Exim ругань при попытке создать ящик через Postfixadmin

[diversunt]

Сделал все по статье http://www.lissyara.su/?id=1173
Вот такая одна из многих но по ней не смог найти нифига при помощи гугла так что гуру помогайте...
в постфиксе при создание почтового ящика говорит все ок, почтовый ящик создан, лезу в:

Код: Выделить всё

cd /var/mail/exim/

а там тишина ни чего не создано, а логах сначала была ругань на синхронизацию

сделал так

Код: Выделить всё

smtp_enforce_sync = false

ибо я так и не вкурил как правильно прописать

Код: Выделить всё

control = no_enforce_sync

чтоб он не ругался на сихронизацию с локальной машины, было сказано что куда то в acl пихать енто надо
Ну так вот после того как убрал ругань от синхронизации в логи он мне пишет вот что:

Код: Выделить всё

May  3 14:59:32 router exim[3963]: H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 F=<postmaster@domain.ru> rejected RCPT
<23132@domain.ru>: "Your IP in HELO - access denied!"
May  3 14:59:32 router exim[3963]: H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 F=<postmaster@domain.ru> rejected RCPT
<23132@domain.ru>: "Your IP in HELO - access denied!"
May  3 14:59:32 router exim[3963]: SMTP syntax error in "To: 23132@domain.ru" H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25
unrecognized command
May  3 14:59:32 router exim[3963]: SMTP syntax error in "From: postmaster@domain.ru" H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25
unrecognized command
May  3 14:59:32 router exim[3963]: SMTP syntax error in "Subject: =?windows-1251?Q?=C4=EE=E1=F0=EE_=EF=EE=E6=E0=EB=EE=E2=E0=F2=FC!?=" H=(127.0.0.1)
[127.0.0.1] I=[127.0.0.1]:25 unrecognized command
May  3 14:59:32 router exim[3963]: SMTP syntax error in "MIME-Version: 1.0" H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 unrecognized command
May  3 14:59:32 router exim[3963]: SMTP call from (127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 dropped: too many unrecognized commands
(last was "MIME-Version: 1.0")
May  3 14:59:32 router exim[3963]: SMTP call from (127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 dropped: too many unrecognized commands
(last was "MIME-Version: 1.0")

При этом в configure было так

Код: Выделить всё

# Рубаем нах, тех, кто подставляет свой IP в HELO
  deny    message       = "Your IP in HELO - access denied!"
          hosts         =  * : !+relay_from_hosts : !81-196.domain.ru
          condition     = ${if eq{$sender_helo_name} {$sender_host_address}{true}{false}}

сделал так

Код: Выделить всё

# Рубаем нах, тех, кто подставляет свой IP в HELO
  deny    message       = "Your IP in HELO - access denied!"
          hosts         =  * : !+relay_from_hosts : !81-196.itpartner-kem.ru: !127.0.0.1
          condition     = ${if eq{$sender_helo_name} {$sender_host_address}{true}{false}}

А ему пофиг он всёравно ругаеться:

Код: Выделить всё

May  3 15:29:57 router exim[5178]: H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 F=<postmaster@domain.ru> rejected RCPT
<1234@domain.ru>: "Your IP in HELO - access denied!"
May  3 15:29:57 router exim[5178]: H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 F=<postmaster@domain.ru> rejected RCPT
<1234@domain.ru>: "Your IP in HELO - access denied!"
May  3 15:29:57 router exim[5178]: SMTP syntax error in "To: 1234@domain.ru" H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25
unrecognized command
May  3 15:29:57 router exim[5178]: SMTP syntax error in "From: postmaster@domain.ru" H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25
unrecognized command
May  3 15:29:57 router exim[5178]: SMTP syntax error in "Subject: =?windows-1251?Q?=C4=EE=E1=F0=EE_=EF=EE=E6=E0=EB=EE=E2=E0=F2=FC!?=" H=(127.0.0.1)
[127.0.0.1] I=[127.0.0.1]:25 unrecognized command
May  3 15:29:57 router exim[5178]: SMTP syntax error in "MIME-Version: 1.0" H=(127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 unrecognized command
May  3 15:29:57 router exim[5178]: SMTP call from (127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 dropped: too many unrecognized
 commands (last was "MIME-Version: 1.0")
May  3 15:29:57 router exim[5178]: SMTP call from (127.0.0.1) [127.0.0.1] I=[127.0.0.1]:25 dropped: too many unrecognized
commands (last was "MIME-Version: 1.0")

