[HaBo]

alpha952:/# telnet server.tld 25
Trying xxx.xxx.xxx.xxx...
Connected to server.tld.
Escape character is '^]'.
220 server.tld ESMTP Postfix
helo myserver
250 server.tld
ehlo myserver
250-server.tld
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH CRAM-MD5 PLAIN DIGEST-MD5 LOGIN
250-AUTH=CRAM-MD5 PLAIN DIGEST-MD5 LOGIN
250 8BITMIME
mail from: <test@myserver>

Mar 25 21:03:20 hostname postfix/postfix-script: starting the Postfix mail system
Mar 25 21:03:20 hostname postfix/master[25028]: daemon started -- version 2.1.5

inet_interface = all
myhostname = server.tld

virtual_alias_domains = virtual_alias_maps
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_forwardings.cf mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000

smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes

smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination

smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key

#
# Postfix master process configuration file.  For details on the format
# of the file, see the Postfix master(5) manual page.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       -       -       -       smtpd
#submission inet n      -       -       -       -       smtpd
#	-o smtpd_etrn_restrictions=reject
#	-o smtpd_client_restrictions=permit_sasl_authenticated,reject
#smtps    inet  n       -       -       -       -       smtpd
#  -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission inet n      -       -       -       -       smtpd
#  -o smtpd_etrn_restrictions=reject
#  -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628      inet  n       -       -       -       -       qmqpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       -       300     1       oqmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       -       -       -       smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX loops
relay     unix  -       -       -       -       -       smtp
	-o fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache	  unix	-	-	-	-	1	scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
#
# See the Postfix UUCP_README file for configuration details.
#
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# Other external delivery methods.
#
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix	-	n	n	-	2	pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}

user = [...]
password = [...]
dbname = [...]
table = domains
select_field = 'virtual'
where_field = domain
hosts = 127.0.0.1

user = [...]
password = [...]
dbname = [...]
table = forwardings
select_field = destination
where_field = source
hosts = 127.0.0.1

user = [...]
password = [...]
dbname = [...]
table = users
select_field = CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/')
where_field = email
hosts = 127.0.0.1

user = [...]
password = [...]
dbname = [...]
table = users
select_field = email
where_field = email
hosts = 127.0.0.1

pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: plain login cram-md5 digest-md5
sql_engine: mysql
sql_hostnames: 127.0.0.1
sql_user: [...]
sql_passwd: [...]
sql_database: [...]
sql_select: select password from users where email='%u@%r'

MYSQL_SERVER localhost
MYSQL_USERNAME [...]
MYSQL_PASSWORD [...]
MYSQL_PORT 3306
MYSQL_DATABASE [...]
MYSQL_USER_TABLE users
MYSQL_CLEAR_PWFIELD password
MYSQL_UID_FIELD 5000
MYSQL_GID_FIELD 5000
MYSQL_LOGIN_FIELD email
MYSQL_HOME_FIELD "/home/vmail"
MYSQL_MAILDIR_FIELD CONCAT(SUBSTRING_INDEX(email,'@',-1),'/',SUBSTRING_INDEX(email,'@',1),'/')

inet_interfaces = all
home_mailbox = Maildir/
myhostname = <servername-hier-rein>
mydestination = <servername-hier-rein>
local_recipient_maps  = $alias_maps $virtual_mailbox_maps unix:passwd.byname
virtual_mailbox_base  = /home/vmail
broken_sasl_auth_clients    = yes
smtpd_sasl_auth_enable      = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
unknown_local_recipient_reject_code = 550
smtpd_recipient_restrictions = permit_mynetworks,
                        permit_sasl_authenticated,
                        reject_unknown_sender_domain,
                        reject_unknown_recipient_domain,
                        reject_non_fqdn_sender,
                        reject_rbl_client zombie.dnsbl.sorbs.net,
                        reject_rbl_client relays.ordb.org,
                        reject_rbl_client opm.blitzed.org,
                        reject_rbl_client sbl.spamhaus.org,
                        reject_rbl_client bl.spamcop.net
                        reject_unauth_destination


smtpd_client_restrictions = permit_mynetworks,
        reject_unauth_pipelining,
        reject_rbl_client relays.ordb.org,
        reject_rbl_client sbl.spamhaus.org,
        reject_rhsbl_client blackhole.securitysage.com,
        permit

smtpd_sender_restrictions = permit_mynetworks,
        reject_non_fqdn_sender,
        reject_unknown_sender_domain,
        reject_unlisted_sender,
        reject_rhsbl_sender blackhole.securitysage.com,
        permit

smtpd_data_restrictions = reject_multi_recipient_bounce,
        reject_unauth_pipelining

command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
program_directory = /usr/lib/postfix
myorigin = /etc/mailname
append_dot_mydomain = yes
relayhost =
mynetworks = 127.0.0.0/8, <deine-server-ip-hier-rein>
mailbox_command = procmail -a "$EXTENSION"
recipient_delimiter = +

maildrop_destination_concurrency_limit = 1
maildrop_destination_recipient_limit   = 1

virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_forwardings.cf mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
content_filter=smtp-amavis:[127.0.0.1]:10024

