RootForum Community

Code: Select all

Feb 20 22:01:18 server2 popper[10915]: I/O error flushing output to client  at serverX.domain.net [217.160.XXX.XXX]: Operation not permitted (1) [pop_send.c:689]
Feb 20 22:01:19 server2 popper[10926]: OpenSSL error during handshake [pop_tls_openssl.c:562]
Feb 20 22:01:19 server2 popper[10926]: ...SSL error: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca [pop_tls_openssl.c:562]
Feb 20 22:01:19 server2 popper[10926]: (null) at serverX.domain.net (217.160.XXX.XXX): -ERR POP EOF or I/O Error [popper.c:820]
Feb 20 22:01:19 server2 popper[10926]: I/O error flushing output to client  at serverX.domain.net [217.160.XXX.XXX]: Operation not permitted (1) [pop_send.c:689]
Feb 20 22:01:19 server2 popper[10926]: I/O error flushing output to client  at serverX.domain.net [217.160.XXX.XXX]: Operation not permitted (1) [pop_send.c:689]
Feb 20 22:01:19 server2 popper[10933]: OpenSSL error during handshake [pop_tls_openssl.c:562]
Feb 20 22:01:19 server2 popper[10933]: ...SSL error: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca [pop_tls_openssl.c:562]
Feb 20 22:01:19 server2 popper[10933]: (null) at serverX.domain.net (217.160.XXX.XXX): -ERR POP EOF or I/O Error [popper.c:820]
Feb 20 22:01:19 server2 popper[10933]: I/O error flushing output to client  at serverX.domain.net [217.160.XXX.XXX]: Operation not permitted (1) [pop_send.c:689]

Code: Select all

command_directory = /usr/sbin

daemon_directory = /usr/lib/postfix

default_privs = autoresponder

unknown_local_recipient_reject_code = 450

debug_peer_level = 2

debugger_command =
	 PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
	 xxgdb $daemon_directory/$process_name $process_id & sleep 5


sendmail_path = /usr/sbin/sendmail

newaliases_path = /usr/bin/newaliases

mailq_path = /usr/bin/mailq

setgid_group = maildrop

manpage_directory = /usr/share/man

sample_directory = /usr/share/doc/packages/postfix/samples

readme_directory = /usr/share/doc/packages/postfix/README_FILES
canonical_maps = hash:/etc/postfix/canonical
virtual_maps = hash:/etc/postfix/virtual, hash:/etc/postfix/confixx_virtualUsers, hash:/etc/postfix/confixx_localDomains
relocated_maps = hash:/etc/postfix/relocated
transport_maps = hash:/etc/postfix/transport
sender_canonical_maps = hash:/etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
myhostname = serverX.domain.net
masquerade_domains = 
defer_transports = 
disable_dns_lookups = no
mailbox_command = /usr/bin/procmail
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_client_restrictions = 
smtpd_helo_required = no
smtpd_helo_restrictions = 
strict_rfc821_envelopes = no
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtp_use_tls = no
alias_maps = hash:/etc/aliases
mailbox_size_limit = 0
message_size_limit = 10240000

#SMTPD Auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes

#TLS Support
smtpd_use_tls = yes
#smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/postfix/key.pem
smtpd_tls_cert_file = /etc/postfix/cert.pem
smtpd_tls_CAfile = /etc/ssl/certs/aXXXXXXX.alturo-server.de-sample-ca.crt
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

mydestination = serverX.domain.net, localhost.serverX.domain.net, localhost

Code: Select all

# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp	  inet	n	-	n	-	-	smtpd
smtps	  inet	n	-	n	-	-	smtpd
  -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission	inet	n	-	n	-	-	smtpd
#  -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628	  inet	n	-	n	-	-	qmqpd
pickup	  fifo	n	-	n	60	1	pickup
cleanup	  unix	n	-	n	-	0	cleanup
qmgr	  fifo	n	-	n	300	1	qmgr
#qmgr	  fifo	n	-	n	300	1	nqmgr
#tlsmgr   fifo  -       -       n       300     1       tlsmgr
rewrite	  unix	-	-	n	-	-	trivial-rewrite
bounce	  unix	-	-	n	-	0	bounce
defer	  unix	-	-	n	-	0	bounce
flush	  unix	n	-	n	1000?	0	flush
proxymap  unix	-	-	n	-	-	proxymap
smtp	  unix	-	-	n	-	-	smtp
#relay	  unix	-	-	n	-	-	smtp
#	-o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix	n	-	n	-	-	showq
error     unix	-	-	n	-	-	error
local	  unix	-	n	n	-	-	local
virtual	  unix	-	n	n	-	-	virtual
lmtp	  unix	-	-	n	-	-	lmtp
#localhost:10025 inet	n	-	n	-	-	smtpd -o content_filter=
#
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# maildrop. See the Postfix MAILDROP_README file for details.
#
#maildrop  unix  -       n       n       -       -       pipe
#  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
cyrus	  unix	-	n	n	-	-	pipe
  user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
uucp	  unix	-	n	n	-	-	pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
vscan     unix  -       n       n       -       10       pipe
  user=vscan argv=/usr/sbin/amavis ${sender} ${recipient}
procmail  unix  -       n       n       -       -       pipe
  flags=R user=nobody argv=/usr/bin/procmail -t -m /etc/procmailrc ${sender} ${recipient}
relay	  unix	-	-	n	-	-	smtp
trace	  unix	-	-	n	-	0	bounce
verify	  unix	-	-	n	-	1	verify
anvil	  unix	-	-	n	-	1	anvil

Code: Select all

#
# qpopper - pop3 mail daemon
#
service pop3
{
#	disable		= yes
	socket_type	= stream
	protocol	= tcp
	wait		= no
	user		= root
	server		= /usr/sbin/popper
	server_args	= -s -l1 -f /etc/qpopper.conf
	flags		= IPv4
}

Code: Select all

#
# qpopper - pop3 mail daemon
#
service pop3s
{
#	disable		= yes
	socket_type	= stream
	protocol	= tcp
	wait		= no
	user		= root
	server		= /usr/sbin/popper
	server_args	= -s -l2 -f /etc/qpopper.conf
	flags		= IPv4
}

Code: Select all

set tls-server-cert-file = /etc/ssl/private/qpopper.key

Code: Select all

#
# qpopper - pop3 mail daemon
#
service pop3
{
#   disable      = yes
   socket_type   = stream
   protocol   = tcp
   wait      = no
   user      = root
   server      = /usr/sbin/popper
   server_args   = -s
   flags      = IPv4
}