Hi Will
Thanks for the reply. I see that our Postfix daemon is not running chrooted.
Does it have to in order to get the functionality of Anomy running properly.
I would of thought that it would run without Postfix being in chroot jail
(but I know that that would provide a better measure of security - and will
do that once inbound mail is delivered via Postfix). I am trying to get
Anomy running firstly on outbound mail queue and did not think that chroot
jail would be necessary for Anomy to work on outbound mail.
The lines I added in master.cf are on one line each. Original email listing
mods seem to have word-wrapped upon sending.
Looking forward to any feedback
Kind regards Tom
-----Original Message-----
From: Wil McGilvery [mailto:62448@xyz.molar.is]
Sent: Tuesday, 5 November 2002 6:16 p.m.
To: Tom Webb
Subject: RE: [anomy-list]: NEWBIE Q: Mail Dies When Going Through Anomy
Your master.cf would tell you if it is chrooted and your /var/spool/postfix
would contain usr/lib and etc directories, etc. I looked at your master.cf
you posted and it doesn't look to be chrooted.
Make sure the lines you added to the master.cf are on one line.
Wil
-----Original Message-----
From: Tom Webb [mailto:62362@xyz.molar.is]
Sent: Mon 11/4/2002 8:39 PM
To: Wil McGilvery
Cc:
Subject: RE: [anomy-list]: NEWBIE Q: Mail Dies When Going Through
Anomy
Hi Wil
Yes I'm using Redhat 7.3 (with all latest security errata applied).
Not sure if Postfix is chrooted. How do I issue a command to check
that???
Good question - filter.sh is located in /usr/local/anomy directory
Permissions are as follows:
owned by user root and group filter with 0750 permissions:
-rwxr-x--- owner=root group=filter
Kind Regards
Tom Webb
Inlet Technologies Limited
Network and Systems Integration Services
Phone 0064 9 525-8110
Fax 0064 9 525-8112
Mobile 021 818 798
E-Mail 62487@xyz.molar.is
Web Site: www.inlet.co.nz
CAUTION - This message and attachments are confidential to Inlet
Technologies Limited and the intended recipient(s). This message may
contain
privileged and confidential information > intended only for the use
of the
addressee(s) named above. If you are not > the intended recipient
of this
message you are hereby notified that any > use, dissemination,
distribution
or reproduction of this message is > prohibited. If you have
received this
message in error please notify Inlet Technology Corporation Limited>
Inlet
Te immediately via email at 62523@xyz.molar.is. > Any views
expressed in
this message are those of the individual sender and > may not
necessarily
reflect the views of Inlet Technology Corporation Limited.
This footnote confirms that this e-mail message has been scanned for
the
presence of known computer viruses by Inlet Technologies' Internal
Anti-virus Protection measures. However, it is still recommended
that you
use local virus scanning software to monitor for the presence of
viruses as
new viruses are been written daily.
-----Original Message-----
From: Wil McGilvery [mailto:62448@xyz.molar.is]
Sent: Tuesday, 5 November 2002 1:27 p.m.
To: Tom Webb
Subject: RE: [anomy-list]: NEWBIE Q: Mail Dies When Going
Through
Anomy
Are you on redhat linux?
Is postfix chrooted?
Dumb question - is filter.sh located in /usr/local/anomy/?
What are the permissions?
I have the same setup using Mandrake 8.0 and postfix. I will gladly
help if
I can.
Regards,
Wil McGilvery
Manager, Digital Media
Lynch Technologies Inc.
416-744-7191
1-888-622-3729
416-744-0406 FAX
www.lynchdigital.com
-----Original Message-----
From: Tom Webb [mailto:62362@xyz.molar.is]
Sent: Monday, November 04, 2002 7:12 PM
To: 62398@xyz.molar.is
Subject: [anomy-list]: NEWBIE Q: Mail Dies When Going Through Anomy
Hi everyone
I'm new to this list. Am having some troubles with setting up Anomy
(version
1.54) to work properly on our gateway. My setup is as follows:
Email client sends message(usually Outlook Clients) >> Exchange
Server 5.5
>> Postfix Server (sitting on Linux Gateway).
Without filtering enabled clients on corporate LAN can send and
receive
mails via this setup. Followed instructions as per
http://www.advosys.ca/papers/postfix-filtering.html
<http://www.advosys.ca/papers/postfix-filtering.html> However upon
enabling
Postfix filter (postfix reload) keep getting the following errors:
--- Taken from Mail log ---
Nov 5 11:26:18 snapserver postfix/postfix-script: refreshing the
Postfix
mail system
Nov 5 11:26:18 snapserver postfix/master[2001] : reload
configuration
Nov 5 11:26:44 snapserver postfix/smtpd[20967] : connect from
inletmail[192.168.1.3]
Nov 5 11:26:44 snapserver postfix/smtpd[20967] : 769C68563:
client=inletmail[192.168.1.3]
Nov 5 11:26:44 snapserver postfix/cleanup[20968] : 769C68563:
from=<62362@xyz.molar.is., size=1963, nrcpt=1 (queue active)
Nov 5 11:26:44 snapserver postfix/smtpd[20967] : disconnect from
inletmail[192.168.1.3]
Nov 5 11:26:44 snapserver pipe[20971]: fatal: pipe_comand: execvp
/usr/local/anomy/filter.sh: No such file or directory
Nov 5 11:26:45 snapserver postfix/pipe[20970]: 769C68563:
62565@xyz.molar.is
<mailto:62617@xyz.molar.is> ,
relay=filter, delay=1, status=bounced (Command died with status 1:
"usr/local/anomy/filter.sh")
In the client inbox I get a message from Postfix stating:
This is the Postfix program at host snapserver.inlet.co.nz.
I'm sorry to have to inform you that the message returned
below could not be delivered to one or more destinations.
For further assistance, please send mail to <postmaster>
If you do so, please include this problem report. You can
delete your own text from the message returned below.
The Postfix program
<62617@xyz.molar.is>: Command died with status 1:
"/usr/local/anomy/filter.sh"
Can any point out what is going wrong here. I have compared it to a
friend's
setup that is working and everything seems in order, but still get
these
errors when I reload Postfix with filtering on.
Can post anything that maybe of help to you. Please let me know, I
really
would love to get this going properly.
Kind Regards
Tom Webb
Inlet Technologies Limited
Network and Systems Integration Services
Phone 0064 9 525-8110
Fax 0064 9 525-8112
Mobile 021 818 798
E-Mail 62487@xyz.molar.is
Web Site: www.inlet.co.nz
CAUTION - This message and attachments are confidential to Inlet
Technologies Limited and the intended recipient(s). This message may
contain
privileged and confidential information > intended only for the use
of the
addressee(s) named above. If you are not > the intended recipient
of this
message you are hereby notified that any > use, dissemination,
distribution
or reproduction of this message is > prohibited. If you have
received this
message in error please notify Inlet Technology Corporation Limited>
Inlet
Te immediately via email at 62523@xyz.molar.is. > Any views
expressed in
this message are those of the individual sender and > may not
necessarily
reflect the views of Inlet Technology Corporation Limited.
This footnote confirms that this e-mail message has been scanned for
the
presence of known computer viruses by Inlet Technologies' Internal
Anti-virus Protection measures. However, it is still recommended
that you
use local virus scanning software to monitor for the presence of
viruses as
new viruses are been written daily.
- 8< - - -
This mailing list's home page is:
http://mailtools.anomy.net/archives/anomy-list/
There you can find subscription instructions and possibly an
archive.
Molar.is is a free Icelandic mailing list service.
- - - >8 -