proxy_read_maps - ReadList.com

2 msg	postmap header_checks error
10 msg	mailbox_command (dovecot lda) stopped working, ...
5 msg	mynetworks via LDAP lookup
7 msg	Local recipient table in LDAP problem

proxy_read_maps
\ postfix (24 Jan 2008)
. \ Listaccount (24 Jan 2008)

1 msg	smtpd_restriction_class and it's lookup
8 msg	Message Rejected
12 msg	Customize to filter attachment ?
2 msg	Relay question
14 msg	unnecessary routing?
4 msg	do not use 'reject_maps_rbl'?
9 msg	Fwd: Postfix in OpenVZ.
2 msg	bypass body_checks for local mail?
4 msg	catchall with relay_recipient_maps
4 msg	'Name server failure' is output
3 msg	smtp_sasl_password_maps lookups
16 msg	Postfix Queues on a Ram Disk
15 msg	sendmail compared to smtp sending
3 msg	Postfix does not recognize remote emails
2 msg	How to disable SSLv2 on smtpd opportunistic TLS?

Subject:	proxy_read_maps
Group:	Postfix-users
From:	postfix
Date:	24 Jan 2008

Hello every
[root@mailhost ~]# rpm -q postfix
postfix-2.4.5-2.fc8
[root@mailhost ~]#

[root@mailhost ~]# postconf -n
alias_maps = proxy:ldap:/etc/postfix/ldap-alias.cf hash:/etc/postfix/aliases
anvil_rate_time_unit = 60s
bounce_queue_lifetime = 2d
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin/
config_directory = /etc/postfix
content_filter =
daemon_directory = /usr/libexec/postfix/
debug_peer_level = 2
debug_peer_list = yourdomain.tld
defer_transports =
disable_dns_lookups = no
hash_queue_names = deferred, defer active bounce flush incoming
header_checks = pcre:/etc/postfix/sobig.f,
pcre:/etc/postfix/discardthem, pcre:/etc/postfix/header_checks
in_flow_delay = 1s
inet_interfaces = all
local_recipient_maps = proxy:ldap:/etc/postfix/ldap-mailbox.cf
local_transport = virtual
mail_owner = postfix
mailbox_command =
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
maximal_queue_lifetime = 3d
mime_header_checks = pcre:/etc/postfix/mime_header_checks
mydestination = $myhostname, localhost.$mydomain, $mydomain,
mail.$mydomain, www.$mydomain, ftp.$mydomain
mydomain = mydomain.tld
myhostname = mailhost.mydomain.tld
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /data/postfix/queues
readme_directory = /usr/share/doc/postfix-2.4.5/README_FILES/
relay_domains = $mydestination, hash:/etc/postfix/relay_domains,
permit_sasl_authenticated
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_client_connection_count_limit = 5
smtpd_client_connection_rate_limit = 22
smtpd_client_event_limit_exceptions = $mynetworks
smtpd_client_recipient_rate_limit = 100
smtpd_client_restrictions = hash:/etc/postfix/access,
hash:/etc/postfix/whitelist
smtpd_error_sleep_time = 0
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname
hash:/etc/postfix/helo_checks
smtpd_recipient_restrictions = reject_invalid_hostname,
reject_unknown_sender_domain, reject_unknown_recipient_domain,
permit_mynetworks, reject_unauth_destination,
reject_unauth_pipelining, check_recipient_access
hash:/etc/postfix/check_recipients, check_recipient_access
hash:/etc/postfix/access, reject_rbl_client mail-abuse.org,
reject_rbl_client sbl-xbl.spamhaus.org, reject_rbl_client
blackholes.easynet.nl, reject_rbl_client cbl.abuseat.org,
reject_rhsbl_client mail-abuse.org, reject_rhsbl_client
sbl-xbl.spamhaus.org, reject_rhsbl_client blackholes.easynet.nl,
reject_rhsbl_client cbl.abuseat.org, check_recipient_access
ldap:/etc/postfix/ldap-spamfilter.cf, permit
smtpd_sender_restrictions = reject_unknown_sender_domain,
hash:/etc/postfix/whitelist, check_sender_access
hash:/etc/postfix/access, reject_rhsbl_sender dsn.rfc-ignorant.org
strict_rfc821_envelopes = no
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = proxy:ldap:/etc/postfix/ldap-alias.cf
virtual_gid_maps = static:51
virtual_mailbox_base = /data/postfix/maildrop/
virtual_mailbox_domains = proxy:ldap:/etc/postfix/ldap-domain.cf
virtual_mailbox_maps = proxy:ldap:/etc/postfix/ldap-mailbox.cf
virtual_minimum_uid = 51
virtual_transport = virtual
virtual_uid_maps = static:51
[root@mailhost ~]#

------------------

i wanted to make the proxymap service hold-up all connections to the
ldap server.

so i added the proxy: keyword in front of all ldap-table-calls in
main.cf, e.g.

check_recipient_access proxy:ldap:/etc/postfix/ldap-spamfilter.cf,

but when i then reloaded postfix, it said:

Jan 24 09:12:29 mailhost postfix/proxymap[22319]: warning: request for
unapproved table: "ldap:/etc/postfix/ldap-spamfilter.cf"
Jan 24 09:12:29 mailhost postfix/proxymap[22319]: warning: to approve
this table for proxymap access, list
proxy:ldap:/etc/postfix/ldap-spamfilter.cf in main.cf:proxy_read_maps
Jan 24 09:12:29 mailhost postfix/smtpd[22321]: fatal: proxymap service
is not configured for table "ldap:/etc/postfix/ldap-spamfilter.cf"
Jan 24 09:12:30 mailhost postfix/master[1555]: warning: process
/usr/libexec/postfix//smtpd pid 22321 exit status 1
Jan 24 09:12:30 mailhost postfix/master[1555]: warning:
/usr/libexec/postfix//smtpd: bad command startup -- throttling

whereupon i wanted to add this table to the proxy_read_maps attribute:

proxy_read_maps = $proxy_read_maps
proxy:ldap:/etc/postfix/ldap-spamfilter.cf

but when i then reloaded postfix, it said:

Jan 24 09:26:10 mailhost postfix/proxymap[22747]: warning: unreasonable
macro call nesting: "proxy_re
ad_maps"
Jan 24 09:26:10 mailhost postfix/proxymap[22747]: fatal: dictionary
mail_dict: macro processing error
Jan 24 09:26:11 mailhost postfix/master[1555]: warning: process
/usr/libexec/postfix//proxymap pid 22
747 exit status 1
Jan 24 09:26:11 mailhost postfix/master[1555]: warning:
/usr/libexec/postfix//proxymap: bad command startup -- throttling

so i changed the attribute to

proxy_read_maps = proxy:ldap:/etc/postfix/ldap-spamfilter.cf

this time, when i reloaded postfix, i got:

Jan 24 09:27:11 mailhost postfix/proxymap[22828]: warning: request for
unapproved table: "ldap:/etc/p
ostfix/ldap-mailbox.cf"
Jan 24 09:27:11 mailhost postfix/proxymap[22828]: warning: to approve
this table for proxymap access,
list proxy:ldap:/etc/postfix/ldap-mailbox.cf in main.cf:proxy_read_maps
Jan 24 09:27:11 mailhost postfix/smtpd[22746]: fatal: proxymap service
is not configured for table "l
dap:/etc/postfix/ldap-mailbox.cf"

that is, i had lost all tables which are in proxy_read_maps by default.

------------------
remains the question: how do you add a table to the attribute
proxy_read_maps without getting into a macro processing error and
without loosing all tables it contains by default?

thanks for suggestions

suomi