1 Topic by djgnoriega2

  • djgnoriega2
  • Member
  • Offline
  • Registered: 2015-10-12
  • Posts: 37

Topic: separate amavis and postfix

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue:
======== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.2
- Linux/BSD distribution name and version: ubuntu 14.04 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): apache
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue: 

I configured my mail server postfix, now I need antivirus and antispam place on another server.

I set my mail server configuration files main.cf and master.cf parameters to reference the antivirus server.

However, the log reflects mail server can not connect to the server antivirus:

Dec 10 16:37:31 viper1 postfix / smtp [7081]: connect to antivirusserver [ip]: 10024: Connection refused

main.cf:
content_filter = smtp-amavis: [antivirusserver]: 10024

master.cf
smtp-amavis unix - - n - 2 smtp
127.0.0.1:10025 inet n - n - - smtpd
====

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by djgnoriega2

  • djgnoriega2
  • Member
  • Offline
  • Registered: 2015-10-12
  • Posts: 37

Re: separate amavis and postfix

Any idea to solve this?

3 Reply by djgnoriega2

  • djgnoriega2
  • Member
  • Offline
  • Registered: 2015-10-12
  • Posts: 37

Re: separate amavis and postfix

again I indicate the current error:
Dec 16 03:18:08 emailserver postfix/smtp[32611]: 8AEF26217F: to=<root@emailserver>, orig_to=<root>, relay=none, delay=1086, delays=1086/0.03/0/0, dsn=4.4.1, status=deferred (connect to antivirusserver[antivirusserver]:10024: Connection refused)

best regards

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: separate amavis and postfix

Do you configure Amavisd to bind to 127.0.0.1 in /etc/amavis/conf.d/50-user? like below:

$inet_socket_bind = ['127.0.0.1'];

You should update (or add) this setting to make Amavisd listening on the network interface which can be accessed. for example:

$inet_socket_bind = ['127.0.0.1', '192.168.1.10'];

5 Reply by djgnoriega2

  • djgnoriega2
  • Member
  • Offline
  • Registered: 2015-10-12
  • Posts: 37

Re: separate amavis and postfix

I updated the parameter, however, another error occurs:

Dec 16 10:50:04 Viper2 postfix / smtp [563]: 1888762174: to = <dgarcia @ mailserver>, relay = antivirusserver [ip_antivirusserver]: 10024, delay = 451, delays = 451 / 0.05 / 0/0, dsn = 4.4.2, status = deferred (Lost Connection with antivirusserver [IP_antivirusserver] while receiving the initial server greeting)

in your example: $ inet_socket_bind = ['127.0.0.1', '192.168.1.10']; the address 192.168.1.10 should be the address of my server antivirus or the address of my mail server?

6 Reply by djgnoriega2

  • djgnoriega2
  • Member
  • Offline
  • Registered: 2015-10-12
  • Posts: 37

Re: separate amavis and postfix

in reference to the previous answer, then place the output log of my server antivirus:
Dec 16 11:15:01 viper3 amavis [8476]: () from IP 10,182,160,152 ACCESS DENIED, policy bank '' (!)

7 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: separate amavis and postfix

djgnoriega2 wrote:

in your example: $ inet_socket_bind = ['127.0.0.1', '192.168.1.10']; the address 192.168.1.10 should be the address of my server antivirus or the address of my mail server?

Amavisd is running on your antivirus server, so the example, '192.168.1.10', should be the IP of your antivirus server.

8 Reply by djgnoriega2

  • djgnoriega2
  • Member
  • Offline
  • Registered: 2015-10-12
  • Posts: 37

Re: separate amavis and postfix

Thanks for clearing my doubt, any idea how to overcome this error? : amavis [8662]: () from IP 10.91.137.42 DENIED ACCESS, policy bank '' (!)

9 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: separate amavis and postfix

Try to add the IP address of another server in Amavisd setting "@inet_acl =". For example:

@inet_acl = qr(127.0.0.1 10.91.137.42);

10 Reply by djgnoriega2

  • djgnoriega2
  • Member
  • Offline
  • Registered: 2015-10-12
  • Posts: 37

Re: separate amavis and postfix

SOLVED

Thanks!