: no pattern after '!'
Nov  3 00:59:29 webs postfix/smtp[17602]: error: unsupported dictionary type: PATH=/bin
Nov  3 00:59:29 webs postfix/smtp[17602]: fatal: match_list_parse: no pattern after '!'
Nov  3 01:00:18 webs postfix/smtpd[17608]: error: unsupported dictionary type: PATH=/bin
Nov  3 01:00:18 webs postfix/smtpd[17608]: error: unsupported dictionary type: A?
Nov  3 01:00:18 webs postfix/smtpd[17608]: error: unsupported dictionary type: ??
Nov  3 01:00:18 webs postfix/smtpd[17608]: fatal: match_list_parse: no pattern after '!'
Nov  3 01:00:30 webs postfix/smtp[17614]: error: unsupported dictionary type: PATH=/bin
Nov  3 01:00:30 webs postfix/smtp[17614]: fatal: match_list_parse: no pattern after '!'
Nov  3 01:01:19 webs postfix/smtpd[17621]: error: unsupported dictionary type: PATH=/bin
Nov  3 01:01:19 webs postfix/smtpd[17621]: error: unsupported dictionary type: A?
Nov  3 01:01:19 webs postfix/smtpd[17621]: error: unsupported dictionary type: ??
Nov  3 01:01:19 webs postfix/smtpd[17621]: fatal: match_list_parse: no pattern after '!'
Nov  3 01:01:31 webs postfix/smtp[17622]: error: unsupported dictionary type: PATH=/bin
Nov  3 01:01:31 webs postfix/smtp[17622]: fatal: match_list_parse: no pattern after '!'
Nov  3 01:02:20 webs postfix/smtpd[17624]: error: unsupported dictionary type: PATH=/bin
Nov  3 01:02:20 webs postfix/smtpd[17624]: error: unsupported dictionary type: A?
Nov  3 01:02:20 webs postfix/smtpd[17624]: error: unsupported dictionary type: ??
Nov  3 01:02:20 webs postfix/smtpd[17624]: fatal: match_list_parse: no pattern after '!'
Nov  3 01:02:32 webs postfix/smtp[17625]: error: unsupported dictionary type: PATH=/bin

user.log

Nov  2 18:26:06 webs Froxlor: [Administrator Action admin] switched user and is now 'USER'
Nov  2 18:38:52 webs Froxlor: [Administrator Action admin] switched user and is now 'USER'
Nov  2 22:52:09 webs Froxlor: [Administrator Action admin] rebuild configfiles due to changed setting
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/05efi on mounted /dev/sda1
Nov  2 23:16:49 webs 05efi: debug: Not on UEFI platform
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/10freedos on mounted /dev/sda1
Nov  2 23:16:49 webs 10freedos: debug: /dev/sda1 is not a FAT partition: exiting
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/10qnx on mounted /dev/sda1
Nov  2 23:16:49 webs 10qnx: debug: /dev/sda1 is not a QNX4 partition: exiting
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/20macosx on mounted /dev/sda1
Nov  2 23:16:49 webs macosx-prober: debug: /dev/sda1 is not an HFS+ partition: exiting
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/20microsoft on mounted /dev/sda1
Nov  2 23:16:49 webs 20microsoft: debug: /dev/sda1 is not a MS partition: exiting
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/30utility on mounted /dev/sda1
Nov  2 23:16:49 webs 30utility: debug: /dev/sda1 is not a FAT partition: exiting
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/40lsb on mounted /dev/sda1
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/70hurd on mounted /dev/sda1
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/80minix on mounted /dev/sda1
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/83haiku on mounted /dev/sda1
Nov  2 23:16:49 webs 83haiku: debug: /dev/sda1 is not a BeFS partition: exiting
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/90linux-distro on mounted /dev/sda1
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/mounted/90solaris on mounted /dev/sda1
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/50mounted-tests on /dev/sda2
Nov  2 23:16:49 webs os-prober: debug: running /usr/lib/os-probes/50mounted-tests on /dev/sda5
Nov  2 23:16:49 webs os-prober: debug: /dev/mapper/webs--vg-swap_1: is active swap
Nov  2 23:20:56 webs Froxlor: [Administrator Action admin] rebuild configfiles
Nov  2 23:21:32 webs Froxlor: [Administrator Action admin] truncated the system-log (mysql)
Nov  2 23:22:55 webs Froxlor: [Administrator Action admin] rebuild configfiles due to changed setting
Nov  2 23:46:06 webs Froxlor: [Administrator Action admin] viewed admin_domains
Nov  2 23:46:31 webs Froxlor: [Administrator Action admin] viewed admin_customers
Nov  2 23:46:32 webs Froxlor: [Administrator Action admin] viewed admin_domains
Nov  2 23:46:50 webs Froxlor: [Administrator Action admin] viewed admin_customers
Nov  2 23:46:58 webs Froxlor: [Administrator Action admin] switched user and is now 'USER'
Nov  2 23:46:58 webs Froxlor: [Customer Action affectmd] viewed customer_index
Nov  2 23:47:01 webs Froxlor: [Customer Action affectmd] viewed customer_domains::domains
Nov  2 23:47:22 webs Froxlor: [Customer Action affectmd] viewed customer_domains::domains
Nov  2 23:47:30 webs Froxlor: [Customer Action affectmd] viewed customer_domains::domains
Nov  2 23:48:06 webs Froxlor: [Customer Action affectmd] viewed customer_domains::domains

dovecot (soweit ich sehen kann gibts hier keine Probleme)

