Exim не принимает интернет-почту

[Hazzard]

ОС: Debian Linux
В общем ситуация: Если отправлять с локалхоста (на локалхост) то принимает нормально, обрабатывает даже алиасы из БД (и пресылает по алиасу или передаёт в довекот). Если отправлять с локалхоста в инет - отправляет нормально. Но если отправить с инета на сервер то он пишет примерно следующее:

Код: Выделить всё

2009-05-24 17:00:34 Delay 20s for mail-gx0-f157.google.com [209.85.217.157] with HELO=mail-gx0-f157.google.com. Mail from 8907722@gmail.com to hazzard@hazzard.ru.
2009-05-24 17:00:54 Accept! [hazzard]

По поводу последней строки - см конфиг внизу.

И всё, тишина. Довекот тоже молчит.
Конфиг экзима:

Код: Выделить всё

#!/bin/sh
primary_hostname = hazzard.ru

hide mysql_servers = localhost/exim/exim/exim

# эти две строки закомментированы потому что не работают, тоже вопрос: почему..
# domainlist local_domains =    localhost : ${lookup mysql{SELECT `domain` FROM `mail` WHERE `domain`='${domain}'}} 
# domainlist relay_to_domains = localhost : ${lookup mysql{SELECT `domain` FROM `mail` WHERE `domain`='${domain}'}}

domainlist local_domains =    localhost : hazzard.ru
domainlist relay_to_domains = localhost : hazzard.ru

hostlist   relay_from_hosts = localhost : 127.0.0.1

daemon_smtp_ports = 25 : 2525

acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data

# av_scanner = clamd:/var/run/clamav/clamd.sock

qualify_domain = hazzard.ru
qualify_recipient = hazzard.ru
allow_domain_literals = false

# стандартное имя пользователя в Debian
exim_user = Debian-exim
exim_group = Debian-exim

never_users = root
#host_lookup = *

rfc1413_query_timeout = 0s

sender_unqualified_hosts = +relay_from_hosts
recipient_unqualified_hosts = +relay_from_hosts

# percent_hack_domains = *

ignore_bounce_errors_after = 45m

timeout_frozen_after = 15d
#freeze_tell =
helo_accept_junk_hosts = 192.168.1.0/24

auto_thaw = 1h

smtp_banner = "$primary_hostname, ESMTP EXIM $version_number"

smtp_accept_max = 50

smtp_accept_max_per_connection = 25

smtp_connect_backlog = 30

smtp_accept_max_per_host = 20

split_spool_directory = true

remote_max_parallel = 15

return_size_limit = 70k

message_size_limit = 64M

helo_allow_chars = _

smtp_enforce_sync = true
log_selector = \
    +all_parents \
    +connection_reject \
    +incoming_interface \
    +lost_incoming_connection \
    +received_sender \
    +received_recipients \
    +smtp_confirmation \
    +smtp_syntax_error \
    +smtp_protocol_error \
    -queue_run

syslog_timestamp = no

begin acl

acl_check_rcpt:
  accept  hosts = :

  deny    message       = "incorrect symbol in address"
          domains       = +local_domains
          local_parts   = ^[.] : ^.*[@%!/|]

  deny    message       = "incorrect symbol in address"
          domains       = !+local_domains
          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./

#  accept  local_parts   = postmaster
#          domains       = +local_domains

#  require verify        = sender

  deny    message       = "HELO/EHLO require by SMTP RFC"
          condition     = ${if eq{$sender_helo_name}{}{yes}{no}}

  accept  authenticated = *

  deny    message       = "Your IP in HELO - access denied!"
          hosts         =  * : !+relay_from_hosts
          condition     = ${if eq{$sender_helo_name}{$sender_host_address}{true}{false}}

  deny    condition     = ${if eq{$sender_helo_name}{$interface_address}{yes}{no}}
          hosts         = !127.0.0.1 : !localhost : *
          message       = "main IP in your HELO! Access denied!"

  deny    condition     = ${if match{$sender_helo_name}{\N^\d+$\N}{yes}{no}}
          hosts         = !127.0.0.1 : !localhost : *
          message       = "can not be only number in HELO!"

  deny    message       = "your hostname is bad (adsl, poll, ppp & etc)."
          condition     = ${if match{$sender_host_name}{adsl|dialup|pool|peer|dhcp}{yes}{no}}
  
  warn
        set acl_m0 = 20s

  warn
        hosts = +relay_from_hosts
        set acl_m0 = 0s

  warn
        logwrite = Delay $acl_m0 for $sender_host_name [$sender_host_address] with HELO=$sender_helo_name. Mail from $sender_address to $local_part@$domain.
        delay = $acl_m0

  accept  domains       = +local_domains
# строка добавлена для логов, [hazzard] добавлено для grep
	  logwrite 	= Accept! [hazzard]
          endpass
          message       = "In my mailserver not stored this user"
          verify        = recipient

  accept  domains       = +relay_to_domains
          endpass
          message       = "main server not know how relay to this address"
          verify        = recipient

  deny    message       = "you in blacklist - $dnslist_domain $dnslist_text"
          hosts         = !localhost : !127.0.0.1 :*
          dnslists      =  cbl.abuseat.org : dynablock.njabl.org

  accept  hosts         = +relay_from_hosts

  deny    message       = "Homo hominus lupus est"

acl_check_data:

  deny malware = *
  message = "In e-mail found VIRUS - $malware_name"

  accept

begin routers

dnslookup:
  driver = dnslookup
  domains = ! +local_domains
  transport = remote_smtp
  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 192.168.0.0/24
  no_more

system_aliases:
    driver      = redirect
    allow_fail
    allow_defer
    data = ${lookup mysql{SELECT `alias` FROM `mail` WHERE `address`='${quote_mysql:$local_part@$domain}'}}

dovecot_user:
  driver = accept
  condition = ${lookup mysql{SELECT `user` FROM  `mail` WHERE  `user`='${quote_mysql:$local_part@$domain}'}{yes}{no}}
  transport = dovecot_delivery

begin transports

remote_smtp:
  driver = smtp

dovecot_delivery:
  driver = pipe
  command = /usr/local/libexec/dovecot/deliver -d $local_part@$domain
  message_prefix =
  message_suffix =
  delivery_date_add
  envelope_to_add
  return_path_add
  log_output
  user = mail

#autoreply:
#     driver = autoreply
#     once = /var/mail/exim/vacation/$local_part
#     once_repeat = 6h
#     user = mail
#     group = mail
#     to = ${sender_address}
#     from = "${local_part}@${domain}"
#     log = /var/log/exim/vacation.log
#     subject = "Auto Reply from ${local_part}@${domain}"
#     text = ${lookup mysql {SELECT body FROM mail \
#        WHERE domain='${quote_mysql:$domain}' AND \
#        address='${quote_mysql:$local_part}' OR address='${quote_mysql:$local_part@$domain}'}{$value}}

address_pipe:
  driver = pipe
  return_output

#address_reply:
#  driver = autoreply

begin retry

# Address or Domain  Error   Retries
# -----------------  -----   -------
*                    *       F,2h,15m; G,16h,1h,1.5; F,4d,6h


begin rewrite


begin authenticators

auth_plain:
  driver = plaintext
  public_name = PLAIN
  server_condition = ${lookup mysql{SELECT `user` FROM `mail` WHERE `user` =  '${quote_mysql:$auth2}' AND `password` = '${quote_mysql:$auth3}'}{yes}{no}}    
  server_prompts = :
  server_set_id = $auth2

auth_login:
  driver = plaintext
  public_name = LOGIN
  server_condition = ${lookup mysql{SELECT `user` FROM `mail` WHERE `user` = '${quote_mysql:$auth1}' AND `password` = '${quote_mysql:$auth2}'}{yes}{no}}
  server_prompts = Username:: : Password::
  server_set_id = $auth1

auth_cram_md5:
  driver = cram_md5
  public_name = CRAM-MD5
  server_secret = ${lookup mysql{SELECT `password` FROM `mail` WHERE `user`  = '${quote_mysql:$auth1}'}{$value}fail}
  server_set_id = $auth2

Довекот если чтото принимает то раскладывает всё нормально.
Вопрос: почему не принимается интернет-почта? Пробовали с мастерхоста и гмэйла.

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[Alex Keda]

телепаты в отпуске...
в логах что-то должно быть.

[Hazzard]

телепаты в отпуске...
в логах что-то должно быть.

