Помогите пожалуйста разобраться в чём дело с почтовиком.
Почтовик является шлюзом для exchange 2007
И очередь постоянно забита какими то письмами непонятно от кого (не с моего домена) непонятно кому (опять же не мне) и непонятно почему postfix не даёт таким сендерам сразу отлуп.
192.168.2.3 это адрес Exchange сервера. фаерволом закрыт 25 порт от всех посылальщиков внутри сети кроме exchange
Вот отрывок из висяка:
Код: Выделить всё
BCEB924A86D 8965 Wed Nov 30 15:55:31 MAILER-DAEMON
(connect to host-93-124-81-52.dsl.sura.ru[93.124.81.52]:25: Connection refused)
CbQA@host-93-124-81-52.dsl.sura.ru
5A87324A857 19966 Wed Nov 30 16:00:08 MAILER-DAEMON
(connect to ppp95-165-193-21.pppoe.spdop.ru[95.165.193.21]:25: Operation timed out)
vdLVk9@ppp95-165-193-21.pppoe.spdop.ru
4A94D24A88B 9100 Wed Nov 30 15:48:53 MAILER-DAEMON
(connect to 74-115-1-96.anchorfree.com[68.68.107.161]:25: Connection refused)
S3YDe@74-115-1-96.anchorfree.com
4139224A880 9892 Wed Nov 30 15:50:22 MAILER-DAEMON
(connect to h109-187-143-222.dyn.bashtel.ru[109.187.143.222]:25: Operation timed out)
STP2JWQ@h109-187-143-222.dyn.bashtel.ruВ сети вирусов нет. Вполне за ней слежу. В принципе почта работает, единственно приходится периодически чистить эту очередь.
virtual_transport:
Код: Выделить всё
domen1 smtp:[192.168.2.3]
domen2 smtp:[192.168.2.3]Код: Выделить всё
queue_directory = /var/spool/postfix
command_directory = /usr/local/sbin
daemon_directory = /usr/local/libexec/postfix
data_directory = /var/db/postfix
mail_owner = postfix
default_privs = nobody
myhostname = mx.domen1.ru
mydomain = domen1.ru
myorigin = $mydomain
mydestination = $myhostname $mydomain domen2.ru
relay_domains = $mydomain domen2.ru
relay_host =
default_destination_concurrency_limit = 200
inet_interfaces = all
#inet_interfaces = $myhostname
#inet_interfaces = $myhostname, localhost
local_recipient_maps =
#unknown_local_recipient_reject_code = 550
mynetworks = 192.168.2.3/32, 127.0.0.0/8
transport_maps = hash:/usr/local/etc/postfix/virtual_transport
in_flow_delay = 1s
########################## ANTI-SPAM #########################################
invalid_hostname_reject_code = 550
non_fqdn_reject_code = 550
unknown_client_reject_code = 550
unknown_hostname_reject_code = 550
unverified_sender_reject_code = 550
strict_rfc821_envelopes = yes
disable_vrfy_command = yes
smtpd_client_restrictions = permit_mynetworks,
reject_non_fqdn_hostname,
reject_non_fqdn_sender,
reject_rbl_client blackholes.mail-abuse.org,
reject_rbl_client dialups.mail-abuse.org,
reject_rbl_client dul.ru,
reject_rbl_client opm.blitzed.org,
reject_rbl_client sbl.spamhaus.org,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client dul.dnsbl.sorbs.net,
reject_rbl_client dnsbl.njabl.org,
reject_rbl_client dynablock.njabl.org,
reject_rbl_client combined.njabl.org,
reject_unauth_destination,
reject_unknown_client,
reject_unknown_client_hostname
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
check_helo_access hash:/usr/local/etc/postfix/helo_checks,
reject_invalid_helo_hostname,
reject_invalid_hostname,
reject_unknown_hostname,
reject_unknown_helo_hostname,
reject_non_fqdn_hostname
smtpd_sender_restrictions = permit_mynetworks,
check_sender_access hash:/usr/local/etc/postfix/sender_checks,
reject_unknown_sender_domain,
reject_non_fqdn_sender,
reject_non_fqdn_hostname
smtpd_recipient_restrictions = permit_mynetworks,
reject_unauth_pipelining,
reject_unauth_destination,
reject_unlisted_recipient,
reject_non_fqdn_hostname,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_rbl_client bl.spamcop.net,
reject_rbl_client zen.spamhaus.org
smtpd_data_restrictions = reject_unauth_pipelining,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_unknown_sender_domain,
permit
smtpd_etrn_restrictions = reject
smtpd_reject_unlisted_sender = yes
disable_vrfy_command = yes
strict_rfc821_envelopes = yes
smtp_always_send_ehlo = yes
smtpd_soft_error_limit = 3
smtpd_error_sleep_time = 10
smtpd_hard_error_limit = 8
readme_directory = /usr/local/share/doc/postfix
sample_directory = /usr/local/etc/postfix
sendmail_path = /usr/local/sbin/sendmail
html_directory = /usr/local/share/doc/postfix
setgid_group = maildrop
manpage_directory = /usr/local/man
newaliases_path = /usr/local/bin/newaliases
mailq_path = /usr/local/bin/mailq
