Error, what does it mean

2009-11-04 Thread abhishek jain
Hi friends,
I receive the following in the /var/log/maillog frequently

Nov  4 16:57:59 server4 postfix/smtpd[9555]: disconnect from
mail-iw0-f195.google.com[]
Nov  4 16:58:25 server4 postfix/virtual[9823]: fatal: bad string length 0 <
1: virtual_mailbox_base =
Nov  4 16:58:26 server4 postfix/master[24061]: warning: process
/usr/libexec/postfix/virtual pid 9823 exit status 1
Nov  4 16:58:26 server4 postfix/master[24061]: warning:
/usr/libexec/postfix/virtual: bad command startup -- throttling
Nov  4 16:58:55 server4 postfix/qmgr[5352]: warning: connect to transport
virtual: Resource temporarily unavailable

I am not sure , what it means, can you please help,
thanks
abhishek


Re: Error, what does it mean

2009-11-04 Thread Daniel V. Reinhardt




>
>From: abhishek jain 
>To: postfix-users@postfix.org
>Sent: Wed, November 4, 2009 11:22:05 AM
>Subject: Error, what does it mean
>
>Hi friends,
>I receive the following in the /var/log/maillog frequently
>
>Nov  4 16:57:59 server4 postfix/smtpd[9555]: disconnect from 
>mail-iw0-f195.google.com[]
>>Nov  4 16:58:25 server4 postfix/virtual[9823]: fatal: bad string length 0 < 
>>1: virtual_mailbox_base = 
>Nov  4 16:58:26 server4 postfix/master[24061]: warning: process 
>/usr/libexec/postfix/virtual pid 9823 exit status 1
>>Nov  4 16:58:26 server4 postfix/master[24061]: warning: 
>>/usr/libexec/postfix/virtual: bad command startup -- throttling
>Nov  4 16:58:55 server4 postfix/qmgr[5352]: warning: connect to transport 
>virtual: Resource temporarily unavailable
>
>I am not sure , what it means, can you please help,
>thanks
>abhishek
>
>
Means you do not have the virtual_mailbox_base= directive set.

 Daniel Reinhardt
Website: www.cryptodan.com
Email: crypto...@yahoo.com
Junior Network Security Engineer



  


Re: Error, what does it mean

2009-11-04 Thread abhishek jain
>
> >
> Means you do not have the virtual_mailbox_base= directive set.
>
> Thanks Daniel,
But what should i do now, is it an important directive , i mean should i
worry about that,
Also i have mysql setup on postfix, and i use relay_domains

Thanks
abhishek


Re: Error, what does it mean

2009-11-04 Thread Daniel V. Reinhardt
>
>From: abhishek jain 
>To: Daniel V. Reinhardt 
>Cc: postfix-users@postfix.org
>Sent: Wed, November 4, 2009 11:31:14 AM
>Subject: Re: Error, what does it mean
>
>
>
>
>
>>Means you do not have the virtual_mailbox_base= directive set.
>>
>>
>Thanks Daniel,
>But what should i do now, is it an important directive , i mean should i worry 
>about that,
>Also i have mysql setup on postfix, and i use relay_domains 
>
>Thanks
>abhishek
>
>

You will need to create a directory such as /var/mail/virtualmbox, assign the 
proper permissions then add that path to the above directive.

Thanks,
 Daniel Reinhardt
Website: www.cryptodan.com
Email: crypto...@yahoo.com
Junior Network Security Engineer



  


Configure Postfix for local delivery + forward to another address

2009-11-04 Thread Keith Palmer

I'd like to configure Postfix to locally deliver the mail and also forward
it to another address.

I'm using unix account for the mailboxes. How do I have to configure
/etc/aliases (or something else) to have it deliver the mail locally and
also forward a copy of that message on to another e-mail address (hosted
somewhere else)?

Thanks!

-- 
 - Keith Palmer
   ke...@academickeys.com
   http://www.AcademicKeys.com/




Re: Configure Postfix for local delivery + forward to another address

2009-11-04 Thread Daniel V. Reinhardt






- Original Message 
> From: Keith Palmer 
> To: postfix-users@postfix.org
> Sent: Wed, November 4, 2009 11:51:37 AM
> Subject: Configure Postfix for local delivery + forward to another address
> 
> 
> I'd like to configure Postfix to locally deliver the mail and also forward
> it to another address.
> 
> I'm using unix account for the mailboxes. How do I have to configure
> /etc/aliases (or something else) to have it deliver the mail locally and
> also forward a copy of that message on to another e-mail address (hosted
> somewhere else)?
> 
> Thanks!
> 
> -- 
> - Keith Palmer
>   ke...@academickeys.com
>   http://www.AcademicKeys.com/

Follow the below,

http://www.nfosolutions.com/doc_link/C/a_doc_lib/files/aixfiles/aliases.htm

Thanks,
Daniel



  


Need help to configure postfix to send only emails.

2009-11-04 Thread Manoj Burande
Hello There,

  Can anybody please provide me the required configuration for the
main.cf and master.cf to configure my postfix mail server to send
only emails.

1] Postfix will never accept any emails for any domains for the email
delivery except my locally hosted domain.
2] Only emails generated through my JAVA application will accept for the
delivery on the internet.
3] Postfix should also responsible to deliver locally generated emails(for
root e.g. syslogd..) to any other email user from other domain e.g.
manoj.bura...@artificialmachines.com.

I have already gone through the on line documentation for postfix but
found little bit information to configure postfix to send only emails.

Please help me.

Thanks in advance.


-- 
Manoj M. Burande,
Artificial Machines Pvt Ltd,
System Administrator.




Re: relay and transport

2009-11-04 Thread Noel Jones

On 11/4/2009 12:51 AM, K bharathan wrote:

hi all
i understand i can transport an email id in the transport map; so i can put:

a...@example.com   smtp:[192.168.0.1]
example.com   smtp:[192.168.0.12]

my doubt :
with the above all mails to example.com  will go to
192.168.0.12; will it include a...@example.com ?
or that particular mail will go to 192.168.0.1?

help appreciated

thanks




in the above example, mail to a...@example.com will be 
delivered only to 192.168.0.1.

All other mail to example.com will be delivered to 192.168.0.12

http://www.postfix.org/transport.5.html




Re: Error, what does it mean

2009-11-04 Thread Magnus Bäck

On Wed, November 4, 2009 12:36 pm, Daniel V. Reinhardt said:
>
> > But what should i do now, is it an important directive , i mean should i
> >  worry about that,
> > Also i have mysql setup on postfix, and i use relay_domains
>
> You will need to create a directory such as /var/mail/virtualmbox, assign
> the proper permissions then add that path to the above directive.

This is not correct. The OP's problem is that virtual_mailbox_base isn't
set. If the stored mailbox path is absolute rather than relative, simply
set virtual_mailbox_base to /. If the stored mailbox paths are relative,
put whatever directory they're relative to in virtual_mailbox_base.

-- 
Magnus Bäck
mag...@dsek.lth.se


Re: relay and transport

2009-11-04 Thread K bharathan
thanks!

On Wed, Nov 4, 2009 at 2:33 PM, Noel Jones  wrote:

> On 11/4/2009 12:51 AM, K bharathan wrote:
>
>> hi all
>> i understand i can transport an email id in the transport map; so i can
>> put:
>>
>> a...@example.com   smtp:[192.168.0.1]
>> example.com   smtp:[192.168.0.12]
>>
>> my doubt :
>> with the above all mails to example.com  will go to
>> 192.168.0.12; will it include a...@example.com ?
>>
>> or that particular mail will go to 192.168.0.1?
>>
>> help appreciated
>>
>> thanks
>>
>>
>
> in the above example, mail to a...@example.com will be delivered only to
> 192.168.0.1.
> All other mail to example.com will be delivered to 192.168.0.12
>
> http://www.postfix.org/transport.5.html
>
>
>


Re: Need help to configure postfix to send only emails.

2009-11-04 Thread Noel Jones

On 11/4/2009 6:30 AM, Manoj Burande wrote:

Hello There,

   Can anybody please provide me the required configuration for the
main.cf and master.cf to configure my postfix mail server to send
only emails.

