Postfix - Mysql - SSL - error

Discussion in 'Server Operation' started by f-do, May 19, 2012.

  1. f-do

    f-do New Member

    Hi There,

    i have a litte problem if i want to send a e-mail over ssl, here is my config:

    master.cf
    Code:
    tlsmgr    unix  -       -       -       1000?   1       tlsmgr
    smtps     inet  n       -       y       -       -       smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
    
    only if i want to sent it over ssl this error i get in the mail.log
    Code:
    May 19 21:44:44 fdo-s2 postfix/smtpd[18942]: connect from 188-195-140-169-dynip.superkabel.de[188.195.140.169]
    May 19 21:44:44 fdo-s2 postfix/smtpd[18942]: setting up TLS connection from 188-195-140-169-dynip.superkabel.de[188.195.140.169]
    May 19 21:44:45 fdo-s2 postfix/smtpd[18942]: Anonymous TLS connection established from 188-195-140-169-dynip.superkabel.de[188.195.140.169]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
    May 19 21:44:45 fdo-s2 postfix/smtpd[18942]: warning: mysql:/etc/postfix/client_access.cf: table lookup problem
    May 19 21:44:45 fdo-s2 postfix/smtpd[18942]: NOQUEUE: reject: RCPT from 188-195-140-169-dynip.superkabel.de[188.195.140.169]: 451 4.3.5 <188-195-140-169-dynip.superkabel.de[188.195.140.169]>: Client host rejected: Server configuration error; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<Florians-MacBook-Pro.local>
    May 19 21:44:46 fdo-s2 postfix/smtpd[18942]: disconnect from 188-195-140-169-dynip.superkabel.de[188.195.140.169]
    
    the client_access.cf:
    Code:
    hosts = unix:/var/run/mysqld/mysqld.sock
    user = mail
    password = xxx
    dbname = mail
    query = SELECT action FROM access WHERE client != '' && action != '' && client = '%s' && active = 1;
    
    The Table access is empty.

    SO can you help me?

    Thanks...
     
  2. falko

    falko Super Moderator Howtoforge Staff

    Can Postfix access /var/run/mysqld/mysqld.sock? If it's running chrooted, it might not be able to do so.
     
  3. f-do

    f-do New Member

    Hi,

    the permission is:
    srwxrwxrwx 1 mysql mysql 0 May 14 17:32 mysqld.sock

    So but this is only then when i want to sent a mail over TLS/SSL - without that it runs perfektliy - so i think the postfix has the permission - all the data are on the mysql.

    Or runs postfix on a diffrent user on TSL/SSL?
     
  4. falko

    falko Super Moderator Howtoforge Staff

    Do you have other *.cf files in /etc/postfix/ that access your database? Do they use sockets as well, or do they use TCP (127.0.0.1 and port 3306)?
     
  5. f-do

    f-do New Member

    fdo-s2:/etc/postfix# ls -1 *.cf
    autorespond.cf
    client_access.cf
    dynamicmaps.cf
    greylist.cf
    main.cf
    master.cf
    spamfilter.cf
    virtual_alias_domains.cf
    virtual_alias_maps.cf
    virtual_mailbox_domains.cf
    virtual_mailbox_maps.cf

    They do all connect through the socket...
     
  6. falko

    falko Super Moderator Howtoforge Staff

    Can you post the contents of virtual_alias_domains.cf, for example, so that I can do a comparison? Do you have problems with the other cf files as well, or is client_access.cf the only one that is making problems?
     
  7. f-do

    f-do New Member

    Hi,

    here is the virtual_alias_domains.cf:

    hosts = unix:/var/run/mysqld/mysqld.sock
    user = mail
    password = xxx
    dbname = mail
    query = SELECT domain_name FROM domains WHERE domain_name != '' && domain_name = '%s' && alias_domain = 1 && active = 1;


    I have only the problem with the client_access.cf and after the error in the log is the connection closed... With( Server configuration error;)
     

Share This Page