If Postfix is configured to use a policy server and the policy server is not running, 450 Server misconfigured will be used to reject every e-mail. Similar problems exist when a content_filter is used. Reproducible: Always Steps to Reproduce: 1. Install postfix 2. Install postgrey/amavisd 3. Forget to hack the postfix rc script to ensure postgrey/amavisd are booted. Actual Results:
Created attachment 34508 [details] /etc/conf.d/postfix file Contains the configuration variables used by the patched rc script.
Created attachment 34509 [details, diff] Patch to support conf.d/postfix Patches the rc script to support the /etc/conf.d/postfix file, and modify the need line on the fly.
Rationale for this bug: I'd like to introduce a new package for postgrey - a greylist policy server for postfix 2.1.x. However, without these patches, if postfix is configured to use the policy server and the server isn't running, mail will be rejected (temp fail, but still rejected).
*ping* ? No response for close on 4 weeks now - shall I just close this request?
`rc-update add postgrey/amavisd default` should work. If someone using mysql as their database backend forgot to add mysql to default run level, same thing will happen. IMO, it's up to the user to add the needed services to default run level. Although, We could add these services to /etc/init.d/postfix depend() { need net use mysql postgrey amavisd clamd foo bar }
Well, I'm aiming for a belt/suspenders method here. If not in its current form, perhaps a simple conf.d of POSTFIX_NEED_OPTS="amavisd mysql foo bar" and mod the rc appropriately to use that as a safety check? Admins forget things, users forget things. Belt & suspenders doesn't hurt.
As there are two graylisting engines in portage now (gld and postgrey), and another one (sqlgrey) waiting in pipe, I've added a more general "postfix_graylist" facility to 'use' in postfix initscript depend(). Both engines' initscripts provide this facility. NOTE: I've added this to postfix-2.2.3, which is masked for now, to prevent adding new features to existing versions. Just a safety precaution. As for amavisd, that has been in postfix' initscript for quite some time already now. Thanks for reporting!
