Hallo Alex!
Vielen Dank, dass du Zeit hattest, auch die anderen Parameter anzusehen.
Am 13.12.2016 um 19:25 schrieb Alex JOST:
Am 13.12.2016 um 11:57 schrieb Andreas Wass - Glas Gasperlmair:
*Vielen Dank wieder Mal an Alex Jost !
Schön, dass wir Dir helfen konnten :)
smtp_destination_rate_delay = 150s* genau der hier war Schuld an der Verzögerung bei vielen gleichzeitigen Emails an die selbe Domain. Blöd, wenn man alles blind aus irgendeinem Tutorial übernimmt.
Stimmt! An diesem Punkt könntest Du Dir jetzt auch noch überlegen welche anderen Parameter Du einfach so blind kopiert hast. Ich denke da z.B. an die Einstellungen für SSL/TLS.
Könntest du mir noch sagen, was du an den SSL/TLS Einstellungen ändern würdest?
*Anbei nochmal meine postconf -n* alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases amavisd_milter = inet:127.0.0.1:8899 body_checks = pcre:/etc/postfix/body_checks_map bounce_queue_lifetime = 3d bounce_template_file = /etc/postfix/bounce.de-DE.cf broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; echo where) | gdb $daemon_directory/$process_name $process_id 2>&1
$config_directory/$process_name.$process_id.log & sleep 5
default_database_type = btree default_privs = nobody disable_vrfy_command = yes header_checks = pcre:/etc/postfix/header_checks_map html_directory = no lmtp_generic_maps = btree:/etc/postfix/lmtp_generic_maps lmtp_tls_protocols = $smtp_tls_protocols mail_owner = postfix mailbox_size_limit = 52428800 mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man maximal_queue_lifetime = 3d message_size_limit = 52428800 mydestination = $myhostname localhost.$mydomain localhost myhostname = mail1.glasgasperlmair.at mynetworks = 127.0.0.0/8 [::1]/128 192.168.104.0/23 192.168.103.0/24 myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix postscreen_access_list = permit_mynetworks cidr:/etc/postfix/postscreen_whitelist postscreen_bare_newline_action = ignore postscreen_bare_newline_enable = no postscreen_blacklist_action = drop postscreen_dnsbl_action = enforce postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 b.barracudacentral.org*1 postscreen_dnsbl_threshold = 2 postscreen_dnsbl_whitelist_threshold = 0 postscreen_greet_action = enforce postscreen_non_smtp_command_enable = no postscreen_pipelining_enable = no postscreen_whitelist_interfaces = static:all queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.11.3/README_FILES recipient_bcc_maps = btree:/etc/postfix/recipient_bcc_maps recipient_canonical_classes = envelope_recipient recipient_canonical_maps = btree:/etc/postfix/recipient_canonical_maps recipient_delimiter = + relay_domains = btree:/etc/postfix/relay_domains relay_recipient_maps = relocated_maps = btree:/etc/postfix/relocated_maps sample_directory = /usr/share/doc/postfix-2.11.3/samples sender_bcc_maps = btree:/etc/postfix/sender_bcc_maps sender_canonical_classes = envelope_sender sender_canonical_maps = btree:/etc/postfix/sender_canonical_maps sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop show_user_unknown_table_name = no smtp_generic_maps = btree:/etc/postfix/smtp_generic_maps smtp_tls_cert_file = $smtpd_tls_cert_file smtp_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA AES128-SHA DHE-RSA-AES128-SHA AES256-SHA DHE-RSA-AES256-SHA CAMELLIA128-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA smtp_tls_key_file = $smtpd_tls_key_file smtp_tls_loglevel = 0 smtp_tls_protocols = !SSLv2 !SSLv3 smtp_tls_security_level = may smtpd_banner = $myhostname ESMTP $mail_name smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/esmtp_access smtpd_recipient_restrictions = check_recipient_access btree:/etc/postfix/access_recipient-rfc check_client_access cidr:/etc/postfix/access_client check_helo_access btree:/etc/postfix/access_helo check_recipient_access btree:/etc/postfix/access_recipient permit_sasl_authenticated permit_mynetworks check_sender_access btree:/etc/postfix/access_sender reject_unverified_recipient reject_unauth_destination permit smtpd_relay_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_tls_ask_ccert = yes smtpd_tls_cert_file = /etc/pki/postfix/certs/mail1.glasgasperlmair.at.crt smtpd_tls_dh1024_param_file = /etc/pki/postfix/private/dh_2048.pem smtpd_tls_dh512_param_file = /etc/pki/postfix/private/dh_512.pem smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA smtpd_tls_key_file = /etc/pki/postfix/private/mail1.glasgasperlmair.at.key smtpd_tls_loglevel = 0 smtpd_tls_protocols = !SSLv2 !SSLv3 smtpd_tls_received_header = yes smtpd_tls_security_level = may tls_preempt_cipherlist = yes transport_maps = btree:/etc/postfix/transport_maps, $relay_domains unverified_recipient_reject_reason = Recipient address lookup failed unverified_sender_reject_reason = Sender address lookup failed virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual-alias-maps.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_transport = lmtp:[127.0.0.1]:24
Für mich stellt sich auch die Frage warum Du manche DNSBLs in Postscreen und dann nochmal mit smtpd_recipient_restrictions abfragst.
DNSBLs Prüfung macht ab sofort nur mehr postscreen.
Vielen Dank für die Hilfe