KeyHelp Community

Code: Select all

/var/log/mail.log

2024-04-17T13:20:32.391172+02:00 serverx postfix/smtpd[1635223]: warning: missing attribute action in input from private/policy
2024-04-17T13:20:32.391318+02:00 serverx postfix/smtpd[1635223]: warning: problem talking to server private/policy: Application error
2024-04-17T13:20:32.391358+02:00 serverx postfix/smtpd[1635223]: NOQUEUE: reject: RCPT from mail-ej1-f50.google.com[209.85.218.50]: 451 4.3.5 <user@mail.at>: Recipient address rejected: Server configuration problem; from=<me@mymail.org> to=<user@mail.at> proto=ESMTP helo=<mail-ej1-f50.google.com>
2024-04-17T13:20:32.391496+02:00 serverx postfix/smtpd[1635223]: using backwards-compatible default setting smtpd_relay_before_recipient_restrictions=no to reject recipient "user@mail.at" from client "mail-ej1-f50.google.com[209.85.218.50]"
2024-04-17T13:20:32.400946+02:00 serverx postfix/spawn[1635103]: warning: command /usr/bin/policyd-spf exit status 1
2024-04-17T13:20:32.415403+02:00 serverx postfix/smtpd[1635223]: disconnect from mail-ej1-f50.google.com[209.85.218.50] ehlo=2 starttls=1 mail=1 rcpt=0/1 bdat=0/1 quit=1 commands=5/7

Code: Select all

#postfix check

postfix: Postfix is using backwards-compatible default settings
postfix: See http://www.postfix.org/COMPATIBILITY_README.html for details
postfix: To disable backwards compatibility use "postconf compatibility_level=3.6" and "postfix reload"
postfix/postfix-script: warning: /var/spool/postfix/etc/localtime and /etc/localtime differ
postfix/postfix-script: warning: /var/spool/postfix/etc/ssl/certs/GTS_Root_R1.pem and /etc/ssl/certs/GTS_Root_R1.pem differ
postfix/postfix-script: warning: /var/spool/postfix/etc/ssl/certs/GTS_Root_R2.pem and /etc/ssl/certs/GTS_Root_R2.pem differ
postfix/postfix-script: warning: /var/spool/postfix/etc/ssl/certs/GTS_Root_R4.pem and /etc/ssl/certs/GTS_Root_R4.pem differ
postfix/postfix-script: warning: /var/spool/postfix/etc/ssl/certs/GTS_Root_R3.pem and /etc/ssl/certs/GTS_Root_R3.pem differ
postfix/postfix-script: warning: /var/spool/postfix/etc/ssl/certs/GlobalSign_ECC_Root_CA_-_R4.pem and /etc/ssl/certs/GlobalSign_ECC_Root_CA_-_R4.pem differ
postfix/postfix-script: warning: /var/spool/postfix/lib/x86_64-linux-gnu/libnss_systemd.so.2 and /lib/x86_64-linux-gnu/libnss_systemd.so.2 differ
postfix/postfix-script: warning: /var/spool/postfix/lib/x86_64-linux-gnu/libgcc_s.so.1 and /lib/x86_64-linux-gnu/libgcc_s.so.1 differ

Code: Select all

warning: command /usr/bin/policyd-spf exit status 1

Code: Select all

systemctl status rspamd.service

Code: Select all

free -mh

Code: Select all

# systemctl status rspamd.service
● rspamd.service - rapid spam filtering system
     Loaded: loaded (/lib/systemd/system/rspamd.service; enabled; preset: enabled)
     Active: active (running) since Wed 2024-04-17 13:27:30 CEST; 24h ago
       Docs: https://rspamd.com/doc/
   Main PID: 936 (rspamd)
      Tasks: 8 (limit: 77119)
     Memory: 262.7M
        CPU: 2min 2.206s
     CGroup: /system.slice/rspamd.service
             ├─ 936 "rspamd: main process; 0.1 msg/sec, 0.0 msg/sec spam, 0.1 msg/sec ham; 0.00s avg processing time"
             ├─1675 "rspamd: rspamd_proxy process (localhost:11332)"
             ├─1676 "rspamd: controller process (localhost:11334)"
             ├─1677 "rspamd: normal process (localhost:11333)"
             ├─1678 "rspamd: normal process (localhost:11333)"
             ├─1679 "rspamd: normal process (localhost:11333)"
             ├─1680 "rspamd: normal process (localhost:11333)"
             └─1681 "rspamd: hs_helper process"

