From: Bob Tito (no email)
Date: Mon Dec 01 2003 - 04:24:02 EST
--On maandag 1 december 2003 11:50 +0300 Aleksey Perov <>
wrote:
> Wietse Venema wrote:
>
>> Luca Berra:
>> > hello, i am getting some spam with an envelope sender with an empty
>> > localpart
>> > how comes postfix accepts such stuff?
>>
>> You didn't turn on the stricted RFC821 address syntax.
>>
>
> I have strict_rfc821_envelopes=yes, but this does not help:
Try /^@/ REJECT in header_checks ..
Regards, Bob
>
> root at guamoko root# telnet 0 25
> Trying 0.0.0.0...
> Connected to 0.
> Escape character is '^]'.
> 220 guamoko ESMTP Postfix 2.0.16
> helo 1
> 250 guamoko
> mail from:<@sura.ru>
> 250 Ok
> rcpt to:<algardo at guamoko>
> 250 Ok
> data
> 354 End data with <CR><LF>.<CR><LF>
> To: algardo at guamoko
> Subject: 1
>
> 1
> .
> 250 Ok: queued as 9217A1F858
> quit
> 221 Bye
> Connection closed by foreign host.
>
>
>
> The message delivered:
>
> ===8<===
> Return-Path: <""@sura.ru>
> X-Original-To: algardo at guamoko
> Delivered-To: algardo at guamoko
> Received: from 1 (localhost.localdomain [127.0.0.1])
> by guamoko (Postfix) with SMTP id 9217A1F858
> for <algardo at guamoko>; Mon, 1 Dec 2003 11:25:10 +0300 (MSK)
> To: algardo at guamoko
> Subject: 1
> Message-Id: <20031201082510 dot 9217A1F858 at guamoko>
> Date: Mon, 1 Dec 2003 11:25:10 +0300 (MSK)
> From: ""@sura.ru
>
> 1
>
> ===8<===
>
>
>
> postconf -n:
>
> alias_database = hash:/etc/postfix/aliases
> alias_maps = hash:/etc/postfix/aliases
> append_dot_mydomain = no
> biff = no
> command_directory = /usr/sbin
> config_directory = /etc/postfix
> daemon_directory = /usr/libexec/postfix
> debug_peer_level = 2
> debug_peer_list = 127.0.0.1
> default_database_type = btree
> hash_queue_depth = 1
> local_recipient_maps = $alias_maps unix:passwd.byname
> mail_owner = postfix
> mailbox_command = /usr/bin/maildrop
> mailq_path = /usr/sbin/mailq
> manpage_directory = /usr/share/man
> myhostname = guamoko
> newaliases_path = /usr/sbin/newaliases
> notify_classes = bounce,resource,software
> queue_directory = /var/spool/postfix
> readme_directory = /usr/share/doc/postfix/readme
> sample_directory = /usr/share/doc/postfix/samples
> sendmail_path = /usr/sbin/sendmail
> setgid_group = postdrop
> smtpd_banner = $myhostname ESMTP $mail_name $mail_version
> smtpd_recipient_restrictions = reject_unknown_sender_domain
> reject_unknown_recipient_domain check_recipient_access
> btree:/etc/postfix/acl/rcpt permit_mynetworks reject_unauth_destination
> strict_rfc821_envelopes = yes
>
>
> Logs:
>
> Dec 1 11:24:57 guamoko postfix/smtpd[7821]: connect from
> localhost.localdomain[127.0.0.1] Dec 1 11:24:57 guamoko
> postfix/smtpd[7821]: > localhost.localdomain[127.0.0.1]: 220 guamoko
> ESMTP Postfix 2.0.16 Dec 1 11:24:57 guamoko postfix/smtpd[7821]:
> watchdog_pat: 0x8085e20 Dec 1 11:25:00 guamoko postfix/smtpd[7821]: <
> localhost.localdomain[127.0.0.1]: helo 1 Dec 1 11:25:00 guamoko
> postfix/smtpd[7821]: > localhost.localdomain[127.0.0.1]: 250 guamoko Dec
> 1 11:25:00 guamoko postfix/smtpd[7821]: watchdog_pat: 0x8085e20 Dec 1
> 11:25:10 guamoko postfix/smtpd[7821]: < localhost.localdomain[127.0.0.1]:
> mail from:<@sura.ru> Dec 1 11:25:10 guamoko postfix/smtpd[7821]:
> extract_addr: input: <@sura.ru> Dec 1 11:25:10 guamoko
> postfix/smtpd[7821]: extract_addr: result: @sura.ru Dec 1 11:25:10
> guamoko postfix/smtpd[7821]: fsspace: .: block size 4096, blocks free
> 187559 Dec 1 11:25:10 guamoko postfix/smtpd[7821]: smtpd_check_size:
> blocks 4096 avail 187559 min_free 0 size 0 Dec 1 11:25:10 guamoko
> postfix/smtpd[7821]: connect to subsystem public/cleanup Dec 1 11:25:10
> guamoko postfix/smtpd[7821]: public/cleanup socket: wanted attribute:
> queue_id Dec 1 11:25:10 guamoko postfix/smtpd[7821]: input attribute
> name: queue_id Dec 1 11:25:10 guamoko postfix/smtpd[7821]: input
> attribute value: 9217A1F858 Dec 1 11:25:10 guamoko postfix/smtpd[7821]:
