Postfix/ClamAV Config Error

From: Garth Keesler (no email)
Date: Wed Nov 28 2007 - 15:22:05 EST

  • Next message: Brett Dikeman: "Re: Greylist question"

    First-time user so apologies for (hopefully) simple question.

    I've been working my way thru the building of a Postfix SMTP relay
    following the steps in several books I purchased as well as various
    HowTo's on the web. I have PF successfully installed with SpamAssassin
    working and the relay doing very restricted forwarding of SMTP email
    into my Exchange server. Prob is, whenever I try to bring ClamAV into
    the mix I invariably get the following error:

    Nov 28 13:29:40 mail1 postfix/master[5152]: fatal: bind 127.0.0.1 port
    10026: Address already in use

    The box also stops accepting telnet 25 connections as soon as I load
    this config. If I roll back to a non-ClamAV config, all starts working
    again.

    Below are sanitized main.cf and master.cf for your perusal.

    <main.cf>

    # See /usr/share/postfix/main.cf.dist for a commented, more complete version

    # Debian specific: Specifying a file name will cause the first
    # line of that file to be used as the name. The Debian default
    # is /etc/mailname.
    #myorigin = /etc/mailname

    smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
    biff = no

    # appending .domain is the MUA's job.
    append_dot_mydomain = no

    # Uncomment the next line to generate "delayed mail" warnings
    #delay_warning_time = 4h

    # TLS parameters
    smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
    smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
    smtpd_use_tls=yes
    smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
    smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache

    # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
    # information on enabling SSL in the smtp client.

    myhostname = mail1
    mydomain = dummy.com
    myorigin = $mydomain
    relay_domains = $mydomain
    alias_maps = hash:/etc/aliases
    alias_database = hash:/etc/aliases
    mydestination =
    relayhost =
    mynetworks = 127.0.0.0/8 12.34.56.789/32
    mailbox_size_limit = 0
    recipient_delimiter = +
    inet_interfaces = all
    transport_maps = hash:/etc/postfix/transport
    relay_recipient_maps = hash:/etc/postfix/relay_recipients
    local_recipient_maps =
    virtual_alias_maps = hash:/etc/postfix/virtual
    local_transport = error:local mail delivery is disabled
    smtpd_recipient_restrictions =
        permit_mynetworks
        reject_unauth_destination
        reject_invalid_hostname
        reject_unknown_sender_domain
    content_filter = scan:127.0.0.1:10025
    receive_override_options = no_address_mappings

    <master.cf>

    #
    # Postfix master process configuration file. For details on the format
    # of the file, see the master(5) manual page (command: "man 5 master").
    #
    # ==========================================================================
    # service type private unpriv chroot wakeup maxproc command + args
    # (yes) (yes) (yes) (never) (100)
    # ==========================================================================
    smtp inet n - - - - smtpd
        -o content_filter=spamd
    #submission inet n - - - - smtpd
    # -o smtpd_enforce_tls=yes
    # -o smtpd_sasl_auth_enable=yes
    # -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    #smtps inet n - - - - smtpd
    # -o smtpd_tls_wrappermode=yes
    # -o smtpd_sasl_auth_enable=yes
    # -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    #628 inet n - - - - qmqpd
    pickup fifo n - - 60 1 pickup
    cleanup unix n - - - 0 cleanup
    qmgr fifo n - n 300 1 qmgr
    #qmgr fifo n - - 300 1 oqmgr
    tlsmgr unix - - - 1000? 1 tlsmgr
    rewrite unix - - - - - trivial-rewrite
    bounce unix - - - - 0 bounce
    defer unix - - - - 0 bounce
    trace unix - - - - 0 bounce
    verify unix - - - - 1 verify
    flush unix n - - 1000? 0 flush
    proxymap unix - - n - - proxymap
    smtp unix - - - - - smtp
    # When relaying mail as backup MX, disable fallback_relay to avoid MX loops
    relay unix - - - - - smtp
        -o smtp_fallback_relay=
    # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
    showq unix n - - - - showq
    error unix - - - - - error
    retry unix - - - - - error
    discard unix - - - - - discard
    #local unix - n n - - local
    virtual unix - n n - - virtual
    lmtp unix - - - - - lmtp
    anvil unix - - - - 1 anvil
    scache unix - - - - 1 scache
    #
    # ====================================================================
    # Interfaces to non-Postfix software. Be sure to examine the manual
    # pages of the non-Postfix software to find out what options it wants.
    #
    # Many of the following services use the Postfix pipe(8) delivery
    # agent. See the pipe(8) man page for information about ${recipient}
    # and other message envelope options.
    # ====================================================================
    #
    # maildrop. See the Postfix MAILDROP_README file for details.
    # Also specify in main.cf: maildrop_destination_recipient_limit=1
    #
    maildrop unix - n n - - pipe
      flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
    #
    # See the Postfix UUCP_README file for configuration details.
    #
    uucp unix - n n - - pipe
      flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
    ($recipient)
    #
    # Other external delivery methods.
    #
    ifmail unix - n n - - pipe
      flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
    bsmtp unix - n n - - pipe
      flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender
    $recipient
    scalemail-backend unix - n n - 2 pipe
      flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
    ${nexthop} ${user} ${extension}
    mailman unix - n n - - pipe
      flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
      ${nexthop} ${user}
    # Spamassassin
    spamd unix - n n - - pipe
        user=spam argv=/usr/bin/spamc -f
        -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}
    # ClamAV
    scan unix - - n - 16 smtp
        -o smtp_send_xforward_command=yes
    127.0.0.1:10026 inet n - n - 16 smtpd
        -o content_filter=
        -o receive_override_options=no_recipient_checks,
    no_header_body_checks,no_address_mappings
        -o smtpd_helo_restrictions=
        -o smtpd_client_restrictions=
        -o smtpd_sender_restrictions=
        -o smtpd_recipient_restrictions=permit_mynetworks,reject
        -o mynetworks_style=host
        -o smtpd_authorized_xforward_hosts=127.0.0.0/8

    I'm getting close (I think:-) so any help would be greatly appreciated.

    Thanx,
    GarthK


  • Next message: Brett Dikeman: "Re: Greylist question"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD