PROXYMAP(8) PROXYMAP(8)

NAME
       proxymap - Postfix lookup table proxy server

SYNOPSIS
       pprrooxxyymmaapp [generic Postfix daemon options]

DESCRIPTION
       The  pprrooxxyymmaapp server provides read-only table lookup service to Postfix
       processes. The purpose of the service is:

       +o      To overcome chroot restrictions. For example,  a  chrooted  SMTP
              server needs access to the system passwd file in order to reject
              mail for non-existent local addresses, but it is  not  practical
              to  maintain  a copy of the passwd file in the chroot jail.  The
              solution:

              localrecipientmaps =
                  proxy:unix:passwd.byname $aliasmaps

       +o      To consolidate the number of open lookup tables by  sharing  one
              open  table  among multiple processes. For example, making mysql
              connections from every Postfix daemon process  results  in  "too
              many connections" errors. The solution:

              virtualaliasmaps =
                  proxy:mysql:/etc/postfix/virtualalias.cf

              The  total  number  of  connections  is limited by the number of
              proxymap server processes.

       The proxymap server implements the following requests:

       ooppeenn maptype:mapname flags
              Open the table with type maptype and name mapname, as controlled
              by  flags.  The  reply  includes the maptype dependent flags (to
              distinguish a fixed string table from a regular  expression  ta-
              ble).

       llooookkuupp maptype:mapname flags key
              Look  up  the data stored under the requested key.  The reply is
              the request completion status code (below) and the lookup result
              value.   The  maptype:mapname and flags are the same as with the
              ooppeenn request.

       There is no cclloossee command, nor are  tables  implicitly  closed  when  a
       client  disconnects.  The  purpose  is  to  share tables among multiple
       client processes.

SSEERRVVEERR PPRROOCCEESSSS MMAANNAAGGEEMMEENNTT
       pprrooxxyymmaapp servers run under control by the Postfix mmaasstteerr server.   Each
       server  can handle multiple simultaneous connections.  When all servers
       are busy while a client connects, the mmaasstteerr  creates  a  new  pprrooxxyymmaapp
       server  process, provided that the process limit is not exceeded.  Each
       server terminates after serving at  least  $$mmaaxxuussee  clients  or  after
       $$mmaaxxiiddllee seconds of idle time.

SSEECCUURRIITTYY
       The  proxymap  server  opens  only  tables  that  are  approved via the
       pprrooxxyyrreeaaddmmaappss configuration parameter, does not talk  to  users,  and
       can  run at fixed low privilege, chrooted or not.  However, running the
       proxymap server chrooted severely limits usability, because it can open
       only chrooted tables.

       The  proxymap  server  is not a trusted daemon process, and must not be
       used to look up sensitive information such as user or group IDs,  mail-
       box file/directory names or external commands.

DIAGNOSTICS       Problems and transactions are logged to ssyyssllooggdd(8).

BUGS
       The  proxymap  server  provides  service  to multiple clients, and must
       therefore not be used for tables that have high-latency lookups.

CCOONNFFIIGGUURRAATTIIOONN PPAARRAAMMEETTEERRSS
       On busy mail systems a long time may pass before  proxymap(8)  relevant
       changes  to  mmaaiinn..ccff are picked up. Use the command "ppoossttffiixx rreellooaadd" to
       speed up a change.

       The text below provides only a parameter summary. See  postconf(5)  for
       more details including examples.

       ccoonnffiiggddiirreeccttoorryy ((sseeee ''ppoossttccoonnff -dd'' oouuttppuutt))
              The  default  location of the Postfix main.cf and master.cf con-
              figuration files.

       ddaaeemmoonnttiimmeeoouutt ((1188000000ss))
              How much time a Postfix daemon process  may  take  to  handle  a
              request before it is terminated by a built-in watchdog timer.

       iippccttiimmeeoouutt ((33660000ss))
              The  time  limit  for  sending  or receiving information over an
              internal communication channel.

       mmaaxxiiddllee ((110000ss))
              The maximum amount of time that an idle Postfix  daemon  process
              waits for the next service request before exiting.

       mmaaxxuussee ((110000))
              The  maximal number of connection requests before a Postfix dae-
              mon process terminates.

       pprroocceessssiidd ((rreeaadd-oonnllyy))
              The process ID of a Postfix command or daemon process.

       pprroocceessssnnaammee ((rreeaadd-oonnllyy))
              The process name of a Postfix command or daemon process.

       pprrooxxyyrreeaaddmmaappss ((sseeee ''ppoossttccoonnff -dd'' oouuttppuutt))
              The lookup tables that the  proxymap(8)  server  is  allowed  to
              access.

LLIICCEENNSSEE
       The Secure Mailer license must be distributed with this software.

HISTORY
       The proxymap service was introduced with Postfix 2.0.

AUTHOR(S)       Wietse Venema
       IBM T.J. Watson Research
       P.O. Box 704
       Yorktown Heights, NY 10598, USA



                                                                   PROXYMAP(8)