> public/cleanup socket: wanted attribute: (list terminator) Dec 1
> 11:25:10 guamoko postfix/smtpd[7821]: input attribute name: (end) Dec 1
> 11:25:10 guamoko postfix/smtpd[7821]: send attr flags = 2 Dec 1 11:25:10
> guamoko postfix/smtpd[7821]: 9217A1F858:
> client=localhost.localdomain[127.0.0.1] Dec 1 11:25:10 guamoko
> postfix/smtpd[7821]: > localhost.localdomain[127.0.0.1]: 250 Ok Dec 1
> 11:25:10 guamoko postfix/smtpd[7821]: watchdog_pat: 0x8085e20 Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: < localhost.localdomain[127.0.0.1]:
> rcpt to:<algardo at guamoko> Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> extract_addr: input: <algardo at guamoko> Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: extract_addr: result: algardo at guamoko Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: generic_checks: START Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: generic_checks:
> name=reject_unknown_sender_domain Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: reject_unknown_address: @sura.ru Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: connect to subsystem private/rewrite Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: send attr request = rewrite Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: send attr rule = canonicalize Dec
> 1 11:25:25 guamoko postfix/smtpd[7821]: send attr address = ""@sura.ru
> Dec 1 11:25:25 guamoko postfix/smtpd[7821]: private/rewrite socket:
> wanted attribute: address Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> input attribute name: address Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: input attribute value: ""@sura.ru Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: private/rewrite socket: wanted attribute:
> (list terminator) Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input
> attribute name: (end) Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> rewrite_clnt: canonicalize: ""@sura.ru -> ""@sura.ru Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: send attr request = resolve Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: send attr address = @sura.ru Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: private/rewrite socket: wanted attribute:
> transport Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input attribute
> name: transport Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input
> attribute value: smtp Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> private/rewrite socket: wanted attribute: nexthop Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: input attribute name: nexthop Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: input attribute value: sura.ru Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: private/rewrite socket: wanted
> attribute: recipient Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input
> attribute name: recipient Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> input attribute value: @sura.ru Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: private/rewrite socket: wanted attribute: flags Dec
> 1 11:25:25 guamoko postfix/smtpd[7821]: input attribute name: flags Dec
> 1 11:25:25 guamoko postfix/smtpd[7821]: input attribute value: 4096 Dec
> 1 11:25:25 guamoko postfix/smtpd[7821]: private/rewrite socket: wanted
> attribute: (list terminator) Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> input attribute name: (end) Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> resolve_clnt_query: `@sura.ru' -> t=`smtp' h=`sura.ru' r=`@sura.ru' Dec
> 1 11:25:25 guamoko postfix/smtpd[7821]: ctable_locate: install entry key
> @sura.ru Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> reject_unknown_mailhost: sura.ru Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: lookup sura.ru type 1 flags 0 Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: dns_query: sura.ru (A): OK Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: dns_get_answer: type A for sura.ru Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: generic_checks:
> name=reject_unknown_sender_domain status=0 Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: generic_checks: name=reject_unknown_recipient_domain
> Dec 1 11:25:25 guamoko postfix/smtpd[7821]: reject_unknown_address:
> algardo at guamoko Dec 1 11:25:25 guamoko postfix/smtpd[7821]: send attr
> request = rewrite Dec 1 11:25:25 guamoko postfix/smtpd[7821]: send attr
> rule = canonicalize Dec 1 11:25:25 guamoko postfix/smtpd[7821]: send
> attr address = algardo at guamoko Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: private/rewrite socket: wanted attribute: address
> Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input attribute name: address
> Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input attribute value:
> algardo at guamoko Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> private/rewrite socket: wanted attribute: (list terminator) Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: input attribute name: (end) Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: rewrite_clnt: canonicalize:
> algardo at guamoko -> algardo at guamoko Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: send attr request = resolve Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: send attr address = algardo at guamoko Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: private/rewrite socket: wanted attribute:
> transport Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input attribute
> name: transport Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input
> attribute value: local Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> private/rewrite socket: wanted attribute: nexthop Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: input attribute name: nexthop Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: input attribute value: guamoko Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: private/rewrite socket: wanted
> attribute: recipient Dec 1 11:25:25 guamoko postfix/smtpd[7821]: input
> attribute name: recipient Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> input attribute value: algardo at guamoko Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: private/rewrite socket: wanted attribute: flags Dec
> 1 11:25:25 guamoko postfix/smtpd[7821]: input attribute name: flags Dec
> 1 11:25:25 guamoko postfix/smtpd[7821]: input attribute value: 256 Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: private/rewrite socket: wanted
> attribute: (list terminator) Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> input attribute name: (end) Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> resolve_clnt_query: `algardo at guamoko' -> t=`local' h=`guamoko'
> r=`algardo at guamoko' Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> ctable_locate: install entry key algardo at guamoko Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: generic_checks: name=reject_unknown_recipient_domain
> status=0 Dec 1 11:25:25 guamoko postfix/smtpd[7821]: generic_checks:
> name=check_recipient_access Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> check_mail_access: algardo at guamoko Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: ctable_locate: leave existing entry key
> algardo at guamoko Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> check_access: algardo at guamoko Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: check_domain_access: guamoko Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: check_access: algardo@ Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: generic_checks: name=check_recipient_access status=0
> Dec 1 11:25:25 guamoko postfix/smtpd[7821]: generic_checks:
> name=permit_mynetworks Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> permit_mynetworks: localhost.localdomain 127.0.0.1 Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: match_hostname: localhost.localdomain ~?
