Postfix+Open relay

[juantux]

Este es un extracto del LOG:

Código:

Dec 18 17:22:57 serverdlj postfix/cleanup[32383]: 42CEE5E664B: message-id=<[email protected]>
Dec 18 17:22:57 serverdlj postfix/cleanup[32259]: 688B05E6E26: message-id=<[email protected]>
Dec 18 17:22:59 serverdlj postfix/cleanup[32248]: 643B15E7044: message-id=<[email protected]>
Dec 18 17:23:00 serverdlj postfix/cleanup[32371]: 9E1405E7357: message-id=<[email protected]>
Dec 18 17:23:01 serverdlj postfix/cleanup[32248]: D7AAB5E4EF3: message-id=<[email protected]>

Por lo que he leido, creo que estan usando el servidor como open relay, tal vez debido a lo mismo los correos se demoran en llegar a su destino, y cuando envio un mail a mi dominio, no rebota pero tampoco llega a destino.

Haber si pueden darme alguna luz, gracias.

[monoswim]

Le pusiste SASL autenticación ?

para que los que envían deban tener el nombre de usuario y la contraseña de la cuenta para enviar...

te dejo un link http://www.postfix.org/SASL_README.html

Espero que te sirva

Saludos

[juantux]

Si tiene autenticacion SASL.

smtpd.conf

Código:

pwcheck_method: auxprop
auxprop_plugin: sql
sql_engine: pgsql
mech_list: plain LOGIN
sql_hostnames: localhost
sql_user: XXuser
sql_passwd: XXpass
sql_database: mail
sql_select: SELECT password FROM mailbox WHERE username = '%u@%r'

Te adjunto un postconf -n, tal vez existe algun error ahi..

Código:

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
disable_vrfy_command = yes
inet_interfaces = all
inet_protocols = all
invalid_hostname_reject_code = 554
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
multi_recipient_bounce_reject_code = 554
mydestination = dataserv.cl, localhost, localhost.localdomain
myhostname = serverdlj.dataserv.cl
mynetworks = 127.0.0.0/8, 192.168.0.0/24
myorigin = /etc/mailname
non_fqdn_reject_code = 554
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains                       $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps                         $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps                      $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
recipient_delimiter = +
relay_domains_reject_code = 554
relayhost =
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_restrictions = permit_mynetworks,                          permit_sasl_authenticated,                          reject_unauth_destination,                               reject_invalid_hostname,                                permit
smtpd_enforce_tls = no
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks,                               permit_sasl_authenticated,                  reject_unauth_destination,                               reject_invalid_hostname,                                reject_unknown_recipient_domain,                             reject_unauth_pipelining,                               reject_rbl_client multi.uribl.com,                           reject_rbl_client dsn.rfc-ignorant.org,                         reject_rbl_client dul.dnsbl.sorbs.net,                               reject_rbl_client list.dsbl.org,                                reject_rbl_client sbl-xbl.spamhaus.org,                              reject_rbl_client bl.spamcop.net,                               reject_rbl_client dnsbl.sorbs.net,                           reject_rbl_client cbl.abuseat.org,                              reject_rbl_client combined.rbl.msrbl.net,                            reject_rbl_client rabl.nuclearelephant.com,                 check_policy_service inet:127.0.0.1:60000,                               permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
transport_maps = proxy:pgsql:/etc/postfix/pgsql/pgsql-virtual_transports.cf
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_local_recipient_reject_code = 554
unknown_relay_recipient_reject_code = 554
unknown_virtual_alias_reject_code = 554
unknown_virtual_mailbox_reject_code = 554
unverified_recipient_reject_code = 554
unverified_sender_reject_code = 554
virtual_alias_domains =
virtual_alias_maps = proxy:pgsql:/etc/postfix/pgsql/pgsql-virtual_forwardings.cf,                       proxy:pgsql:/etc/postfix/pgsql/pgsql-virtual_email2email.cf
virtual_mailbox_base = /
virtual_mailbox_domains = proxy:pgsql:/etc/postfix/pgsql/pgsql-virtual_domains.cf
virtual_mailbox_maps = proxy:pgsql:/etc/postfix/pgsql/pgsql-virtual_mailboxes.cf

Ojala puedas darme una mano, gracias.

[AleSanchez]

Ese log no está completo, cleanup es sólo uno de los pasos por los que un mail pasa a través de Postfix.
¿Porque llegas a la conclusion de que estan haciendo relay? Fijate con el Log completo si esos emails son simplemente emails válidos de tu red.
Para seguir todo el camino (o la primera parte si usas amavis) podes usar, segun tu ejemplo, lo siguiente:

Código:

cat /var/log/mail/info | grep 42CEE5E664B

Con cuidado de cambiar la ubicacion del log por la de tu sistema, y el ID del mail por el que queres saber que pasó.

Ejemplo:

Código:

Dec 17 08:33:34 mail postfix/smtpd[11385]: C3300D8003: client=host044.bpsinternet.com.br[209.162.188.196]
Dec 17 08:33:35 mail postfix/cleanup[11623]: C3300D8003: message-id=<[email protected]>
Dec 17 08:33:35 mail postfix/qmgr[1055]: C3300D8003: from=<[email protected]>, size=9373, nrcpt=1 (queue active)
Dec 17 08:33:44 mail postfix/lmtp[11273]: C3300D8003: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10025, delay=9.5, delays=0.87/0/0/8.6, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=10155-09, from MTA([127.0.0.1]:10026): 250 2.0.0 Ok: queued as EC700D8001)
Dec 17 08:33:44 mail postfix/qmgr[1055]: C3300D8003: removed

Saludos.