Ubuntu + Vestacp + Exim Не принимает письма
Ubuntu + Vestacp + Exim Не принимает письма
Всем доброго времени суток!
Уже почти неделю пытаюсь настроить почту на сервере и всё никак =(
Прошу подсказать, помочь, кто знает.
Установлен: Ubuntu 14.04 + nginx + Vestacp
#1 Захожу в roundcube и отправляю от admin@itemp*re.biz письмо c темой test#1.
10 секунд и письмо у меня на Gmail.
Отвечаю на него с Gmail (или пишу новое, разницы нет) и сразу получаю ответ от Gmail, что не удалось доставить письмо.
Перечитывал соседние посты, сразу отвечу на частые вопросы:
/var/log/dovecot.log - пуст (перед тестом чистил логи)
В Весте пробовал удалять почту, создавать по новой - не влияет.
Подскажите в чем проблема? Куда копать?
За ранее, большое спасибо! :-)
Уже почти неделю пытаюсь настроить почту на сервере и всё никак =(
Прошу подсказать, помочь, кто знает.
Установлен: Ubuntu 14.04 + nginx + Vestacp
#1 Захожу в roundcube и отправляю от admin@itemp*re.biz письмо c темой test#1.
10 секунд и письмо у меня на Gmail.
Отвечаю на него с Gmail (или пишу новое, разницы нет) и сразу получаю ответ от Gmail, что не удалось доставить письмо.
Сам ответ от Gmail:Show
Delivery to the following recipient failed permanently:
admin@itemp*re.biz
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domain itemp*re.biz by mail.itemp*re.biz. [46.30.42.197].
The error that the other server returned was:
550 Administrative prohibition
----- Original message -----
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
bh=f+/U7WahE38DyI7h4j1fcfG2RwATi0Y2m/tG8EB20cQ=;
b=JBeDzr8DdmTXLo1mk9qr0f6+Pz1GKyvXDvobWuRWJhmPxFAHh0QTTa+lR4W+T8qXSQ
R8vIs/HWGoLqHvfPBI1YxKLir/fdk9mKZxpyDERabPBATNvBULMrgGjuQA7oyzRIbRhC
gH4V2/SO6AzeKfYaPRzToM/mGKeeBdaEghjPSl1U1DCvsxJPuUlb5adbXfeqJB8F0vN0
Vqdu3eip6urYDmUBpTSzxyxv/GHC0he7V4sETsBpZlxOUdKlNeC+pqZKCNyrP+q0uGwl
v/+0WWpOGpwfpc9YQTE5D2dGW2E+xdPZdX6FSqIjtomMR1Owl9ktIrmBNfKQu3pJSPTU
QF+w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:in-reply-to:references:from:date
:message-id:subject:to;
bh=f+/U7WahE38DyI7h4j1fcfG2RwATi0Y2m/tG8EB20cQ=;
b=PGNzInuuJ8C2DNuH4U73qhtHldRTsqSK7CLjQusD5BAnjwK0e6Af3cgazDTwJCK9Wh
KA1//ztW9c+RU9awxaDl0hVSGTm9b8ZdpdjZrfBvbvtYitmI3H0u5tjn3SqL3rU6xJ8U
ZjborjyqeYFxflwNT4T6iP4pG3Vik/W5NA4787EBDFfSOaus0vugQvKX/HgHFM8BXWao
Z+gZ4XHSFynAxy9BdxgDLhajmc8/7Px7bwadmktCRaDZJFEYD8nEgBfCsD8MxtryxYXP
c3Y2z3/mfOCXFoM4L2mJ9iirGAQI1TgKJPaVKdmkO/4bFnMsY0DKHu3b94vQ5D6b3w7h
Bj0Q==
X-Gm-Message-State: ABUngvdN2Hf3obO5Cr9BC5sJ3x3d6VgaRldNXiHroDxIV0GV0ND/6DRzG+Jtr82PlJSj2Y2XLdTmvlDGvrEARQ==
X-Received: by 10.25.56.94 with SMTP id d30mr3885896lfj.2.1478348877105; Sat,
05 Nov 2016 05:27:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.25.44.8 with HTTP; Sat, 5 Nov 2016 05:27:56 -0700 (PDT)
In-Reply-To: <013a1374e5d5806f3d8612f019b9a629@itemp*re.biz>
References: <013a1374e5d5806f3d8612f019b9a629@itemp*re.biz>
From: Yuriy ZHura <[email protected]>
Date: Sat, 5 Nov 2016 14:27:56 +0200
Message-ID: <CALi_3HQjD_L2j+yeC3NEBnYhRfqh0rytNkro_v793h6b29=[email protected]>
Subject: Re: test#1
To: admin@itemp*re.biz
Content-Type: multipart/alternative; boundary=f403045ea130ac906805408ceba3
admin@itemp*re.biz
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domain itemp*re.biz by mail.itemp*re.biz. [46.30.42.197].
The error that the other server returned was:
550 Administrative prohibition
----- Original message -----
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:from:date:message-id:subject:to;
bh=f+/U7WahE38DyI7h4j1fcfG2RwATi0Y2m/tG8EB20cQ=;
b=JBeDzr8DdmTXLo1mk9qr0f6+Pz1GKyvXDvobWuRWJhmPxFAHh0QTTa+lR4W+T8qXSQ
R8vIs/HWGoLqHvfPBI1YxKLir/fdk9mKZxpyDERabPBATNvBULMrgGjuQA7oyzRIbRhC
gH4V2/SO6AzeKfYaPRzToM/mGKeeBdaEghjPSl1U1DCvsxJPuUlb5adbXfeqJB8F0vN0
Vqdu3eip6urYDmUBpTSzxyxv/GHC0he7V4sETsBpZlxOUdKlNeC+pqZKCNyrP+q0uGwl
v/+0WWpOGpwfpc9YQTE5D2dGW2E+xdPZdX6FSqIjtomMR1Owl9ktIrmBNfKQu3pJSPTU
QF+w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:in-reply-to:references:from:date
:message-id:subject:to;
bh=f+/U7WahE38DyI7h4j1fcfG2RwATi0Y2m/tG8EB20cQ=;
b=PGNzInuuJ8C2DNuH4U73qhtHldRTsqSK7CLjQusD5BAnjwK0e6Af3cgazDTwJCK9Wh
KA1//ztW9c+RU9awxaDl0hVSGTm9b8ZdpdjZrfBvbvtYitmI3H0u5tjn3SqL3rU6xJ8U
ZjborjyqeYFxflwNT4T6iP4pG3Vik/W5NA4787EBDFfSOaus0vugQvKX/HgHFM8BXWao
Z+gZ4XHSFynAxy9BdxgDLhajmc8/7Px7bwadmktCRaDZJFEYD8nEgBfCsD8MxtryxYXP
c3Y2z3/mfOCXFoM4L2mJ9iirGAQI1TgKJPaVKdmkO/4bFnMsY0DKHu3b94vQ5D6b3w7h
Bj0Q==
X-Gm-Message-State: ABUngvdN2Hf3obO5Cr9BC5sJ3x3d6VgaRldNXiHroDxIV0GV0ND/6DRzG+Jtr82PlJSj2Y2XLdTmvlDGvrEARQ==
X-Received: by 10.25.56.94 with SMTP id d30mr3885896lfj.2.1478348877105; Sat,
05 Nov 2016 05:27:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.25.44.8 with HTTP; Sat, 5 Nov 2016 05:27:56 -0700 (PDT)
In-Reply-To: <013a1374e5d5806f3d8612f019b9a629@itemp*re.biz>
References: <013a1374e5d5806f3d8612f019b9a629@itemp*re.biz>
From: Yuriy ZHura <[email protected]>
Date: Sat, 5 Nov 2016 14:27:56 +0200
Message-ID: <CALi_3HQjD_L2j+yeC3NEBnYhRfqh0rytNkro_v793h6b29=[email protected]>
Subject: Re: test#1
To: admin@itemp*re.biz
Content-Type: multipart/alternative; boundary=f403045ea130ac906805408ceba3
Содержание файла hostsShow
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
127.0.1.1 itemp*re.biz
127.0.0.1 localhost.localdomain localhost
# Auto-generated hostname. Please do not remove this comment.
46.30.42.197 itemp*re.biz itempire
::1 localhost ip6-localhost ip6-loopback
ff02::2 ip6-allrouters
127.0.1.1 itemp*re.biz
127.0.0.1 localhost.localdomain localhost
# Auto-generated hostname. Please do not remove this comment.
46.30.42.197 itemp*re.biz itempire
::1 localhost ip6-localhost ip6-loopback
Содержание файла hostnameShow
itemp*re.biz
Лог Exim main.logShow
2016-11-05 15:26:25 Warning: purging the environment.
