OK I tired this. What "mydestination" is set to does not matter whether
it's localhost or 127.0.0.1 if spampd is set to use localhost and not
127.0.0.1 it will not work.
So I'm convinced that was the root cause of my problem, spampd set to
use localhost when postfix is set to use 127.0.01 explicitly.
If anyone can explain the detailed why I am curious to know.
Thanks,
-Curt
On 6/28/24 22:16, Curtis J Blank via Postfix-users wrote:
Peter, my misunderstanding, sorry. This is what I discovered today in
my testing. I explicitly used 127.0.0.1 and not localhost or so I
thought, I explain that below.
Back on topic. I did some more testing. This was the spampd options used:
SPAMPD_OPTIONS="--host=localhost:10025 --relayhost=localhost:10026
--user=vscan --tagall --children=5 --maxsize=7168 --homedir=/home/vscan"
I changed it to:
SPAMPD_OPTIONS="--host=127.0.0.1:10025 --relayhost=127.0.0.1:10026
--user=vscan --tagall --children=5 --maxsize=7168 --homedir=/home/vscan"
There is no global
mynetworks = something
in main.cf.
inet_protocols was set back to:
inet_protocols = all
And all works just fine. So, spampd set to use localhost when
everything in postfix was set to use 127.0.0.1 probably explains why
smtp thought spampd was trying to relay via a ::1 connection and
denied it. But the part I still don't understand is why smtp was
trying to use ::1 when everything postfix wise is set to use 127.0.0.1.
Everything except this that is:
mydestination = $myhostname, localhost.$mydomain, $mydomain, www.$mydomain
Should this be set to:
mydestination = $myhostname, 127.0.0.1.$mydomain, $mydomain, www.$mydomain
To keep ::1 from being used? If so oversight on my part, not thinking
that through, so setting it to 127.0.0.1 would probably allow me to
revert the spamd options back to what they were.
Maybe I'll just try it and see.
-Curt
On 6/28/24 21:01, Peter via Postfix-users wrote:
On 29/06/24 03:17, Curtis J Blank via Postfix-users wrote:
Well Peter all the "mynetworks =" that I have defined explicitly
state 127.0.0.1 not localhost and all the logging shows 127.0.0.1
not localhost. So that is why I say I am using 127.0.0.1. So I
cannot follow Ralph's suggestion changing localhost to 127.0.0.1
because there are no localhost's used in the configs to change.
I never said the problem was with mynetworks, and neither did Ralph.
Someone else said that and it's incorrect. The problem is with
whatever setting you have pointing to localhost:10025 as per your
initial email:
"The problem was handing messages off to localhost:10025 for
spamassassin to scan before delivery"
...this is likely your content_filter setting but could be done in
other settings instead.
Also, smtp_address_preference is not set to anything on the old
server, it is set to "any" in the new server and I think you hit on
the why I was looking for, thank you. Wonder if the default setting
in 2.11 is ipv4 and not "any".
The default in 2.11 is any and any is probably the best setting under
most circumstances, except it will cause some attempts to be made to
ipv6 and some to ipv4, so you'd get ransom rejections based on which
is tried first.
I was not aware of that parameter until you mentioned it and things
like that are exactly why I started this thread.
And I don't have compatibility_level set in the old sever either, it
is set to 3.9 in the new server. Another one I was not aware of.
3.9 is where you want it set.
Even though I did a line by line config comparison I glossed over
things that weren't in the old and the new. I see in this case that
was a mistake, those parameters by name are enough to clue me in. I
will look to see what SA is set to use but I bet you're right.
Again, thanks all, this really helps and I'm bet'n I'll be able to
set "inet_protocols = all" shortly.
You should either explicitly set [127.0.0.1]:10025 for your
content_filter (or whatever setting you're using for that) or set
your SpamAssassin config to accept the mail on both 127.0.0.1 and
::1. either of these whould work and are probably the best
recommendation I can give for a fix.
Peter
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
_______________________________________________
Postfix-users mailing list --postfix-users@postfix.org
To unsubscribe send an email topostfix-users-le...@postfix.org
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
