Contenu | Rechercher | Menus

Annonce

Si vous avez des soucis pour rester connecté, déconnectez-vous puis reconnectez-vous depuis ce lien en cochant la case
Me connecter automatiquement lors de mes prochaines visites.

À propos de l'équipe du forum.

#1 Le 16/04/2013, à 19:02

Frankycestbon

Postfix, DKIM et Mailman, problemes problemes problemes

Bonjour, je poste sur le forum car je rencontre des problemes pour installer un serveur mail correct pour gérer mes mailing lists. Je vais essayer de donner le plus d'informations possible.
Voila je ne comprend pas je ne reçoit pas d'emails, ou seulement dans certaines conditions, par exemple je m'envoi un mail avec gmail, je reçoit rien, et je fait une demande d'information en envoyant
depuis admin@MONDOMAINE.com a http://www.appmaildev.com/fr/dkim/ pour un DKIM check et je reçoit bien leurs mail de récapitulatif.
Un autre probleme, j'ai installer Mailman mais je n'arrive pas a y acceder depuis un navigateur (voir config apache ci dessous), et si je fait un alias sur / pour /usr/lib/cgi-bin/mailman/admin par exemple
il veut me faire télécharger le fichier ADMIN (dans /usr/lib/cgi-bin/mailman/ aucun fichiers n'a d'extensions php ou autre) donc inutilisable.

En gros:
- Je ne reçoit pas d'emails
- Mailman: Je n'arrive pas a acceder a lists.domain.com
- Vérification DKIM qui ne se fait pas

Debian Squeeze sur un VPS. Serveur mail Postfix, tests avec Roundcube
Les informations dans les .cfg sont remplacés par
888.888.888.888 (ip du serveur)
MONDOMAINE.com (ndd)

/etc/postfix/master.cf

#
# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       -       -       -       smtpd
submission inet n       -       -       -       -       smtpd
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       -       -       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#628       inet  n       -       -       -       -       qmqpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       -       300     1       oqmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay     unix  -       -       -       -       -       smtp
	-o smtp_fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
#
# Specify in cyrus.conf:
#   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of the following:
#  mailbox_transport = lmtp:inet:localhost
#  virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus     unix  -       n       n       -       -       pipe
#  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
# Old example of delivery via Cyrus.
#
#old-cyrus unix  -       n       n       -       -       pipe
#  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix	-	n	n	-	2	pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}
dovecot   unix  -       n       n       -       -       pipe
    flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient}
policy  unix  -       n       n       -       -       spawn
        user=nobody argv=/usr/sbin/postfix-policyd-spf-perl



## 15/04/2013 test config 
dovecot   unix  -       n       n       -       -       pipe
    flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient}

/etc/postfix/main.cf

#milter See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = /usr/share/doc/postfix

# TLS parameters
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_use_tls = yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache


#
# SASL SMTPS
smtpd_sasl_type = dovecot
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
# Specify a list of properties separated by comma or whitespace
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = MONDOMAINE.com



# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = MONDOMAINE.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
#mydestination = MONDOMAINE.com, localhost, localhost.localdomain
relayhost = 
mynetworks = 888.888.888.0/24, 127.0.0.0/8
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
html_directory = /usr/share/doc/postfix/html
message_size_limit = 30720000
virtual_alias_domains = 
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes
#smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination permit


smtpd_recipient_restrictions=
	permit_mynetworks,
	permit_sasl_authenticated,
	reject_unauth_destination,
	reject_non_fqdn_recipient,
	reject_unknown_sender_domain,
	reject_non_fqdn_sender,
	reject_unknown_recipient_domain,
	reject_invalid_helo_hostname,
	reject_unlisted_recipient,
	reject_unlisted_sender,
	reject_non_fqdn_helo_hostname,
	reject_rbl_client list.dsbl.org,
	reject_rhsbl_sender dsn.rfc-ignorant.org


smtpd_sender_restrictions =
	warn_if_reject reject_unverified_sender,
	permit_mynetworks,
	permit_sasl_authenticated,
	reject_non_fqdn_sender,
	reject_unknown_sender_domain,
	permit


smtpd_helo_restrictions = permit_mynetworks,
     reject_non_fqdn_hostname,
     reject_invalid_hostname,
     permit



virtual_create_maildirsize = yes
virtual_maildir_extended = yes
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1
mydestination = 

# DKIM
milter_default_action = accept
milter_protocol = 2
smtpd_milters = inet:localhost:8900
non_smtpd_milters = inet:localhost:8900
relay_domains = lists.MONDOMAINE.com
mailman_destination_recipient_limit = 1

Petit test d'envoi sur Gmail..

                                                                                                                                                                                                                                                               
Delivered-To: MOI@gmail.com
Received: by 10.223.203.7 with SMTP id fg7csp139898fab;
        Tue, 16 Apr 2013 07:41:06 -0700 (PDT)
X-Received: by 10.180.77.226 with SMTP id v2mr19441865wiw.33.1366123263070;
        Tue, 16 Apr 2013 07:41:03 -0700 (PDT)
Return-Path: <admin@MONDOMAINE.com>
Received: from MONDOMAINE.com (MONDOMAINE.com. [888.888.888.888])
        by mx.google.com with ESMTP id et1si4525544wic.15.2013.04.16.07.41.02;
        Tue, 16 Apr 2013 07:41:03 -0700 (PDT)
Received-SPF: pass (google.com: domain of admin@MONDOMAINE.com designates 888.888.888.888 as permitted sender) client-ip=888.888.888.888;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of admin@MONDOMAINE.com designates 888.888.888.888 as permitted sender) smtp.mail=admin@MONDOMAINE.com;
       dkim=neutral (bad format) header.i=@MONDOMAINE.com
Received: by MONDOMAINE.com (Postfix, from userid 33)
	id 7F39A1EE20BF; Tue, 16 Apr 2013 16:41:02 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=MONDOMAINE.com;
	s=default.private; t=1366123262;
	bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
	h=To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:
	 Date:From:Message-ID;
	b=WJim345sN03xkgi802s14GLgxBS60YwhgOThF9WMyMiQhIjkCxQepTCHqBDGOIfLX
	 mUXhr+mp3LxBufeZROo6kcHjsLZgTVXX9EdFM1H5Z2Mw/LupF0/TENf4z36633GNh1
	 BgbkJUl5Ju5asTCtzvT7pCgqqZfKhDUTs276N2mY=
To: <MOI@gmail.com>
Subject: Coucou
X-PHP-Originating-Script: 0:func.inc
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Date: Tue, 16 Apr 2013 16:41:02 +0200
From: <admin@MONDOMAINE.com>
Message-ID: <1b62767eb404b98d9c66a520084f4ad1@MONDOMAINE.com>
X-Sender: admin@MONDOMAINE.com
User-Agent: RoundCube Webmail/0.3.1