1] Postfix will never accept any emails for any domains for the email
delivery except my locally hosted domain.
2] Only emails generated through my JAVA application will accept for the
delivery on the internet.
3] Postfix should also responsible to deliver locally generated emails(for
root e.g. syslogd..) to any other email user from other domain e.g.
manoj.bura...@artificialmachines.com.

I have already gone through the on line documentation for postfix but
found little bit information to configure postfix to send only emails.

Please help me.

Thanks in advance.





... not a very clear description of what you're trying to 
accomplish.


http://www.postfix.org/BASIC_CONFIGURATION_README.html
http://www.postfix.org/SOHO_README.html
http://www.postfix.org/STANDARD_CONFIGURATION_README.html
http://www.postfix.org/documentation.html





postfix + dns ldap srv

2009-11-04 Thread maximatt
hi...

Postfix support dns srv registers... for ldap service?

thanks in advance :)

-- 
Salu2 ;)


Re: Need help to configure postfix to send only emails.

2009-11-04 Thread Manoj Burande
Hi Noel,

   Thanks for the reply.

Here is the my description which I have to configure with my postfix mail
server as,

1] My postfix mail server should only send emails on the internet.
2] Emails should only acceptable by mail server to deliver them on the
internet from my locally hosted domain (e.g. mail.mydomain.com)
3] Also I want to forward locally generated emails by log rotation to the
another email ID (e.g. manoj.bura...@artificialmachines.com.

   So can you please provide me the sample configuration for the same to
accomplish the postfix configuration with my above requirements.

Waiting for your response.


> On 11/4/2009 6:30 AM, Manoj Burande wrote:
>> Hello There,
>>
>>Can anybody please provide me the required configuration for the
>> main.cf and master.cf to configure my postfix mail server to send
>> only emails.
>>
>> 1] Postfix will never accept any emails for any domains for the email
>> delivery except my locally hosted domain.
>> 2] Only emails generated through my JAVA application will accept for the
>> delivery on the internet.
>> 3] Postfix should also responsible to deliver locally generated
>> emails(for
>> root e.g. syslogd..) to any other email user from other domain e.g.
>> manoj.bura...@artificialmachines.com.
>>
>> I have already gone through the on line documentation for postfix but
>> found little bit information to configure postfix to send only emails.
>>
>> Please help me.
>>
>> Thanks in advance.
>>
>>
>
>
> ... not a very clear description of what you're trying to
> accomplish.
>
> http://www.postfix.org/BASIC_CONFIGURATION_README.html
> http://www.postfix.org/SOHO_README.html
> http://www.postfix.org/STANDARD_CONFIGURATION_README.html
> http://www.postfix.org/documentation.html
>
>
>
>


-- 
Manoj M. Burande,
Artificial Machines Pvt Ltd,
System Administrator.




Re: Need help to configure postfix to send only emails.

2009-11-04 Thread Noel Jones

On 11/4/2009 11:00 AM, Manoj Burande wrote:

Hi Noel,

Thanks for the reply.

Here is the my description which I have to configure with my postfix mail
server as,

1] My postfix mail server should only send emails on the internet.
2] Emails should only acceptable by mail server to deliver them on the
internet from my locally hosted domain (e.g. mail.mydomain.com)
3] Also I want to forward locally generated emails by log rotation to the
another email ID (e.g. manoj.bura...@artificialmachines.com.

So can you please provide me the sample configuration for the same to
accomplish the postfix configuration with my above requirements.

Waiting for your response.



Here's a good starting point.
http://www.postfix.org/STANDARD_CONFIGURATION_README.html#local_network

  -- Noel Jones


Re: postfix + dns ldap srv

2009-11-04 Thread Victor Duchovni
On Wed, Nov 04, 2009 at 02:39:06PM -0200, maximatt wrote:

> Postfix support dns srv registers... for ldap service?

If you need to define your LDAP servers in SRV records, you can
run a cron job that queries DNS, and rebuilds your "map.cf" files
based on an updated server list.

There is no support in Postfix for using SRV records to find LDAP servers.

What standard defines SRV records for LDAP?

-- 
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:


If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.


need help with pcre for postfix

2009-11-04 Thread pascal valois
hi, 

i don't understand how the filter are processed ? 

can someone help me write a filter who would accept mail for
"postmas...@domain" and reject all other mails ? 

-- 
Pascal Valois
Service Informatique
01 41 16 70 33



Re: need help with pcre for postfix

2009-11-04 Thread Victor Duchovni
On Wed, Nov 04, 2009 at 06:34:38PM +0100, pascal valois wrote:

> i don't understand how the filter are processed ? 
> 
> can someone help me write a filter who would accept mail for
> "postmas...@domain" and reject all other mails ? 

http://www.postfix.org/access.5.html
http://www.postfix.org/postconf.5.html#smtpd_recipient_restrictions
http://www.postfix.org/postconf.5.html#check_recipient_access

A lot depends on the type of domain, for "virtual alias" domains for
example, just don't create any virtual alias table entries for any
other users in the domain.

http://www.postfix.org/ADDRESS_CLASS_README.html
http://www.postfix.org/VIRTUAL_README.html
http://www.postfix.org/virtual.5.html
http://www.postfix.org/postconf.5.html#virtual_alias_maps
http://www.postfix.org/postconf.5.html#virtual_alias_domains

None of this has anything to do with "pcre" per-se. Why do you believe
you need PCRE to implement a policy that only accepts mail for certain
recipients?

-- 
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:


If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.


Re: postfix + dns ldap srv

2009-11-04 Thread lst_hoe02

Zitat von Victor Duchovni :


On Wed, Nov 04, 2009 at 02:39:06PM -0200, maximatt wrote:


Postfix support dns srv registers... for ldap service?


If you need to define your LDAP servers in SRV records, you can
run a cron job that queries DNS, and rebuilds your "map.cf" files
based on an updated server list.

There is no support in Postfix for using SRV records to find LDAP servers.

What standard defines SRV records for LDAP?


Maybe the OP is referring to Microsoft Active Directory where some  
special records exists in DNS to find the domain controller which are  
in turn LDAP servers with records for the domain users and their  
attributes like mailaddress??


Regards

Andreas




mycingular.net verification failed: Name or service not known

2009-11-04 Thread Dan Schaefer
One of my coworkers would like to send emails from her blackberry using 
the work mail server and her work address. Whenever she attempts to send 
a message, I get the following error messages in the mail log:
Nov  4 13:28:35 pony postfix/smtpd[26853]: warning: 32.144.231.15: 
hostname mobile-032-144-231-015.mycingular.net verification failed: Name 
or service not known
Nov  4 13:28:35 pony postfix/smtpd[26853]: connect from 
unknown[32.144.231.15]
Nov  4 13:28:38 pony postfix/smtpd[26853]: disconnect from 
unknown[32.144.231.15]


This apparently is a DNS problem:
[r...@pony ~]# host mobile-032-144-231-015.mycingular.net
Host mobile-032-144-231-015.mycingular.net not found: 3(NXDOMAIN)


I was wondering if errors like this could be ignored as long as her 
phone is setup to authenticate before sending messages?

Thanks in advance.

--
Dan Schaefer
Web Developer/Systems Analyst
Performance Administration Corp.



Re: mycingular.net verification failed: Name or service not known

2009-11-04 Thread Victor Duchovni
On Wed, Nov 04, 2009 at 02:22:29PM -0500, Dan Schaefer wrote:

> One of my coworkers would like to send emails from her blackberry using the 
> work mail server and her work address. Whenever she attempts to send a 
> message, I get the following error messages in the mail log:

It is not an "error" message, it is a *warning*.