Я же написал ... всё что выдаёт экзим это:

Код: Выделить всё

2009-05-24 17:19:48 Delay 20s for yw-out-1718.google.com [74.125.46.152] with HELO=yw-out-1718.google.com. Mail from 8907722@gmail.com to hazzard@hazzard.ru.
2009-05-24 17:20:08 Accept! [hazzard]

а довекот вообще молчит

[Hazzard]

Код: Выделить всё

2009-05-24 17:41:39 Delay 20s for mail-gx0-f157.google.com [209.85.217.157] with HELO=mail-gx0-f157.google.com. Mail from 8907722@gmail.com to hazzard@hazzard.ru.
2009-05-24 17:41:59 Accept! [from 8907722@gmail.com to hazzard@hazzard.ru]

[Alex Keda]

значит уровень логгирования выше ставте

[damir_madaga]

Запусти Exim в дебаге!

Код: Выделить всё

exim -bd -d+all

Думаю что и Довекот что то подобное должен уметь!

[Laa]

1. Зачем давать delay нормальным отправителям?
2. exim -bh и тестируйте.
3. судя по тому, что вы прислали в логе видно что письмо успешно проходит acl_check_rcpt, в acl_check_data ничего такого нет, это тоже должно успешно пройти. Юзайте п.2. и все будет ок.

[mediamag]

настраивал экзим недавно первый раз - столкнулся с траблой, что почта ходит только внутри сети...забил на свой конфиг экзима и взял твой "HAZZARD"..с твоим у меня почта начала приниматься но не отправлялась (как ты и описывал) - тестил на гмаиле...смотрел какие сообщения прходят и чисто интуитивно правил конфиг..я хз может я закоментил не то что нужно - но! почта стала приниматься и отправлятьcя!! и внутри домена и снаружи...вообщем вот конфиг с сервера передирай...я лично первый раз настраиваю почтовик...может я чето и не так насочинял..вы уж уважаемые гуру подправте где нужно)))

Код: Выделить всё

#!/bin/sh
primary_hostname = frail.in

hide mysql_servers = localhost/exim/exim/exim

domainlist local_domains = localhost : frail.in

domainlist relay_to_domains = localhost : frail.in

hostlist   relay_from_hosts = localhost : 127.0.0.1

acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data

daemon_smtp_ports = 25 : 9025

tls_on_connect_ports = 9025

tls_certificate = /etc/exim/ssl/exim.crt
tls_privatekey = /etc/exim/ssl/exim.key

qualify_domain = frail.in

qualify_recipient = frail.in

allow_domain_literals = false

exim_user = mailnull

exim_group = mail

never_users = root

rfc1413_query_timeout = 0s

sender_unqualified_hosts = +relay_from_hosts

recipient_unqualified_hosts = +relay_from_hosts

ignore_bounce_errors_after = 45m

timeout_frozen_after = 15d

freeze_tell = mediamag@frail.in

helo_accept_junk_hosts = 192.168.0.0/24


auto_thaw = 1h

smtp_banner = "$primary_hostname, ESMTP EXIM $version_number"

smtp_accept_max = 50

smtp_accept_max_per_connection = 25


smtp_connect_backlog = 30

smtp_accept_max_per_host = 20

split_spool_directory = true

remote_max_parallel = 15

return_size_limit = 70k

message_size_limit = 10M

helo_allow_chars = _

smtp_enforce_sync = false

log_selector = \
    +all_parents \
    +connection_reject \
    +incoming_interface \
    +lost_incoming_connection \
    +received_sender \
    +received_recipients \
    +smtp_confirmation \
    +smtp_syntax_error \
    +smtp_protocol_error \
    -queue_run

syslog_timestamp = no



begin acl

acl_check_rcpt:


  accept  hosts = :


  deny    message       = "incorrect symbol in address"
          domains       = +local_domains
          local_parts   = ^[.] : ^.*[@%!/|]

deny    message       = "incorrect symbol in address"
          domains       = !+local_domains
          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./


  deny    message       = "HELO/EHLO require by SMTP RFC"
          condition     = ${if eq{$sender_helo_name}{}{yes}{no}}

  accept  authenticated = *

  deny    message       = "Your IP in HELO - access denied!"
          hosts         =  * : !+relay_from_hosts : !81-196.domain-ak.ru
          condition     = ${if eq{$sender_helo_name}{$sender_host_address}{true}{false}}


  deny    condition     = ${if eq{$sender_helo_name}{$interface_address}{yes}{no}}
          hosts         = !127.0.0.1 : !localhost : *
          message       = "main IP in your HELO! Access denied!"