Nov 03 00:55:01 imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [99.244.X.X]
Nov 03 00:55:01 imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [99.244.X.X]
Nov 03 00:55:01 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [99.244.X.X]
Nov 03 00:55:01 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [99.244.X.X]
Nov 03 00:55:01 auth: Debug: client in: AUTH    1       PLAIN   service=imap    secured session=KvVigZcjswBj9MPf        lip=10.0.0.4    rip=99.244.19$
Nov 03 00:55:01 auth-worker(17524): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth
Nov 03 00:55:01 auth-worker(17524): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so
Nov 03 00:55:01 auth-worker(17524): Debug: sql(user@TLD,99.244.X.X): query: SELECT username AS user, password_enc AS password, CONCA$
Nov 03 00:55:01 auth: Debug: client passdb out: OK      1       user=user@TLD
Nov 03 00:55:01 auth: Debug: master in: REQUEST 3208380417      17515   1       80dfaeea43af0291414c0c5a9906bc20        session_pid=17526       reque$
Nov 03 00:55:01 auth-worker(17524): Debug: sql(user@TLD,99.244.X.X): SELECT CONCAT(homedir, maildir) AS home, CONCAT('maildir:', hom$
Nov 03 00:55:01 auth: Debug: master userdb out: USER    3208380417      user@TLD   home=/var/customers/mail/user/TLD/user$
Nov 03 00:55:01 imap: Debug: Loading modules from directory: /usr/lib/dovecot/modules
Nov 03 00:55:01 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so
Nov 03 00:55:01 imap: Debug: Module loaded: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so
Nov 03 00:55:01 imap: Debug: Added userdb setting: mail=maildir:/var/customers/mail/user/TLD/user/Maildir/
Nov 03 00:55:01 imap: Debug: Added userdb setting: plugin/quota_rule=*:storage=5000M
Nov 03 00:55:01 imap(user@TLD): Debug: Effective uid=2000, gid=2000, home=/var/customers/mail/user/TLD/user/Maildir/
Nov 03 00:55:01 imap(user@TLD): Debug: quota: No quota setting - plugin disabled
Nov 03 00:55:01 imap(user@TLD): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes l$
Nov 03 00:55:01 imap(user@TLD): Debug: maildir++: root=/var/customers/mail/user/TLD/user/Maildir, index=, indexpvt=, cont$
Nov 03 00:55:49 imap-login: Debug: SSL alert: close notify [99.244.X.X]

Die mail.log muss ich noch aussieben da ich die log settings gerade auf verbose habe und unmengen logs entstehen.

Link to comment
Share on other sites

14 answers to this question

Recommended Posts

Meine Conf:

alias_maps = $alias_database
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
data_directory = /var/lib/postfix
dovecot_destination_recipient_limit = 1
html_directory = no
inet_protocols = ipv4
local_transport = local
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 52428800
mydomain = DOMAIN
myhostname = mail.$mydomain
mynetworks = 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
readme_directory = /usr/share/doc/postfix
sample_directory = /usr/share/doc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_tls_security_level = may
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_client_hostname
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unauth_pipelining, reject_non_fqdn_recipient
smtpd_relay_restrictions =
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sender_login_maps = mysql:/etc/postfix/mysql-virtual_sender_permissions.cf
smtpd_sender_restrictions = permit_mynetworks, reject_sender_login_mismatch, permit_sasl_authenticated, reject_unknown_helo_hostname, reject_unknown_recipient_domain, reject_unknown_sender_domain
smtpd_tls_CAfile = /etc/ssl/ca.pem
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/ssl.crt
smtpd_tls_key_file = /etc/ssl/ssl.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf
virtual_gid_maps = static:2000
virtual_mailbox_base = /var/customers/mail/
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_mailbox_domains.cf
virtual_mailbox_limit = 0
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailbox_maps.cf
virtual_transport = dovecot
virtual_uid_maps = static:2000
Link to comment
Share on other sites

mail.log Eintrag (Email wurde vom lokalen Windows 7 client mit Thunderbird verschickt).

Grunds?tzlich funktioniert der postfix also :)

 

Proof of general working postfix. Sending email from Windows 7 client with Thunderbird.

Nov  3 01:56:27 webs postfix/master[1182]: terminating on signal 15
Nov  3 01:56:27 webs postfix/master[2080]: daemon started -- version 2.11.3, configuration /etc/postfix
Nov  3 01:57:39 webs postfix/smtpd[2118]: warning: database /etc/aliases.db is older than source file /etc/aliases
Nov  3 01:57:39 webs postfix/smtpd[2118]: connect from CPE.cpe.net.cable.rogers.com[99.244.X.X]
Nov  3 01:57:39 webs postfix/smtpd[2118]: Anonymous TLS connection established from cpe.cpe.net.cable.rogers.com[99.244.X.X]: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Nov  3 01:57:40 webs postfix/smtpd[2118]: 54450810DF: client=CPE.cpe.net.cable.rogers.com[99.244.X.X], sasl_method=PLAIN, sasl_username=USER
Nov  3 01:57:40 webs postfix/cleanup[2125]: 54450810DF: message-id=<ID.ID@DOMAIN>
Nov  3 01:57:40 webs postfix/qmgr[2082]: 54450810DF: from=<EMAILADDR>, size=2338, nrcpt=1 (queue active)
Nov  3 01:57:40 webs postfix/smtpd[2118]: disconnect from CPE.cpe.net.cable.rogers.com[99.244.X.X]
Nov  3 01:57:41 webs postfix/smtp[2127]: 54450810DF: to=<EMAILADDR>, relay=gmail-smtp-in.l.google.com[74.125.206.26]:25, delay=0.87, delays=0.4/0/0.19/0.27, dsn=2.0.0, status=sent (250 2.0.0 OK 1446512261 s136si25405835wmb$
Nov  3 01:57:41 webs postfix/qmgr[2082]: 54450810DF: removed

MX toolbox spuckt folgendes aus:

MX toolbox is saying this:

	Test	Result
	SMTP Reverse DNS Mismatch	OK - 176.9.X.X resolves to DOMAIN
	SMTP Valid Hostname	OK - Reverse DNS is a valid Hostname
	SMTP Banner Check	OK - Reverse DNS matches SMTP Banner
	SMTP TLS	OK - Supports TLS.
	SMTP Connection Time	0.875 seconds - Good on Connection time
	SMTP Open Relay	OK - Not an open relay.
	SMTP Transaction Time	3.203 seconds - Good on Transaction Time
Session Transcript:
Connecting to 176.9.X.X

220 mail.DOMAIN ESMTP Postfix (Debian/GNU) [688 ms]
EHLO PWS3.mxtoolbox.com
250-mail.DOMAIN
250-PIPELINING
250-SIZE 52428800
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN [734 ms]
MAIL FROM:<supertool@mxtoolbox.com>
250 2.1.0 Ok [734 ms]
RCPT TO:<test@example.com>
554 5.7.1 <test@example.com>: Relay access denied [734 ms]

PWS3v2 4719ms
Link to comment
Share on other sites

Dies sind die logs wenn ich vom "Proble-Client" verbinde:

 

2:44:24 - im client wurde die verbindung abgebrochen

Nov  3 02:42:49 webs postfix/smtpd[3193]: proxymap stream disconnect
Nov  3 02:42:49 webs postfix/smtpd[3193]: auto_clnt_close: disconnect private/tlsmgr stream
Nov  3 02:44:24 webs postfix/smtpd[3193]: idle timeout -- exiting

Link to comment
Share on other sites

Versuche den SMTP in Outlook 2010 einzubinden sehen in den Logs wie folgt aus:

This is how the logs look like when I'm trying to set up the email account on one of the Windows 7 clients with Outlook 2010 that CAN'T connect to the SMTP:

Nov  3 03:06:42 webs postfix/smtp[3574]: connect to DOMAIN[MYSERVERIP]:25: Connection timed out
Nov  3 03:06:42 webs postfix/smtp[3571]: connect to DOMAIN[MYSERVERIP]:25: Connection timed out
Nov  3 03:06:42 webs postfix/smtp[3576]: connect to DOMAIN[MYSERVERIP]:25: Connection timed out
Nov  3 03:06:42 webs postfix/smtp[3574]: 621AF80548: to=<root@DOMAIN>, orig_to=<root@mail.DOMAIN>, relay=none, delay=67367, delays=67337/0.01/30/0, dsn=4.4.1, status=deferred (connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/smtp[3571]: D253281AF6: to=<admin@DOMAIN>, relay=none, delay=281238, delays=281207/0.02/30/0, dsn=4.4.1, status=deferred (connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/smtp[3576]: 6FD53810C8: to=<root@DOMAIN>, orig_to=<root@mail.DOMAIN>, relay=none, delay=61997, delays=61967/0.02/30/0, dsn=4.4.1, status=deferred (connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/error[3582]: A779C8006C: to=<root@DOMAIN>, orig_to=<root>, relay=none, delay=13301, delays=13271/30/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/error[3582]: 10E1B80558: to=<root@DOMAIN>, orig_to=<root>, relay=none, delay=420095, delays=420065/30/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/smtp[3573]: connect to DOMAIN[MYSERVERIP]:25: Connection timed out
Nov  3 03:06:42 webs postfix/smtp[3575]: connect to DOMAIN[MYSERVERIP]:25: Connection timed out
Nov  3 03:06:42 webs postfix/error[3582]: 19680819A3: to=<root@DOMAIN>, orig_to=<root>, relay=none, delay=15100, delays=15070/30/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/error[3583]: 58D0F81AFA: to=<root@DOMAIN>, orig_to=<root>, relay=none, delay=281201, delays=281171/30/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/smtp[3573]: BEC44804BF: to=<root@DOMAIN>, orig_to=<root@mail.DOMAIN>, relay=none, delay=67667, delays=67636/0.01/30/0, dsn=4.4.1, status=deferred (connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/smtp[3575]: 625B381A78: to=<root@DOMAIN>, orig_to=<root>, relay=none, delay=356801, delays=356771/0.02/30/0, dsn=4.4.1, status=deferred (connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/error[3584]: 89CC781ADA: to=<admin@DOMAIN>, relay=none, delay=183401, delays=183371/30/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/error[3582]: 841248052D: to=<root@DOMAIN>, orig_to=<root@mail.DOMAIN>, relay=none, delay=61367, delays=61337/30/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:06:42 webs postfix/error[3583]: 8ECA881107: to=<root@DOMAIN>, orig_to=<root@mail.DOMAIN>, relay=none, delay=65867, delays=65837/30/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to DOMAIN[MYSERVERIP]:25: Connection timed out)
Nov  3 03:08:04 webs postfix/smtpd[3577]: idle timeout -- exiting

Meine master.cf habe ich derweil folgenderma?en angepast:

Changed my master.cf to the following:

# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: "man 5 master" or
# on-line: http://www.postfix.org/master.5.html).
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       -       -       -       smtpd -v
#smtp      inet  n       -       -       -       1       postscreen
#smtpd     pass  -       -       -       -       -       smtpd
#dnsblog   unix  -       -       -       -       0       dnsblog
#tlsproxy  unix  -       -       -       -       0       tlsproxy
#submission inet n       -       -       -       -       smtpd
#  -o syslog_name=postfix/submission
#  -o smtpd_tls_security_level=encrypt
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=permit_sasl_authenticated,permit_mynetworks,check_relay_domains,reject
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#smtps     inet  n       -       -       -       -       smtpd -v
#  -o syslog_name=postfix/smtps
#  -o smtpd_tls_wrappermode=yes
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=permit_sasl_authenticated,permit_mynetworks,check_relay_domains,reject
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING

Link to comment
Share on other sites

Maybe wanna put this in English too as this is the General Discussion Thread.

 

My problem is as follows:

I have a couple of sites with client machines connecting to my webserver (Debian 8.2) running Froxlor (0.9.34) with Dovecot and Postfix 2.11.3.

At some sites I can't sent emails out or even set up the email account as the test connection fails to the SMTP server (connection timed out - cannot connect to server). From some sites it's really no problem to connect to the SMTP and emails go out super fast.

I have enabled TLS encryption with SASL. The clients (that can or cannot connect) are either Windows 7 SP1 or Mac OS X 10.8 with either Microsoft Outlook 2010, 2013, Thunderbird or Apple Mail.

 

I'm really spinning my wheels here with NO clue on how to go forward. I'm skimming through logs and logs and can't see what's wrong.

I'd really appreciate some help folks!

Thanks a lot!

 

I'm happy to post any config file or log file that could aid in the process. Please advice!

Link to comment
Share on other sites

Meine aktuelle Config:

My current config:

alias_maps = $alias_database
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
data_directory = /var/lib/postfix
dovecot_destination_recipient_limit = 1
html_directory = no
inet_protocols = ipv4
local_transport = local
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 52428800
mydomain = DOMAIN
myhostname = mail.$mydomain
mynetworks = 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
readme_directory = /usr/share/doc/postfix
sample_directory = /usr/share/doc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_tls_security_level = may
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_client_hostname
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unauth_pipelining, reject_non_fqdn_recipient
smtpd_relay_restrictions =
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sender_login_maps = mysql:/etc/postfix/mysql-virtual_sender_permissions.cf
smtpd_sender_restrictions = permit_mynetworks, reject_sender_login_mismatch, permit_sasl_authenticated, reject_unknown_helo_hostname, reject_unknown_recipient_domain, reject_unknown_sender_domain
smtpd_tls_CAfile = /etc/ssl/ca.pem
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/ssl.crt
smtpd_tls_key_file = /etc/ssl/ssl.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf
virtual_gid_maps = static:2000
virtual_mailbox_base = /var/customers/mail/
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_mailbox_domains.cf
virtual_mailbox_limit = 0
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailbox_maps.cf
virtual_transport = dovecot
virtual_uid_maps = static:2000
Link to comment
Share on other sites

Danke f?r die Antwort d00p!

 

Config Templates wiederhergestellt.

Keine ?nderungen an den Templates bis auf die hier (https://config.froxlor.org/) erw?hnten eingef?gt.

 

Recreated original config templates with no changes expect for the following:

[postfix_dovecot] /etc/postfix/main.cf
@@ -629,15 +629,15 @@
# This is the Sendmail-compatible mail posting interface.
# 
-sendmail_path =
+sendmail_path = /usr/sbin/sendmail

# newaliases_path: The full pathname of the Postfix newaliases command.
# This is the Sendmail-compatible command to build alias databases.
#
-newaliases_path =
+newaliases_path = /usr/bin/newaliases

# mailq_path: The full pathname of the Postfix mailq command. This
# is the Sendmail-compatible mail queue listing command.
# 
-mailq_path =
+mailq_path = /usr/bin/mailq

# setgid_group: The group for mail submission and queue management
@@ -645,22 +645,22 @@
# is not shared with other accounts, not even with the Postfix account.
#
-setgid_group =
+setgid_group = postdrop

# html_directory: The location of the Postfix HTML documentation.
#
-html_directory =
+html_directory = no

# manpage_directory: The location of the Postfix on-line manual pages.
#
-manpage_directory =
+manpage_directory = /usr/share/man

# sample_directory: The location of the Postfix sample configuration files.
# This parameter is obsolete as of Postfix 2.1.
#
-sample_directory =
+sample_directory = /usr/share/doc/postfix

# readme_directory: The location of the Postfix README files.
#
-readme_directory =
+readme_directory = /usr/share/doc/postfix
inet_protocols = ipv4


[dovecot_postfix2] /etc/dovecot/dovecot-sql.conf.ext
@@ -128,5 +128,5 @@
# SELECT home, uid, gid \
# FROM users WHERE username = '%n' AND domain = '%d'
-user_query = SELECT CONCAT(homedir, maildir) AS home, CONCAT('maildir:', homedir, maildir) AS mail, uid, gid, CONCAT('*:storage=', (quota*1024)) as quota_rule FROM mail_users WHERE (username = '%u' OR email = '%u')
+user_query = SELECT CONCAT(homedir, maildir) AS home, CONCAT('maildir:', homedir, maildir) AS mail, uid, gid, CONCAT('*:storage=', quota, 'M') as quota_rule FROM mail_users WHERE (username = '%u' OR email = '%u')