Suggested action: use keep_environment.
2016-11-05 15:26:25 [28097] cwd=/var/lib/roundcube 4 args: /usr/sbin/sendmail -t -i -[email protected]
2016-11-05 15:26:25 [28097] 1c303F-0007JB-D9 <= www-data@itemp*re.biz U=www-data P=local S=605 M8S=0 id=[email protected] T="test#1" from <www-data@itemp*re.biz> for mr.traney@gma*l.com
2016-11-05 15:26:25 [28100] cwd=/var/spool/exim4 3 args: /usr/sbin/exim4 -Mc 1c303F-0007JB-D9
2016-11-05 15:26:40 [28104] 1c303F-0007JB-D9 gmail-smtp-in.l.google.com [2a00:1450:4013:c05::1b] Connection timed out
2016-11-05 15:26:40 [28104] 1c303F-0007JB-D9 TLS error on connection to gmail-smtp-in.l.google.com [173.194.79.27] (cert/key setup: cert=/etc/ssl/certs/exim.pem key=/etc/ssl/private/exim.pem): Error while reading file.
2016-11-05 15:26:40 [28104] 1c303F-0007JB-D9 TLS session failure: delivering unencrypted to gmail-smtp-in.l.google.com [173.194.79.27] (not in hosts_require_tls)
2016-11-05 15:26:40 [28100] 1c303F-0007JB-D9 => mr.traney@gma*l.com F=<www-data@itemp*re.biz> P=<www-data@itemp*re.biz> R=dnslookup T=remote_smtp S=627 H=gmail-smtp-in.l.google.com [173.194.79.27] C="250 2.0.0 OK 1478348800 f6si20574528wjj.241 - gsmtp" QT=15s DT=0s
2016-11-05 15:26:40 [28100] 1c303F-0007JB-D9 Completed QT=15s
2016-11-05 15:27:57 [25432] SMTP connection from [209.85.215.52] (TCP/IP connection count = 1)
2016-11-05 15:27:57 [28119] H=(mail-lf0-f52.google.com) [209.85.215.52] F=<mr.traney@gma*l.com> rejected RCPT <admin@itemp*re.biz>
2016-11-05 15:27:57 [28119] H=(mail-lf0-f52.google.com) [209.85.215.52] incomplete transaction (QUIT) from <mr.traney@gma*l.com>
2016-11-05 15:27:57 [28119] SMTP connection from (mail-lf0-f52.google.com) [209.85.215.52] closed by QUIT
2016-11-05 15:29:27 [28128] cwd=/var/spool/exim4 2 args: /usr/sbin/exim4 -q
2016-11-05 15:29:27 [28128] Start queue run: pid=28128
2016-11-05 15:29:27 [28130] 1c2QPe-00056z-0B Message is frozen
2016-11-05 15:29:27 [28131] 1c2RDs-0005wz-JQ Message is frozen
2016-11-05 15:29:27 [28132] 1c2mtB-0004kv-Tz Message is frozen
2016-11-05 15:29:27 [28133] 1c2RDr-0005tJ-8V Message is frozen
2016-11-05 15:29:27 [28134] 1c2nhP-0005X9-Gc Message is frozen
2016-11-05 15:29:27 [28135] 1c2nhQ-0005aq-Dg Message is frozen
2016-11-05 15:29:27 [28128] End queue run: pid=28128
2016-11-05 15:30:02 Warning: purging the environment.
Suggested action: use keep_environment.
2016-11-05 15:30:02 [28251] cwd=/home/admin 2 args: exim -bpc
2016-11-05 15:35:02 Warning: purging the environment.
Suggested action: use keep_environment.
2016-11-05 15:35:02 [28419] cwd=/home/admin 2 args: exim -bpc
Suggested action: use keep_environment.
2016-11-05 15:26:25 [28097] cwd=/var/lib/roundcube 4 args: /usr/sbin/sendmail -t -i -[email protected]
2016-11-05 15:26:25 [28097] 1c303F-0007JB-D9 <= www-data@itemp*re.biz U=www-data P=local S=605 M8S=0 id=[email protected] T="test#1" from <www-data@itemp*re.biz> for mr.traney@gma*l.com
2016-11-05 15:26:25 [28100] cwd=/var/spool/exim4 3 args: /usr/sbin/exim4 -Mc 1c303F-0007JB-D9
2016-11-05 15:26:40 [28104] 1c303F-0007JB-D9 gmail-smtp-in.l.google.com [2a00:1450:4013:c05::1b] Connection timed out
2016-11-05 15:26:40 [28104] 1c303F-0007JB-D9 TLS error on connection to gmail-smtp-in.l.google.com [173.194.79.27] (cert/key setup: cert=/etc/ssl/certs/exim.pem key=/etc/ssl/private/exim.pem): Error while reading file.
2016-11-05 15:26:40 [28104] 1c303F-0007JB-D9 TLS session failure: delivering unencrypted to gmail-smtp-in.l.google.com [173.194.79.27] (not in hosts_require_tls)
2016-11-05 15:26:40 [28100] 1c303F-0007JB-D9 => mr.traney@gma*l.com F=<www-data@itemp*re.biz> P=<www-data@itemp*re.biz> R=dnslookup T=remote_smtp S=627 H=gmail-smtp-in.l.google.com [173.194.79.27] C="250 2.0.0 OK 1478348800 f6si20574528wjj.241 - gsmtp" QT=15s DT=0s
2016-11-05 15:26:40 [28100] 1c303F-0007JB-D9 Completed QT=15s
2016-11-05 15:27:57 [25432] SMTP connection from [209.85.215.52] (TCP/IP connection count = 1)
2016-11-05 15:27:57 [28119] H=(mail-lf0-f52.google.com) [209.85.215.52] F=<mr.traney@gma*l.com> rejected RCPT <admin@itemp*re.biz>
2016-11-05 15:27:57 [28119] H=(mail-lf0-f52.google.com) [209.85.215.52] incomplete transaction (QUIT) from <mr.traney@gma*l.com>
2016-11-05 15:27:57 [28119] SMTP connection from (mail-lf0-f52.google.com) [209.85.215.52] closed by QUIT
2016-11-05 15:29:27 [28128] cwd=/var/spool/exim4 2 args: /usr/sbin/exim4 -q
2016-11-05 15:29:27 [28128] Start queue run: pid=28128
2016-11-05 15:29:27 [28130] 1c2QPe-00056z-0B Message is frozen
2016-11-05 15:29:27 [28131] 1c2RDs-0005wz-JQ Message is frozen
2016-11-05 15:29:27 [28132] 1c2mtB-0004kv-Tz Message is frozen
2016-11-05 15:29:27 [28133] 1c2RDr-0005tJ-8V Message is frozen
2016-11-05 15:29:27 [28134] 1c2nhP-0005X9-Gc Message is frozen
2016-11-05 15:29:27 [28135] 1c2nhQ-0005aq-Dg Message is frozen
2016-11-05 15:29:27 [28128] End queue run: pid=28128
2016-11-05 15:30:02 Warning: purging the environment.
Suggested action: use keep_environment.
2016-11-05 15:30:02 [28251] cwd=/home/admin 2 args: exim -bpc
2016-11-05 15:35:02 Warning: purging the environment.
Suggested action: use keep_environment.
2016-11-05 15:35:02 [28419] cwd=/home/admin 2 args: exim -bpc
Лог Exim reject.logShow
2016-11-05 15:27:57 [28119] H=(mail-lf0-f52.google.com) [209.85.215.52] F=<mr.traney@gma*l.com> rejected RCPT <admin@itemp*re.biz>
/etc/exim4/exim4.confShow
# vim ft=exim
exim_user = Debian-exim
exim_group = Debian-exim
never_users = root
#local_interfaces = 127.0.0.1
local_interfaces = 0.0.0.0
domainlist local_domains = localhost : itemp*re.biz
rfc1413_query_timeout = 0s
ignore_bounce_errors_after = 2d
log_file_path = /var/log/exim4/%s.log
log_selector = +all \
-incoming_interface -incoming_port -outgoing_port \
-tls_certificate_verified -tls_cipher
begin routers
system_aliases:
driver = redirect
allow_fail
allow_defer
data = ${lookup{$local_part}lsearch{/etc/aliases}}
domains = +local_domains
user = Debian-exim
group = Debian-exim
pipe_transport = address_pipe
dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
catchall:
driver = redirect
domains = +local_domains
data = postmaster
begin transports
remote_smtp:
driver = smtp
tls_certificate = /etc/ssl/certs/exim.pem
tls_privatekey = /etc/ssl/private/exim.pem
address_pipe:
driver = pipe
return_output
begin retry
* * F,2h,15m; G,16h,1h,1.5; F,2d,6h
exim_user = Debian-exim
exim_group = Debian-exim
never_users = root
#local_interfaces = 127.0.0.1
local_interfaces = 0.0.0.0
domainlist local_domains = localhost : itemp*re.biz
rfc1413_query_timeout = 0s
ignore_bounce_errors_after = 2d
log_file_path = /var/log/exim4/%s.log
log_selector = +all \
-incoming_interface -incoming_port -outgoing_port \
-tls_certificate_verified -tls_cipher
begin routers
system_aliases:
driver = redirect
allow_fail
allow_defer
data = ${lookup{$local_part}lsearch{/etc/aliases}}
domains = +local_domains
user = Debian-exim
group = Debian-exim
pipe_transport = address_pipe
dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
catchall:
driver = redirect
domains = +local_domains
data = postmaster
begin transports
remote_smtp:
driver = smtp
tls_certificate = /etc/ssl/certs/exim.pem
tls_privatekey = /etc/ssl/private/exim.pem
address_pipe:
driver = pipe
return_output
begin retry
* * F,2h,15m; G,16h,1h,1.5; F,2d,6h
Подскажите в чем проблема? Куда копать?
За ранее, большое спасибо! :-)
Re: Ubuntu + Vestacp + Exim Не принимает письма
Танцевал с бубном, генерировал сертефикаты. не помогало. Заменил конфиг на
Письма начали ходить! =)
Что именно помогло - не знаю. Может все в комплексе.
Новый конфигShow
######################################################################
# #
# Exim configuration file for Vesta Control Panel #
# #
######################################################################
#SPAMASSASSIN = yes
#SPAM_SCORE = 50
#CLAMD = yes
domainlist local_domains = dsearch;/etc/exim4/domains/
domainlist relay_to_domains = dsearch;/etc/exim4/domains/
hostlist relay_from_hosts = 127.0.0.1
hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
no_local_from_check
untrusted_set_sender = *
acl_smtp_connect = acl_check_spammers
acl_smtp_mail = acl_check_mail
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
acl_smtp_mime = acl_check_mime
.ifdef SPAMASSASSIN
spamd_address = 127.0.0.1 783
.endif
.ifdef CLAMD
av_scanner = clamd: /var/run/clamav/clamd.ctl
.endif
tls_advertise_hosts = *
tls_certificate = /usr/local/vesta/ssl/certificate.crt
tls_privatekey = /usr/local/vesta/ssl/certificate.key
daemon_smtp_ports = 25 : 465 : 587 : 2525
tls_on_connect_ports = 465
never_users = root
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 5s
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
DKIM_DOMAIN = ${lc:${domain:$h_from:}}
DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
######################################################################
# ACL CONFIGURATION #
# Specifies access control lists for incoming SMTP mail #
######################################################################
begin acl
acl_check_spammers:
accept hosts = +whitelist
drop message = Your host in blacklist on this server.
log_message = Host in blacklist
hosts = +spammers
accept
acl_check_mail:
deny condition = ${if eq{$sender_helo_name}{}}
message = HELO required before MAIL
drop message = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
condition = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
condition = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
delay = 45s
drop condition = ${if isip{$sender_helo_name}}
message = Access denied - Invalid HELO name (See RFC2821 4.1.3)
drop condition = ${if eq{[$interface_address]}{$sender_helo_name}}
message = $interface_address is _my_ address
accept
acl_check_rcpt:
accept hosts = :
deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
require verify = sender
accept hosts = +relay_from_hosts
control = submission
accept authenticated = *
control = submission/domain=
deny message = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
hosts = !+whitelist
dnslists = ${readfile {/etc/exim4/dnsbl.conf}{:}}
require message = relay not permitted
domains = +local_domains : +relay_to_domains
deny message = smtp auth requried
sender_domains = +local_domains
!authenticated = *
require verify = recipient
.ifdef CLAMD
warn set acl_m0 = no
warn condition = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
set acl_m0 = yes
.endif
.ifdef SPAMASSASSIN
warn set acl_m1 = no
warn condition = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
set acl_m1 = yes
.endif
accept
acl_check_data:
.ifdef CLAMD
deny message = Message contains a virus ($malware_name) and has been rejected
malware = *
condition = ${if eq{$acl_m0}{yes}{yes}{no}}
.endif
.ifdef SPAMASSASSIN
warn !authenticated = *
hosts = !+relay_from_hosts
condition = ${if < {$message_size}{100K}}
condition = ${if eq{$acl_m1}{yes}{yes}{no}}
spam = nobody:true/defer_ok
add_header = X-Spam-Score: $spam_score_int
add_header = X-Spam-Bar: $spam_bar
add_header = X-Spam-Report: $spam_report
set acl_m2 = $spam_score_int
warn condition = ${if !eq{$acl_m2}{} {yes}{no}}
condition = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
add_header = X-Spam-Status: Yes
message = SpamAssassin detected spam (from $sender_address to $recipients).
.endif
accept
acl_check_mime:
deny message = Blacklisted file extension detected
condition = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
accept
######################################################################
# AUTHENTICATION CONFIGURATION #
######################################################################
begin authenticators
dovecot_plain:
driver = dovecot
public_name = PLAIN
server_socket = /var/run/dovecot/auth-client
server_set_id = $auth1
dovecot_login:
driver = dovecot
public_name = LOGIN
server_socket = /var/run/dovecot/auth-client
server_set_id = $auth1
######################################################################
# ROUTERS CONFIGURATION #
# Specifies how addresses are handled #
######################################################################
begin routers
#smarthost:
# driver = manualroute
# domains = ! +local_domains
# transport = remote_smtp
# route_list = * smartrelay.vestacp.com
# no_more
# no_verify
dnslookup:
driver = dnslookup
domains = !+local_domains
transport = remote_smtp
no_more
userforward:
driver = redirect
check_local_user
file = $home/.forward
allow_filter
no_verify
no_expn
check_ancestor
file_transport = address_file
pipe_transport = address_pipe
reply_transport = address_reply
procmail:
driver = accept
check_local_user
require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
transport = procmail
no_verify
autoreplay:
driver = accept
require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
retry_use_local_part
transport = userautoreply
unseen
aliases:
driver = redirect
headers_add = X-redirected: yes
data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
require_files = /etc/exim4/domains/$domain/aliases
redirect_router = dnslookup
pipe_transport = address_pipe
unseen
localuser_fwd_only:
driver = accept
transport = devnull
condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
localuser_spam:
driver = accept
transport = local_spam_delivery
condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
localuser:
driver = accept
transport = local_delivery
condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
catchall:
driver = redirect
headers_add = X-redirected: yes
require_files = /etc/exim4/domains/$domain/aliases
data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
file_transport = local_delivery
redirect_router = dnslookup
terminate_alias:
driver = accept
transport = devnull
condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
######################################################################
# TRANSPORTS CONFIGURATION #
######################################################################
begin transports
remote_smtp:
driver = smtp
#helo_data = $sender_address_domain
dkim_domain = DKIM_DOMAIN
dkim_selector = mail
dkim_private_key = DKIM_PRIVATE_KEY
dkim_canon = relaxed
dkim_strict = 0
procmail:
driver = pipe
command = "/usr/bin/procmail -d $local_part"
return_path_add
delivery_date_add
envelope_to_add
user = $local_part
initgroups
return_output
local_delivery:
driver = appendfile
maildir_format
maildir_use_size_file
user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
group = mail
create_directory
directory_mode = 770
mode = 660
use_lockfile = no
delivery_date_add
envelope_to_add
return_path_add
directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
quota_warn_threshold = 75%
local_spam_delivery:
driver = appendfile
maildir_format
maildir_use_size_file
user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
group = mail
create_directory
directory_mode = 770
mode = 660
use_lockfile = no
delivery_date_add
envelope_to_add
return_path_add
directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
quota_warn_threshold = 75%
address_pipe:
driver = pipe
return_output
address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add
address_reply:
driver = autoreply
userautoreply:
driver = autoreply
file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
from = "${local_part}@${domain}"
subject = "${if def:h_Subject: {Autoreply: ${quote:${escape:$h_Subject:}}} {Autoreply Message}}"
to = "${sender_address}"
devnull:
driver = appendfile
file = /dev/null
######################################################################
