[Resuelto] Rechazados emails con adjuntos - jamesdriank - 12-29-2010 08:02 PM
Saludos,
Tengo un problema con los emails...cuando adjunto un fichero sea el que sea...me aparece este error :
Code:
Dec 29 10:47:14 srv01 amavis[3861]: (03861-01) Blocked CLEAN, [miipONO] [miipONO] <cuentarecepcion@micliente.com> -> <cuentadeenvio@gmail.com>, Message-ID: <F85B00894C794748A0B652A658561201@PERSONAL>, Hits: -, 596 ms
Dec 29 10:47:14 srv01 postfix/smtp[4334]: B1EA5604C8: to=<cuentadeenvio@gmail.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=43, delays=43/0.01/0.01/0.59, dsn=2.5.0, status=sent (250 2.5.0 Ok, id=03861-01, BOUNCE)
Dec 29 10:47:14 srv01 postfix/qmgr[4073]: B1EA5604C8: removed
Dec 29 10:47:14 srv01 postfix/virtual[4336]: B28D660DBC: to=<cuentarecepcion@micliente.com>, relay=virtual, delay=0.19, delays=0.09/0.02/0/0.08, dsn=2.0.0, status=sent (delivered to maildir)
Dec 29 10:47:14 srv01 postfix/qmgr[4073]: B28D660DBC: removed
Si no se adjunta nada si que envia sin problemas...
Se os ocurre algo?? Hace falta algun log mas??
Gracias!!
RE: Rechazados emails con adjuntos - kurgans - 12-29-2010 08:12 PM
Tan solo que mires tu configuracion de amavis, para ver si la extension esta permitida, si el tamaño se ajusta, etc...
RE: Rechazados emails con adjuntos - jamesdriank - 12-29-2010 08:17 PM
(12-29-2010 08:12 PM)kurgans Wrote: Tan solo que mires tu configuracion de amavis, para ver si la extension esta permitida, si el tamaño se ajusta, etc...
Code:
srv01:~# vim /etc/postfix/master.cf
# -o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
# For AOL-Accounts
587 inet n - - - - smtpd
-o smtpd_client_restrictions=permit_sasl_authenticated,reject_unauth_destination
#628 inet n - - - - qmqpd
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
#qmgr fifo n - - 300 1 oqmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
smtp unix - - - - - smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay unix - - - - - smtp
-o fallback_relay=
# -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq unix n - - - - showq
error unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
# ====================================================================
# ispCP Ï~I (OMEGA) a Virtual Hosting Control System
#
# @copyright 2001-2006 by moleSoftware GmbH
# @copyright 2006-2010 by ispCP | http://isp-control.net
# @version SVN: $Id: master.cf 2505 2010-01-06 20:30:53Z nuxwin $
# @link http://isp-control.net
# @author ispCP Team
# ====================================================================
# for AMaViS and spam filter support
amavis unix - - n - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
-o disable_dns_lookups=yes
localhost:10025 inet n - n - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o smtpd_override_options=no_address_mappings
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o receive_override_options=no_header_body_checks,no_unknown_recipient_checks
# ispCP autoresponder
ispcp-arpl unix - n n - - pipe
flags=O user=vmail argv=/var/www/ispcp/engine/messenger/ispcp-arpl-msgr
# TLS - Activate, if TLS is avaiable/used
smtps inet n - - - - smtpd
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
# -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent. See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe
flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman unix - n n - - pipe
flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
${nexthop} ${user}
Viendola me quedo igual... hay que revisar algo en especial??
RE: Rechazados emails con adjuntos - kurgans - 12-29-2010 08:50 PM
eso no es amavis es postfix, o bien por el panel con la cuenta maestra que registrastes o bien por la consola amavis.conf
RE: Rechazados emails con adjuntos - jamesdriank - 12-29-2010 09:00 PM
Me cole...jejeje aqui va
Code:
# Sample amavisd.conf file for Maia Mailguard 1.0.1
# Modified for use with Debian by Gary V, mr88talent at yahoo dot com
use strict;
$mydomain = 'hostme.es'; # a convenient default for other settings
$myhostname = 'srv01.hostme.es'; # must be a fully-qualified domain name!
@lookup_sql_dsn = ( ['DBI:mysql:maia:localhost', 'amavis', 'cocoloco'] );
$max_servers = 2; # number of pre-forked children (2..15 is common)
$daemon_user = 'amavis'; # (no default; customary: vscan or amavis)
$daemon_group = 'amavis'; # (no default; customary: vscan or amavis)
$MYHOME = '/var/lib/amavis'; # a convenient default for other settings
$TEMPBASE = $MYHOME; # working directory
$ENV{TMPDIR} = $TEMPBASE; # environment variable TMPDIR
$pid_file = "/var/run/amavis/amavisd.pid";
$lock_file = "/var/run/amavis/amavisd.lock";
$QUARANTINEDIR = '/var/lib/amavis/virusmails';
# Blowfish encryption key file (optional)
#$key_file = "$MYHOME/maia.key";