# If you wish to avoid two SQL lookups (passdb + userdb), you can use
@@ -138,5 +138,5 @@
# home AS userdb_home, uid AS userdb_uid, gid AS userdb_gid \
# FROM users WHERE userid = '%u'
-password_query = SELECT username AS user, password_enc AS password, CONCAT(homedir, maildir) AS userdb_home, uid AS userdb_uid, gid AS userdb_gid, CONCAT('maildir:', homedir, maildir) AS userdb_mail, CONCAT('maildir:storage=', (quota*1024)) as userdb_quota FROM mail_users WHERE (username = '%u' OR email = '%u') AND ((imap = 1 AND '%Ls' = 'imap') OR (pop3 = 1 AND '%Ls' = 'pop3') OR '%Ls' = 'smtp' OR '%Ls' = 'sieve')
+password_query = SELECT username AS user, password_enc AS password, CONCAT(homedir, maildir) AS userdb_home, uid AS userdb_uid, gid AS userdb_gid, CONCAT('maildir:', homedir, maildir) AS userdb_mail, CONCAT('*:storage=', quota, 'M') as userdb_quota_rule FROM mail_users WHERE (username = '%u' OR email = '%u') AND ((imap = 1 AND '%Ls' = 'imap') OR (pop3 = 1 AND '%Ls' = 'pop3') OR '%Ls' = 'smtp' OR '%Ls' = 'sieve')

# Query to get a list of all usernames.

Zugriffsrechte auf die ge?nderten Dateien im conf.d Order von 640 auf 644 ge?ndert (hatte mit 640 auch Probleme).

 

Changed permissions on files in the conf.d folder from 640 to 644.

 

 

Meine aktuelle Conf sieht derzeit wie folgt aus:

 

My current config:

alias_maps = $alias_database
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
data_directory = /var/lib/postfix
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
dovecot_destination_recipient_limit = 1
html_directory = no
inet_protocols = ipv4
local_transport = local
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 52428800
mydomain = DOMAIN
myhostname = mail.$mydomain
mynetworks = 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
readme_directory = /usr/share/doc/postfix
sample_directory = /usr/share/doc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_client_hostname
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unauth_pipelining, reject_non_fqdn_recipient
smtpd_relay_restrictions =
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sender_login_maps = mysql:/etc/postfix/mysql-virtual_sender_permissions.cf
smtpd_sender_restrictions = permit_mynetworks, reject_sender_login_mismatch, permit_sasl_authenticated, reject_unknown_helo_hostname, reject_unknown_recipient_domain, reject_unknown_sender_domain
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf
virtual_gid_maps = static:2000
virtual_mailbox_base = /var/customers/mail/
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_mailbox_domains.cf
virtual_mailbox_limit = 0
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailbox_maps.cf
virtual_transport = dovecot
virtual_uid_maps = static:2000

newaliases habe ich auch laufen lassen.

 

executed newaliases.

 

 

 

Ich kann derzeit ?ber Port 143 mit STARTTLS Emails empfangen aber ?ber Port 25 mit oder ohne STARTTLS keine versenden (Timeout).

Zur?cksetzen der Configs f?r Dovecot und Postfix hat keine ?nderung gebracht.

 

I can get emails through port 143 and STARTTLS but can't send through port 25 and STARTTLS nor without (connection times out).