# RETRY CONFIGURATION #
######################################################################
begin retry
# Address or Domain Error Retries
# ----------------- ----- -------
* * F,2h,15m; G,16h,1h,1.5; F,4d,6h
######################################################################
# REWRITE CONFIGURATION #
######################################################################
begin rewrite
######################################################################
# #
# Exim configuration file for Vesta Control Panel #
# #
######################################################################
#SPAMASSASSIN = yes
#SPAM_SCORE = 50
#CLAMD = yes
domainlist local_domains = dsearch;/etc/exim4/domains/
domainlist relay_to_domains = dsearch;/etc/exim4/domains/
hostlist relay_from_hosts = 127.0.0.1
hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
no_local_from_check
untrusted_set_sender = *
acl_smtp_connect = acl_check_spammers
acl_smtp_mail = acl_check_mail
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
acl_smtp_mime = acl_check_mime
.ifdef SPAMASSASSIN
spamd_address = 127.0.0.1 783
.endif
.ifdef CLAMD
av_scanner = clamd: /var/run/clamav/clamd.ctl
.endif
tls_advertise_hosts = *
tls_certificate = /usr/local/vesta/ssl/certificate.crt
tls_privatekey = /usr/local/vesta/ssl/certificate.key
daemon_smtp_ports = 25 : 465 : 587 : 2525
tls_on_connect_ports = 465
never_users = root
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 5s
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
DKIM_DOMAIN = ${lc:${domain:$h_from:}}
DKIM_FILE = /etc/exim4/domains/${lc:${domain:$h_from:}}/dkim.pem
DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
######################################################################
# ACL CONFIGURATION #
# Specifies access control lists for incoming SMTP mail #
######################################################################
begin acl
acl_check_spammers:
accept hosts = +whitelist
drop message = Your host in blacklist on this server.
log_message = Host in blacklist
hosts = +spammers
accept
acl_check_mail:
deny condition = ${if eq{$sender_helo_name}{}}
message = HELO required before MAIL
drop message = Helo name contains a ip address (HELO was $sender_helo_name) and not is valid
condition = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
condition = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
delay = 45s
drop condition = ${if isip{$sender_helo_name}}
message = Access denied - Invalid HELO name (See RFC2821 4.1.3)
drop condition = ${if eq{[$interface_address]}{$sender_helo_name}}
message = $interface_address is _my_ address
accept
acl_check_rcpt:
accept hosts = :
deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
require verify = sender
accept hosts = +relay_from_hosts
control = submission
accept authenticated = *
control = submission/domain=
deny message = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
hosts = !+whitelist
dnslists = ${readfile {/etc/exim4/dnsbl.conf}{:}}
require message = relay not permitted
domains = +local_domains : +relay_to_domains
deny message = smtp auth requried
sender_domains = +local_domains
!authenticated = *
require verify = recipient
.ifdef CLAMD
warn set acl_m0 = no
warn condition = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
set acl_m0 = yes
.endif
.ifdef SPAMASSASSIN
warn set acl_m1 = no
warn condition = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
set acl_m1 = yes
.endif
accept
acl_check_data:
.ifdef CLAMD
deny message = Message contains a virus ($malware_name) and has been rejected
malware = *
condition = ${if eq{$acl_m0}{yes}{yes}{no}}
.endif
.ifdef SPAMASSASSIN
warn !authenticated = *
hosts = !+relay_from_hosts
condition = ${if < {$message_size}{100K}}
condition = ${if eq{$acl_m1}{yes}{yes}{no}}
spam = nobody:true/defer_ok
add_header = X-Spam-Score: $spam_score_int
add_header = X-Spam-Bar: $spam_bar
add_header = X-Spam-Report: $spam_report
set acl_m2 = $spam_score_int
warn condition = ${if !eq{$acl_m2}{} {yes}{no}}
condition = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
add_header = X-Spam-Status: Yes
message = SpamAssassin detected spam (from $sender_address to $recipients).