test




/etc/dkim-filter.conf (Syslog, UMask et KeyList non commentés)

# Log to syslog
Syslog                  yes
# Required to use local socket with MTAs that access the socket as a non-
# privileged user (e.g. Postfix)
UMask                   002

# Sign for example.com with key in /etc/mail/dkim.key using
# selector '2007' (e.g. 2007._domainkey.example.com)
#Domain                 example.com
#KeyFile                /etc/mail/dkim.key
#Selector               2007

# Common settings. See dkim-filter.conf(5) for more information.
#AutoRestart            no
#Background             yes
#Canonicalization       simple
#DNSTimeout             5
#Mode                   sv
#SignatureAlgorithm     rsa-sha256
#SubDomains             no
#ADSPDiscard            no
#Version                rfc4871
#X-Header               no

###############################################
# Other (less-standard) configuration options #
###############################################
#
# If enabled, log verification stats here
#Statistics             /var/run/dkim-filter/dkim-stats
#
# KeyList is a file containing tuples of key information. Requires
# KeyFile to be unset. Each line of the file should be of the format:
#    sender glob:signing domain:signing key file
# Blank lines and lines beginning with # are ignored. Selector will be
# derived from the key's filename.
KeyList         /etc/dkim-keys.conf
#
# If enabled, will generate verification failure reports for any messages
# that fail signature verification. These will be sent to the r= address
# in the policy record, if any.
#SendReports            yes
#
# If enabled, will issue a Sendmail QUARANTINE for any messages that fail
# signature verification, allowing them to be inspected later.
#Quarantine             yes
#
# If enabled, will check for required headers when processing messages.
# At a minimum, that means From: and Date: will be required. Messages not
# containing the required headers will not be signed or verified, but will
# be passed through
#RequiredHeaders        yes


/etc/dkim-keys.conf

*@MONDOMAINE.com:MONDOMAINE.com:/etc/dkim/keys/MONDOMAINE.com/default.private


/etc/dkim/keys/MONDOMAINE.com/default.private

-----BEGIN RSA PRIVATE KEY-----
MIICXAIBAAKBgQCaKbWZ64fNKMQZdJIPQ/ThDLC96yHSLrYLkKuAs8KqrkJzVti+
2rcfSuYA1AEevpV0W2EnkkD+Jf8AkPHM4t0Ved5A25T26NFiWKPfTZogydkdDAH5
aQv8pqNpySEy38WQuQ3zst0aNv4I+I7uEntXm0ZZFy3pjyw1O8M5+xjtwQIDAQAB
AoGAMtG1D7xY1ASwQEPxMh8Qxm9MhA7S41qKoF1ca9zWOzWeqi7i3Gd1HleuYm+A

...Bla bla bla

-----END RSA PRIVATE KEY-----

/etc/dkim/keys/MONDOMAINE.com/default.txt

default._domainkey IN TXT "v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCaKbWZ64fNKMQZdJIPQ/ThDLC96yHSLrYLkKuAs8KqrkJzVti+2rcfSuYA1AEevpV0W2EnkkD+Jf8AkPHM4t0Ved5A25T26NFiWKPfTZogydkdDAH5aQv8pqNpySEy38WQuQ3zst0aNv4I+I7uEntXm0ZZFy3pjyw1O8M5+xjtwQIDAQAB" ; ----- DKIM default for MONDOMAINE.com




APACHE 2:

/etc/apache2/httpd.conf

(vide)

/etc/apache2/sites-available/mailman.conf

<VirtualHost *:80>
ServerName lists.MONDOMAINE.com
DocumentRoot /home/www/lists
ErrorLog /var/log/apache2/lists-error.log
CustomLog /var/log/apache2/lists-access.log combined

<Directory /var/lib/mailman/archives/>
    allow from all
    Options +Indexes FollowSymLinks
    AllowOverride None
</Directory>

Alias /pipermail/ /var/lib/mailman/archives/public/
Alias /images/mailman/ /usr/share/images/mailman/
ScriptAlias /admin /usr/lib/cgi-bin/mailman/admin
ScriptAlias /admindb /usr/lib/cgi-bin/mailman/admindb
ScriptAlias /confirm /usr/lib/cgi-bin/mailman/confirm
ScriptAlias /create /usr/lib/cgi-bin/mailman/create
ScriptAlias /edithtml /usr/lib/cgi-bin/mailman/edithtml
ScriptAlias /listinfo /usr/lib/cgi-bin/mailman/listinfo
ScriptAlias /options /usr/lib/cgi-bin/mailman/options
ScriptAlias /private /usr/lib/cgi-bin/mailman/private
ScriptAlias /rmlist /usr/lib/cgi-bin/mailman/rmlist
ScriptAlias /roster /usr/lib/cgi-bin/mailman/roster
ScriptAlias /subscribe /usr/lib/cgi-bin/mailman/subscribe
ScriptAlias /mailman/ /usr/lib/cgi-bin/mailman/
ScriptAlias / /usr/lib/cgi-bin/mailman/listinfo
</VirtualHost>

/etc/apache2/apache2.conf

#
# Based upon the NCSA server configuration files originally by Rob McCool.
#
# This is the main Apache server configuration file.  It contains the
# configuration directives that give the server its instructions.
# See [url]http://httpd.apache.org/docs/2.2/[/url] for detailed information about
# the directives.
#
# Do NOT simply read the instructions in here without understanding
# what they do.  They're here only as hints or reminders.  If you are unsure
# consult the online docs. You have been warned.  
#
# The configuration directives are grouped into three basic sections:
#  1. Directives that control the operation of the Apache server process as a
#     whole (the 'global environment').
#  2. Directives that define the parameters of the 'main' or 'default' server,
#     which responds to requests that aren't handled by a virtual host.
#     These directives also provide default values for the settings
#     of all virtual hosts.
#  3. Settings for virtual hosts, which allow Web requests to be sent to
#     different IP addresses or hostnames and have them handled by the
#     same Apache server process.
#
# Configuration and logfile names: If the filenames you specify for many
# of the server's control files begin with "/" (or "drive:/" for Win32), the
# server will use that explicit path.  If the filenames do *not* begin
# with "/", the value of ServerRoot is prepended -- so "foo.log"
# with ServerRoot set to "/etc/apache2" will be interpreted by the
# server as "/etc/apache2/foo.log".
#

### Section 1: Global Environment
#
# The directives in this section affect the overall operation of Apache,
# such as the number of concurrent requests it can handle or where it
# can find its configuration files.
#

#
# ServerRoot: The top of the directory tree under which the server's
# configuration, error, and log files are kept.
#
# NOTE!  If you intend to place this on an NFS (or otherwise network)
# mounted filesystem then please read the LockFile documentation (available
# at <URL:http://httpd.apache.org/docs/2.2/mod/mpm_common.html#lockfile>);
# you will save yourself a lot of trouble.
#
# Do NOT add a slash at the end of the directory path.
#
#ServerRoot "/etc/apache2"

#
# The accept serialization lock file MUST BE STORED ON A LOCAL DISK.
#
LockFile ${APACHE_LOCK_DIR}/accept.lock

#
# PidFile: The file in which the server should record its process
# identification number when it starts.
# This needs to be set in /etc/apache2/envvars
#
PidFile ${APACHE_PID_FILE}

#
# Timeout: The number of seconds before receives and sends time out.
#
TimeOut 300

#
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
#
KeepAlive on

#
# MaxKeepAliveRequests: The maximum number of requests to allow
# during a persistent connection. Set to 0 to allow an unlimited amount.
# We recommend you leave this number high, for maximum performance.
#
MaxKeepAliveRequests 100

#
# KeepAliveTimeout: Number of seconds to wait for the next request from the
# same client on the same connection.
#
KeepAliveTimeout 15

##
## Server-Pool Size Regulation (MPM specific)
## 

# prefork MPM
# StartServers: number of server processes to start
# MinSpareServers: minimum number of server processes which are kept spare
# MaxSpareServers: maximum number of server processes which are kept spare
# MaxClients: maximum number of server processes allowed to start
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_prefork_module>
StartServers       1
MinSpareServers    1
MaxSpareServers    5
ServerLimit	500
MaxClients        400
    MaxRequestsPerChild   0
</IfModule>

# worker MPM
# StartServers: initial number of server processes to start
# MaxClients: maximum number of simultaneous client connections
# MinSpareThreads: minimum number of worker threads which are kept spare
# MaxSpareThreads: maximum number of worker threads which are kept spare
# ThreadLimit: ThreadsPerChild can be changed to this maximum value during a
#              graceful restart. ThreadLimit can only be changed by stopping
#              and starting Apache.
# ThreadsPerChild: constant number of worker threads in each server process
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_worker_module>
StartServers       1
MinSpareThreads    1
MaxSpareThreads    4
    ThreadLimit          64
    ThreadsPerChild      25
MaxClients        10
    MaxRequestsPerChild   0
</IfModule>

# event MPM
# StartServers: initial number of server processes to start
# MaxClients: maximum number of simultaneous client connections
# MinSpareThreads: minimum number of worker threads which are kept spare
# MaxSpareThreads: maximum number of worker threads which are kept spare
# ThreadsPerChild: constant number of worker threads in each server process
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_event_module>
StartServers       1
MaxClients        10
MinSpareThreads    1
MaxSpareThreads    4
    ThreadLimit          64
    ThreadsPerChild      25
    MaxRequestsPerChild   0
</IfModule>

# These need to be set in /etc/apache2/envvars
User ${APACHE_RUN_USER}
Group ${APACHE_RUN_GROUP}

#
# AccessFileName: The name of the file to look for in each directory
# for additional configuration directives.  See also the AllowOverride
# directive.
#

AccessFileName .htaccess

#
# The following lines prevent .htaccess and .htpasswd files from being 
# viewed by Web clients. 
#
<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
    Satisfy all
</Files>

#
# DefaultType is the default MIME type the server will use for a document
# if it cannot otherwise determine one, such as from filename extensions.
# If your server contains mostly text or HTML documents, "text/plain" is
# a good value.  If most of your content is binary, such as applications
# or images, you may want to use "application/octet-stream" instead to
# keep browsers from trying to display binary files as though they are
# text.
#
DefaultType text/plain


