# mail forwarding loop

**URL:** <https://community.ciphermail.com/t/mail-forwarding-loop/599>\
**Category:** Gateway\
**Created:** [February 20, 2018, 5:41pm UTC](https://community.ciphermail.com/t/mail-forwarding-loop/599 "2018-02-20T17:41:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Stefan\_Gunther](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@Stefan\_Gunther](https://community.ciphermail.com/u/Stefan_Gunther)\
**Post date:** [February 20, 2018, 5:41pm UTC](https://community.ciphermail.com/t/mail-forwarding-loop/599/1 "2018-02-20T17:41:27Z")

</div>

Good evening,

after running a couple of days, the ciphermail system at a customers site complains about a mail forwarding loop. The customers says that they didn't change anything, which seems to be true according to the timestamp of the configuration files.

Even by running the smtpd daemon in verbose mode, I cannot figure ouut, what causes the problem. It seems to occur, when the email is reinjected by ciphermail (Version 3.3.1-0):

Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \> localhost[127.0.0.1]: 250 2.1.5 Ok  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \< localhost[127.0.0.1]: DATA  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \> localhost[127.0.0.1]: 354 End data with \<CR\>\<LF\>.\<CR\>\<LF\>  
Feb 20 18:15:27 ciphermail postfix/cleanup[1268]: B3E8440CE9: message-id=\<597517347.2.1519146791208.JavaMail.javamailuser(a)localhost\>  
Feb 20 18:15:27 ciphermail postfix/qmgr[1231]: B3E8440CE9: from=\<edi\_netz(a)xxxxxxxxxxx.de\>, size=12829, nrcpt=1 (queue active)  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: public/cleanup socket: wanted attribute: status  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute name: status  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute value: 0  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: public/cleanup socket: wanted attribute: reason  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute name: reason  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute value: (end)  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: public/cleanup socket: wanted attribute: (list terminator)  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute name: (end)  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \> localhost[127.0.0.1]: 250 2.0.0 Ok: queued as B3E8440CE9  
Feb 20 18:15:27 ciphermail postfix/smtp[1269]: B3E8440CE9: to=\<edifact(a)DOMAIN.ag\>, relay=127.0.0.1[127.0.0.1]:10025, delay=0.18, delays=0.07/0.01/0.05/0.05, dsn=2.6.0, status=sent (250 2.6.0 Message received)  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \< localhost[127.0.0.1]: QUIT  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \> localhost[127.0.0.1]: 221 2.0.0 Bye  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: match\_hostname: smtpd\_client\_event\_limit\_exceptions: localhost ~? 127.0.0.0/8  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: match\_hostaddr: smtpd\_client\_event\_limit\_exceptions: 127.0.0.1 ~? 127.0.0.0/8  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: master\_notify: status 1  
Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: connection closed  
Feb 20 18:15:28 ciphermail postfix/smtpd[1270]: 3462140CEC: client=localhost[127.0.0.1], orig\_client=localhost[127.0.0.1]  
Feb 20 18:15:28 ciphermail postfix/cleanup[1271]: 3462140CEC: message-id=\<597517347.2.1519146791208.JavaMail.javamailuser(a)localhost\>  
Feb 20 18:15:28 ciphermail postfix/qmgr[1231]: 3462140CEC: from=\<edi\_netz(a)sxxxxxxxxx.de\>, size=10553, nrcpt=1 (queue active)  
Feb 20 18:15:28 ciphermail postfix/local[1272]: 3462140CEC: to=\<edifact(a)DOMAIN.ag\>, relay=local, delay=0.04, delays=0.03/0.01/0/0.01, dsn=5.4.6, status=bounced (mail forwarding loop for edifact(a)DOMAIN.ag)  
Feb 20 18:15:28 ciphermail postfix/cleanup[1268]: 3CCA940CF3: message-id=\<20180220171528.3CCA940CF3(a)ciphermail.DOMAIN.ag\>  
Feb 20 18:15:28 ciphermail postfix/qmgr[1231]: 3CCA940CF3: from=\<\>, size=12508, nrcpt=1 (queue active)  
Feb 20 18:15:28 ciphermail postfix/bounce[1273]: 3462140CEC: sender non-delivery notification: 3CCA940CF3  
Feb 20 18:15:28 ciphermail postfix/smtp[1275]: 3CCA940CF3: to=\<edi\_netz(a)xxxxxx.de\>, relay=smtp.mailbox.org[80.241.60.196]:465, delay=0.33, delays=0/0.01/0.17/0.14, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 83ACD11F9)

/etc/postfix/main.cf  
djigzo\_myhostname = ciphermail.DOMAIN.ag  
djigzo\_mydestination = DOMAIN.ag  
djigzo\_mynetworks = 127.0.0.1/32  
djigzo\_relayhost = smtp.mailbox.org  
djigzo\_relayhost\_mx\_lookup =  
djigzo\_relayhost\_port = 25  
djigzo\_relay\_domains = DOMAIN.ag  
djigzo\_before\_filter\_message\_size\_limit = 102400000  
djigzo\_after\_filter\_message\_size\_limit = 102400000  
djigzo\_mailbox\_size\_limit = 102400000  
djigzo\_smtp\_helo\_name =  
djigzo\_relay\_transport\_host = 127.0.0.1  
djigzo\_relay\_transport\_host\_mx\_lookup =  
djigzo\_relay\_transport\_host\_port = 25  
djigzo\_reject\_unverified\_recipient =  
djigzo\_unverified\_recipient\_reject\_code = 450  
djigzo\_parent\_domain\_matches\_subdomains =  
djigzo\_rbl\_clients =  
myhostname = ${djigzo\_myhostname}  
mydestination = ciphermail, $myhostname, ubuntu-2gb-nbg1-dc3-1, localhost.localdomain, localhost, ${djigzo\_mydestination}  
mynetworks = 127.0.0.0/8, 91.206.61.238/32, ${djigzo\_mynetworks}  
relay\_domains = ${djigzo\_relay\_domains}  
parent\_domain\_matches\_subdomains = ${djigzo\_parent\_domain\_matches\_subdomains}  
smtp\_helo\_name = ${djigzo\_smtp\_helo\_name?$djigzo\_smtp\_helo\_name}${djigzo\_smtp\_helo\_name:${myhostname}}  
relay\_transport = relay${djigzo\_relay\_transport\_host?:${djigzo\_relay\_transport\_host\_mx\_lookup:[}${djigzo\_relay\_transport\_host}${djigzo\_relay\_transport\_host\_mx\_lookup:]}:${djigzo\_relay\_transport\_host\_port}}  
#relayhost = ${djigzo\_relayhost\_mx\_lookup:${djigzo\_relayhost?[}}${djigzo\_relayhost}${djigzo\_relayhost\_mx\_lookup:${djigzo\_relayhost?]}}${djigzo\_relayhost?:${djigzo\_relayhost\_port}}  
relayhost = smtp.mailbox.org:465  
smtp\_tls\_wrappermode = yes  
smtp\_tls\_security\_level = encrypt  
smtpd\_recipient\_restrictions = permit\_mynetworks permit\_sasl\_authenticated reject\_unauth\_destination reject\_invalid\_hostname reject\_unknown\_sender\_domain reject\_unknown\_recipient\_domain  
&nbsp;&nbsp;&nbsp;&nbsp;${djigzo\_rbl\_clients}  
&nbsp;&nbsp;&nbsp;&nbsp;${djigzo\_reject\_unverified\_recipient? reject\_unverified\_recipient}  
smtpd\_discard\_ehlo\_keywords = silent-discard VRFY ETRN DSN  
unverified\_recipient\_reject\_code = ${djigzo\_unverified\_recipient\_reject\_code}  
compatibility\_level=2  
smtpd\_banner = $myhostname ESMTP $mail\_name  
biff = no  
append\_dot\_mydomain = no  
readme\_directory = no  
smtpd\_relay\_restrictions = permit\_mynetworks permit\_sasl\_authenticated defer\_unauth\_destination  
mydomain = gpg.ag  
alias\_maps = hash:/etc/aliases  
alias\_database = hash:/etc/aliases  
mailbox\_transport = cyrus  
content\_filter = djigzo:[127.0.0.1]:10025  
recipient\_delimiter = +  
mailbox\_size\_limit = ${djigzo\_mailbox\_size\_limit}  
message\_size\_limit = ${djigzo\_after\_filter\_message\_size\_limit}  
inet\_interfaces = all  
inet\_protocols = ipv4