.endif
accept
acl_check_mime:
deny message = Blacklisted file extension detected
condition = ${if match {${lc:$mime_filename}}{\N(\.ade|\.adp|\.bat|\.chm|\.cmd|\.com|\.cpl|\.exe|\.hta|\.ins|\.isp|\.jse|\.lib|\.lnk|\.mde|\.msc|\.msp|\.mst|\.pif|\.scr|\.sct|\.shb|\.sys|\.vb|\.vbe|\.vbs|\.vxd|\.wsc|\.wsf|\.wsh)$\N}{1}{0}}
accept
######################################################################
# AUTHENTICATION CONFIGURATION #
######################################################################
begin authenticators
dovecot_plain:
driver = dovecot
public_name = PLAIN
server_socket = /var/run/dovecot/auth-client
server_set_id = $auth1
dovecot_login:
driver = dovecot
public_name = LOGIN
server_socket = /var/run/dovecot/auth-client
server_set_id = $auth1
######################################################################
# ROUTERS CONFIGURATION #
# Specifies how addresses are handled #
######################################################################
begin routers
#smarthost:
# driver = manualroute
# domains = ! +local_domains
# transport = remote_smtp
# route_list = * smartrelay.vestacp.com
# no_more
# no_verify
dnslookup:
driver = dnslookup
domains = !+local_domains
transport = remote_smtp
no_more
userforward:
driver = redirect
check_local_user
file = $home/.forward
allow_filter
no_verify
no_expn
check_ancestor
file_transport = address_file
pipe_transport = address_pipe
reply_transport = address_reply
procmail:
driver = accept
check_local_user
require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
transport = procmail
no_verify
autoreplay:
driver = accept
require_files = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
condition = ${if exists{/etc/exim4/domains/$domain/autoreply.${local_part}.msg}{yes}{no}}
retry_use_local_part
transport = userautoreply
unseen
aliases:
driver = redirect
headers_add = X-redirected: yes
data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
require_files = /etc/exim4/domains/$domain/aliases
redirect_router = dnslookup
pipe_transport = address_pipe
unseen
localuser_fwd_only:
driver = accept
transport = devnull
condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/fwd_only}{true}{false}}}}
localuser_spam:
driver = accept
transport = local_spam_delivery
condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{yes}{no_such_user}}}}
localuser:
driver = accept
transport = local_delivery
condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}{true}{false}}
catchall:
driver = redirect
headers_add = X-redirected: yes
require_files = /etc/exim4/domains/$domain/aliases
data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/$domain/aliases}}}}
file_transport = local_delivery
redirect_router = dnslookup
terminate_alias:
driver = accept
transport = devnull
condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/$domain/aliases}{true}{false}}
######################################################################
# TRANSPORTS CONFIGURATION #
######################################################################
begin transports
remote_smtp:
driver = smtp
#helo_data = $sender_address_domain
dkim_domain = DKIM_DOMAIN
dkim_selector = mail
dkim_private_key = DKIM_PRIVATE_KEY
dkim_canon = relaxed
dkim_strict = 0
procmail:
driver = pipe
command = "/usr/bin/procmail -d $local_part"
return_path_add
delivery_date_add
envelope_to_add
user = $local_part
initgroups
return_output
local_delivery:
driver = appendfile
maildir_format
maildir_use_size_file
user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
group = mail
create_directory
directory_mode = 770
mode = 660
use_lockfile = no
delivery_date_add
envelope_to_add
return_path_add
directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
quota_warn_threshold = 75%
local_spam_delivery:
driver = appendfile
maildir_format
maildir_use_size_file
user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}
group = mail
create_directory
directory_mode = 770
mode = 660
use_lockfile = no
delivery_date_add
envelope_to_add
return_path_add
directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part/.Spam"
quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}M
quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/passwd}}}}/mail/$domain/$local_part"
quota_warn_threshold = 75%
address_pipe:
driver = pipe
return_output
address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add
address_reply:
driver = autoreply
userautoreply:
driver = autoreply
file = /etc/exim4/domains/$domain/autoreply.${local_part}.msg
from = "${local_part}@${domain}"
subject = "${if def:h_Subject: {Autoreply: ${quote:${escape:$h_Subject:}}} {Autoreply Message}}"
to = "${sender_address}"
devnull:
driver = appendfile
file = /dev/null
######################################################################
# RETRY CONFIGURATION #
######################################################################
begin retry
# Address or Domain Error Retries
# ----------------- ----- -------
* * F,2h,15m; G,16h,1h,1.5; F,4d,6h
######################################################################
# REWRITE CONFIGURATION #
######################################################################
begin rewrite
######################################################################
Что именно помогло - не знаю. Может все в комплексе.