#
# HostnameLookups: Log the names of clients or just their IP addresses
# e.g., [url=http://www.apache.org]www.apache.org[/url] (on) or 204.62.129.132 (off).
# The default is off because it'd be overall better for the net if people
# had to knowingly turn this feature on, since enabling it means that
# each client request will result in AT LEAST one lookup request to the
# nameserver.
#
HostnameLookups Off

# ErrorLog: The location of the error log file.
# If you do not specify an ErrorLog directive within a <VirtualHost>
# container, error messages relating to that virtual host will be
# logged here.  If you *do* define an error logfile for a <VirtualHost>
# container, that host's errors will be logged there and not here.
#
ErrorLog ${APACHE_LOG_DIR}/error.log

#
# LogLevel: Control the number of messages logged to the error_log.
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
#
LogLevel error

# Include module configuration:
Include mods-enabled/*.load
Include mods-enabled/*.conf

# Include all the user configurations:
Include httpd.conf

# Include ports listing
Include ports.conf

#
# The following directives define some format nicknames for use with
# a CustomLog directive (see below).
# If you are behind a reverse proxy, you might want to change %h into %{X-Forwarded-For}i
#
LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
LogFormat "%h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %O" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

# Include of directories ignores editors' and dpkg's backup files,
# see README.Debian for details.

# Include generic snippets of statements
Include conf.d/

# Include the virtual host configurations:
Include sites-enabled/



/etc/mailman/mm_cfg.py

# -*- python -*-

# Copyright (C) 1998,1999,2000 by the Free Software Foundation, Inc.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
# 
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software 
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
# 02110-1301 USA


"""This is the module which takes your site-specific settings.

From a raw distribution it should be copied to mm_cfg.py.  If you
already have an mm_cfg.py, be careful to add in only the new settings
you want.  The complete set of distributed defaults, with annotation,
are in ./Defaults.  In mm_cfg, override only those you want to
change, after the

  from Defaults import *

line (see below).

Note that these are just default settings - many can be overridden via the
admin and user interfaces on a per-list or per-user basis.

Note also that some of the settings are resolved against the active list
setting by using the value as a format string against the
list-instance-object's dictionary - see the distributed value of
DEFAULT_MSG_FOOTER for an example."""


#######################################################
#    Here's where we get the distributed defaults.    #

from Defaults import *

##############################################################
# Put YOUR site-specific configuration below, in mm_cfg.py . #
# See Defaults.py for explanations of the values.            #

#-------------------------------------------------------------
# The name of the list Mailman uses to send password reminders
# and similar. Don't change if you want mailman-owner to be
# a valid local part.
MAILMAN_SITE_LIST = 'mailman'

#-------------------------------------------------------------
# If you change these, you have to configure your http server
# accordingly (Alias and ScriptAlias directives in most httpds)
DEFAULT_URL_PATTERN = 'http://%s/'
PRIVATE_ARCHIVE_URL = '/cgi-bin/mailman/private'
IMAGE_LOGOS         = '/images/mailman/'

#-------------------------------------------------------------
# Default domain for email addresses of newly created MLs
DEFAULT_EMAIL_HOST = 'lists.MONDOMAINE.com'
#-------------------------------------------------------------
# Default host for web interface of newly created MLs
DEFAULT_URL_HOST   = 'lists.MONDOMAINE.com'
#-------------------------------------------------------------
# Required when setting any of its arguments.
add_virtualhost(DEFAULT_URL_HOST, DEFAULT_EMAIL_HOST)

#-------------------------------------------------------------
# The default language for this server.
DEFAULT_SERVER_LANGUAGE = 'fr'

#-------------------------------------------------------------
# Iirc this was used in pre 2.1, leave it for now
USE_ENVELOPE_SENDER    = 0              # Still used?

#-------------------------------------------------------------
# Unset send_reminders on newly created lists
DEFAULT_SEND_REMINDERS = 0

#-------------------------------------------------------------
# Uncomment this if you configured your MTA such that it
# automatically recognizes newly created lists.
# (see /usr/share/doc/mailman/README.Exim4.Debian or
# /usr/share/mailman/postfix-to-mailman.py)
# MTA=None   # Misnomer, suppresses alias output on newlist

#-------------------------------------------------------------
# Uncomment if you use Postfix virtual domains (but not
# postfix-to-mailman.py), but be sure to see
# /usr/share/doc/mailman/README.Debian first.
# MTA='Postfix'

#-------------------------------------------------------------
# Uncomment if you want to filter mail with SpamAssassin. For
# more information please visit this website:
# [url]http://www.jamesh.id.au/articles/mailman-spamassassin/[/url]
# GLOBAL_PIPELINE.insert(1, 'SpamAssassin')

# Note - if you're looking for something that is imported from mm_cfg, but you
# didn't find it above, it's probably in /usr/lib/mailman/Mailman/Defaults.py.

/etc/mailman/postfix-to-mailman.py

#! /usr/bin/env python

# $URL: svn+bsb://svn.winnegan.de/svn/adm/trunk/mailman/postfix-to-mailman.py $
# $Id: postfix-to-mailman.py 38 2004-04-15 19:11:32Z bsb $
#
# Interface mailman to a postfix with a mailman transport. Does not require
# the creation of _any_ aliases to connect lists to your mail system.
#
# Dax Kelson, dkelson@gurulabs.com, Sept 2002.
# coverted from qmail to postfix interface
# Jan 2003: Fixes for Mailman 2.1
# Thanks to Simen E. Sandberg <senilix@gallerbyen.net>
# Feb 2003: Change the suggested postfix transport to support VERP
# Thanks to Henrique de Moraes Holschuh <henrique.holschuh@ima.sp.gov.br>
#
# Mar 2004: Siggy Brentrup <bsb@debian.org>
#   downloaded from [url]http://www.gurulabs.com/files/postfix-to-mailman-2.1.py[/url]
#   and adopted for inclusion in the Debian Mailman package.
#   (hi Bruce, back to the roots :-)
#   rewritten for python >= 2.2 taking configuration from mm_cfg
#
# This script was originally qmail-to-mailman.py by:
# Bruce Perens, bruce@perens.com, March 1999.
# This is free software under the GNU General Public License.

