After saturday Debian 10 apt upgrade and ISPConfig update 3.2.2 -> 3.2.3 logwatch started reporting these: Code: **Unmatched Entries** 1 Mar 28 11:31:33 mail postfix[31787]: Postfix is running with backwards-compatible default settings 1 Mar 28 11:31:33 mail postfix[31895]: Postfix is running with backwards-compatible default settings 1 Mar 28 11:31:34 mail postfix/master[32116]: /etc/postfix/master.cf: line 24: using backwards-compatible default setting chroot=y 1 Mar 28 11:31:33 mail postfix[31787]: See http://www.postfix.org/COMPATIBILITY_README.html for details 1 Mar 28 11:31:33 mail postfix[31895]: See http://www.postfix.org/COMPATIBILITY_README.html for details 1 Mar 28 11:31:34 mail postfix/master[32116]: /etc/postfix/master.cf: line 37: using backwards-compatible default setting chroot=y 1 Mar 28 11:31:33 mail postfix[31787]: To disable backwards compatibility use "postconf compatibility_level=2" and "postfix reload" 1 Mar 28 11:31:33 mail postfix[31895]: To disable backwards compatibility use "postconf compatibility_level=2" and "postfix reload" 1 Mar 28 11:31:34 mail postfix/master[32116]: /etc/postfix/master.cf: line 131: using backwards-compatible default setting chroot=y The lines 24, 37 and 131 are these: Code: 24 submission inet n - - - - smtpd 37 smtps inet n - - - - smtpd 131 amavis unix - - - - 2 smtp Is the meaning of - in those columns now different? Or is new version of postfix more picky?
On my systems, chroot is set to "y" instead of "-". Code: # ========================================================================== # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (no) (never) (100) # ========================================================================== smtp inet n - y - - smtpd .. .. submission inet n - y - - smtpd .. .. smtps inet n - y - - smtpd .. .. amavis unix - - - - 2 smtp No such errors here. I think chroot should be set to Y.
Perfect Server Guide apache and buster shows - in that column for submission and smtps. Code: submission inet n - - - - smtpd smtps inet n - - - - smtpd
I discussed it with Till and the guide is "incorrect" here. Postfix changed it's behaviour quite a while ago, and now uses "y" instead of "-" by default for the chroot setting. The guide will be changed. I only uncommented the necessary lines and did not change anything, as uncommenting should be the only things that's necessary.