mysql -u <benutzername> -p -h 127.0.0.1 <datenbankname>

Mar 25 23:17:55 alpha952 postfix/cleanup[17977]: warning: connect to mysql server 127.0.0.1: Access denied for user 'p_admin'@'localhost' (using password: YES)
Mar 25 23:17:55 alpha952 postfix/cleanup[17977]: warning: BC5B6152C8DE: virtual_alias_maps map lookup problem for root@server.tld
Mar 25 23:17:55 alpha952 postfix/pickup[17881]: warning: maildrop/3C82E152C8C2: Error writing message file
Mar 25 23:18:55 alpha952 postfix/cleanup[17977]: warning: BE7AE152C8DE: virtual_alias_maps map lookup problem for root@server.tld
Mar 25 23:18:55 alpha952 postfix/pickup[17881]: warning: maildrop/3C82E152C8C2: Error writing message file

Mar 25 22:01:30 alpha952 postfix/trivial-rewrite[16142]: fatal: mysql:/etc/postfix/mysql-virtual_domains.cf(0,100): table lookup problem
Mar 25 22:01:31 alpha952 postfix/smtpd[15715]: warning: premature end-of-input on private/rewrite socket while reading input attribute name
Mar 25 22:01:31 alpha952 postfix/smtpd[15715]: warning: problem talking to service rewrite: Success
Mar 25 22:01:31 alpha952 postfix/master[15490]: warning: process /usr/lib/postfix/trivial-rewrite pid 16142 exit status 1
Mar 25 22:01:31 alpha952 postfix/master[15490]: warning: /usr/lib/postfix/trivial-rewrite: bad command startup -- throttling
Mar 25 22:02:50 alpha952 postfix/smtpd[16310]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled

mysql -u root -p
Enter password: <dein-mysql-root-passwort>

mysql> grant all privileges on <dbname>.* identified by '<passwort-das-benutzt-werden-soll>';
mysql> flush privileges;

#
# The MySQL database server configuration file.
#
# You can copy this to one of:
# - "/etc/mysql/my.cnf" to set global options,
# - "/var/lib/mysql/my.cnf" to set server-specific options or
# - "~/.my.cnf" to set user-specific options.
#
# One can use all long options that the program supports.
# Run program with --help to get a list of available options and with
# --print-defaults to see which it would actually understand and use.
#
# For explanations see
# http://dev.mysql.com/doc/mysql/en/server-system-variables.html

# This will be passed to all mysql clients
# It has been reported that passwords should be enclosed with ticks/quotes
# escpecially if they contain "#" chars...
# Remember to edit /etc/mysql/debian.cnf when changing the socket location.
[client]
port            = 3306
socket          = /var/run/mysqld/mysqld.sock

# Here is entries for some specific programs
# The following values assume you have at least 32M ram

# This was formally known as [safe_mysqld]. Both versions are currently parsed.
[mysqld_safe]
socket          = /var/run/mysqld/mysqld.sock
nice            = 0

[mysqld]
#
# * Basic Settings
#
user            = mysql
pid-file        = /var/run/mysqld/mysqld.pid
socket          = /var/run/mysqld/mysqld.sock
port            = 3306
basedir         = /usr
datadir         = /var/lib/mysql
tmpdir          = /tmp
language        = /usr/share/mysql/english
skip-external-locking
#
# For compatibility to other Debian packages that still use
# libmysqlclient10 and libmysqlclient12.
old_passwords   = 1
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address            = 127.0.0.1
#
# * Fine Tuning
#
key_buffer              = 16M
max_allowed_packet      = 16M
thread_stack            = 128K
#
# * Query Cache Configuration
#
query_cache_limit       = 1048576
query_cache_size        = 16777216
query_cache_type        = 1
#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
#log            = /var/log/mysql.log
#log            = /var/log/mysql/mysql.log
#
# Error logging goes to syslog. This is a Debian improvement :)
#
# Here you can see queries with especially long duration
#log-slow-queries       = /var/log/mysql/mysql-slow.log
#
# The following can be used as easy to replay backup logs or for replication.
#server-id              = 1
#log-bin                        = /var/log/mysql/mysql-bin.log
expire-logs-days        = 20
max_binlog_size         = 104857600
#binlog-do-db           = include_database_name
#binlog-ignore-db       = include_database_name
#
# * BerkeleyDB
#
# According to an MySQL employee the use of BerkeleyDB is now discouraged
# and support for it will probably cease in the next versions.
skip-bdb
#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!
#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# If you want to enable SSL support (recommended) read the manual or my
# HOWTO in /usr/share/doc/mysql-server/SSL-MINI-HOWTO.txt.gz
# ssl-ca=/etc/mysql/cacert.pem
# ssl-cert=/etc/mysql/server-cert.pem
# ssl-key=/etc/mysql/server-key.pem



[mysqldump]
quick
quote-names
max_allowed_packet      = 16M

[mysql]
#no-auto-rehash # faster start of mysql but no tab completition

[isamchk]
key_buffer              = 16M

#
# * NDB Cluster
#
# See /usr/share/doc/mysql-server-*/README.Debian for more information.
#
# The following configuration is read by the ndbd storage daemons,
# not from the ndb_mgmd management daemon.
#
# [MYSQL_CLUSTER]
# ndb-connectstring=127.0.0.1