> Nov  4 13:28:35 pony postfix/smtpd[26853]: warning: 32.144.231.15: hostname 
> mobile-032-144-231-015.mycingular.net verification failed: Name or service 
> not known
> Nov  4 13:28:35 pony postfix/smtpd[26853]: connect from 
> unknown[32.144.231.15]
> Nov  4 13:28:38 pony postfix/smtpd[26853]: disconnect from 
> unknown[32.144.231.15]
>
> This apparently is a DNS problem:
> [r...@pony ~]# host mobile-032-144-231-015.mycingular.net
> Host mobile-032-144-231-015.mycingular.net not found: 3(NXDOMAIN)
>
> I was wondering if errors like this could be ignored as long as her phone 
> is setup to authenticate before sending messages?

The "error" (actually "warning") is ignored, but logged, so that you
later understand why the client address is logged as unknown, and why any
restrictions that object to "unknown" clients may reject the transaction,
(if you use such restrictions).

-- 
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:


If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.


Re: mycingular.net verification failed: Name or service not known

2009-11-04 Thread lst_hoe02

Zitat von Dan Schaefer :

One of my coworkers would like to send emails from her blackberry  
using the work mail server and her work address. Whenever she  
attempts to send a message, I get the following error messages in  
the mail log:
Nov  4 13:28:35 pony postfix/smtpd[26853]: warning: 32.144.231.15:  
hostname mobile-032-144-231-015.mycingular.net verification failed:  
Name or service not known
Nov  4 13:28:35 pony postfix/smtpd[26853]: connect from  
unknown[32.144.231.15]
Nov  4 13:28:38 pony postfix/smtpd[26853]: disconnect from  
unknown[32.144.231.15]


This apparently is a DNS problem:
[r...@pony ~]# host mobile-032-144-231-015.mycingular.net
Host mobile-032-144-231-015.mycingular.net not found: 3(NXDOMAIN)


I was wondering if errors like this could be ignored as long as her  
phone is setup to authenticate before sending messages?


Yes, it simply means that the internet provider which is used by the  
phone have not setup reverse DNS.



Regards

Andreas




Re: postfix + dns ldap srv

2009-11-04 Thread Victor Duchovni
On Wed, Nov 04, 2009 at 08:17:13PM +0100, lst_ho...@kwsoft.de wrote:

> Zitat von Victor Duchovni :
>
>> On Wed, Nov 04, 2009 at 02:39:06PM -0200, maximatt wrote:
>>
>>> Postfix support dns srv registers... for ldap service?
>>
>> If you need to define your LDAP servers in SRV records, you can
>> run a cron job that queries DNS, and rebuilds your "map.cf" files
>> based on an updated server list.
>>
>> There is no support in Postfix for using SRV records to find LDAP servers.
>>
>> What standard defines SRV records for LDAP?
>
> Maybe the OP is referring to Microsoft Active Directory where some special 
> records exists in DNS to find the domain controller which are in turn LDAP 
> servers with records for the domain users and their attributes like 
> mailaddress??

Is support for:

_ldap._tcp.example.com

enough? Is this sufficiently well standardized?

What should the user interface be? Right now we have:

server_port = 389
server_host = hostname ...
server_host = ldap://hostname:389 ...
server_host = ldaps://hostname:389 ...

Unless there is an LDAP URI syntax that indirects through SRV records
implemented in the OpenLDAP library, Postfix would need a new syntax
to trigger the construction of a URI list from DNS.

I think it would be much simpler to write a cron job, than to ask Postfix
to determine the server list on the fly. Ugly issues creep in if DNS
queries time out, or temp-fail... This is much easier to handle in a
cron job that simply leaves previous settings untouched...

-- 
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:


If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.


Re: mycingular.net verification failed: Name or service not known

2009-11-04 Thread Dan Schaefer

Victor Duchovni wrote:

On Wed, Nov 04, 2009 at 02:22:29PM -0500, Dan Schaefer wrote:
  
It is not an "error" message, it is a *warning*.

My apologies.


The "error" (actually "warning") is ignored, but logged, so that you
later understand why the client address is logged as unknown, and why any
restrictions that object to "unknown" clients may reject the transaction,
(if you use such restrictions).

  
What setting(s) in Postfix, if any, need to be changed in order for the 
sending of the email to be successful?


--
Dan Schaefer
Web Developer/Systems Analyst
Performance Administration Corp.



Re: mycingular.net verification failed: Name or service not known

2009-11-04 Thread Victor Duchovni
On Wed, Nov 04, 2009 at 03:06:59PM -0500, Dan Schaefer wrote:

> Victor Duchovni wrote:
>> On Wed, Nov 04, 2009 at 02:22:29PM -0500, Dan Schaefer wrote:
>>   It is not an "error" message, it is a *warning*.
> My apologies.
>>
>> The "error" (actually "warning") is ignored, but logged, so that you
>> later understand why the client address is logged as unknown, and why any
>> restrictions that object to "unknown" clients may reject the transaction,
>> (if you use such restrictions).
>>
>>   
> What setting(s) in Postfix, if any, need to be changed in order for the 
> sending of the email to be successful?

No changes required. This "warning" does not adversely impact the
delivery of email, unless you go out of your way (non-default setting)
to deny access to clients with unverifiable PTR records.

-- 
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:


If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.


mycingular.net verification failed: Name or service not known

2009-11-04 Thread Stan Hoeppner
Dan Schaefer put forth on 11/4/2009 2:06 PM:

> What setting(s) in Postfix, if any, need to be changed in order for the
> sending of the email to be successful?

Please paste the entire transaction.  You're not showing a rejection or
a queued delivery in your log snippet.  One example of each, for reference:

Nov  4 14:09:42 greer postfix/smtpd[3818]: connect from
cluster3.marcatel.net.mx[200.56.224.17]
Nov  4 14:09:42 greer postfix/smtpd[3818]: NOQUEUE: reject: RCPT from
cluster3.marcatel.net.mx[200.56.224.17]: 550 5.1.1
: Recipient address rejected: User
unknown in relay recipient table; from=
to= proto=SMTP
helo=
Nov  4 14:09:43 greer postfix/smtpd[3818]: lost connection after RCPT
from cluster3.marcatel.net.mx[200.56.224.17]


Nov  4 14:03:25 greer postfix/smtpd[3794]: connect from
russian-caravan.cloud9.net[168.100.1.4]
Nov  4 14:03:27 greer postgrey: action=pass, reason=triplet found,
client_name=russian-caravan.cloud9.net, client_address=168.100.1.4,
sender=owner-postfix-us...@postfix.org, recipient=s...@hardwarefreak.com
Nov  4 14:03:27 greer postfix/smtpd[3794]: 5B33E3DA123:
client=russian-caravan.cloud9.net[168.100.1.4]
Nov  4 14:03:27 greer postfix/cleanup[3798]: 5B33E3DA123:
message-id=<20091104200301.gc27...@np305c2n2.ms.com>
Nov  4 14:03:27 greer postfix/smtpd[3794]: disconnect from
russian-caravan.cloud9.net[168.100.1.4]
Nov  4 14:03:27 greer postfix/qmgr[3501]: 5B33E3DA123:
from=, size=5903, nrcpt=1 (queue active)
Nov  4 14:03:28 greer postfix/smtp[3799]: 5B33E3DA123:
to=, relay=192.168.100.2[192.168.100.2]:25,
delay=2.9, delays=2.3/0.03/0.13/0.42, dsn=2.0.0, status=sent (250 OK)
Nov  4 14:03:28 greer postfix/qmgr[3501]: 5B33E3DA123: removed

--
Stan


Re: mycingular.net verification failed: Name or service not known

2009-11-04 Thread Dan Schaefer

Stan Hoeppner wrote:

Dan Schaefer put forth on 11/4/2009 2:06 PM:

  

What setting(s) in Postfix, if any, need to be changed in order for the
sending of the email to be successful?



Please paste the entire transaction.  You're not showing a rejection or
a queued delivery in your log snippet.  One example of each, for reference:

Nov  4 14:09:42 greer postfix/smtpd[3818]: connect from
cluster3.marcatel.net.mx[200.56.224.17]
Nov  4 14:09:42 greer postfix/smtpd[3818]: NOQUEUE: reject: RCPT from
cluster3.marcatel.net.mx[200.56.224.17]: 550 5.1.1
: Recipient address rejected: User
unknown in relay recipient table; from=
to= proto=SMTP
helo=
Nov  4 14:09:43 greer postfix/smtpd[3818]: lost connection after RCPT
from cluster3.marcatel.net.mx[200.56.224.17]


Nov  4 14:03:25 greer postfix/smtpd[3794]: connect from
russian-caravan.cloud9.net[168.100.1.4]
Nov  4 14:03:27 greer postgrey: action=pass, reason=triplet found,
client_name=russian-caravan.cloud9.net, client_address=168.100.1.4,
sender=owner-postfix-us...@postfix.org, recipient=s...@hardwarefreak.com
Nov  4 14:03:27 greer postfix/smtpd[3794]: 5B33E3DA123:
client=russian-caravan.cloud9.net[168.100.1.4]
Nov  4 14:03:27 greer postfix/cleanup[3798]: 5B33E3DA123:
message-id=<20091104200301.gc27...@np305c2n2.ms.com>
Nov  4 14:03:27 greer postfix/smtpd[3794]: disconnect from
russian-caravan.cloud9.net[168.100.1.4]
Nov  4 14:03:27 greer postfix/qmgr[3501]: 5B33E3DA123:
from=, size=5903, nrcpt=1 (queue active)
Nov  4 14:03:28 greer postfix/smtp[3799]: 5B33E3DA123:
to=, relay=192.168.100.2[192.168.100.2]:25,
delay=2.9, delays=2.3/0.03/0.13/0.42, dsn=2.0.0, status=sent (250 OK)
Nov  4 14:03:28 greer postfix/qmgr[3501]: 5B33E3DA123: removed

--
Stan
  

The OP was all I had in the log for that transaction.

--
Dan Schaefer
Web Developer/Systems Analyst
Performance Administration Corp.



Re: query re process of dealing with bounce

2009-11-04 Thread Lists

Wietse Venema wrote:

Lists:
  

Hi all,

Setup is: we have a server that does the spam checking running 
MailScanner / Spamassassin and of course postfix


Mail is then delivered to a machine running MailEnable (where the boxes 
are held)


We had a situation where the MailEnable machine went down

*In the maillog of the server running postfix were:*
Oct 29 08:42:08 postfix/smtp[3619]: 37D5362E8A0: 
to=, 
relay=ipofmailenableserver[ipofmailenableserver]:25, delay=0.98, 
delays=0.93/0/0/0.05, dsn=5.7.1, status=bounced (host 
ipofmailenableserver[ipofmailenableserver] said: 550 5.7.1 Unable to 
relay for originallocalrecipi...@domain.co.nz (in reply to RCPT TO command))
Oct 29 08:42:08 postfix/cleanup[3449]: 2B11F62E8A2: 
message-id=<20091028194208.2b11f62e...@posfixserver.ourdomain>
Oct 29 08:42:08 postfix/qmgr[29235]: 2B11F62E8A2: from=<>, size=14216, 
nrcpt=1 (queue active)
Oct 29 08:42:08 postfix/bounce[4201]: 37D5362E8A0: sender non-delivery 
notification: 2B11F62E8A2

Oct 29 08:42:08 postfix/qmgr[29235]: 37D5362E8A0: removed
Oct 29 08:42:08 postfix/smtp[3619]: 2B11F62E8A2: 
to=, 
relay=ipofmailenableserver[ipofmailenableserver]:25, delay=0.05, 
delays=0/0/0/0.04, dsn=5.7.1, status=bounced (host 
ipofmailenableserver[ipofmailenableserver] said: 550 5.7.1 Unable to 
relay for originallocalsen...@domain.co.nz (in reply to RCPT TO command))

Oct 29 08:42:08 postfix/qmgr[29235]: 2B11F62E8A2: removed

Neither the original recipient or the original sender received 
notification that there was a problem or any form of bounce message. The 
original recipient also never received the email.



Indeed. The original message was rejected with a permanent error
("550 5.7.1 Unable to relay"), as was the non-delivery notification.

  
My question is what happened to the email and the bounces and how can I 
change the setup so that if this occured in the future (i.e. the spam 
checking server can't communicate with the mailenable server) mail does 
not disappear.