# This script is meant to be called as a postfix transport pipe.

# It catches all mail to a virtual domain, eg "lists.example.com".  It
# looks at the recipient for each mail message and decides if the mail
# is addressed to a valid list or not, and optionally bounces the
# message with a helpful suggestion if it's not addressed to a
# list. It decides if it is a posting, a list command, or mail to the
# list administrator, by checking for the -admin, -owner, -request,
# -join, -leave, -subscribe and -unsubscribe addresses. It will
# recognize a list as soon as the list is created, there is no need to
# add _any_ aliases for any list.  It recognizes mail to postmaster,
# abuse and mailer-daemon, and routes those mails to DEB_LISTMASTER as
# defined in mm_cfg.py

# INSTALLATION:
#
# Install this file as /var/lib/mailman/bin/postfix-to-mailman.py
#
# To configure a virtual domain to connect to mailman, edit Postfix thusly:
#
# /etc/postfix/main.cf:
#    relay_domains = ... lists.example.com
#    relay_recipient_maps = ... hash:/var/lib/mailman/data/virtual-mailman
#    transport_maps = hash:/etc/postfix/transport
#    mailman_destination_recipient_limit = 1
#
# /etc/postfix/master.cf
#    mailman unix  -       n       n       -       -       pipe
#      flags=FR user=list 
#      argv=/var/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user}
#
# /etc/postfix/transport:
#   lists.example.com   mailman:
#
# /etc/mailman/mm_cfg.py
#    MTA = Postfix # So that mailman generates the recipients table
#    POSTFIX_STYLE_VIRTUAL_DOMAINS = ['lists.example.com']
#    # alias for postmaster, abuse and mailer-daemon
#    DEB_LISTMASTER = 'postmaster@example.com'
#
# Replace lists.example.com above with the name of the domain to be
# connected to Mailman. Note that _all_ mail to that domain will go to
# Mailman, so you don't want to put the name of your main domain
# here. Typically a virtual domain lists.domain.com is used for
# Mailman, and domain.com for regular email.
#
# The recipient map allows Postfix to know which addresses exists.
# Thus, if someone tries to send a (spam?) message to an undefined
# address in the domain connected to Mailman, Postfix will just refuse
# it instead of sending a (backscatter?) bounce.
#
# When you are done, restart Postfix, and run /usr/lib/mailman/bin/genaliases
# to generate the initial recipient map for the existing mailing-lists.

# Exit codes accepted by postfix
#  from postfix-2.0.16/src/global/sys_exits.h
EX_USAGE    = 64    # command line usage error 
EX_NOUSER   = 67    # addressee unknown
EX_SOFTWARE = 70    # internal software error
EX_TEMPFAIL = 75    # temporary failure

import sys, os
sys.path.append("/usr/lib/mailman/bin")
import paths

from Mailman import mm_cfg

def main():
    os.nice(5)     # Handle mailing lists at non-interactive priority.
                   # delete this if you wish

    try:
        MailmanOwner = mm_cfg.DEB_LISTMASTER
    except AttributeError:
        MailmanOwner = 'postmaster@localhost'

    try:
        domain, local = [ a.lower() for a in sys.argv[1:] ]
    except:
        # This might happen if we're not using Postfix or
        # /etc/postfix/master.cf is badly misconfigured
        sys.stderr.write('Illegal invocation: %r\n'
                         % ' '.join(sys.argv))
        if len(sys.argv) > 3:
            sys.stderr.write('Did you forget to set '
                             'mailman_destination_recipient_limit=1 '
                             'in main.cf?')
        sys.exit(EX_USAGE)

    # Redirect required addresses to 
    if local in ('postmaster', 'abuse', 'mailer-daemon'):
        os.execv("/usr/sbin/sendmail",
                 ("/usr/sbin/sendmail", MailmanOwner))
        sys.exit(0)

    # Assume normal posting to a mailing list
    mlist, func = local, 'post'

    # Let Mailman decide if a list exists.
    from Mailman.Utils import list_exists

    if list_exists(mlist):
        mm_pgm = os.path.join(paths.prefix, 'mail', 'mailman')
        os.execv(mm_pgm, (mm_pgm, func, mlist))
        # NOT REACHED

    # Check for control extension on local part
    for ext in ('-admin',
                '-owner',
                '-request',
                '-bounces',
                '-confirm',
                '-join',
                '-leave',
                '-subscribe',
                '-unsubscribe',
                ):
        if local.endswith(ext):
            mlist = local[:-len(ext)]
            func  = ext[1:]
            break

    if list_exists(mlist):
        mm_pgm = os.path.join(paths.prefix, 'mail', 'mailman')
        os.execv(mm_pgm, (mm_pgm, func, mlist))
        # NOT REACHED
    else:
        try:
            sys.stderr.write(mm_cfg.DEB_HELP_TEXT)
        except AttributeError:
            sys.exit(EX_NOUSER)

        sys.exit(1)


if __name__ == '__main__':
    try:
        main()
    except SystemExit, argument:
        sys.exit(argument)
    except Exception:
        xt, xv, tb = sys.exc_info()
        sys.stderr.write("%s %s\n" % (xt, xv))
        sys.stderr.write("Line %d\n" % (tb.tb_lineno))
        sys.exit(EX_TEMPFAIL) # Soft failure, try again later.




Test DKIM

This email is an automatic response from AdminSystem DKIM verifier service (1.0.0.5).
The service allows email senders to perform a simple check of SPF, DKIM and DomainKeys.
It is provided free of charge, in the hope that it is useful to the email community.