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2520 рублей (8 CPU, 8Gb RAM, 2x500Gb HDD, RAID 3ware 9750):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[Alex Keda]

вернись к исходному конвигу и покажи начальную ругань в логах

[diversunt]

Exim configure:

Код: Выделить всё

#!/bin/sh
# $Cambridge: exim/exim-src/src/configure.default,v 1.13 2007/06/26 11:21:36 ph10 Exp $


primary_hostname = domain.ru
hide mysql_servers = localhost/exim/exim/exim

domainlist local_domains = ${lookup mysql{SELECT `domain` \
								FROM `domain` WHERE \
								`domain`='${domain}' AND \
								`active`='1'}}

domainlist relay_to_domains = ${lookup mysql{SELECT `domain` \
								FROM `domain` WHERE \
								`domain`='${domain}' AND \
								`active`='1'}}

hostlist   relay_from_hosts = localhost:127.0.0.0/8:192.168.0.0/24
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data

av_scanner = clamd:/var/run/clamav/clamd
qualify_domain = domain.ru


qualify_recipient = domain.ru
allow_domain_literals = false


exim_user = mailnull
exim_group = mail
never_users = root

host_lookup = *

rfc1413_query_timeout = 0s


sender_unqualified_hosts = +relay_from_hosts
recipient_unqualified_hosts = +relay_from_hosts


ignore_bounce_errors_after = 45m
timeout_frozen_after = 15d

helo_accept_junk_hosts = 192.168.0.0/24

auto_thaw = 1h
smtp_banner = "$primary_hostname, ESMTP EXIM $version_number"

smtp_accept_max = 50

smtp_accept_max_per_connection = 25

smtp_connect_backlog = 30

smtp_accept_max_per_host = 20

split_spool_directory = true

remote_max_parallel = 15

return_size_limit = 70k

message_size_limit = 64M

helo_allow_chars = _

smtp_enforce_sync = true
log_selector = +all_parents +connection_reject +incoming_interface +lost_incoming_connection +received_sender +received_recipients +smtp_confirmation +smtp_syntax_error +smtp_protocol_error -queue_run

syslog_timestamp = no

######################################################################
begin acl
acl_check_rcpt:

  accept  hosts = :

  deny    message       = Restricted characters in address
          domains       = +local_domains
          local_parts   = ^[.] : ^.*[@%!/|]

  deny    message       = Restricted characters in address
          domains       = !+local_domains
          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
  require verify        = sender

  deny    message       = "HELO/EHLO require by SMTP RFC"
          condition     = ${if eq{$sender_helo_name}{}{yes}{no}}

  accept  authenticated = *

  deny    message       = "Your IP in HELO - access denied!"
          hosts         =  * : !+relay_from_hosts : !81-196.itpartner-kem.ru: !127.0.0.1
          condition     = ${if eq{$sender_helo_name} {$sender_host_address}{true}{false}}


  deny    condition     = ${if eq{$sender_helo_name}{$interface_address}{yes}{no}}
          hosts         = !127.0.0.1 : !localhost : *
          message       = "main IP in your HELO! Access denied!"

  deny    condition     = ${if match{$sender_helo_name}{\N^\d+$\N}{yes}{no}}
          hosts         = !127.0.0.1 : !localhost : *
          message       = "can not be only number inЕН ФЕИ, ЛФП ОЕ РЙЫЕФ ПФРТБЧЙФЕМС"

  deny    message       = "your hostname is bad (adsl, poll, ppp & etc)."
          condition     = ${if match{$sender_host_name}  {adsl|dialup|pool|peer|dhcp}  {yes}{no}}

  warn  hosts = 127.0.0.1:localhost
	control = no_enforce_sync
	
  warn
        set acl_m0 = 30s
  warn
        hosts = +relay_from_hosts
        set acl_m0 = 0s
  warn
        
        logwrite = Delay $acl_m0 for $sender_host_name $sender_host_address] with HELO=$sender_helo_name. Mail from $sender_address to $local_part@$domain.
        delay = $acl_m0

