Results 1 to 7 of 7

Thread: [SOLVED] Problem with milters

  1. #1
    Join Date
    Jan 2010
    Posts
    9
    Rep Power
    5

    Default [SOLVED] Problem with milters

    Using FOSS 7.0.0 on Ubuntu 8.04 64bit

    Installed dkim-filter edited its .conf and setup keys ok
    listening on 127.0.0.1:8891 - can telnet in ok

    Using CLI changed milterbind port to 8891
    Using the Admin UI checked milter server and set address to 127.0.0.1

    edited main.cf to add
    non_smtpd_milters = inet:localhost:8891
    milter_protocol = 2
    milter_default_action = accept

    smtpd_milters = inet:localhost:8891 was already set ok

    non_smtpd_milters = inet:localhost:8891 does not stay following zmtactl restart - but persists after postfix reload as expected - (would be nice to sort this as well but secondary problem)

    The problem - nothing is signed no emails either sent via client (on 587) or webmail submission even seem to be 'miltered' nothing in the logs or headers.

    I'm obviously doing something very silly and very obvious somewhere grrrrr....

    Someone give me a hint please !!!

    (I had exactly the same issues with 6.0.10 as well)

  2. #2
    Join Date
    Jan 2010
    Posts
    9
    Rep Power
    5

    Default

    more info - non_smtpd_milters = inet:localhost:8891 does NOT stick after a postfix reload

    I can edit main.cf manually or do a postconf -e non_smtpd_milters=inet:127.0.0.1:8891 and a postfix reload wipes it again

    This may be the issue as the non-smtpd milters is the one I need for signing I think.

    I have looked in ~/conf/zmmta.cf and non_smtpd_milters is set to VAR zimbraMtaNonSmtpdMilters
    But I do not know where VAR zimbraMtaNonSmtpdMilters is set ???? ldap I presume ...

    -EDIT-

    I have now edited the ~/conf/zmmta.cf to set non_smtpd_milters manually and that setting 'sticks' now but still no emails going through the milter!!!
    Nothing in the logs
    (I also tried to set default_action to tempfail just to see if that would hold emails in teh queue if it was the milter failing but again no difference)

    HELP!!! please .....
    Last edited by guyh2; 03-01-2011 at 03:46 AM. Reason: added more info

  3. #3
    Join Date
    Jan 2010
    Posts
    9
    Rep Power
    5

    Default

    Found this in the logs - just need to find out why

    2011-03-01 11:43:49,307 ERROR [main] [] milter - Unable to start milter server: system failure: Could not bind to port=8891 bindaddr= ssl=false useChannels=true

  4. #4
    Join Date
    Jan 2010
    Posts
    9
    Rep Power
    5

    Default

    Quote Originally Posted by guyh2 View Post
    Found this in the logs - just need to find out why

    2011-03-01 11:43:49,307 ERROR [main] [] milter - Unable to start milter server: system failure: Could not bind to port=8891 bindaddr= ssl=false useChannels=true
    I think I am doing something fundamentally wrong here

    Zimbra's milter server - this seems to be new in 7.0.0
    It is trying to bind to localhost:8891 but of course it can't, because DKIM-filter has already bound to that port and is listening on it.

    What does Zimbra's milter server do exactly? and should I be trying to use it or not?

  5. #5
    Join Date
    Jan 2010
    Posts
    9
    Rep Power
    5

    Default

    I have tried disabling the zimbra milter and manually editing ~/conf/zmmta.cf to rewite main.cf correctly

    Still doesn't sign anything


    I have also just set up another Ubuntu server just running Postfix and installed dkim-filter and it works first time
    Code:
    Delivered-To: root@ubuntu.####.co.uk
    Received: by ubuntu.####.co.uk (Postfix, from userid 0)
            id C5F025A3FA; Tue,  1 Mar 2011 12:53:36 +0000 (GMT)
    X-DKIM: Sendmail DKIM Filter v2.5.4 ubuntu.####.co.uk C5F025A3FA
    DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=####.co.uk;
            s=default; t=1298984016; bh=LLvw4B16nb24DWJSY244vAZQ9ghnxcfTxA5YWIB
            QrEc=; h=Subject:To:Message-Id:Date:From; b=HuQ4DPpBrc2ISR5qNm4Jg8D
            L/MO1d9ter39Zxg2kyUqT90N1v2qbCQ7XIwMQhl71DuDXS7bKbzMB7UdbOaaFpiQxDa
            z1B79fFjSC1mbHi5CVyqyQfGpv3nuQi92lkOOePT6OF5Wa57oBjbt4Nkc95kQSYJdrX
            Lv8hSEhWVylEZs=
    Subject: test
    To: <root@ubuntu.####.co.uk>
    X-Mailer: mail (GNU Mailutils 1.1)
    This is getting rather frustrating now

  6. #6
    Join Date
    Jan 2010
    Posts
    9
    Rep Power
    5

    Default

    Ok, hands up - it was a very simple error

    My set up was using multiple domains set up as per Set Up DKIM For Multiple Domains On Postfix With dkim-milter 2.8.x (CentOS 5.3) | HowtoForge - Linux Howtos and Tutorials

    However in the keylist file I had included and extra . in the domain name for the sender glob so the milter was doing its job and not finding a matching domain to sign from

    The lack of any diagnostic logging was very frustrating though.

    Still, it works

    Still don't know what the Zimbra milter server is for though??

  7. #7
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by guyh2 View Post
    Still don't know what the Zimbra milter server is for though??
    It's mentioned in the Release Notes and these bugs relate to it's function:

    Bug 9620 &ndash; policy for who can send to a distribution lists
    Bug 46311 &ndash; milter to check if sender can send to a distribution list
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Similar Threads

  1. Replies: 3
    Last Post: 02-03-2011, 10:46 AM
  2. Missing Email Problem
    By prox in forum Zimbra Connector for Outlook
    Replies: 6
    Last Post: 03-16-2008, 11:01 PM
  3. Zimbra, WM5.0, AS + problem with regional fonts
    By wojo2000 in forum Zimbra Mobile
    Replies: 7
    Last Post: 06-25-2007, 02:04 AM
  4. WindowsMobile - problem with regional fonts
    By wojo2000 in forum Zimbra Mobile
    Replies: 0
    Last Post: 06-22-2007, 11:37 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •