Check alle échte Black Friday-deals Ook zo moe van nepaanbiedingen? Wij laten alleen échte deals zien

[Postfix] Dubbele emails na installatie SpamAssassin

Pagina: 1
Acties:

  • ShadowAS1
  • Registratie: September 2010
  • Laatst online: 27-11 12:16

ShadowAS1

IT Security Nerd

Topicstarter
Beste Tweakers,
Op de mailserver van onze vereniging kregen we veel last van spam, daarop hebben wij spamassassin op deze server geinstalleerd.
Nu is hier (waarschijnlijk) iets in de configuratie misgegaan, want sommige mails komen dubbel aan.

Wij hebben een CentOS VPS met Postfix/Dovecot. Alle users en aliases worden beheerd via PostfixAdmin welke alles opslaat in MySQL. Postfix en dovecot gebruiken deze database ook ter authenticatie.

Ter verduidelijking, het probleem speelt sinds de installatie van spamassassin

Voorbeeld van een log entry:
code:
1
2
3
4
5
6
7
8
9
10
11
12
Dec  5 12:26:04 alpha postfix/pipe[2247]: B913B42C57: to=<bestuur@domein.nl>, relay=spamassassin, delay=0.93, delays=0.06/0.05/0/0.82, dsn=2.0.0, status=sent (delivered via spamassassin service)
Dec  5 12:26:04 alpha postfix/pipe[2247]: B913B42C57: to=<jeroen@domein.nl>, orig_to=<bestuur@domein.nl>, relay=spamassassin, delay=0.93, delays=0.06/0.05/0/0.82, dsn=2.0.0, status=sent (delivered via spamassassin service)
Dec  5 12:26:04 alpha postfix/pipe[2247]: B913B42C57: to=<lars@domein.nl>, orig_to=<bestuur@domein.nl>, relay=spamassassin, delay=0.93, delays=0.06/0.05/0/0.82, dsn=2.0.0, status=sent (delivered via spamassassin service)
Dec  5 12:26:04 alpha postfix/pipe[2247]: B913B42C57: to=<tijn@domein.nl>, orig_to=<bestuur@domein.nl>, relay=spamassassin, delay=0.93, delays=0.06/0.05/0/0.82, dsn=2.0.0, status=sent (delivered via spamassassin service)
Dec  5 12:26:04 alpha postfix/pipe[2247]: B913B42C57: to=<wouter@domein.nl>, orig_to=<bestuur@domein.nl>, relay=spamassassin, delay=0.93, delays=0.06/0.05/0/0.82, dsn=2.0.0, status=sent (delivered via spamassassin service)
Dec  5 12:26:04 alpha postfix/virtual[2252]: 9E5E143020: to=<bestuur@domein.nl>, relay=virtual, delay=0.13, delays=0.07/0.05/0/0.01, dsn=2.0.0, status=sent (delivered to maildir)
Dec  5 12:26:04 alpha postfix/virtual[2252]: 9E5E143020: to=<jeroen@domein.nl>, orig_to=<bestuur@domein.nl>, relay=virtual, delay=0.14, delays=0.07/0.05/0/0.02, dsn=2.0.0, status=sent (delivered to maildir)
Dec  5 12:26:04 alpha postfix/virtual[2252]: 9E5E143020: to=<lars@domein.nl>, orig_to=<bestuur@domein.nl>, relay=virtual, delay=0.14, delays=0.07/0.05/0/0.02, dsn=2.0.0, status=sent (delivered to maildir)
Dec  5 12:26:04 alpha postfix/virtual[2252]: 9E5E143020: to=<tijn@domein.nl>, orig_to=<bestuur@domein.nl>, relay=virtual, delay=0.15, delays=0.07/0.05/0/0.03, dsn=2.0.0, status=sent (delivered to maildir)
Dec  5 12:26:04 alpha postfix/virtual[2252]: 9E5E143020: to=<wouter@domein.nl>, orig_to=<bestuur@domein.nl>, relay=virtual, delay=0.16, delays=0.07/0.05/0/0.04, dsn=2.0.0, status=sent (delivered to maildir)
Dec  5 12:26:05 alpha postfix/pipe[2246]: B913B42C57: to=<******@gmail.com>, orig_to=<bestuur@domein.nl>, relay=spamassassin, delay=1.5, delays=0.06/0.03/0/1.4, dsn=2.0.0, status=sent (delivered via spamassassin service)
Dec  5 12:26:05 alpha postfix/smtp[2253]: 9E5E143020: to=<********@gmail.com>, orig_to=<bestuur@domein.nl>, relay=gmail-smtp-in.l.google.com[74.125.133.26]:25, delay=0.79, delays=0.07/0.05/0.18/0.49, dsn=2.0.0, status=sent (250 2.0.0 OK 1417778765 y2si49045212wja.115 - gsmtp)


Postfix main conf:
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
deamon_directory= /usr/libexec/postfix
data_directory = /var/lib/postfix
mail_owner = postfix
myhostname = ######
inet_interfaces = all
inet_protocols = all
mydestination = $myhostname, localhost.$mydomain, localhost
unknown_local_recipient_reject_code = 500
mynetworks = 127.0.0.0/8
home_mailbox = Maildir/
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
html_directory = no
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
broken_sasl_auth_clients = yes
virtual_mailbox_domains = mysql:/etc/postfix/mysql-domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-users.cf
virtual_alias_maps = mysql:/etc/postfix/mysql-aliases.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:1001
virtual_gid_maps = static:1001
smtpd_tls_cert_file = /etc/postfix/authl.pem
smtpd_tls_key_file = /etc/postfix/authl.key
smtpd_tls_security_level = may
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_tls_ciphers = high
smtpd_tls_exclude_ciphers = aNULL,DES,3DES,MD5,DES+MD5,RC4
smtpd_tls_protocols = TLSv1,!SSLv2,!SSLv3


Master.cf (bewerkt gedeelte)
code:
1
2
3
smtp inet n - n - - smtpd -o content_filter=spamassassin
submission inet n - n - - smtpd -o content_filter=spamassassin
spamassassin unix - n n - - pipe flags=R user=spamd argv=/usr/bin/spamc -e /usr/bin/sendmail -oi -f ${sender} ${recipient}


Iemand enig idee :)?

PA-ACE / RHCE / SCE // Any post or advice is provided as is, and comes with no warranty at all.


  • CAPSLOCK2000
  • Registratie: Februari 2003
  • Laatst online: 10:42

CAPSLOCK2000

zie teletekst pagina 888

Wat gebeurd er als je mail met de hand naar spamassassin piped?

This post is warranted for the full amount you paid me for it.