About "Passed CLEAN {RelayedOpenRelay}"

[Patrick Ben Koetter]

* sergio.belkin <sergio.belkin at silicon-aid.com>:
> Hi,
> 
> What does mean "Passed CLEAN {RelayedOpenRelay}", I see  such a messages
> log on a system with Postfix+Amavis+SpamAssassin
> 
> This postfix does not perform (or at least should not) mail relaying,
> only receiving. But I see that messages.
> 
> I've tested and is not as open relay. So why such a messages, is that an
> error/warning, something misconfigured?

It usually means amavis has no idea what is inbound and what is outbound mail.
Configure @mynetworks and local_domains_maps correctly and you should be fine.

p at rick




> 
> This is part of my amavisd.conf:
> 
> use strict;
> @bypass_virus_checks_maps = (1);  # controls running of anti-virus code
> $max_servers = 2;            # num of pre-forked children (2..30 is
> common), -m
> $daemon_user  = 'amavis';    # (no default;  customary: vscan or amavis), -u
> $daemon_group = 'amavis';    # (no default;  customary: vscan or amavis), -g
> $mydomain = 'example.com';   # a convenient default for other settings
> $MYHOME = '/var/spool/amavisd';   # a convenient default for other
> settings, -H
> $TEMPBASE = "$MYHOME/tmp";   # working directory, needs to exist, -T
> $ENV{TMPDIR} = $TEMPBASE;    # environment variable TMPDIR, used by SA, etc.
> $QUARANTINEDIR = undef;      # -Q
> $db_home   = "$MYHOME/db";        # dir for bdb nanny/cache/snmp
> databases, -D
> $lock_file = "/var/run/amavisd/amavisd.lock";  # -L
> $pid_file  = "/var/run/amavisd/amavisd.pid";   # -P
> $log_level = 4;              # verbosity 0..5, -d
> $log_recip_templ = undef;    # disable by-recipient level-0 log entries
> $do_syslog = 1;              # log via syslogd (preferred)
> $syslog_facility = 'mail';   # Syslog facility as a string
> $enable_db = 1;              # enable use of BerkeleyDB/libdb (SNMP and
> nanny)
> $nanny_details_level = 2;    # nanny verbosity: 1: traditional, 2: detailed
> $enable_dkim_verification = 1;  # enable DKIM signatures verification
> $enable_dkim_signing = 1;    # load DKIM signing code, keys defined by
> dkim_key
> @local_domains_maps = ( [".$mydomain"] );  # list of all local domains
> @mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10 );
> $unix_socketname = "/var/run/amavisd/amavisd.sock";  # amavisd-release
> or amavis-milter
> $inet_socket_port = 10024;   # listen on this local TCP port(s)
> $policy_bank{'MYNETS'} = {   # mail originating from @mynetworks
> 
> Thanks in advance
> 
> 




-- 
[*] sys4 AG
 
https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein