Dovecot Postfix clamd помогите разобраться

[anton4]

Помогите разобраться Меня интересуют две ошибки в логах.
Первая из них:

Код: Выделить всё

Jun 11 12:37:29 s1 postfix/smtp[2828]: connect to 127.0.0.1[127.0.0.1]:10025: Connection refused
Jun 11 12:37:30 s1 postfix/smtp[2829]: connect to 127.0.0.1[127.0.0.1]:10025: Connection refused
Jun 11 12:37:30 s1 postfix/smtp[2828]: 1E4652282D: to=<f****20@gmail.com>, relay=none, delay=528, delays=528/0.02/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10025: Connection refused)
Jun 11 12:37:30 s1 postfix/smtp[2829]: 0DAB32282C: to=<*****>, relay=none, delay=319, delays=319/0.04/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10025: Connection refused)
Jun 11 12:37:30 s1 postfix/bounce[2830]: warning: [built-in]: zero result in delay template conversion of parameter "delay_warning_time_hours"
Jun 11 12:37:30 s1 postfix/bounce[2830]: warning: please reduce time unit "hours" of "delay_warning_time_hours" in delay template
Jun 11 12:37:30 s1 postfix/bounce[2830]: warning: for instructions see the bounce(5) manual

Тут в принципе понятно куда копать, какое-то несоответствие порта кламда и постфикса, но вторая ошибка ставит в тупик вот что бывает когда почта с внешнего ящика пытается пробиться:

Код: Выделить всё

Jun 11 12:49:31 s1 postfix/smtpd[1315]: NOQUEUE: reject: RCPT from ey-out-2122.google.com[74.125.78.25]: 451 4.3.5 Server configuration problem; from=<f*****20@gmail.com> to=<anton4@****.ru> proto=ESMTP helo=<ey-out-2122.google.com>
Jun 11 12:49:31 s1 postfix/smtpd[1315]: disconnect from ey-out-2122.google.com[74.125.78.25]
Jun 11 12:49:49 s1 postfix/smtpd[1570]: connect from line234-32.adsl.kirov.ru[89.254.223.234]
Jun 11 12:49:49 s1 postfix/smtpd[1570]: NOQUEUE: reject: RCPT from line234-32.adsl.kirov.ru[89.254.223.234]: 554 5.7.1 <line234-32.adsl.kirov.ru[89.254.223.234]>: Client host rejected: access denied [3]; from=<seasoningskk34@eko-baby.ru> to=<ibytinn@***.ru> proto=ESMTP helo=<kirov.ru>
Jun 11 12:49:49 s1 postfix/smtpd[1570]: NOQUEUE: reject: RCPT from line234-32.adsl.kirov.ru[89.254.223.234]: 554 5.7.1 <line234-32.adsl.kirov.ru[89.254.223.234]>: Client host rejected: access denied [3]; from=<seasoningskk34@eko-baby.ru> to=<ibytinnn@****.ru> proto=ESMTP helo=<kirov.ru>
Jun 11 12:49:59 s1 postfix/smtpd[1570]: too many errors after RCPT from line234-32.adsl.kirov.ru[89.254.223.234]
Jun 11 12:49:59 s1 postfix/smtpd[1570]: disconnect from line234-32.adsl.kirov.ru[89.254.223.234]
Jun 11 12:49:59 s1 postfix/smtpd[1315]: connect from line234-32.adsl.kirov.ru[89.254.223.234]
Jun 11 12:50:00 s1 postfix/smtpd[1315]: NOQUEUE: reject: RCPT from line234-32.adsl.kirov.ru[89.254.223.234]: 554 5.7.1 <line234-32.adsl.kirov.ru[89.254.223.234]>: Client host rejected: access denied [3]; from=<waifingkc91@eggdrop.ru> to=<ibytinn@*****.ru> proto=ESMTP helo=<kirov.ru>
Jun 11 12:50:00 s1 postfix/smtpd[1315]: NOQUEUE: reject: RCPT from line234-32.adsl.kirov.ru[89.254.223.234]: 554 5.7.1 <line234-32.adsl.kirov.ru[89.254.223.234]>: Client host rejected: access denied [3]; from=<waifingkc91@eggdrop.ru> to=<ibytinnn@*****.ru> proto=ESMTP helo=<kirov.ru>
Jun 11 12:50:07 s1 postfix/smtpd[1570]: connect from unknown[192.168.2.77]

Ошибка проявляет себя как с кламдом Так и без него

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[skeletor]

Что выводит

Код: Выделить всё

#sockstat | grep 10025

?

[anton4]

Ничего не выводит

[skeletor]

Ну дык чему тогда удивляться

Код: Выделить всё

connect to 127.0.0.1[127.0.0.1]:10025: Connection refused

?
У вас в конфиге идёт заворот на проверку вирусов на сокет, который никто не слушает.
Давайте конфиг postfix'a

[anton4]

cat /usr/local/etc/clamsmtpd.conf

Код: Выделить всё

OutAddress: 10025
MaxConnections: 200
TimeOut: 180
KeepAlives: 0
Listen: 127.0.0.1:10023
ClamAddress: /var/run/clamav/clamd
Header: X-Virus-Scanned: ClamAV using ClamSMTP
TempDirectory: /tmp
Action: drop
Quarantine: on
User: clamav
VirusAction: /var/script/virus_action.sh

Код: Выделить всё

 ps -ax |grep clamsmtpd
 2297  ??  Is     0:00.00 /usr/local/sbin/clamsmtpd -f /usr/local/etc/clamsmtpd.conf -p /var/run/

[skeletor]

Я вообще-то ожидал конфиг postfix'a

[anton4]

postconf -n

Код: Выделить всё

address_verify_map = hash:/var/lib/postfix/verify_map
alias_database = hash:/usr/local/etc/aliases
alias_maps = hash:/usr/local/etc/aliases
append_dot_mydomain = no
biff = no
bounce_queue_lifetime = 25m
canonical_maps = hash:/usr/local/etc/postfix/domain
command_directory = /usr/local/sbin
config_directory = /usr/local/etc/postfix
content_filter = scan:127.0.0.1:10025
daemon_directory = /usr/local/libexec/postfix
data_directory = /var/db/postfix
delay_warning_time = 5m
disable_vrfy_command = yes
header_checks = pcre:/usr/local/etc/postfix/headers_check
inet_interfaces = all
mailbox_size_limit = 0
maps_rbl_domains = sbl-xbl.spamhaus.org bl.spamcop.net t1.dnsbl.net.au dnsbl.sorbs.net
maximal_backoff_time = 10m
maximal_queue_lifetime = 30m
minimal_backoff_time = 4m
mydestination = localhost
mydomain = домен
myhostname = хост
mynetworks = 192.168.2.0/24, 192.168.7.0/24, localhost, 195.68.151.27, 62.113.86.0/24
parent_domain_matches_subdomains =
queue_directory = /var/spool/postfix
receive_override_options = no_address_mappings
recipient_delimiter = +
relay_domains =
relay_domains_reject_code = 554
relayhost =
show_user_unknown_table_name = no
smtp_helo_name = 
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $mydomain ESMTP $mail_name
smtpd_client_restrictions = permit_mynetworks,    reject_unknown_client_hostname,    regexp:/usr/local/etc/postfix/bad_fqdn,    reject_rbl_client sbl-xlb.spamhaus.org,    reject_rbl_client bl.spamcop.net,    reject_rbl_client t1.dnsbl.net.au,    reject_rbl_client dnsbl.sorbs.net,    permit
smtpd_data_restrictions = permit_mynetworks,    reject_multi_recipient_bounce,    reject_unauth_pipelining
smtpd_delay_reject = yes
smtpd_error_sleep_time = 10
smtpd_etrn_restrictions = permit_mynetworks, reject
smtpd_hard_error_limit = 2
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,    reject_invalid_helo_hostname,    reject_unknown_helo_hostname,    reject_non_fqdn_helo_hostname,    check_helo_access hash:/usr/local/etc/postfix/helo_access,    regexp:/usr/local/etc/postfix/bad_fqdn,    reject_rhsbl_helo sbl-xbl.spamhaus.org,    reject_rhsbl_helo bl.spamcop.net,    reject_rhsbl_helo t1.dnsbl.net.au,    reject_rhsbl_helo dnsbl.sorbs.net,    permit
smtpd_recipient_restrictions = reject_unlisted_recipient,    permit_mynetworks,    hash:/usr/local/etc/postfix/to_all,    reject_unauth_destination,    reject_unknown_recipient_domain,    reject_non_fqdn_recipient,    reject_unverified_recipient,    permit
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = yes
smtpd_sender_restrictions = permit_mynetworks,    sleep 5,    reject_unauth_destination,    reject_unknown_client,    reject_unknown_address,    reject_unknown_sender_domain,    reject_non_fqdn_sender,    permit
smtpd_soft_error_limit = 2
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes
strict_mime_encoding_domain = yes
strict_rfc821_envelopes = yes
unknown_address_reject_code = 550
unknown_client_reject_code = 530
unknown_hostname_reject_code = 530
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/usr/local/etc/postfix/aliases
virtual_gid_maps = static:5000
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = мои домены
virtual_mailbox_maps = hash:/usr/local/etc/postfix/vmaps
virtual_minimum_uid = 1000
virtual_uid_maps = static:5000

[skeletor]

А master.cf?

[anton4]

да я нашел ошибку в main.cf 10025 на 10026 нужно заменить