Networking

2 個獨立的後綴實例,並與郵件消息接收欄位中的 IP 混淆

  • September 6, 2015

我的 2 個後綴實例有問題。在網路上設置了2個獨立的IP和對應的域名,它們工作正常。我希望第二條郵件消息(如下)具有

Received: from firstInstanceDomain.com (firstInstanceDomain.com. [second.domain.ip])

而不是

Received: from secondInstanceDomain.com (secondInstanceDomain.com. [second.domain.ip])

其他重要資訊: -

我有 DKIM 在兩個域上工作

-當我將 relayhost = firstInstanceDomain.com 放入 firstInstanceDomain MAIN.CF 時,我有來自 firstInstanceDomain 和 secondInstanceDomain 郵件的 secondInstanceDomain 內部郵件消息沒問題

  • 來自兩個域、主配置和主配置的郵件標題附在下面

我花了 60 個小時試圖解決它,搜尋所有Google資源、後綴文件、部落格和論壇。沒運氣。請幫忙!

郵件從 mail@firstInstanceDomain.com 發送

Delivered-To: someMail@domain.com
Received: by 10.68.49.10 with SMTP id q10cs774841pbn;
       Fri, 6 Jan 2012 08:18:06 -0800 (PST)
Received: by 10.213.3.136 with SMTP id 8mr1420319ebn.0.1325866683057;
       Fri, 06 Jan 2012 08:18:03 -0800 (PST)
Return-Path: <mail@firstInstanceDomain.com>
Received: from firstInstanceDomain.com (firstInstanceDomain.com. [first.domain.ip])
       by mx.google.com with ESMTP id 57si5431812eey.212.2012.01.06.08.18.01;
       Fri, 06 Jan 2012 08:18:02 -0800 (PST)
Received-SPF: pass (google.com: domain of mail@firstInstanceDomain.com designates first.domain.ip as permitted sender) client-ip=first.domain.ip;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of mail@firstInstanceDomain.com designates first.domain.ip as permitted sender) smtp.mail=mail@firstInstanceDomain.com; dkim=pass header.i=@firstInstanceDomain.com
To: "someMail@domain.com" <someMail@domain.com>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=firstInstanceDomain.com;
   s=default; t=1325870581;
   RestOfTheKey
Subject: SomeSubject
From: "firstInstanceDomain.com" <mail@firstInstanceDomain.com>
Message-ID: <someId@firstInstanceDomain.com>
Return-To: mail@firstInstanceDomain.com
Date: Fri, 06 Jan 2012 17:23:01 +0000
Content-Type: multipart/alternative;
   boundary="=_1.e091838bd31325ae4da677be1af4efd5"
MIME-Version: 1.0
RestOfTheMessage

郵件從 mail@secondInstanceDomain.com 發送

Delivered-To: someMail@domain.com
Received: by 10.68.49.10 with SMTP id q10cs774832pbn;
       Fri, 6 Jan 2012 08:18:01 -0800 (PST)
Received: by 10.213.108.146 with SMTP id f18mr1347667ebp.36.1325866679721;
       Fri, 06 Jan 2012 08:17:59 -0800 (PST)
Return-Path: <mail@secondInstanceDomain.com>
Received: from firstInstanceDomain.com (firstInstanceDomain.com. [first.domain.ip])
       by mx.google.com with ESMTP id 3si24805496eeh.44.2012.01.06.08.17.58;
       Fri, 06 Jan 2012 08:17:59 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning mail@secondInstanceDomain.com does not designate first.domain.ip as permitted sender) client-ip=first.domain.ip;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning mail@secondInstanceDomain.com does not designate first.domain.ip as permitted sender) smtp.mail=mail@secondInstanceDomain.com; dkim=pass header.i=@secondInstanceDomain.com
To: "someMail@domain.com" <someMail@domain.com>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=secondInstanceDomain.com;
   s=dbdef; t=1325870578;
   RestOfTheKey
Subject: SomeSubject
From: "secondInstanceDomain.com" <mail@secondInstanceDomain.com>
Message-ID: <someId@secondInstanceDomain.com>
Return-To: mail@secondInstanceDomain.com
Date: Fri, 06 Jan 2012 17:22:58 +0000
Content-Type: multipart/alternative;
   boundary="=_1.7183ef0339b880f9a93c3d822619afee"
MIME-Version: 1.0
RestOfTheMessage

MASTER.CF FOR firstInstanceDomain(其餘配置是標準的)

first.domain.ip:smtp      inet  n       -       n       -       -       smtpd -o myhostname=firstInstanceDomain.com -o mydomain=firstInstanceDomain.com

MASTER.CF FOR secondInstanceDomain(配置的其餘部分是標準的)

second.domain.ip:smtp      inet  n       -       n       -       -       smtpd -o myhostname=secondInstanceDomain.com -o mydomain=secondInstanceDomain.com

MAIN.CF FOR firstInstanceDomain

smtp_bind_address = first.domain.ip
mydomain=firstInstanceDomain.com
mynetworks=firstInstanceDomain.com
alternate_config_directories = /etc/postfix-third
data_directory = /var/lib/postfix
header_checks = regexp:/etc/postfix/header_checks
inet_interfaces = localhost
mydestination = $mydomain, localhost.$mydomain, $mydomain
myhostname = $mydomain
myorigin=$mydomain
queue_directory = /var/spool/postfix
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
debugger_command =
    PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
    xxgdb $daemon_directory/$process_name $process_id & sleep 5
default_process_limit = 300
html_directory = no
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 10240000
newaliases_path = /usr/bin/newaliases.postfix
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_client_restrictions=
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sasl_local_domain = 
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_authenticated_header = yes
smtpd_tls_auth_only = no
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 4
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
mailbox_size_limit = 512000000
virtual_alias_maps =hash:/etc/postfix/virtual
smtpd_milters = inet:127.0.0.1:20209
non_smtpd_milters = inet:127.0.0.1:20209
milter_protocol = 2
milter_default_action = accept

MAIN.CF FOR secondInstanceDomain

smtp_bind_address = second.domain.ip
mydomain=secondInstanceDomain.com
mynetworks=secondInstanceDomain.com
alternate_config_directories = /etc/postfix
data_directory = /var/lib/postfix-third
header_checks = regexp:/etc/postfix-third/header_checks
inet_interfaces = localhost
mydestination = $mydomain, localhost.$mydomain, $mydomain
myhostname = $mydomain
myorigin=$mydomain
queue_directory = /var/spool/postfix-third
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
debugger_command =
    PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
    xxgdb $daemon_directory/$process_name $process_id & sleep 5
default_process_limit = 300
html_directory = no
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 10240000
newaliases_path = /usr/bin/newaliases.postfix
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_client_restrictions=
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_authenticated_header = yes
smtpd_tls_auth_only = no
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 4
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
mailbox_size_limit = 512000000
smtpd_milters = inet:127.0.0.1:20209
non_smtpd_milters = inet:127.0.0.1:20209
milter_protocol = 2
milter_default_action = accept

您沒有指定郵件的創建方式(在發送之前)**。**由於它們沒有顯示 Received 標頭,因此我假設它們是直接在伺服器上創建的。還有問題。它們不是通過 SMTP 從客戶端發送到伺服器來“創建”的。所以里面的配置master.cf被完全忽略了。

因此,如果您通過 sendmail 或 maildrop(或類似方法)將郵件“投遞”到 Postfix 實例,則必須指定郵件應“排隊”到哪個實例以進行出站投遞。否則假定第一個。

引用自:https://serverfault.com/questions/347385