> 127.0.0.0/8 Dec 1 11:25:25 guamoko postfix/smtpd[7821]: match_hostaddr:
> 127.0.0.1 ~? 127.0.0.0/8 Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> generic_checks: name=permit_mynetworks status=1 Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: ctable_locate: leave existing entry key
> algardo at guamoko Dec 1 11:25:25 guamoko postfix/smtpd[7821]: maps_find:
> recipient_canonical_maps: algardo at guamoko: not found Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: maps_find: recipient_canonical_maps:
> algardo: not found Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> maps_find: recipient_canonical_maps: @guamoko: not found Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: mail_addr_find: algardo at guamoko -> (not
> found) Dec 1 11:25:25 guamoko postfix/smtpd[7821]: maps_find:
> canonical_maps: algardo at guamoko: not found Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: maps_find: canonical_maps: algardo: not found Dec 1
> 11:25:25 guamoko postfix/smtpd[7821]: maps_find: canonical_maps:
> @guamoko: not found Dec 1 11:25:25 guamoko postfix/smtpd[7821]:
> mail_addr_find: algardo at guamoko -> (not found) Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: maps_find: virtual_alias_maps: algardo at guamoko: not
> found Dec 1 11:25:25 guamoko postfix/smtpd[7821]: maps_find:
> virtual_alias_maps: algardo: not found Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: maps_find: virtual_alias_maps: @guamoko: not found
> Dec 1 11:25:25 guamoko postfix/smtpd[7821]: mail_addr_find:
> algardo at guamoko -> (not found) Dec 1 11:25:25 guamoko
> postfix/smtpd[7821]: maps_find: local_recipient_maps: algardo at guamoko:
> not found Dec 1 11:25:25 guamoko postfix/smtpd[7821]: maps_find:
> local_recipient_maps: unix:passwd.byname: algardo =
> algardo:x:500:100:Aleksey Perov:/home/algardo:/bin/bash Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: mail_addr_find: algardo at guamoko ->
> algardo:x:500:100:Aleksey Perov:/home/algardo:/bin/bash Dec 1 11:25:25
> guamoko postfix/smtpd[7821]: > localhost.localdomain[127.0.0.1]: 250 Ok
> Dec 1 11:25:25 guamoko postfix/smtpd[7821]: watchdog_pat: 0x8085e20 Dec
> 1 11:25:27 guamoko postfix/smtpd[7821]: <
> localhost.localdomain[127.0.0.1]: data Dec 1 11:25:27 guamoko
> postfix/smtpd[7821]: > localhost.localdomain[127.0.0.1]: 354 End data
> with <CR><LF>.<CR><LF> Dec 1 11:25:37 guamoko postfix/smtpd[7821]:
> public/cleanup socket: wanted attribute: status Dec 1 11:25:37 guamoko
> postfix/cleanup[7822]: 9217A1F858:
> message-id=<20031201082510 dot 9217A1F858 at guamoko> Dec 1 11:25:37 guamoko
> postfix/smtpd[7821]: input attribute name: status Dec 1 11:25:37 guamoko
> postfix/smtpd[7821]: input attribute value: 0 Dec 1 11:25:37 guamoko
> postfix/smtpd[7821]: public/cleanup socket: wanted attribute: reason Dec
> 1 11:25:37 guamoko postfix/smtpd[7821]: input attribute name: reason Dec
> 1 11:25:37 guamoko postfix/qmgr[7473]: 9217A1F858: from=<@sura.ru>,
> size=314, nrcpt=1 (queue active) Dec 1 11:25:37 guamoko
> postfix/smtpd[7821]: input attribute value: (end) Dec 1 11:25:37 guamoko
> postfix/smtpd[7821]: public/cleanup socket: wanted attribute: (list
> terminator) Dec 1 11:25:37 guamoko postfix/smtpd[7821]: input attribute
> name: (end) Dec 1 11:25:37 guamoko postfix/smtpd[7821]: >
> localhost.localdomain[127.0.0.1]: 250 Ok: queued as 9217A1F858 Dec 1
> 11:25:37 guamoko postfix/smtpd[7821]: watchdog_pat: 0x8085e20 Dec 1
> 11:25:37 guamoko postfix/local[7826]: 9217A1F858: to=<algardo at guamoko>,
> relay=local, delay=27, status=sent ("|/usr/bin/maildrop") Dec 1 11:25:39
> guamoko postfix/smtpd[7821]: < localhost.localdomain[127.0.0.1]: quit Dec
> 1 11:25:39 guamoko postfix/smtpd[7821]: >
> localhost.localdomain[127.0.0.1]: 221 Bye Dec 1 11:25:39 guamoko
> postfix/smtpd[7821]: disconnect from localhost.localdomain[127.0.0.1]
>
>
>
> Am I missing something obvious?
>
>
>
> --
> Aleksey Perov
>
-- Bob Tito pgp public key: http://www.btito.net/gpg
|
|
|