                          
  accept  domains       = +local_domains
          endpass
          message       = "In my mailserver not stored this user"
          verify        = recipient

  accept  domains       = +relay_to_domains
          endpass
          message       = "main server not know how relay to this address"
          verify        = recipient

  deny    message       = "you in blacklist - $dnslist_domain \n $dnslist_text"
          dnslists      = opm.blitzed.org : cbl.abuseat.org : bl.csma.biz : dynablock.njabl.org
  
  
  
  
  accept  authenticated = *
          control       = submission


  require message = relay not permitted
          domains = +local_domains : +relay_to_domains


  require verify = recipient


  accept


acl_check_data:

  deny malware = *
  message = "In e-mail found VIRUS - $malware_name"

  
  accept

######################################################################

begin routers


dnslookup:
  driver = dnslookup
  domains = ! +local_domains
  transport = remote_smtp
  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
  no_more



system_aliases:
  driver = redirect
  allow_fail
  allow_defer
  data = ${lookup mysql{SELECT `goto` FROM `alias` WHERE \
     `address`='${quote_mysql:$local_part@$domain}' OR \
  `address`='${quote_mysql:@$domain}'}}

 dovecot_user:
  driver = accept
  condition = ${lookup mysql{SELECT `goto` FROM \
    `alias` WHERE \
  `address`='${quote_mysql:$local_part@$domain}' OR \
  `address`='${quote_mysql:@$domain}'}{yes}{no}}
  transport = dovecot_delivery

 ######################################################################

begin transports


remote_smtp:
  driver = smtp

dovecot_delivery:
  driver = pipe
  command = /usr/local/libexec/dovecot/deliver -d $local_part@$domain
  message_prefix =
  message_suffix =
  delivery_date_add
  envelope_to_add
  return_path_add
  log_output
  user = mailnull

address_pipe:
  driver = pipe
  return_output

address_reply:
  driver = autoreply
  
  
  
######################################################################

begin retry


# Address or Domain    Error       Retries
# -----------------    -----       -------

*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h



######################################################################
begin rewrite


begin authenticators

auth_plain:
  driver = plaintext
  public_name = PLAIN
  server_condition = ${lookup mysql{SELECT `username` FROM \
                     `mailbox` WHERE `username` = \
                     '${quote_mysql:$auth2}' AND `password` = \
                     '${quote_mysql:$auth3}'}{yes}{no}}
  server_prompts = :
  server_set_id = $auth2

 auth_login:
  driver = plaintext
  public_name = LOGIN
  server_condition = ${lookup mysql{SELECT `username` FROM \
                     `mailbox` WHERE `username` = \
                     '${quote_mysql:$auth1}' AND `password` = \
                     '${quote_mysql:$auth2}'}{yes}{no}}
  server_prompts = Username:: : Password::
  server_set_id = $auth1

auth_cram_md5:
  driver = cram_md5
  public_name = CRAM-MD5
  server_secret = ${lookup mysql{SELECT `password` FROM \
                        `mailbox` WHERE `username` \
                        = '${quote_mysql:$auth1}'}{$value}fail}
  server_set_id = $auth2

######################################################################


# begin local_scan


# End of Exim configuration file

dovecot.conf

Код: Выделить всё

#!/bin/sh
# Конфиг dovecot. Начат 2006-05-26 в 16:15

base_dir = /var/run/dovecot/

protocols = imap pop3

listen = *
 
disable_plaintext_auth = no

shutdown_clients = yes

log_path = /var/log/dovecot.log

info_log_path = /var/log/dovecot_auth.log

log_timestamp = "%b %d %H:%M:%S "


syslog_facility = mail

ssl_disable = yes

login_dir = /var/run/dovecot/login

login_chroot = yes

login_user = dovecot

login_process_size = 64

login_process_per_connection = yes

login_processes_count = 3

login_max_processes_count = 64

#login_max_logging_users = 128 ругался пришлось закоментить

login_greeting = dovecot MUA ready

login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c

login_log_format = %$: %s


mail_location = maildir:/var/mail/exim/%d/%n


mail_extra_groups = mail

mail_full_filesystem_access = no

mail_debug = yes

verbose_proctitle = yes

first_valid_uid = 25

first_valid_gid = 0
protocol imap {
  imap_client_workarounds = delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
}