We welcome any feedback you may have at <support@emailarchitect.net>.
Thank you for using the service.
AdminSystem Software Limited

============================================================
SPF result: Pass
============================================================
Domain: MONDOMAINE.com
IP: 888.888.888.888

SPF Record: MONDOMAINE.com
	IN TXT = "v=spf1 a mx a:MONDOMAINE.com ptr:ovh.com ~all"


---SPF Trace Log---
Start to check SPF record
Sender IP:888.888.888.888
Sender Domain:MONDOMAINE.com

Parse Sender-IP 888.888.888.888
Query TEXT record from DNS server for: MONDOMAINE.com
[TXT]: v=spf1 a mx a:MONDOMAINE.com ptr:ovh.com ~all
[TXT]: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCaKbWZ64fNKMQZdJIPQ/ThDLC96yHSLrYLkKuAs8KqrkJzVti+2rcfSuYA1AEevpV0W2EnkkD+Jf8AkPHM4t0Ved5A25T26NFiWKPfTZogydkdDAH5aQv8pqNpySEy38WQuQ3zst0aNv4I+I7uEntXm0ZZFy3pjyw1O8M5+xjtwQIDAQAB
Parsing SPF record: v=spf1 a mx a:MONDOMAINE.com ptr:ovh.com ~all

Mechanisms: v=spf1

Mechanisms: a
Testing mechanism a
Query A record from DNS server for: MONDOMAINE.com
[A]: 888.888.888.888
Testing CIDR: source=888.888.888.888;  888.888.888.888/128
a hit, Qualifier: +


============================================================
DomainKey result: none (no signature)
============================================================


============================================================
DKIM result: permerror (no key)
============================================================
Signed by: admin@MONDOMAINE.com
Expected Body Hash: g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=

---Original Message Header---
x-sender: admin@MONDOMAINE.com
x-receiver: AAAA3QcEEAoA@appmaildev.com
Received: from MONDOMAINE.com ([888.888.888.888]) by mail.appmaildev.com with Microsoft SMTPSVC(7.5.7600.16385);
	 Tue, 16 Apr 2013 11:10:17 -0400
Received: by MONDOMAINE.com (Postfix, from userid 33)
	id D12621EE20BF; Tue, 16 Apr 2013 17:10:16 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=MONDOMAINE.com;
	s=default.private; t=1366125016;
	bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
	h=To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:
	 Date:From:Message-ID;
	b=aAzgyTuMZ4vj6B3mAikR8rFHRGhhGHKUEn1m6pp1WRey3iMRUb20eZi1it/U26eBc
	 Ce5u0oL2QfzcdLpzHJRyUmkQ8GAYROlx6Il9J2F15/h9dM2NS05ltavXunzq9e1o47
	 zUWU97aS80O6V24Ha4sVKyIbXFOk2Yuv9W+ZaSKg=
To: <AAAA3QcEEAoA@appmaildev.com>
Subject: test
X-PHP-Originating-Script: 0:func.inc
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Date: Tue, 16 Apr 2013 17:10:16 +0200
From: <admin@MONDOMAINE.com>
Message-ID: <04369bdc4281aabc6875d96b5045fba9@MONDOMAINE.com>
X-Sender: admin@MONDOMAINE.com
User-Agent: RoundCube Webmail/0.3.1
Return-Path: admin@MONDOMAINE.com
X-OriginalArrivalTime: 16 Apr 2013 15:10:17.0795 (UTC) FILETIME=[8149E130:01CE3AB4]


/var/log/mail.logLog Mail après avoir:
1. Envoyer un mail de admin@MONDOMAINE.com a contact@MONDOMAINE.com depuis roundcube
2. Envoyer un mail de admin@MONDOMAINE.com a moi@gmail.com depuis roundcube
3. Envoyer un mail de moi@gmail.com a admin@MONDOMAINE.com depuis google mail web.
4. Envoyer un mail de admin@MONDOMAINE.com a AAAA3QcEEAoA@appmaildev.com depuis roundcube.
5. Reçu le mail de appmaildev.com sur roundcube
-->

