Le 22 mars 2013 à 00:11, Wietse Venema a écrit :

> Axel Luttgens:
>> So, looks quite promising. :-)
>> Are there other tests I could/should run in order to be fully reassured?
> 
> Does it work with postscreen? (turn off postscreen cache, turn on
> "after 220 greeting" tests, then do the same tests as with smtpd).

Did you mean something like:

        #smtp      inet  n       -       n       -       -       smtpd
        smtp      inet  n       -       n       -       1       postscreen
        smtpd     pass  -       -       n       -       -       smtpd
        dnsblog   unix  -       -       n       -       0       dnsblog

in master.cf and:

        postscreen_cache_map = 
        postscreen_access_list = 
        postscreen_pipelining_enable = yes
        postscreen_non_smtp_command_enable = yes
        postscreen_bare_newline_enable = yes

in main.cf?

With above settings, I'm able to speak to postcreen up to the RCPT command 
inclusive, then get a "450 4.3.2 Service currently unavailable" message and 
have to QUIT.

As expected, a connection to postscreen left idle quits after 5 minutes.

Activating caching (i.e. removing the "postscreen_cache_map =" line from 
main.cf) then results in a "PASS OLD [127.0.0.1]:port" message and I'm handed 
off to a smtpd process, through which I may send a message.

So, as far as I can tell, everything appears to be fine with postscreen.


> Does it work with FIFOs for qmgr and pickup? (edit master.cf then
> "postfix reload").

Having the following in master.cf

        #pickup    unix  n       -       n       60      1       pickup
        pickup    fifo  n       -       n       60      1       pickup
        cleanup   unix  n       -       n       -       0       cleanup
        #qmgr      unix  n       -       n       300     1       qmgr
        qmgr      fifo  n       -       n       300     1       qmgr

indeed creates FIFOs instead of sockets:

        prw--w--w-   1 _postfix  _postdrop    0 22 mar 15:27 pickup
        prw--w--w-   1 _postfix  _postdrop    0 22 mar 15:27 qmgr

and all tests from the "check-list" (see my initial message for this thread) 
succeed.

Again, seems to be quite conclusive.

Axel

Reply via email to