<div dir="auto"><div><span style="font-family:sans-serif;font-size:12.8px">Hi Karol</span><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">Thanks for taking time to go through the email and replying. </div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">I'll rewrite the issue again --></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">For example consider there two nodes. These each having their postfix and dovecot. I am trying to implement quota status to postfix to both the below cases:-</div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">case 1) mail sent within the node</div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">case 2) mail sent across the nodes</div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">In case 1 the postfix will query the dovecot of same node white in case 2 it will query the dovecot of other node.</div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">But suppose I am sending mail within the node and dovecot in other node is down. Mail will not go within the node. Even it will not defer also. This is evident from the logs(in last sections).</div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">I'll try to work suggestions you have given in mysetup though and post the relevant output. But if you have any other suggestion regarding what i have wrote just now. please let me know.</div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px"><br></div><div dir="auto" style="font-family:sans-serif;font-size:12.8px">Regards</div><br><div class="gmail_extra"><br><div class="gmail_quote">On 28-Feb-2018 5:19 am, <<a href="mailto:dovecot-request@dovecot.org">dovecot-request@dovecot.org</a>> wrote:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send dovecot mailing list submissions to<br>
<a href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://dovecot.org/mailman/listinfo/dovecot" rel="noreferrer" target="_blank">https://dovecot.org/mailman/<wbr>listinfo/dovecot</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:dovecot-request@dovecot.org">dovecot-request@dovecot.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:dovecot-owner@dovecot.org">dovecot-owner@dovecot.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of dovecot digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Quota status to postfix in distributed environment<br>
(@lbutlr) (SAAHIL IFTEKHAR)<br>
2. Re: Quota status to postfix in distributed environment<br>
(Karol Augustin)<br>
3. Re: Quota status to postfix in distributed environment (LuKreme)<br>
4. Re: Quota status to postfix in distributed environment<br>
(Karol Augustin)<br>------------------------------<wbr>------------------------------<wbr>----------<br>
<br>
Message: 1<br>
Date: Tue, 27 Feb 2018 19:29:44 +0530<br>
From: SAAHIL IFTEKHAR <<a href="mailto:response2saahil@gmail.com">response2saahil@gmail.com</a>><br>
To: <a href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a><br>
Subject: Re: Quota status to postfix in distributed environment<br>
(@lbutlr)<br>
Message-ID:<br>
<CAM5TiAQ2CT+u_<wbr>BKEn0sKonirOQLD_Q0v=<a href="mailto:pVCcJBCiJfC08p7Mw@mail.gmail.com">pVCcJBCiJf<wbr>C08p7Mw@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi<br>
<br>
Actually, the requirement is such that we have to work with this version<br>
only.<br>
<br>
I want to point out that the reason from the problem can be found out from<br>
logs(the end section).<br>
<br>
The "check_policy_service" in <a href="http://main.cf" rel="noreferrer" target="_blank">main.cf</a> of postfix is the problem according<br>
to me. This configuration as a part of quota staus to postfix<br>
configuration.<br>
<br>
I hope many have went through this scenario or similar. So I am hoping to<br>
get some help for the same.<br>
<br>
<br>
Regards<br><br>
------------------------------<br>
<br>
Message: 2<br>
Date: Tue, 27 Feb 2018 14:18:31 +0000<br>
From: Karol Augustin <<a href="mailto:karol@augustin.pl">karol@augustin.pl</a>><br>
To: <a href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a><br>
Subject: Re: Quota status to postfix in distributed environment<br>
Message-ID: <<a href="mailto:b50c30e1b65c3875565ca2e49efeaafd@augustin.pl">b50c30e1b65c3875565ca2e49efea<wbr>afd@augustin.pl</a>><br>
Content-Type: text/plain; charset=US-ASCII<br>
<br>
On 2018-02-26 16:28, SAAHIL IFTEKHAR wrote:<br>
<br>
> Hi<br>
><br>
> I have implemented Quota status to postfix in our setup. I have an imap server (dovecot) and mail server (postfix) in every node. I am able to send quota status to postfix and mails are rejected after 100% mail quota is crossed. This rejection is happening both in across the nodes and within the nodes.<br>
><br>
> The problem is if I am sending mails to any node and if any other node's dovecot is down, mails are not going. For example, I am sending an email within the system but if some other node's dovecot is down then email within the system also will not go.<br>
><br>
> My dovecot version is 2.2.10. My postfix version is 2.1.10.<br>
><br>
> doveconf -n output is below:-<br>
><br>
[snap]<br>
><br>
> Here "service quota status" is the concerned section in conf file.<br>
> ______________________________<wbr>______________________________<wbr>______________________________<wbr>______________<br>
><br>
> Postfix configuration is below:-<br>
> smtpd_relay_restrictions =<br>
> check_policy_service inet:<a href="http://201.123.80.9:54317" rel="noreferrer" target="_blank">201.123.80.9:54317</a><br>
> check_policy_service inet:<a href="http://201.123.80.23:54317" rel="noreferrer" target="_blank">201.123.80.23:54317</a><br>
><br>
> virtual_transport=lmtp:unix:<wbr>private/dovecot-lmtp<br>
><br>
> Here, I am querying both two nodes. 201.123.80.9 is the other node. 201.123.80.23 is the node within which, email is sent.<br>
> ______________________________<wbr>______________________________<wbr>______________________________<wbr>_________________<br>
><br>
> logs while sending mail is below:-<br>
><br>
[snap]<br>
<br>
><br>
> I am understanding what the logs are trying to say. But I am not able to resolve the issue even after searching solution on internet and trying different hit and trials by myself. I want that if i am sending email to any node or within node, the configuration relating to "check _policy_service" for other node does not interfere and mail goes properly. At the same time I can also fetch quota status from other nodes.<br>
><br>
> If I can get any help regarding this it will be really appreciable as I have tried a lot of options already.<br>
><br>
Your problem is that if the dovecot is unreachable Postfix can't check<br>
the quota for the user.<br>
<br>
<a href="http://www.postfix.org/SMTPD_POLICY_README.html" rel="noreferrer" target="_blank">http://www.postfix.org/SMTPD_<wbr>POLICY_README.html</a><br>
explains how to resolve this problem:<br>
smtpd_policy_service_default_<wbr>action (default: 451 4.3.5 Server<br>
configuration problem): The default action when an SMTPD policy service<br>
request fails. Available with Postfix 3.0 and later.<br>
<br>
The default action when an SMTPD policy service request fails. Specify<br>
"DUNNO" to behave as if the failed SMTPD policy service request was not<br>
sent, and to continue processing other access restrictions, if any. You<br>
can configure it per policy also.<br>
<br>
The issue you might encounter with this setup is that if both of your<br>
dovecot nodes are unreachable Postfix will accept the e-mail and try to<br>
deliver it. When the nodes come online it will fail if the user is over<br>
quota and generate bounce to the envelope sender of the message, which<br>
might produce backscatter.<br>
<br>
I resolved this problem by keeping quota information in Mysql table and<br>
using custom policy server to check if user is allowed to receive more<br>
e-mail.<br>
<br>
Also this approach might not work with aliases and other redirections,<br>
the e-mail address checked by smtpd policy is the one before alias<br>
expansion. You should check if it suits your environment.<br>
<br>
Best,<br>
Karol<br>
<br>
<br>
--<br>
Karol Augustin<br>
<a href="mailto:karol@augustin.pl">karol@augustin.pl</a><br>
<a href="http://karolaugustin.pl/" rel="noreferrer" target="_blank">http://karolaugustin.pl/</a><br>
+353 85 775 5312<br>
<br><br>
</blockquote></div><br></div></div></div>