[PVE-User] PVE 6: postfix in a debian buster container, 'satellite' does not work.

[Stoiko Ivanov]

Hi,

Thanks for reporting this!
On Wed, 19 Feb 2020 09:55:37 +0100
Marco Gaiarin <gaio at sv.lnf.it> wrote:

> I'm not sue this is a debian/posfix or a consequences of packaging it
> in a container, so i try to ask here.

the issue is from the postfix main.cf added to the container image - it
does not contain the 'compatibility_level=2' setting - and without that
and the minimal shipped config - the system refuses mail (because it would
become an  open relay otherwise)

I sent a patch to the pve-devel list for discussion:

https://pve.proxmox.com/pipermail/pve-devel/2020-February/041879.html

cheers,
stoiko

> 
> I've setup a new container 'debian buster', and configure inside
> postfix a 'satellite system' to send all email to my internal SMTP
> server.
> 
> A local inject work:
> 
>         echo prova | mail -s test root
> 
>         Feb 17 16:35:29 vbaculalpb postfix/pickup[4047]: 318E18A4A: uid=0 from=<root>
>         Feb 17 16:35:29 vbaculalpb postfix/cleanup[4104]: 318E18A4A: message-id=<20200217153529.318E18A4A at vbaculalpb.localdomain>
>         Feb 17 16:35:29 vbaculalpb postfix/qmgr[4048]: 318E18A4A: from=<root at lilliput.linux.it>, size=408, nrcpt=1 (queue active)
>         Feb 17 16:35:29 vbaculalpb postfix/smtp[4106]: 318E18A4A: to=<root at lilliput.linux.it>, orig_to=<root>, relay=mail.lilliput.linux.it[192.168.1.1]:25, delay=0.21, delays=0.02/0.01/0.01/0.16, dsn=2.0.0, status=sent (250 OK id=1j3iQj-0003Yc-7t)
>         Feb 17 16:35:29 vbaculalpb postfix/qmgr[4048]: 318E18A4A: removed
> 
> 
> bu some services, that use 'localhost' as SMTP server, no:
> 
> 	Feb 17 16:32:18 vbaculalpb postfix/master[383]: warning: process /usr/lib/postfix/sbin/smtpd pid 3687 exit status 1
> 	Feb 17 16:32:18 vbaculalpb postfix/master[383]: warning: /usr/lib/postfix/sbin/smtpd: bad command startup -- throttling
> 	Feb 17 16:33:18 vbaculalpb postfix/smtpd[3688]: fatal: in parameter smtpd_relay_restrictions or smtpd_recipient_restrictions, specify at least one working instance of: reject_unauth_destination, defer_unauth_destination, reject, defer, defer_if_permit or check_relay_domains
> 
> googling a bit lead me to:
> 
> 	postconf compatibility_level=2
> 	postfix reload
> 
> and after that 'satellite system' work as usual.
>