Apr 16 17:08:55 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:08:55 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=8/331
Apr 16 17:08:55 MONDOMAINE postfix/pickup[994]: 9C52D1EE20BF: uid=33 from=<admin@MONDOMAINE.com>
Apr 16 17:08:55 MONDOMAINE postfix/cleanup[1304]: 9C52D1EE20BF: message-id=<6836b126901e3ddeae5075d39d51ac42@MONDOMAINE.com>
Apr 16 17:08:55 MONDOMAINE postfix/qmgr[995]: 9C52D1EE20BF: from=<admin@MONDOMAINE.com>, size=520, nrcpt=1 (queue active)
Apr 16 17:08:55 MONDOMAINE postfix/pipe[1307]: 9C52D1EE20BF: to=<contact@MONDOMAINE.com>, relay=dovecot, delay=0.17, delays=0.12/0.01/0/0.05, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 16 17:08:55 MONDOMAINE postfix/qmgr[995]: 9C52D1EE20BF: removed
Apr 16 17:08:55 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:08:55 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=386/11781
Apr 16 17:08:56 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:08:56 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:08:58 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:08:58 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=8/331
Apr 16 17:08:58 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:08:58 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=31/355
Apr 16 17:09:05 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:09:05 MONDOMAINE postfix/pickup[994]: A60431EE20BF: uid=33 from=<admin@MONDOMAINE.com>
Apr 16 17:09:05 MONDOMAINE postfix/cleanup[1304]: A60431EE20BF: message-id=<5188ed43c419afc3175d023f67111819@MONDOMAINE.com>
Apr 16 17:09:05 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=8/331
Apr 16 17:09:05 MONDOMAINE postfix/qmgr[995]: A60431EE20BF: from=<admin@MONDOMAINE.com>, size=525, nrcpt=1 (queue active)
Apr 16 17:09:05 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:09:05 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=386/11781
Apr 16 17:09:05 MONDOMAINE postfix/smtp[1333]: A60431EE20BF: to=<MON_ADRESSE_EMAIL@gmail.com>, relay=gmail-smtp-in.l.google.com[173.194.78.27]:25, delay=0.3, delays=0.06/0.01/0.1/0.13, dsn=2.0.0, status=sent (250 2.0.0 OK 1366124945 gg15si4576439wic.2 - gsmtp)
Apr 16 17:09:05 MONDOMAINE postfix/qmgr[995]: A60431EE20BF: removed
Apr 16 17:09:06 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:09:06 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:10:06 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:10:06 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:10:07 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:10:07 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=8/331
Apr 16 17:10:07 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:10:07 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=31/355
Apr 16 17:10:16 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:10:16 MONDOMAINE postfix/pickup[994]: D12621EE20BF: uid=33 from=<admin@MONDOMAINE.com>
Apr 16 17:10:16 MONDOMAINE postfix/cleanup[1304]: D12621EE20BF: message-id=<04369bdc4281aabc6875d96b5045fba9@MONDOMAINE.com>
Apr 16 17:10:16 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=8/331
Apr 16 17:10:16 MONDOMAINE postfix/qmgr[995]: D12621EE20BF: from=<admin@MONDOMAINE.com>, size=528, nrcpt=1 (queue active)
Apr 16 17:10:17 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:10:17 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=386/11781
Apr 16 17:10:17 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:10:17 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:10:17 MONDOMAINE postfix/smtp[1333]: D12621EE20BF: to=<AAAA3QcEEAoA@appmaildev.com>, relay=mail.appmaildev.com[69.89.227.121]:25, delay=0.77, delays=0.07/0/0.42/0.28, dsn=2.6.0, status=sent (250 2.6.0  <04369bdc4281aabc6875d96b5045fba9@MONDOMAINE.com> Queued mail for delivery)
Apr 16 17:10:17 MONDOMAINE postfix/qmgr[995]: D12621EE20BF: removed
Apr 16 17:11:17 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:11:17 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:11:23 MONDOMAINE postfix/smtpd[1382]: connect from mail.emailarchitect.com[69.89.227.124]
Apr 16 17:11:43 MONDOMAINE postfix/smtpd[1382]: warning: 124.227.89.69.list.dsbl.org: RBL lookup error: Host or domain name not found. Name service error for name=124.227.89.69.list.dsbl.org type=A: Host not found, try again
Apr 16 17:11:43 MONDOMAINE postfix/smtpd[1382]: ADB7B1EE15D2: client=mail.emailarchitect.com[69.89.227.124]
Apr 16 17:11:43 MONDOMAINE postfix/cleanup[1304]: ADB7B1EE15D2: message-id=<059c5aa9b29d5ef256760f7008938b9d@appmaildev.com>
Apr 16 17:11:44 MONDOMAINE postfix/qmgr[995]: ADB7B1EE15D2: from=<auth-report@appmaildev.com>, size=5641, nrcpt=1 (queue active)
Apr 16 17:11:44 MONDOMAINE postfix/pipe[1386]: ADB7B1EE15D2: to=<admin@MONDOMAINE.com>, relay=dovecot, delay=21, delays=21/0/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service)
Apr 16 17:11:44 MONDOMAINE postfix/qmgr[995]: ADB7B1EE15D2: removed
Apr 16 17:11:44 MONDOMAINE postfix/smtpd[1382]: disconnect from mail.emailarchitect.com[69.89.227.124]
Apr 16 17:12:17 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:12:17 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=326/1526
Apr 16 17:12:28 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:12:28 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=474/5864
Apr 16 17:12:28 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:12:28 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:13:30 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:13:30 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:14:28 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:14:28 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:15:04 MONDOMAINE postfix/anvil[1384]: statistics: max connection rate 1/60s for (smtp:69.89.227.124) at Apr 16 17:11:23
Apr 16 17:15:04 MONDOMAINE postfix/anvil[1384]: statistics: max connection count 1 for (smtp:69.89.227.124) at Apr 16 17:11:23
Apr 16 17:15:04 MONDOMAINE postfix/anvil[1384]: statistics: max cache size 1 at Apr 16 17:11:23
Apr 16 17:15:28 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:15:28 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698
Apr 16 17:16:28 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:16:28 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698



/var/log/mail.log après un reboot machine (les deux dernieres entrées je crois que c'est roundcube qui se raffraichit, comme sur le log précedant)

Apr 16 17:19:24 MONDOMAINE dkim-filter[485]: Sendmail DKIM Filter v2.8.2 starting (args: -x /etc/dkim-filter.conf -u dkim-filter -P /var/run/dkim-filter/dkim-filter.pid -p inet:8900@localhost)
Apr 16 17:19:27 MONDOMAINE dovecot: Dovecot v1.2.15 starting up (core dumps disabled)
Apr 16 17:19:27 MONDOMAINE dovecot: auth-worker(default): mysql: Connected to 127.0.0.1 (mail)
Apr 16 17:19:28 MONDOMAINE postfix/master[963]: daemon started -- version 2.7.1, configuration /etc/postfix
Apr 16 17:19:29 MONDOMAINE dovecot: imap-login: Login: user=<admin@MONDOMAINE.com>, method=PLAIN, rip=888.888.888.888, lip=888.888.888.888, secured
Apr 16 17:19:29 MONDOMAINE dovecot: IMAP(admin@MONDOMAINE.com): Disconnected: Logged out bytes=77/698

Dernière modification par Frankycestbon (Le 17/04/2013, à 02:26)