Link to comment
Share on other sites

Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_mailbox_maps.cf: tls_cert_file = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_mailbox_maps.cf: tls_CAfile = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_mailbox_maps.cf: tls_CApath = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_mailbox_maps.cf: tls_ciphers = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_bool: /etc/postfix/mysql-virtual_mailbox_maps.cf: tls_verify_cert = on
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_int: /etc/postfix/mysql-virtual_mailbox_maps.cf: expansion_limit = 1
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_mailbox_maps.cf: query = SELECT CONCAT(homedir,maildir) FROM mail_users WHERE email = '%s'
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_mailbox_maps.cf: domain =
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_mailbox_maps.cf: hosts = 127.0.0.1
Nov  6 01:30:52 webs postfix/smtpd[25315]: dict_open: mysql:/etc/postfix/mysql-virtual_mailbox_maps.cf
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: smtpd_access_maps ~? debug_peer_list
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: smtpd_access_maps ~? fast_flush_domains
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: smtpd_access_maps ~? mynetworks
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: smtpd_access_maps ~? permit_mx_backup_networks
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: smtpd_access_maps ~? qmqpd_authorized_clients
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: smtpd_access_maps ~? relay_domains
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: smtpd_access_maps ~? smtpd_access_maps
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: user = froxlor
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: password = MYPASSWORD
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: dbname = froxlor
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: result_format = %s
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: option_file = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: option_group = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: tls_key_file = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: tls_cert_file = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: tls_CAfile = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: tls_CApath = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: tls_ciphers = <NULL>
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_bool: /etc/postfix/mysql-virtual_sender_permissions.cf: tls_verify_cert = on
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_int: /etc/postfix/mysql-virtual_sender_permissions.cf: expansion_limit = 0
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: query = SELECT DISTINCT username FROM mail_users WHERE email in ((SELECT mail_virtual.email_full FROM mail_virtual WHERE mail_virt$
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: domain =
Nov  6 01:30:52 webs postfix/smtpd[25315]: cfg_get_str: /etc/postfix/mysql-virtual_sender_permissions.cf: hosts = 127.0.0.1
Nov  6 01:30:52 webs postfix/smtpd[25315]: dict_open: mysql:/etc/postfix/mysql-virtual_sender_permissions.cf
Nov  6 01:30:52 webs postfix/smtpd[25315]: unknown_helo_hostname_tempfail_action = defer_if_permit
Nov  6 01:30:52 webs postfix/smtpd[25315]: unknown_address_tempfail_action = defer_if_permit
Nov  6 01:30:52 webs postfix/smtpd[25315]: unverified_recipient_tempfail_action = defer_if_permit
Nov  6 01:30:52 webs postfix/smtpd[25315]: unverified_sender_tempfail_action = defer_if_permit
Nov  6 01:30:52 webs postfix/smtpd[25315]: name_mask: 1
Nov  6 01:30:52 webs postfix/smtpd[25315]: auto_clnt_create: transport=local endpoint=private/tlsmgr
Nov  6 01:30:52 webs postfix/smtpd[25315]: auto_clnt_open: connected to private/tlsmgr
Nov  6 01:30:52 webs postfix/smtpd[25315]: send attr request = seed
Nov  6 01:30:52 webs postfix/smtpd[25315]: send attr size = 32
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/tlsmgr: wanted attribute: status
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: status
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute value: 0
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/tlsmgr: wanted attribute: seed
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: seed
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute value: xgv3FfZBcb/G6m/MH0uza+ydgunWLVRMVrFVFWXgTAw=
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/tlsmgr: wanted attribute: (list terminator)
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: (end)
Nov  6 01:30:52 webs postfix/smtpd[25315]: send attr request = policy
Nov  6 01:30:52 webs postfix/smtpd[25315]: send attr cache_type = smtpd
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/tlsmgr: wanted attribute: status
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: status
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute value: 0
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/tlsmgr: wanted attribute: cachable
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: cachable
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute value: 0
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/tlsmgr: wanted attribute: timeout
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: timeout
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute value: 3600
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/tlsmgr: wanted attribute: (list terminator)
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: (end)
Nov  6 01:30:52 webs postfix/smtpd[25315]: warning: cannot get RSA certificate from file /etc/ssl/server/WEBDOMAIN.pem: disabling TLS support
Nov  6 01:30:52 webs postfix/smtpd[25315]: warning: TLS library problem: error:02001002:system library:fopen:No such file or directory:bss_file.c:398:fopen('/etc/ssl/server/WEBDOMAIN.pem','r'):
Nov  6 01:30:52 webs postfix/smtpd[25315]: warning: TLS library problem: error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
Nov  6 01:30:52 webs postfix/smtpd[25315]: warning: TLS library problem: error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib:ssl_rsa.c:722:
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: fast_flush_domains ~? debug_peer_list
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_string: fast_flush_domains ~? fast_flush_domains
Nov  6 01:30:52 webs postfix/smtpd[25315]: auto_clnt_create: transport=local endpoint=private/anvil
Nov  6 01:30:52 webs postfix/smtpd[25315]: connection established
Nov  6 01:30:52 webs postfix/smtpd[25315]: master_notify: status 0
Nov  6 01:30:52 webs postfix/smtpd[25315]: name_mask: resource
Nov  6 01:30:52 webs postfix/smtpd[25315]: name_mask: software
Nov  6 01:30:52 webs postfix/smtpd[25315]: connect from unknown[91.207.60.115]
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_list_match: unknown: no match
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_list_match: 91.207.60.115: no match
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_list_match: unknown: no match
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_list_match: 91.207.60.115: no match
Nov  6 01:30:52 webs postfix/smtpd[25315]: smtp_stream_setup: maxtime=300 enable_deadline=0
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_hostname: unknown ~? 127.0.0.0/8
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_hostaddr: 91.207.60.115 ~? 127.0.0.0/8
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_list_match: unknown: no match
Nov  6 01:30:52 webs postfix/smtpd[25315]: match_list_match: 91.207.60.115: no match
Nov  6 01:30:52 webs postfix/smtpd[25315]: auto_clnt_open: connected to private/anvil
Nov  6 01:30:52 webs postfix/smtpd[25315]: send attr request = connect
Nov  6 01:30:52 webs postfix/smtpd[25315]: send attr ident = smtp:91.207.60.115
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/anvil: wanted attribute: status
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: status