# $daemon_chroot_dir = $MYHOME; # chroot directory or undef
# $db_home = "$MYHOME/db";
# $helpers_home = "$MYHOME/var"; # prefer $MYHOME clean and owned by root?
#NOTE: create directories $MYHOME/tmp, $MYHOME/var, $MYHOME/db manually
# Use external notification templates (Debian specific)
#read_l10n_templates('en_US', '/etc/amavis');
@local_domains_maps = ( [".$mydomain"] );
# @mynetworks = qw( 127.0.0.0/8 );
$log_level = 0; # verbosity 0..5
$log_recip_templ = undef; # disable by-recipient level-0 log entries
$LOGFILE = "/var/log/amavis.log";
$DO_SYSLOG = 1; # log via syslogd (preferred)
$SYSLOG_LEVEL = 'mail.debug';
$enable_db = 1; # enable use of BerkeleyDB/libdb (SNMP and nanny)
$enable_global_cache = 1; # enable use of libdb-based cache if $enable_db=1
$inet_socket_port = 10024; # listen on this local TCP port(s) (see $protocol)
$sa_tag_level_deflt = -999; # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 5.0; # add 'spam detected' headers at that level
$sa_kill_level_deflt = 5.0; # triggers spam evasive actions
$sa_dsn_cutoff_level = 10; # spam level beyond which a DSN is not sent
$sa_mail_body_size_limit = 500*1024; # don't waste time on SA if mail is larger
$sa_local_tests_only = 0; # only tests which do not require internet access?
$sa_auto_whitelist = 0; # turn on AWL in SA 2.63 or older (irrelevant
# for SA 3.0, cf option is 'use_auto_whitelist')
$virus_admin = "postmaster\@$mydomain"; # notifications recip.
$banned_admin = "postmaster\@$mydomain";
$mailfrom_notify_admin = "virusalert\@$mydomain"; # notifications sender
$mailfrom_notify_recip = "virusalert\@$mydomain"; # notifications sender
$mailfrom_notify_spamadmin = "spam.police\@$mydomain"; # notifications sender
$mailfrom_to_quarantine = ''; # null return path; uses original sender if undef
@addr_extension_virus_maps = ('virus');
@addr_extension_spam_maps = ('spam');
@addr_extension_banned_maps = ('banned');
@addr_extension_bad_header_maps = ('badh');
# $recipient_delimiter = '+'; # undef disables address extensions altogether
# when enabling addr extensions do also Postfix/main.cf: recipient_delimiter=+
$recipient_delimiter = undef;
$path = '/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin';
$file = '/usr/bin/file'; # file(1) utility; use recent versions
$gzip = 'gzip';
$bzip2 = 'bzip2';
$lzop = 'lzop';
$rpm2cpio = ['rpm2cpio.pl','rpm2cpio'];
$cabextract = 'cabextract';
$uncompress = ['uncompress', 'gzip -d', 'zcat'];
$unfreeze = ['unfreeze', 'freeze -d', 'melt', 'fcat'];
$arc = ['nomarch', 'arc'];
$unarj = ['arj', 'unarj'];
$unrar = ['rar', 'unrar'];
$zoo = 'zoo';
$lha = 'lha';
$cpio = ['gcpio','cpio'];
$ar = 'ar';
$dspam = 'dspam';
$MAXLEVELS = 14;
$MAXFILES = 1500;
[b]$MIN_EXPANSION_QUOTA = 100*1024; # bytes (default undef, not enforced)
$MAX_EXPANSION_QUOTA = 300*1024*1024; # bytes (default undef, not enforced)[/b]
$sa_spam_subject_tag = '***SPAM*** ';
$defang_virus = 1; # MIME-wrap passed infected mail
$defang_banned = 1; # MIME-wrap passed mail containing banned name
$notify_method = 'smtp:[127.0.0.1]:10025';
$forward_method = 'smtp:[127.0.0.1]:10025'; # set to undef with milter!