/etc/postfix/master.cf  
smtp inet n - y - - smtpd -v  
smtps inet n - - - - smtpd  
&nbsp;&nbsp;&nbsp;-o smtpd\_tls\_wrappermode=yes  
&nbsp;&nbsp;&nbsp;-o smtpd\_sasl\_auth\_enable=yes  
#628 inet n - y - - qmqpd  
pickup unix n - y 60 1 pickup  
cleanup unix n - y - 0 cleanup  
qmgr unix n - n 300 1 qmgr  
#qmgr unix n - n 300 1 oqmgr  
tlsmgr unix - - y 1000? 1 tlsmgr  
rewrite unix - - y - - trivial-rewrite  
bounce unix - - y - 0 bounce  
defer unix - - y - 0 bounce  
trace unix - - y - 0 bounce  
verify unix - - y - 1 verify  
flush unix n - y 1000? 0 flush  
proxymap unix - - n - - proxymap  
proxywrite unix - - n - 1 proxymap  
smtp unix - - y - - smtp  
relay unix - - y - - smtp  
# -o smtp\_helo\_timeout=5 -o smtp\_connect\_timeout=5  
showq unix n - y - - showq  
error unix - - y - - error  
retry unix - - y - - error  
discard unix - - y - - discard  
local unix - n n - - local  
virtual unix - n n - - virtual  
lmtp unix - - y - - lmtp  
anvil unix - - y - 1 anvil  
scache unix - - y - 1 scache  
maildrop unix - n n - - pipe  
cyrus unix - n n - - pipe  
&nbsp;&nbsp;user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}  
uucp unix - n n - - pipe  
&nbsp;&nbsp;flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)  
ifmail unix - n n - - pipe  
&nbsp;&nbsp;flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)  
bsmtp unix - n n - - pipe  
&nbsp;&nbsp;flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient  
scalemail-backend unix - n n - 2 pipe  
&nbsp;&nbsp;flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}  
mailman unix - n n - - pipe  
&nbsp;&nbsp;flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py  
&nbsp;&nbsp;${nexthop} ${user}  
djigzo unix - - n - 4 smtp  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtp\_send\_xforward\_command=yes  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o disable\_dns\_lookups=yes  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtp\_generic\_maps=  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtp\_tls\_wrappermode=no  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtp\_tls\_security\_level=none

# cleanup for reinject so we can set the hopcount\_limit differently for the reinjection port  
cleanup\_reinject unix n - - - 0 cleanup  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o hopcount\_limit=100

127.0.0.1:10026 inet n - n - 10 smtpd  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o content\_filter=  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o receive\_override\_options=no\_unknown\_recipient\_checks,no\_header\_body\_checks,no\_milters  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_helo\_restrictions=  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_client\_restrictions=  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_sender\_restrictions=  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_recipient\_restrictions=permit\_mynetworks,reject  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o mynetworks=127.0.0.0/8  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_authorized\_xforward\_hosts=127.0.0.0/8  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_authorized\_xclient\_hosts=127.0.0.0/8  
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o cleanup\_service\_name=cleanup\_reinject

Thanks for any hints & suggestions,

Stefan

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [February 21, 2018, 8:07am UTC](https://community.ciphermail.com/t/mail-forwarding-loop/599/2 "2018-02-21T08:07:40Z")

</div>

> after running a couple of days, the ciphermail system at a customers  
> site complains about a mail forwarding loop. The customers says that  
> they didn't change anything, which seems to be true according to the  
> timestamp of the configuration files.
> 
> Even by running the smtpd daemon in verbose mode, I cannot figure  
> ouut, what causes the problem. It seems to occur, when the email is  
> reinjected by ciphermail (Version 3.3.1-0):

Hard to tell from the logs. It looks like this system is configured to  
accept local email, i.e., user mailboxes are stored in the system. The  
email is delivered to the mailboxes using the local daemon process.

according to [Postfix manual - local(8)](http://www.postfix.org/local.8.html) the local delivery  
daemon has a loop detection mechanism using a Delivered-To header.  
Perhaps the message already contains a Delivered-To header?

"In order to stop mail forwarding loops early, the software adds an  
optional Delivered-To: header with the final envelope recipient  
address. If mail arrives for a recipient that is already listed in a  
Delivered-To: header, the message is bounced."

Is the email forwarded from some mailbox (for example with Fetchmail?)

Kind regards,

Martijn Brinkers

> **···**
>
> On 20-02-18 18:41, Stefan Günther via Users wrote:
> 
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \> localhost[127.0.0.1]: 250 2.1.5 Ok  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \< localhost[127.0.0.1]: DATA  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \> localhost[127.0.0.1]: 354 End data with \<CR\>\<LF\>.\<CR\>\<LF\>  
> > Feb 20 18:15:27 ciphermail postfix/cleanup[1268]: B3E8440CE9: message-id=\<597517347.2.1519146791208.JavaMail.javamailuser(a)localhost\>  
> > Feb 20 18:15:27 ciphermail postfix/qmgr[1231]: B3E8440CE9: from=\<edi\_netz(a)xxxxxxxxxxx.de\>, size=12829, nrcpt=1 (queue active)  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: public/cleanup socket: wanted attribute: status  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute name: status  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute value: 0  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: public/cleanup socket: wanted attribute: reason  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute name: reason  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute value: (end)  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: public/cleanup socket: wanted attribute: (list terminator)  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: input attribute name: (end)  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \> localhost[127.0.0.1]: 250 2.0.0 Ok: queued as B3E8440CE9  
> > Feb 20 18:15:27 ciphermail postfix/smtp[1269]: B3E8440CE9: to=\<edifact(a)DOMAIN.ag\>, relay=127.0.0.1[127.0.0.1]:10025, delay=0.18, delays=0.07/0.01/0.05/0.05, dsn=2.6.0, status=sent (250 2.6.0 Message received)  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \< localhost[127.0.0.1]: QUIT  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: \> localhost[127.0.0.1]: 221 2.0.0 Bye  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: match\_hostname: smtpd\_client\_event\_limit\_exceptions: localhost ~? 127.0.0.0/8  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: match\_hostaddr: smtpd\_client\_event\_limit\_exceptions: 127.0.0.1 ~? 127.0.0.0/8  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: master\_notify: status 1  
> > Feb 20 18:15:27 ciphermail postfix/smtpd[1265]: connection closed  
> > Feb 20 18:15:28 ciphermail postfix/smtpd[1270]: 3462140CEC: client=localhost[127.0.0.1], orig\_client=localhost[127.0.0.1]  
> > Feb 20 18:15:28 ciphermail postfix/cleanup[1271]: 3462140CEC: message-id=\<597517347.2.1519146791208.JavaMail.javamailuser(a)localhost\>  
> > Feb 20 18:15:28 ciphermail postfix/qmgr[1231]: 3462140CEC: from=\<edi\_netz(a)sxxxxxxxxx.de\>, size=10553, nrcpt=1 (queue active)  
> > Feb 20 18:15:28 ciphermail postfix/local[1272]: 3462140CEC: to=\<edifact(a)DOMAIN.ag\>, relay=local, delay=0.04, delays=0.03/0.01/0/0.01, dsn=5.4.6, status=bounced (mail forwarding loop for edifact(a)DOMAIN.ag)  
> > Feb 20 18:15:28 ciphermail postfix/cleanup[1268]: 3CCA940CF3: message-id=\<20180220171528.3CCA940CF3(a)ciphermail.DOMAIN.ag\>  
> > Feb 20 18:15:28 ciphermail postfix/qmgr[1231]: 3CCA940CF3: from=\<\>, size=12508, nrcpt=1 (queue active)  
> > Feb 20 18:15:28 ciphermail postfix/bounce[1273]: 3462140CEC: sender non-delivery notification: 3CCA940CF3  
> > Feb 20 18:15:28 ciphermail postfix/smtp[1275]: 3CCA940CF3: to=\<edi\_netz(a)xxxxxx.de\>, relay=smtp.mailbox.org[80.241.60.196]:465, delay=0.33, delays=0/0.01/0.17/0.14, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 83ACD11F9)
> > 
> > /etc/postfix/main.cf  
> > djigzo\_myhostname = ciphermail.DOMAIN.ag  
> > djigzo\_mydestination = DOMAIN.ag  
> > djigzo\_mynetworks = 127.0.0.1/32  
> > djigzo\_relayhost = smtp.mailbox.org  
> > djigzo\_relayhost\_mx\_lookup =  
> > djigzo\_relayhost\_port = 25  
> > djigzo\_relay\_domains = DOMAIN.ag  
> > djigzo\_before\_filter\_message\_size\_limit = 102400000  
> > djigzo\_after\_filter\_message\_size\_limit = 102400000  
> > djigzo\_mailbox\_size\_limit = 102400000  
> > djigzo\_smtp\_helo\_name =  
> > djigzo\_relay\_transport\_host = 127.0.0.1  
> > djigzo\_relay\_transport\_host\_mx\_lookup =  
> > djigzo\_relay\_transport\_host\_port = 25  
> > djigzo\_reject\_unverified\_recipient =  
> > djigzo\_unverified\_recipient\_reject\_code = 450  
> > djigzo\_parent\_domain\_matches\_subdomains =  
> > djigzo\_rbl\_clients =  
> > myhostname = ${djigzo\_myhostname}  
> > mydestination = ciphermail, $myhostname, ubuntu-2gb-nbg1-dc3-1, localhost.localdomain, localhost, ${djigzo\_mydestination}  
> > mynetworks = 127.0.0.0/8, 91.206.61.238/32, ${djigzo\_mynetworks}  
> > relay\_domains = ${djigzo\_relay\_domains}  
> > parent\_domain\_matches\_subdomains = ${djigzo\_parent\_domain\_matches\_subdomains}  
> > smtp\_helo\_name = ${djigzo\_smtp\_helo\_name?$djigzo\_smtp\_helo\_name}${djigzo\_smtp\_helo\_name:${myhostname}}  
> > relay\_transport = relay${djigzo\_relay\_transport\_host?:${djigzo\_relay\_transport\_host\_mx\_lookup:[}${djigzo\_relay\_transport\_host}${djigzo\_relay\_transport\_host\_mx\_lookup:]}:${djigzo\_relay\_transport\_host\_port}}  
> > #relayhost = ${djigzo\_relayhost\_mx\_lookup:${djigzo\_relayhost?[}}${djigzo\_relayhost}${djigzo\_relayhost\_mx\_lookup:${djigzo\_relayhost?]}}${djigzo\_relayhost?:${djigzo\_relayhost\_port}}  
> > relayhost = smtp.mailbox.org:465  
> > smtp\_tls\_wrappermode = yes  
> > smtp\_tls\_security\_level = encrypt  
> > smtpd\_recipient\_restrictions = permit\_mynetworks permit\_sasl\_authenticated reject\_unauth\_destination reject\_invalid\_hostname reject\_unknown\_sender\_domain reject\_unknown\_recipient\_domain  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;${djigzo\_rbl\_clients}  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;${djigzo\_reject\_unverified\_recipient? reject\_unverified\_recipient}  
> > smtpd\_discard\_ehlo\_keywords = silent-discard VRFY ETRN DSN  
> > unverified\_recipient\_reject\_code = ${djigzo\_unverified\_recipient\_reject\_code}  
> > compatibility\_level=2  
> > smtpd\_banner = $myhostname ESMTP $mail\_name  
> > biff = no  
> > append\_dot\_mydomain = no  
> > readme\_directory = no  
> > smtpd\_relay\_restrictions = permit\_mynetworks permit\_sasl\_authenticated defer\_unauth\_destination  
> > mydomain = gpg.ag  
> > alias\_maps = hash:/etc/aliases  
> > alias\_database = hash:/etc/aliases  
> > mailbox\_transport = cyrus  
> > content\_filter = djigzo:[127.0.0.1]:10025  
> > recipient\_delimiter = +  
> > mailbox\_size\_limit = ${djigzo\_mailbox\_size\_limit}  
> > message\_size\_limit = ${djigzo\_after\_filter\_message\_size\_limit}  
> > inet\_interfaces = all  
> > inet\_protocols = ipv4
> > 
> > /etc/postfix/master.cf  
> > smtp inet n - y - - smtpd -v  
> > smtps inet n - - - - smtpd  
> > &nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_tls\_wrappermode=yes  
> > &nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_sasl\_auth\_enable=yes  
> > #628 inet n - y - - qmqpd  
> > pickup unix n - y 60 1 pickup  
> > cleanup unix n - y - 0 cleanup  
> > qmgr unix n - n 300 1 qmgr  
> > #qmgr unix n - n 300 1 oqmgr  
> > tlsmgr unix - - y 1000? 1 tlsmgr  
> > rewrite unix - - y - - trivial-rewrite  
> > bounce unix - - y - 0 bounce  
> > defer unix - - y - 0 bounce  
> > trace unix - - y - 0 bounce  
> > verify unix - - y - 1 verify  
> > flush unix n - y 1000? 0 flush  
> > proxymap unix - - n - - proxymap  
> > proxywrite unix - - n - 1 proxymap  
> > smtp unix - - y - - smtp  
> > relay unix - - y - - smtp  
> > # -o smtp\_helo\_timeout=5 -o smtp\_connect\_timeout=5  
> > showq unix n - y - - showq  
> > error unix - - y - - error  
> > retry unix - - y - - error  
> > discard unix - - y - - discard  
> > local unix - n n - - local  
> > virtual unix - n n - - virtual  
> > lmtp unix - - y - - lmtp  
> > anvil unix - - y - 1 anvil  
> > scache unix - - y - 1 scache  
> > maildrop unix - n n - - pipe  
> > cyrus unix - n n - - pipe  
> > &nbsp;&nbsp;&nbsp;user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}  
> > uucp unix - n n - - pipe  
> > &nbsp;&nbsp;&nbsp;flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)  
> > ifmail unix - n n - - pipe  
> > &nbsp;&nbsp;&nbsp;flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)  
> > bsmtp unix - n n - - pipe  
> > &nbsp;&nbsp;&nbsp;flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient  
> > scalemail-backend unix - n n - 2 pipe  
> > &nbsp;&nbsp;&nbsp;flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}  
> > mailman unix - n n - - pipe  
> > &nbsp;&nbsp;&nbsp;flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py  
> > &nbsp;&nbsp;&nbsp;${nexthop} ${user}  
> > djigzo unix - - n - 4 smtp  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtp\_send\_xforward\_command=yes  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o disable\_dns\_lookups=yes  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtp\_generic\_maps=  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtp\_tls\_wrappermode=no  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtp\_tls\_security\_level=none
> > 
> > # cleanup for reinject so we can set the hopcount\_limit differently for the reinjection port  
> > cleanup\_reinject unix n - - - 0 cleanup  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o hopcount\_limit=100
> > 
> > 127.0.0.1:10026 inet n - n - 10 smtpd  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o content\_filter=  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o receive\_override\_options=no\_unknown\_recipient\_checks,no\_header\_body\_checks,no\_milters  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_helo\_restrictions=  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_client\_restrictions=  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_sender\_restrictions=  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_recipient\_restrictions=permit\_mynetworks,reject  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o mynetworks=127.0.0.0/8  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_authorized\_xforward\_hosts=127.0.0.0/8  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o smtpd\_authorized\_xclient\_hosts=127.0.0.0/8  
> > &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-o cleanup\_service\_name=cleanup\_reinject
> > 
> > Thanks for any hints & suggestions,
> > 
> > Stefan
> > 
> > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_  
> > Users mailing list  
> > Users(a)lists.djigzo.com  
> > [https://lists.djigzo.com/lists/listinfo/users](https://lists.djigzo.com/lists/listinfo/users)
> 
> --  
> CipherMail email encryption
> 
> Email encryption with support for S/MIME, OpenPGP, PDF encryption and  
> secure webmail pull.
> 
> > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)**
> >
> > Easy to use server-side email encryption for automatic encryption and digital signing of email.
> 
> Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail)