  deny    condition     = ${if match{$sender_helo_name}{\N^\d+$\N}{yes}{no}}
          hosts         = !127.0.0.1 : !localhost : *
          message       = "can not be only number in HELO!"


  deny    condition     = ${if eq{$sender_address}{}{yes}{no}}
          hosts         = !127.0.0.1 : !localhost : *
          message       = "Sender address is empty?! not for RFC..."


  deny   condition = ${lookup mysql{SELECT `goto` FROM `alias` WHERE `address`='${quote_mysql:$local_part@domain-ak.ru}'}{no}{yes}}
        hosts         = !127.0.0.1 : !localhost : !192.168.0.0/24 : *
        message       = "No such user!"

#deny   condition     = ${if match{$sender_helo_name}{masterhost.ru}{no}{yes}}
#         hosts         = !127.0.0.1 : !localhost : *
#         message       = "Access deny!"


  warn

        set acl_m0 = 30s
  warn
        hosts = +relay_from_hosts : 127.0.0.1/8 : 192.168.0.0/24
        set acl_m0 = 0s
  warn

  accept  domains       = +local_domains
          endpass
          message       = "In my mailserver not stored this user"
          verify        = recipient

   accept domains       = +relay_to_domains
          endpass
          message       = "main server not know how relay to this address"
          verify        = recipient

  deny    message       = "you in blacklist - $dnslist_domain \n $dnslist_text"
          dnslists      = opm.blitzed.org : \
                          cbl.abuseat.org : \
                          bl.csma.biz : \
                          dynablock.njabl.org

  accept  hosts         = +relay_from_hosts


  deny    message       = "Homo hominus lupus est"

acl_check_data:


  accept

begin routers

system_aliases:
    driver = redirect
    allow_fail
    allow_defer
    data = ${lookup mysql{SELECT `goto` FROM `alias` WHERE `address`='${quote_mysql:$local_part@$domain}' OR `address`='${quote_mysql:@$domain}'}}

dovecot_user:
  driver = accept
  condition = ${lookup mysql{SELECT `goto` FROM `alias` WHERE `address`='${quote_mysql:$local_part@$domain}' OR `address`='${quote_mysql:@$domain}'}{yes}{no}}
  transport = dovecot_delivery


dnslookup:
  driver = dnslookup
  domains = ! +local_domains
  transport = remote_smtp
  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
  no_more

begin transports

remote_smtp:
driver = smtp

dovecot_delivery:
  driver = pipe
  command = /usr/local/libexec/dovecot/deliver -d $local_part@$domain
  message_prefix =
  message_suffix =
  delivery_date_add
  envelope_to_add
  return_path_add
  log_output
  user = mailnull


address_pipe:
  driver = pipe
  return_output

address_reply:
  driver = autoreply


begin retry


*                    *       F,2h,15m; G,16h,1h,1.5; F,4d,6h

begin rewrite

*@frail.in     $local_part@frail.in        Eh

begin authenticators


auth_plain:

  driver = plaintext
  public_name = PLAIN
  server_condition = ${lookup mysql{SELECT `username` FROM  `mailbox` WHERE `username` = '${quote_mysql:$auth2}' AND `password` = '${quote_mysql:$auth3}'}{yes}{no}}
  server_prompts = :
  server_set_id = $auth2


auth_login:
  driver = plaintext
  public_name = LOGIN
  server_condition = ${lookup mysql{SELECT `username` FROM `mailbox` WHERE `username` = '${quote_mysql:$auth1}' AND `password` = '${quote_mysql:$auth2}'}{yes}{no}}
  server_prompts = Username:: : Password::
  server_set_id = $auth1


auth_cram_md5:
  driver = cram_md5
  public_name = CRAM-MD5
  server_secret = ${lookup mysql{SELECT `password` FROM `mailbox` WHERE `username` = '${quote_mysql:$auth1}'}{$value}fail} server_set_id = $auth2

домен дыбилный - тестовый))