$final_virus_destiny = D_DISCARD;
$final_banned_destiny = D_DISCARD;
$final_spam_destiny = D_DISCARD;
$final_bad_header_destiny = D_DISCARD;
$warnvirussender = 1;
$warnspamsender = 0;
$warnbannedsender = 1;
$warnvirusrecip = 1;
$warnbannedrecip = 1;
$X_HEADER_TAG = 'X-Virus-Scanned';
$X_HEADER_LINE = "Maia Mailguard 1.0.2";
use DBI;
my $db = "ispcp";
my $user="root"; # Type here your ispCP MySQL User
# (is the same you typed during the setup)
my $host="localhost";
my $password="xxxx"; # Type here your ispCP MySQL Password
#(is the same you typed during the setup)
my $dbh = DBI->connect("DBI:mysql:database=$db;host=$host", $user, $password, {RaiseError => 1});
my $arr = $dbh->selectcol_arrayref('SELECT domain_name, 1 FROM domain', {Columns=>[1,2]});
my $arre = $dbh->selectcol_arrayref('SELECT alias_name, 1 FROM domain_aliasses', {Columns=>[1,2]});
my $lis = ($arre,$arr);
%local_domains = (@$arr,@$arre);
@viruses_that_fake_sender_maps = (new_RE(
[qr'\bEICAR\b'i => 0], # av test pattern name
[qr'^(WM97|OF97|Joke\.)'i => 0], # adjust names to match your AV scanner
[qr/.*/ => 1], # true for everything else
));
@keep_decoded_original_maps = (new_RE(
# qr'^MAIL$', # retain full original message for virus checking (can be slow)
qr'^MAIL-UNDECIPHERABLE$', # recheck full mail if it contains undecipherables
qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
# qr'^Zip archive data', # don't trust Archive::Zip
));
$banned_filename_re = new_RE(
# qr'^UNDECIPHERABLE$', # is or contains any undecipherable components
# block certain double extensions anywhere in the base name
qr'\.[^./]*\.(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)\.?$'i,
# qr'[{}]', # curly braces in names (serve as Class ID extensions - CLSID)
qr'^application/x-msdownload$'i, # block these MIME types
qr'^application/x-msdos-program$'i,
qr'^application/hta$'i,
qr'^message/partial$'i, qr'^message/external-body$'i, # rfc2046 MIME types
# [ qr'^\.(Z|gz|bz2)$' => 0 ], # allow any type in Unix-compressed
# [ qr'^\.(rpm|cpio|tar)$' => 0 ], # allow any type in Unix archives
# [ qr'^\.(zip|rar|arc|arj|zoo)$'=> 0 ], # allow any type within such archives
# qr'.\.(exe|vbs|pif|scr|bat|cmd|com|cpl)$'i, # banned extension - basic
qr'.\.(ade|adp|app|bas|bat|chm|cmd|com|cpl|crt|exe|fxp|hlp|hta|inf|ins|isp|
js|jse|lnk|mda|mdb|mde|mdw|mdt|mdz|msc|msi|msp|mst|ops|pcd|pif|prg|
reg|scr|sct|shb|shs|vb|vbe|vbs|wsc|wsf|wsh)$'ix, # banned ext - long
# qr'.\.(mim|b64|bhx|hqx|xxe|uu|uue)$'i, # banned extension - WinZip vulnerab.
qr'^\.(exe-ms)$', # banned file(1) types
qr'^\.(exe|lha|cab|dll)$', # banned file(1) types
);
@score_sender_maps = ({}); # should be empty if using Maia Mailguard
....
$MIN_EXPANSION_QUOTA = 100*1024; # bytes (default undef, not enforced)
$MAX_EXPANSION_QUOTA = 300*1024*1024; # bytes (default undef, not enforced)
Es ahi donde radica el problema por casualidad?? En la configuracion de MAIA ya le he permitido archivos de 30MEGAS que es lo que necesito.
sl2 y gracias
RE: Rechazados emails con adjuntos - kurgans - 12-29-2010 09:02 PM
Y cual se supone que es la extension del archivo que envias y el tamaño que tiene
RE: Rechazados emails con adjuntos - jamesdriank - 12-29-2010 09:04 PM
(12-29-2010 09:02 PM)kurgans Wrote: Y cual se supone que es la extension del archivo que envias y el tamaño que tiene
Un mp3 por ejemplo de 8MB no me deja...
PDFs de 2 megas tampoco....
Un doc de 1 mega tampoco....
Un xls de 5 megas tampoco...
Acabo de enviar un rar de 1,8MB y si lo ha enviado...
Incluyo esas extensiones en el listado y listo??
RE: Rechazados emails con adjuntos - kurgans - 12-29-2010 09:21 PM
Deberas autorizar las extensiones que no son baneadas
No puedes pasar de 2 mb, si te digo la verdad jamas lo he cambiado por consola, siempre por el panel pero por algun archivo de configuracion de clamav o amavis andara el parametro para cambiar el tamaño del adjunto
RE: Rechazados emails con adjuntos - jamesdriank - 12-29-2010 09:24 PM
(12-29-2010 09:21 PM)kurgans Wrote: Deberas autorizar las extensiones que no son baneadas
No puedes pasar de 2 mb, si te digo la verdad jamas lo he cambiado por consola, siempre por el panel pero por algun archivo de configuracion de clamav o amavis andara el parametro para cambiar el tamaño del adjunto
Los adjuntos los cambio desde mysql...le meto 30MB a las cuentas que quiero y acabo antes....
Lo que he probado es a añadir las extensiones de esta manera :
Code:
$unrar = ['rar', 'unrar'];
$zoo = 'zoo';
$lha = 'lha';
$cpio = ['gcpio','cpio'];
$ar = 'ar';
$dspam = 'dspam';
$pdf = 'pdf';
$mp3 = 'mp3';
y he enviado un mail con un pdf y un mp3 y no lo envia....
hay que añadir algo mas??
RE: Rechazados emails con adjuntos - kurgans - 12-29-2010 09:24 PM
reiniciarlo si no lo has echo
|