Apr 17 13:27:30 server9.inntal.net systemd[1]: Started rspamd.service - rapid spam filtering system.
Apr 17 13:27:30 server9.inntal.net rspamd[936]: 2024-04-17 13:27:30 #936(main) <9f2e38>; main; main: rspamd 3.8.4 is loading configuration, build id: release
Apr 18 06:24:52 serverx.inntal.net systemd[1]: rspamd.service: Sent signal SIGUSR1 to main process 936 (rspamd) on client request.
Apr 18 06:24:52 serverx.inntal.net systemd[1]: rspamd.service: Sending signal SIGUSR1 to process 1675 (rspamd) on client request.
Apr 18 06:24:52 serverx.inntal.net systemd[1]: rspamd.service: Sending signal SIGUSR1 to process 1676 (rspamd) on client request.
Apr 18 06:24:52 serverx.inntal.net systemd[1]: rspamd.service: Sending signal SIGUSR1 to process 1677 (rspamd) on client request.
Apr 18 06:24:52 serverx.inntal.net systemd[1]: rspamd.service: Sending signal SIGUSR1 to process 1678 (rspamd) on client request.
Apr 18 06:24:52 serverx.inntal.net systemd[1]: rspamd.service: Sending signal SIGUSR1 to process 1679 (rspamd) on client request.
Apr 18 06:24:52 serverx.inntal.net systemd[1]: rspamd.service: Sending signal SIGUSR1 to process 1680 (rspamd) on client request.
Apr 18 06:24:52 serverx.inntal.net systemd[1]: rspamd.service: Sending signal SIGUSR1 to process 1681 (rspamd) on client request.

# free -mh
               total        used        free      shared  buff/cache   available
Mem:            62Gi        12Gi       7.6Gi       151Mi        49Gi        50Gi
Swap:             0B          0B          0B

Code: Select all

cat /etc/postfix/main.cf

Code: Select all

# Virtual domains, users, and aliases
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf




# Concerning the peer
smtpd_soft_error_limit = 5
smtpd_error_sleep_time = 10s

smtpd_helo_required = yes

smtpd_client_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_multi_recipient_bounce,
    reject_unauth_destination

smtpd_helo_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    # check_helo_access regexp:/etc/postfix/helo_access,
    reject_invalid_hostname,
    reject_non_fqdn_hostname

# Concerning the envelope
smtpd_sender_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_non_fqdn_sender,
    reject_unauth_destination,
    reject_unknown_sender_domain,
    reject_unknown_client,
    reject_non_fqdn_hostname

smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unauth_pipelining, reject_non_fqdn_recipient, check_policy_service unix:private/policy

smtpd_recipient_limit = 50
smtpd_recipient_overshoot_limit = 50

# Header checks
header_checks = regexp:/etc/postfix/header_checks

# Rspamd
milter_protocol = 6
milter_default_action = accept
smtpd_milters = inet:localhost:11332
non_smtpd_milters = inet:localhost:11332
tls_server_sni_maps = hash:/etc/postfix/postfix-sni.conf
smtpd_forbid_bare_newline = yes
smtpd_forbid_bare_newline_exclusions = $mynetworks

Code: Select all

# Python SPF Policy
policy  unix  -       n       n       -       -       spawn
        user=nobody argv=/usr/bin/policyd-spf /etc/postfix-policyd-spf-python/policyd-spf.conf

Code: Select all

warning: missing attribute action in input from private/policy
warning: command /usr/bin/policyd-spf exit status 1