Ubuntu-fr

B@rtounet

Probleme spf et postfix

Bonjour,
je viens d'essayer d'implémenter les verifications spf sur un nouveau serveur dédibox, mais j'ai pas mal de probleme...

voici a chaque mails les logs d'erreurs.

Apr 19 16:10:22 server postfix/master[32733]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
Apr 19 16:11:22 server postfix/smtpd[32752]: fatal: dict_open: unsupported dictionary type: policy-spf:  Is the postfix-policy-spf package installed?
Apr 19 16:11:23 server postfix/master[32733]: warning: process /usr/lib/postfix/smtpd pid 32752 exit status 1
Apr 19 16:11:23 server postfix/master[32733]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling

mon postconf -n

root@server:/usr/lib/postfix# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/postfix/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:9025
home_mailbox = Maildir/
inet_interfaces = all
mailbox_command = /usr/bin/procmail -Y -a $DOMAIN
mailbox_size_limit = 0
mydestination = smtp.info16.fr, serveur.info16.fr, localhost.kimsufi.com, info16.fr, localhost, bartounet.no-ip.org
myhostname = smtp.info16.fr
mynetworks = 127.0.0.0/8, 88.191.75.75, 82.240.218.248
myorigin = /etc/mailname
recipient_delimiter = +
sender_canonical_maps = hash:/etc/postfix/sender_canonical
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname
smtpd_client_restrictions = permit_mynetworks, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, reject_rbl_client list.dsbl.org, reject_rbl_client dnsbl.ahbl.org, reject_rbl_client ircbl.ahbl.org, reject_rbl_client virbl.dnsbl.bit.nl, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client blackholes.uceb.org, reject_rbl_client dnsbl-1.uceprotect.net, reject_rbl_client dnsbl-2.uceprotect.net, permit
smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, policy-spf:private/policy, check_policy_service unix:private/policy, check_policy_service inet:127.0.0.1:60000, check_policy_service inet:127.0.0.1:12525, permit
smtpd_sender_restrictions = reject_unknown_sender_domain, reject_non_fqdn_sender, permit_mynetworks
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = hash:/etc/postfix/virtual

Mon master.cf

root@server:/usr/lib/postfix# vi /etc/postfix/master.cf
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       -       -       -       smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay     unix  -       -       -       -       -       smtp
        -o fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}

policy  unix  -       n       n       -       -       spawn
        user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-spf-perl

# Interface avec l'anti-virus
#
smtp-amavis        unix   -        -      n      -        2        smtp
        -o smtp_data_done_timeout=1200
        -o disable_dns_lookups=yes

# Mise en place d'une ecoute suppléntaire sur le port 10025 en localhost
#uniquement pour reception des messages renvoyéapres analyse par l'anti-virus

127.0.0.1:10025    inet   n       -      n     -        -        smtpd
        -o content_filter=
        -o local_recipient_maps=
        -o relay_recipient_maps=
        -o smtpd_restriction_classes=
        -o smtpd_client_restrictions=
        -o smtpd_helo_restrictions=
        -o smtpd_sender_restrictions=
        -o smtpd_recipient_restrictions=permit_mynetworks,reject
        -o mynetworks=127.0.0.0/8
        -o strict_rfc821_envelopes=yes

si vous avez une idée: j'ai suivi ce tuto
http://howtoforge.com/postfix_spf

---

http://blog.info16.fr

Uggy

Re : Probleme spf et postfix

Is the postfix-policy-spf package installed?

?

ls -la /usr/lib/postfix/policyd-spf-perl

B@rtounet

Re : Probleme spf et postfix

Résolu désolé...
policy-spf:private/policy, check_policy_service unix:private/policy
un de trop

---

http://blog.info16.fr