Postfix mit dspam/amavis/clamav-Startproblem

[rkelly_2]

Hallo,

auf einer SuSe 9.1-Maschine soll ein Antispam-Virenfilter laufen.
Zum Einsatz kommt Suse 9.1, Postfix 2.1.1, amavis 2.04, clamav 0.83 und dspam 3.4.5

Folgendes soll erreicht werden:

virusfreie mail - smtp-postfix - smtp-amavis localhost:10024 - dspam locahost 10025 - postfix queue -smtp interner backup-server

virusmail - postfix smtp - smtp-amavis 10024 - localhost: 10026 - in quarantine verschieben - info an postmaster versenden

Alle Programme sind installiert (RPM´s bis auf dspam) und konfiguriert.
Die Config-Dateien von clamav und amvis sowie master.cf gibts auf Anfrage.

Hier die Ausgabe von postconf -n:

alias_maps = hash:/etc/aliases
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = vscan:
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = 127.0.0.1 ::1
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 10240000
mydestination = $myhostname, localhost.$mydomain
myhostname = mx01.local
mynetworks = 192.168.111.0/24, 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relay_domains = $mydestination dom1.de dom2.de
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_banner = $myhostname ESMTP ex2005
smtpd_client_restrictions =
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_use_tls = no
strict_rfc821_envelopes = no
transport_maps = regexp:etc/postfix/transport_regexp, hash:/etc/postfix/transport.domain
unknown_local_recipient_reject_code = 450

transport.domain

dom1.de smtp:192.168.111.6
dom2.com smtp:192.168.111.6
dom3.de smtp:192.168.111.6

transport_regexp

/^.*@spam.(.*)$/ dspam-add:${1}
/^.*@ham.(.*)$/ dspam-del:${1}


Letzteres bewirkt (Sollte bewirken), dass user Spam melden können (zurückschicken an Postfix(dspam) mit user@spam.dom1.de, bzw. ham (also, falls erkannten Spam) an user@hamn.dom1.de.

Wenn ich nun Postfix starte, läuft alles perfekt, bsi einige Sekunden nach dem Start folgende Meldung im log auftaucht:
May 11 14:24:57 mx01 postfix/postqueue[2782]: fatal: Cannot flush mail queue - mail system is down

Hier die mail.log:

May 11 16:23:55 mx01 postfix/postfix-script: starting the Postfix mail system
May 11 16:23:55 mx01 postfix/master[2092]: daemon started -- version 2.1.1
May 11 16:23:57 mx01 freshclam[2224]: Daemon started.
May 11 16:23:57 mx01 freshclam[2251]: freshclam daemon 0.83 (OS: linux-gnu, ARCH: i386, CPU: i686)
May 11 16:23:57 mx01 freshclam[2251]: ClamAV update process started at Wed May 11 16:23:57 2005
May 11 16:23:57 mx01 freshclam[2251]: WARNING: Your ClamAV installation is OUTDATED - please update immediately!
May 11 16:23:57 mx01 freshclam[2251]: WARNING: Local version: 0.83 Recommended version: 0.84
May 11 16:23:57 mx01 freshclam[2251]: main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, builder: tkojm)
May 11 16:23:57 mx01 clamd[2255]: Daemon started.
May 11 16:23:57 mx01 clamd[2255]: clamd daemon 0.83 (OS: linux-gnu, ARCH: i386, CPU: i686)
May 11 16:23:57 mx01 clamd[2255]: Log file size limited to 2097152 bytes.
May 11 16:23:57 mx01 clamd[2255]: Running as user vscan (UID 65, GID 101)
May 11 16:23:57 mx01 clamd[2255]: Reading databases from /var/lib/clamav
May 11 16:23:57 mx01 freshclam[2251]: daily.cvd is up to date (version: 875, sigs: 1218, f-level: 4, builder: diego)
May 11 16:23:57 mx01 freshclam[2251]: --------------------------------------
May 11 16:23:59 mx01 clamd[2255]: Protecting against 34344 viruses.
May 11 16:23:59 mx01 clamd[2255]: Unix socket file /var/lib/clamav/clamd-socket
May 11 16:23:59 mx01 clamd[2255]: Setting connection queue length to 15
May 11 16:23:59 mx01 clamd[2255]: Archive: Archived file size limit set to 10485760 bytes.
May 11 16:23:59 mx01 clamd[2255]: Archive: Recursion level limit set to 8.
May 11 16:23:59 mx01 clamd[2255]: Archive: Files limit set to 1500.
May 11 16:23:59 mx01 clamd[2255]: Archive: Compression ratio limit set to 250.
May 11 16:23:59 mx01 clamd[2255]: Archive support enabled.
May 11 16:23:59 mx01 clamd[2255]: Archive: RAR support disabled.
May 11 16:23:59 mx01 clamd[2255]: Archive: Blocking archives that exceed limits.
May 11 16:23:59 mx01 clamd[2255]: Portable Executable support enabled.
May 11 16:23:59 mx01 clamd[2255]: Detection of broken executables enabled.
May 11 16:23:59 mx01 clamd[2255]: Mail files support enabled.
May 11 16:23:59 mx01 clamd[2255]: OLE2 support enabled.
May 11 16:23:59 mx01 clamd[2255]: HTML support enabled.
May 11 16:23:59 mx01 clamd[2255]: Self checking every 600 seconds.
May 11 16:24:01 mx01 amavis[2256]: starting. /usr/sbin/amavisd at mx01 amavisd-new-20040701 (2.0), Unicode aware
May 11 16:24:01 mx01 amavis[2256]: user=, EUID: 0 (0); group=, EGID: 0 (0)
May 11 16:24:01 mx01 amavis[2256]: Perl version 5.008003
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Process Backgrounded
May 11 16:24:01 mx01 amavis[2428]: Net::Server: 2005/05/11-16:24:01 Amavis (type Net::Server::PreForkSimple) starting! pid(2428)
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Binding to UNIX socket file /var/spool/amavis/amavisd.sock using SOCK_STREAM
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Setting gid to "101 101"
May 11 16:24:01 mx01 amavis[2428]: Net::Server: Setting uid to "65"
May 11 16:24:01 mx01 amavis[2428]: Module Amavis::Conf 2.02
May 11 16:24:01 mx01 amavis[2428]: Module Archive::Tar 1.08
May 11 16:24:01 mx01 amavis[2428]: Module Archive::Zip 1.09
May 11 16:24:01 mx01 amavis[2428]: Module BerkeleyDB 0.25
May 11 16:24:01 mx01 amavis[2428]: Module Compress::Zlib 1.33
May 11 16:24:01 mx01 amavis[2428]: Module Convert::TNEF 0.17
May 11 16:24:01 mx01 amavis[2428]: Module Convert::UUlib 1.0
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Entity 5.404
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Parser 5.406
May 11 16:24:01 mx01 amavis[2428]: Module MIME::Tools 5.411
May 11 16:24:01 mx01 amavis[2428]: Module Mail::Header 1.60
May 11 16:24:01 mx01 amavis[2428]: Module Mail::Internet 1.60
May 11 16:24:01 mx01 amavis[2428]: Module Net::Cmd 2.24
May 11 16:24:01 mx01 amavis[2428]: Module Net::SMTP 2.26
May 11 16:24:01 mx01 amavis[2428]: Module Net::Server 0.87
May 11 16:24:01 mx01 amavis[2428]: Module Time::HiRes 1.52
May 11 16:24:01 mx01 amavis[2428]: Module Unix::Syslog 0.100
May 11 16:24:01 mx01 amavis[2428]: Lookup::SQL code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: Lookup::LDAP code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: AMCL-in protocol code loaded
May 11 16:24:01 mx01 amavis[2428]: SMTP-in protocol code loaded
May 11 16:24:01 mx01 amavis[2428]: ANTI-VIRUS code loaded
May 11 16:24:01 mx01 amavis[2428]: ANTI-SPAM code NOT loaded
May 11 16:24:01 mx01 amavis[2428]: Unpackers code loaded
May 11 16:24:01 mx01 amavis[2428]: Found $file at /usr/bin/file
May 11 16:24:01 mx01 amavis[2428]: Found $arc at /usr/bin/arc
May 11 16:24:01 mx01 amavis[2428]: Found $gzip at /usr/bin/gzip
May 11 16:24:01 mx01 amavis[2428]: Found $bzip2 at /usr/bin/bzip2
May 11 16:24:01 mx01 amavis[2428]: No $lzop, not using it
May 11 16:24:01 mx01 amavis[2428]: Found $lha at /usr/bin/lha
May 11 16:24:01 mx01 amavis[2428]: Found $unarj at /usr/bin/unarj
May 11 16:24:01 mx01 amavis[2428]: Found $uncompress at /usr/bin/uncompress
May 11 16:24:01 mx01 amavis[2428]: No $unfreeze, not using it
May 11 16:24:01 mx01 amavis[2428]: Found $unrar at /usr/bin/unrar
May 11 16:24:01 mx01 amavis[2428]: Found $zoo at /usr/bin/zoo
May 11 16:24:01 mx01 amavis[2428]: Found $cpio at /usr/bin/cpio
May 11 16:24:01 mx01 amavis[2428]: Found $rpm2cpio at /usr/bin/rpm2cpio
May 11 16:24:01 mx01 amavis[2428]: Found $cabextract at /usr/bin/cabextract
May 11 16:24:01 mx01 amavis[2428]: No $dspam, not using it
May 11 16:24:02 mx01 amavis[2428]: Using internal av scanner code for (primary) ClamAV-clamd
May 11 16:24:02 mx01 amavis[2428]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
May 11 16:24:02 mx01 amavis[2428]: Creating cache and SNMP db in /var/spool/amavis/db/; BerkeleyDB 0.25, V4.2
May 11 14:24:57 mx01 postfix/postqueue[2782]: fatal: Cannot flush mail queue - mail system is down
May 11 16:27:30 mx01 postfix/smtpd[2816]: connect from localhost[127.0.0.1]
May 11 16:27:36 mx01 postfix/smtpd[2816]: disconnect from localhost[127.0.0.1]

Hier ganz unten habe ich mmich testweise per telnet auf localhost connected, der smtpd läuft.

Leider habe ich bei den Postfix-Optionen keine weitern zum Log-Mir-Mehr gefunden, um festzustellen, wieso das System wieder down ist.

Kann mir jemand einen Tip geben, wo ich ansetzen kann?

Ich danke Euch für Eure Hilfe.

rkelly_2

[Stormbringer]

Hi,

zunächst etwas grundlegendes: keine domain .local nutzen!
Es gibt RFC 2606, welche festlegt, welche domain Namen erst gar nicht geroutet werden - gerade bei der SuSE Implementierung kann dies ausgesprochen wichtig sein (dazu gibt, wenn ich mich nicht irre, auch einen Artikel in der SDB).
Ungültige TLDs, und damit generell nicht routebare, sind:
.example
.invalid
.localhost
.test

Nun soll es doch bestimmt wie folgt laufen (default):
Email -> Annahme über Port 25 -> Weitergabe an Port 10024 (amavis) -> Rückgabe an postfix Port 10025.
Da Du nun auf 10025 dspam laufen hast, mußt Du eigentlich postfix mitteilen, daß er nicht mehr auf 10025 lauscht (in der master.cf).

Läuft denn die dspam Datenbank?

Gruß