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute value: 0
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/anvil: wanted attribute: count
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: count
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute value: 1
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/anvil: wanted attribute: rate
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: rate
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute value: 1
Nov  6 01:30:52 webs postfix/smtpd[25315]: private/anvil: wanted attribute: (list terminator)
Nov  6 01:30:52 webs postfix/smtpd[25315]: input attribute name: (end)
Nov  6 01:30:52 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 220 mail.WEBDOMAIN ESMTP Postfix (Debian/GNU)
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_create: SASL service=smtp, realm=mail.WEBDOMAIN
Nov  6 01:30:52 webs postfix/smtpd[25315]: name_mask: noanonymous
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_connect: Connecting
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_connect: auth reply: VERSION?1?1
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_connect: auth reply: MECH?PLAIN?plaintext
Nov  6 01:30:52 webs postfix/smtpd[25315]: name_mask: plaintext
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_connect: auth reply: MECH?LOGIN?plaintext
Nov  6 01:30:52 webs postfix/smtpd[25315]: name_mask: plaintext
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_connect: auth reply: SPID?24882
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_connect: auth reply: CUID?32
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_connect: auth reply: COOKIE?8a6f3c908147657828708b57941cd445
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_connect: auth reply: DONE
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_mech_filter: keep mechanism: PLAIN
Nov  6 01:30:52 webs postfix/smtpd[25315]: xsasl_dovecot_server_mech_filter: keep mechanism: LOGIN
Nov  6 01:30:53 webs postfix/smtpd[25315]: < unknown[91.207.60.115]: EHLO User
Nov  6 01:30:53 webs postfix/smtpd[25315]: match_list_match: unknown: no match
Nov  6 01:30:53 webs postfix/smtpd[25315]: match_list_match: 91.207.60.115: no match
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-mail.WEBDOMAIN
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-PIPELINING
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-SIZE 52428800
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-VRFY
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-ETRN
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-STARTTLS
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-AUTH PLAIN LOGIN
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-AUTH=PLAIN LOGIN
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-ENHANCEDSTATUSCODES
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250-8BITMIME
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250 DSN
Nov  6 01:30:53 webs postfix/smtpd[25315]: < unknown[91.207.60.115]: RSET
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 250 2.0.0 Ok
Nov  6 01:30:53 webs postfix/smtpd[25315]: < unknown[91.207.60.115]: AUTH LOGIN
Nov  6 01:30:53 webs postfix/smtpd[25315]: xsasl_dovecot_server_first: sasl_method LOGIN
Nov  6 01:30:53 webs postfix/smtpd[25315]: xsasl_dovecot_handle_reply: auth reply: CONT?1?VXNlcm5hbWU6
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 334 VXNlcm5hbWU6
Nov  6 01:30:53 webs postfix/smtpd[25315]: < unknown[91.207.60.115]: ZGIyaW5zdDFAYWZmZWN0bWQuY2E=
Nov  6 01:30:53 webs postfix/smtpd[25315]: xsasl_dovecot_handle_reply: auth reply: CONT?1?UGFzc3dvcmQ6
Nov  6 01:30:53 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 334 UGFzc3dvcmQ6
Nov  6 01:30:53 webs postfix/smtpd[25315]: < unknown[91.207.60.115]: ZGIyaW5zdDE=
Nov  6 01:30:55 webs postfix/smtpd[25315]: xsasl_dovecot_handle_reply: auth reply: FAIL?1?user=db2inst1@affectmd.ca
Nov  6 01:30:55 webs postfix/smtpd[25315]: warning: unknown[91.207.60.115]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  6 01:30:55 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 535 5.7.8 Error: authentication failed: UGFzc3dvcmQ6
Nov  6 01:30:55 webs postfix/smtpd[25315]: < unknown[91.207.60.115]: QUIT
Nov  6 01:30:55 webs postfix/smtpd[25315]: > unknown[91.207.60.115]: 221 2.0.0 Bye
Nov  6 01:30:55 webs postfix/smtpd[25315]: match_hostname: unknown ~? 127.0.0.0/8
Nov  6 01:30:55 webs postfix/smtpd[25315]: match_hostaddr: 91.207.60.115 ~? 127.0.0.0/8
Nov  6 01:30:55 webs postfix/smtpd[25315]: match_list_match: unknown: no match
Nov  6 01:30:55 webs postfix/smtpd[25315]: match_list_match: 91.207.60.115: no match
Nov  6 01:30:55 webs postfix/smtpd[25315]: send attr request = disconnect
Nov  6 01:30:55 webs postfix/smtpd[25315]: send attr ident = smtp:91.207.60.115
Nov  6 01:30:55 webs postfix/smtpd[25315]: private/anvil: wanted attribute: status
Nov  6 01:30:55 webs postfix/smtpd[25315]: input attribute name: status
Nov  6 01:30:55 webs postfix/smtpd[25315]: input attribute value: 0
Nov  6 01:30:55 webs postfix/smtpd[25315]: private/anvil: wanted attribute: (list terminator)
Nov  6 01:30:55 webs postfix/smtpd[25315]: input attribute name: (end)
Nov  6 01:30:55 webs postfix/smtpd[25315]: disconnect from unknown[91.207.60.115]
Nov  6 01:30:55 webs postfix/smtpd[25315]: master_notify: status 1
Nov  6 01:30:55 webs postfix/smtpd[25315]: connection closed
Nov  6 01:30:57 webs postfix/smtpd[25315]: proxymap stream disconnect
Nov  6 01:30:57 webs postfix/smtpd[25315]: auto_clnt_close: disconnect private/tlsmgr stream
Nov  6 01:32:35 webs postfix/smtpd[25315]: idle timeout -- exiting
Nov  6 01:32:51 webs postfix/qmgr[25255]: 967A081BC5: from=<>, size=3223, nrcpt=1 (queue active)
Nov  6 01:33:21 webs postfix/smtp[25344]: connect to WEBDOMAIN[MYIP]:25: Connection timed out
Nov  6 01:33:21 webs postfix/smtp[25344]: 967A081BC5: to=<admin@WEBDOMAIN>, relay=none, delay=1451, delays=1421/0.02/30/0, dsn=4.4.1, status=deferred (connect to WEBDOMAIN[MYIP]:25: Connection timed out)
Nov  6 01:33:57 webs postfix/master[25253]: terminating on signal 15
Nov  6 01:33:57 webs postfix/master[25485]: daemon started -- version 2.11.3, configuration /etc/postfix
Nov  6 01:48:57 webs postfix/qmgr[25487]: 369918110C: from=<root@mail.WEBDOMAIN>, size=883, nrcpt=1 (queue active)
Nov  6 01:49:27 webs postfix/smtp[25736]: connect to WEBDOMAIN[MYIP]:25: Connection timed out
Nov  6 01:49:27 webs postfix/smtp[25736]: 369918110C: to=<root@WEBDOMAIN>, orig_to=<root>, relay=none, delay=92967, delays=92937/0.01/30/0, dsn=4.4.1, status=deferred (connect to WEBDOMAIN[MYIP]:25: Connection time$
Nov  6 01:53:57 webs postfix/qmgr[25487]: A5C6F80558: from=<>, size=3311, nrcpt=1 (queue active)
Nov  6 01:53:57 webs postfix/qmgr[25487]: 4626280D09: from=<>, size=3046, nrcpt=1 (queue active)
Nov  6 01:53:57 webs postfix/qmgr[25487]: 48E7E80D36: from=<>, size=3214, nrcpt=1 (queue active)
Nov  6 01:54:27 webs postfix/smtp[25874]: connect to WEBDOMAIN[MYIP]:25: Connection timed out
Nov  6 01:54:27 webs postfix/smtp[25875]: connect to WEBDOMAIN[MYIP]:25: Connection timed out
Nov  6 01:54:27 webs postfix/smtp[25876]: connect to WEBDOMAIN[MYIP]:25: Connection timed out
Nov  6 01:54:27 webs postfix/smtp[25874]: A5C6F80558: to=<root@WEBDOMAIN>, orig_to=<root@mail.WEBDOMAIN>, relay=none, delay=242264, delays=242234/0.01/30/0, dsn=4.4.1, status=deferred (connect to WEBDOMAIN[176.9.191$
Nov  6 01:54:27 webs postfix/smtp[25875]: 4626280D09: to=<root@WEBDOMAIN>, orig_to=<root@mail.WEBDOMAIN>, relay=none, delay=179263, delays=179233/0.01/30/0, dsn=4.4.1, status=deferred (connect to WEBDOMAIN[176.9.191$
Nov  6 01:54:27 webs postfix/smtp[25876]: 48E7E80D36: to=<root@WEBDOMAIN>, orig_to=<root@mail.WEBDOMAIN>, relay=none, delay=103656, delays=103626/0.01/30/0, dsn=4.4.1, status=deferred (connect to WEBDOMAIN[176.9.191$
Nov  6 01:58:57 webs postfix/qmgr[25487]: 967A081BC5: from=<>, size=3223, nrcpt=1 (queue active)

91.207.60.115 ist eine ukrainische IP die nichts gutes im Schilde f?hrt.

 

Interessant finde ich jedoch folgendes:

Nov  6 01:30:52 webs postfix/smtpd[25315]: warning: cannot get RSA certificate from file /etc/ssl/server/WEBDOMAIN.pem: disabling TLS support
Nov  6 01:30:52 webs postfix/smtpd[25315]: warning: TLS library problem: error:02001002:system library:fopen:No such file or directory:bss_file.c:398:fopen('/etc/ssl/server/WEBDOMAIN.pem','r'):
Nov  6 01:30:52 webs postfix/smtpd[25315]: warning: TLS library problem: error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
Nov  6 01:30:52 webs postfix/smtpd[25315]: warning: TLS library problem: error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib:ssl_rsa.c:722:

unter /etc/ssl/server/ habe ich meine Zertifikate nicht liegen und auch nicht in Froxlor dorthin angegeben. Zudem habe ich auch keine .pem file die meine WEBDOMAIN im Dateinamen hat.

 

Ich verstehe momentan auch nicht warum ich via IMAP mit TLS verbinden kann.

In der standard Config ist TLS doch ausgeschaltet. Oder sehe ich das falsch?

SSL/TLS habe ich in Froxlor backend an f?r den Apache und das l?uft auch wunderbar.

Habe ich bei der Froxlor Config etwas nicht verstanden? W?re um eine Aufkl?rung sehr dankbar!

Link to comment
Share on other sites

Hi doop,

Ich habe jetzt seit Tagen versucht SSL zu deaktivieren. Es ist immer noch der Fall das SSL aktiviert ist f?r den Mailserver. Jedenfalls sieht es danach schwer aus (siehe fehler).

Nov 12 03:26:44 imap-login: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: ANY PRIVATE KEY
Nov 12 03:26:44 master: Error: service(imap-login): command startup failed, throttling for 60 secs
Nov 12 03:27:44 imap-login: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: ANY PRIVATE KEY
Nov 12 03:27:44 master: Error: service(imap-login): command startup failed, throttling for 60 secs
Nov 12 03:28:44 imap-login: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: ANY PRIVATE KEY
Nov 12 03:28:44 master: Error: service(imap-login): command startup failed, throttling for 60 secs

Config File Froxlor: Komplett ersetzt!

In den Dovecot conf.d 10-ssl.conf alles auskommentiert.

Apache l?uft nun komplett ohne SSL. auch ssl mod raus.

 

Auch wenn was mit den Zertifikateinstellungen nicht stimmt verstehe ich nicht warum trotz ausgeschaltetem SSL immer noch versucht wird per ssl zu verbinden.

Link to comment
Share on other sites

Ich denke das w?r klasse wenn du das tun k?nntest. ich schick dir mal eine pm. danke!
 

 

In der zwischenzeit habe ich 2 komplett neue installationen durchgef?hrt. in beiden installationen (die erste tarball und die zweite ausm github) funktionert der mailserver ganz und garnicht.

bekomme jedesmal die meldung: logins are disabled for "X".

 

Egal was ich mache mit der plain authentication bleibt es dabei das ich mich nicht authentifizieren kann.

 

Any thoughts?

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.



×
×
  • Create New...