  
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}



protocol lda {
  # Куда слать письма про превышение квоты
  postmaster_address = support@domain.ru
  auth_socket_path = /var/run/dovecot/auth-master
}

auth_debug = yes

auth default {
  
  mechanisms = plain

  # Добавлено для работы deliver от dovecot
   socket listen {
     master {
       path = /var/run/dovecot/auth-master
       mode = 0600
       user = mailnull
       #group = mail
     }
   }
  
  
  
  passdb sql {
    args = /usr/local/etc/dovecot-sql.conf
  }
  userdb sql {
    args = /usr/local/etc/dovecot-sql.conf
  }

  user = root

dict {
  #quota = mysql:/etc/dovecot-dict-quota.conf 
}

plugin {
}

config.inc.php

Код: Выделить всё

<?php
// 
// Postfix Admin 
// by Mischa Peters <mischa at high5 dot net>
// Copyright (c) 2002 - 2005 High5!
// License Info: http://www.postfixadmin.com/?file=LICENSE.TXT
//
// File: config.inc.php
//
if (ereg ("config.inc.php", $_SERVER['PHP_SELF']))
{
   header ("Location: login.php");
   exit;
}

// Postfix Admin Path
// Set the location to your Postfix Admin installation here.
$CONF['postfix_admin_url'] = '';
$CONF['postfix_admin_path'] = '';

// Language config
// Language files are located in './languages'.
$CONF['default_language'] = 'ru';

// Database Config
// mysql = MySQL 3.23 and 4.0
// mysqli = MySQL 4.1
// pgsql = PostgreSQL
$CONF['database_type'] = 'mysql';
$CONF['database_host'] = 'localhost';
$CONF['database_user'] = 'exim';
$CONF['database_password'] = 'exim';
$CONF['database_name'] = 'exim';
$CONF['database_prefix'] = '';

// Site Admin
// Define the Site Admins email address below.
// This will be used to send emails from to create mailboxes.
$CONF['admin_email'] = 'postmaster@domain.ru';

// Mail Server
// Hostname (FQDN) of your mail server.
// This is used to send email to Postfix in order to create mailboxes.
$CONF['smtp_server'] = '127.0.0.1';
$CONF['smtp_port'] = '25';

// Encrypt
// In what way do you want the passwords to be crypted?
// md5crypt = internal postfix admin md5
// system = whatever you have set as your PHP system default
// cleartext = clear text passwords (ouch!)
$CONF['encrypt'] = 'cleartext';

// Generate Password
// Generate a random password for a mailbox and display it.
// If you want to automagically generate paswords set this to 'YES'.
$CONF['generate_password'] = 'NO';

// Page Size
// Set the number of entries that you would like to see
// in one page.
$CONF['page_size'] = '10';

// Default Aliases
// The default aliases that need to be created for all domains.
$CONF['default_aliases'] = array (
	'abuse' => 'abuse@change-this-to-your.domain.tld',
	'hostmaster' => 'hostmaster@change-this-to-your.domain.tld',
	'postmaster' => 'postmaster@change-this-to-your.domain.tld',
	'webmaster' => 'webmaster@change-this-to-your.domain.tld'
);

// Mailboxes
// If you want to store the mailboxes per domain set this to 'YES'.
// Example: /usr/local/virtual/domain.tld/username@domain.tld
$CONF['domain_path'] = 'YES';
// If you don't want to have the domain in your mailbox set this to 'NO'.
// Example: /usr/local/virtual/domain.tld/username
$CONF['domain_in_mailbox'] = 'NO';

//YES: /var/mail/exim/username

// Default Domain Values
// Specify your default values below. Quota in MB.
$CONF['aliases'] = '10';
$CONF['mailboxes'] = '10';
$CONF['maxquota'] = '10';

// Quota
// When you want to enforce quota for your mailbox users set this to 'YES'.
$CONF['quota'] = 'NO';
// You can either use '1024000' or '1048576'
$CONF['quota_multiplier'] = '1024000';

// Transport
// If you want to define additional transport options for a domain set this to 'YES'.
// Read the transport file of the Postfix documentation.
$CONF['transport'] = 'NO';

// Virtual Vacation
// If you want to use virtual vacation for you mailbox users set this to 'YES'.
// NOTE: Make sure that you install the vacation module. http://high5.net/postfixadmin/
$CONF['vacation'] = 'NO';
// This is the autoreply domain that you will need to set in your Postfix
// transport maps to handle virtual vacations. It does not need to be a
// real domain (i.e. you don't need to setup DNS for it).
$CONF['vacation_domain'] = 'autoreply.change-this-to-your.domain.tld';

// Alias Control
// Postfix Admin inserts an alias in the alias table for every mailbox it creates.
// The reason for this is that when you want catch-all and normal mailboxes
// to work you need to have the mailbox replicated in the alias table.
// If you want to take control of these aliases as well set this to 'YES'.
$CONF['alias_control'] = 'NO';

// Special Alias Control
// Set to 'NO' if you don't want your domain admins to change the default aliases.
$CONF['special_alias_control'] = 'YES';

// Logging
// If you don't want logging set this to 'NO';
$CONF['logging'] = 'YES';

// Header
$CONF['show_header_text'] = 'NO';
$CONF['header_text'] = ':: Postfix Admin ::';

// Footer
// Below information will be on all pages.
// If you don't want the footer information to appear set this to 'NO'.
$CONF['show_footer_text'] = 'YES';
$CONF['footer_text'] = 'Return to change-this-to-your.domain.tld';
$CONF['footer_link'] = 'http://change-this-to-your.domain.tld';

// Welcome Message
// This message is send to every newly created mailbox.
// Change the text between EOM.
$CONF['welcome_text'] = <<<EOM
Hi,

Welcome to your new account.
EOM;

//
// END OF CONFIG FILE
//
?>

Вот при этих конфигах при создании нового почтового ящика через PostFixAdmin в maillog:
Валится это:

Код: Выделить всё

May  3 19:56:41 router exim[9385]: SMTP protocol synchronization error (input sent without waiting for greeting):rejected connection from H=[127.0.0.1] I=[127.0.0.1]:25 input="EHLO 127.0.0.1\r\n"
May  3 19:56:41 router exim[9385]: SMTP protocol synchronization error (input sent without waiting for greeting):rejected connection from H=[127.0.0.1] I=[127.0.0.1]:25 input="EHLO 127.0.0.1\r\n"

но при этом PostFixAdmin сообщает:

Почтовый ящик был успешно создан!
(test2@www.itpartner-kem.ru)
Почтовый ящик был создан!

[Alex Keda]

ну так что не работает?

[diversunt]

Ну я так пологаю вот этот кусок ибо он написан мною и скорей всего не правильно,

Код: Выделить всё

warn  hosts = 127.0.0.1:localhost
   control = no_enforce_sync

По идеи здесь я хотел написать не использовать синхронизацию для локального хоста, а в логе написано что он его использует:

Код: Выделить всё

May  3 19:56:41 router exim[9385]: SMTP protocol synchronization error (input sent without waiting for greeting):rejected connection from H=[127.0.0.1] I=[127.0.0.1]:25 input="EHLO 127.0.0.1\r\n"
May  3 19:56:41 router exim[9385]: SMTP protocol synchronization error (input sent without waiting for greeting):rejected connection from H=[127.0.0.1] I=[127.0.0.1]:25 input="EHLO 127.0.0.1\r\n"

я понимаю что это не страшно но все же хотелось бы понять почему такое происходит и как это убрать....

[cj_nik]

Разобрался как?

[diversunt]

Пока не до этого было... Но пользователей он создает алиасы тоже... Пока работает не лезу

[cj_nik]

где видел так:
добавляем acl

acl_smtp_connect = acl_check_connect
...
...
acl_check_connect:
accept hosts = localhost : 127.0.0.1 : techn.***.ru
control = no_enforce_sync
accept

[-=HaRius=-]

Работает, столкнулся с такой же траблой при отправке писем и самого постфикса.

[trevor]

У меня при отправке письма через постфиксадмин выкидывает:

Код: Выделить всё

Nov 26 15:44:09 gw exim[6736]: SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=[127.0.0.1] I=[127.0.0.1]:25 input="EHLO gw.mb.ru\r\n"
Nov 26 15:44:09 gw exim[6736]: SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=[127.0.0.1] I=[127.0.0.1]:25 input="EHLO gw.mb.ru\r\n"

Что это значит?

[dikens3]

http://wiki.lissyara.su/wiki/%D0%A3%D1% ... stfixadmin