Hors ligne

#2 Le 19/04/2013, à 02:36

lildadou

Re : Postfix, DKIM et Mailman, problemes problemes problemes

Tu as beaucoup d'erreurs mais c'est parce que tu abordes beaucoup de problèmes à la fois. Je te propose d'avancer par étape.
1. envoyer les mails (SMTP)
2. recevoir des mails (SMTP)
3. consulter les mails (IMAP/POP/Webmail)

Commençons par l'envoi de mail. Je vois que ton DKIM est erroné... mon intuition me dit que tu n'as rien fait côté DNS. Il faut que tu créer une entrée MX (dont le FQDN doit pointer sur un champ A et/ou AAAA) et deux entrées TXT pour SPF et DKIM côté registar et il faut que tu configure le reverse DNS (entrée PTR) chez ton hebergeur. Est ce que tout ça a été fait? Vérifie que l'envoi fonctionne en envoyant des mails avec mail.mailutils. Inutile de sortir l'artillerie lourde.

Pour le point 2, simplifie la configuration de postfix ; te prends pas déjà la tête avec l'IMAP, le POP & cie. Vérifie juste que tu reçois tes mails avec mail.mailutils.

Dans 3-4 jours de boulot tu pourras t'attaquer au point 3. smile

Hors ligne

#3 Le 23/04/2013, à 19:34

Pseudo supprimé

Re : Postfix, DKIM et Mailman, problemes problemes problemes

Je ne reçois pas d'emails #mydestination #relay_domains

mydestination = localhost
1/relay_domains = $mydestination lists.MONDOMAINE.com
si tu stockes les recipients de mailman sous /etc/aliases
2/relay_domains = $mydestination
si tu stockes les recipients de mailman sous tes tables virtual
c'est conseiller de les inclure aussi dans relay_recipient_maps

par exemple pour la liste pub
manager@lists.domain.tld (BAL valide) est le administrateur ou owner de la liste pub.

pub@lists.domain.tld                  |/usr/lib/mailman/mail/mailman post pub            
pub-admin@lists.domain.tld           |/usr/lib/mailman/mail/mailman admin pub        
pub-bounces@lists.domain.tld         |/usr/lib/mailman/mail/mailman bounces pub
pub-confirm@lists.domain.tld         |/usr/lib/mailman/mail/mailman confirm pub    
pub-join@lists.domain.tld             |/usr/lib/mailman/mail/mailman join pub            
pub-leave@lists.domain.tld           |/usr/lib/mailman/mail/mailman leave pub          
pub-owner@lists.domain.tld           |/usr/lib/mailman/mail/mailman owner pub           
pub-request@lists.domain.tld         |/usr/lib/mailman/mail/mailman request pub         
pub-subscribe@lists.domain.tld        |/usr/lib/mailman/mail/mailman subscribe pub       
pub-unsubscribe@lists.domain.tld     |/usr/lib/mailman/mail/mailman unsubscribe pub
sudo host -t mx lists.domain.tld 
# doit exister aussi puisqu'il s'agit d'un sous domaine de messagerie
sudo host -t txt  selector._domainkey.lists.domain.tld
sudo host -t txt  _adsp._domainkey.lists.domain.tld

DKIM: je ne vois pas trop l'intérêt pour une liste de discussion genre ubuntu_wiki-fr@listes.ubuntu-fr.org, alors que pour une liste de diffusion (newsletter), pourquoi pas.

vhost

	ScriptAlias /mailman/ /usr/lib/cgi-bin/mailman/
	
	<Directory /usr/lib/cgi-bin/mailman/>
	AllowOverride None
	Options ExecCGI
	Order allow,deny
        Allow from all
	</Directory>

	Alias /pipermail/ /var/lib/mailman/archives/public/
	<Directory /var/lib/mailman/archives/public>
   	 Options Indexes MultiViews FollowSymLinks
	 AllowOverride None
	 Order allow,deny
         Allow from all
</Directory>

accès http(s)://www.domain.tld/mailman/admin/pub

mm_cfg.py

from Defaults import *
DEFAULT_CHARSET = 'utf-8'
def _(s):
  return s
add_language('fr',    _('French'),       'utf-8')
del _
MAILMAN_SITE_LIST = 'mailman'
DEFAULT_URL_PATTERN = 'https://%s/mailman/'
PRIVATE_ARCHIVE_URL = '/cgi-bin/mailman/private'
IMAGE_LOGOS         = '/images/mailman/'
PUBLIC_ARCHIVE_URL = 'https://%(hostname)s/pipermail/%(listname)s'
DEFAULT_EMAIL_HOST = 'lists.domain.tld'
DEFAULT_URL_HOST   = 'www.domain.tld'
add_virtualhost(DEFAULT_URL_HOST, DEFAULT_EMAIL_HOST)
DEFAULT_SERVER_LANGUAGE = 'fr'
USE_ENVELOPE_SENDER    = 0              # Still used?
DEFAULT_SEND_REMINDERS = 0
MTA='Postfix'
POSTFIX_STYLE_VIRTUAL_DOMAINS = ['lists.domain.tld']
DEB_LISTMASTER = 'postmaster@domain.tld'
REMOVE_DKIM_HEADER = 1 
OWNERS_CAN_ENABLE_PERSONALIZATION = 1

ton dkim est à revoir
il faut renseigner correctement /etc/dkim-filter.conf
dkim-filter n' a pas besoin de opendkim et autre dkimproxy.
regarde la doc pour générer la clef.
regarde aussi si tu n'as pas un problème dans le copier-coller /etc/ ...keypublic > registrar
tu as 2  valeurs de selector aussi. tu signes avec s=default.private alors que ton selector dns est default. il faut mettre la même chose de part et d'autre (par exemple default)

bon courage