From owner-freebsd-questions@freebsd.org  Thu Jun 28 14:31:59 2018
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id A7AA51001F3F
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Thu, 28 Jun 2018 14:31:59 +0000 (UTC)
 (envelope-from herbert@gojira.at)
Received: from mail.bsd4all.net (mail.bsd4all.net [IPv6:2a01:4f8:191:217b::25])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "mail.bsd4all.net",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 4ADF77E4CC
 for <freebsd-questions@freebsd.org>; Thu, 28 Jun 2018 14:31:58 +0000 (UTC)
 (envelope-from herbert@gojira.at)
Date: Thu, 28 Jun 2018 16:31:56 +0200
From: "Herbert J. Skuhra" <herbert@gojira.at>
To: freebsd-questions@freebsd.org
Subject: Re: Posfix and Amavisd-new in FreeBSD jail
Message-ID: <20180628143156.GA38122@mail.bsd4all.net>
References: <4c9d4c7bcb994b1e086ae55ebd0f64b3.squirrel@webmail.harte-lyne.ca>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4c9d4c7bcb994b1e086ae55ebd0f64b3.squirrel@webmail.harte-lyne.ca>
User-Agent: Mutt/1.10.0 (2018-05-17)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Jun 2018 14:31:59 -0000

On Thu, Jun 28, 2018 at 09:35:15AM -0400, James B. Byrne via freebsd-questions wrote:
> Dose anyone on the list run Postfix with amavisd inside a FreeBSD
> jail?  I am running into this problem:
> 
> /usr/local/sbin/amavisd[42231]: (!)DENIED ACCESS from IP 127.0.32.1,
> policy bank ''
> 
> The cloned lo interface used by the jail is assigned address 127.0.32.1:
> 
> lo2: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
> 	options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
> 	inet 127.0.32.1 netmask 0xffffffff
> 	inet6 ::32 prefixlen 128
> 	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
> 	groups: lo
> 
> The postfix and amavisd configuration files refer only to 127.0.0.1
> 
> The hosts file contains this:
> 
> ::1               localhost localhost.harte-lyne.ca
> 127.0.0.1         localhost localhost.harte-lyne.ca
> 
> Does anyone have this working properly inside a jail.  What do I need
> to do to get it to work?

Not tested, but check inet_acl. The default is:

@inet_acl   = qw( 127.0.0.1 [::1] );  # allow SMTP access only from
localhost

-- 
Herbert