Configure the Mailenable system such that it doesn't reject mail
with a PERMANENT error for conditions that you don't consider
permanent.

You can configure the Postfix SMTP client to pretend that permanent
errors aren't permanent, but that introduces other risks.

Wietse
  
I heard back from MailEnable and it occurs when MailEnable can't access 
the boxes. This is ok and probably as it should be.
When you say I can configure Postfix SMTP client to pretend that 
permanent errors aren't permanent is this something I could change 
temporarily (say for the time the MailEnable machine is rebooting) and 
then change back?


Postfix non-production snapshot 20091104

2009-11-04 Thread Wietse Venema
Postfix 2.7-20091104-nonprod introduces a "speed adjust" feature
that reduces the number of before-queue filter processes, without
reducing the number of before-filter SMTP server processes.

This addresses a concern of people in Europe who want to reject
all bad mail with a before-queue filter, instead of having to use
an after-queue filter and having to discard mail (which is illegal)
or having to bounce mail (which violates good network citizenship).

With "smtpd_proxy_options = speed_adjust", the SMTP server will
receive the entire message before it connects to a content filter.
For more information see the RELEASE_NOTES.

This is released as a non-production release first, because I took
the opportunity to clean up the existing before-queue filter code.

Wietse


OT: DKIM, ADSP & ARF opinion requested

2009-11-04 Thread Patrick Ben Koetter
I am doing research for an article related to the current state of DKIM and
ADSP usage. Please reply to me offline if you want to share your opinion or
experience:

- Do you know DKIM?
- Do you know ADSP?
- Do you know ARF?
- Do you use it?
- If not, why?
- If yes, why?
- What are your experiences?
- Do you run statistics?
- What do they say?

Thanks!

p...@rick

-- 
saslfinger (debugging SMTP AUTH):



How to override an MX value for a particular domain only?

2009-11-04 Thread Eric B.
Hi,

I'm running postfix on an internal network with an internal DNS.  My 
internal DNS is configured for my particular domain (ie: mydomain.com).  I 
have an MX pointer that points to my postfix machine so any email being 
generated for mydomain.com from the internal network ends up at the postfix 
machine.  All that setup works fine.

My problem is the following.  The email received by Postfix for mydomain.com 
actually needs to be resent out into the internet destined for the actual 
mydomain.com email server located in a geographically different location. 
At the moment, Postfix will do an MX query for mydomain.com, realize that it 
is itself, and understandably not forward the email to the appropriate 
place.

How can I instruct Postfix on that server to ignore the MX record being 
served by the internal DNS and actually query an external DNS server for the 
MX pointer instead?  I looked through the main.cf config file, but can't 
seem to find anything.  Can I configure Postfix to use a different DNS 
server as opposed to the internal one specified by my resolve.conf file?

Any help or suggestions would be appreciated.

Thanks,

Eric 





Re: How to override an MX value for a particular domain only?

2009-11-04 Thread Martijn de Munnik


On Nov 4, 2009, at 10:52 PM, Eric B. wrote:


Hi,

I'm running postfix on an internal network with an internal DNS.  My
internal DNS is configured for my particular domain (ie:  
mydomain.com).  I
have an MX pointer that points to my postfix machine so any email  
being
generated for mydomain.com from the internal network ends up at the  
postfix

machine.  All that setup works fine.

My problem is the following.  The email received by Postfix for mydomain.com
actually needs to be resent out into the internet destined for the  
actual
mydomain.com email server located in a geographically different  
location.
At the moment, Postfix will do an MX query for mydomain.com, realize  
that it

is itself, and understandably not forward the email to the appropriate
place.

How can I instruct Postfix on that server to ignore the MX record  
being
served by the internal DNS and actually query an external DNS server  
for the
MX pointer instead?  I looked through the main.cf config file, but  
can't

seem to find anything.  Can I configure Postfix to use a different DNS
server as opposed to the internal one specified by my resolve.conf  
file?


Any help or suggestions would be appreciated.


http://www.postfix.org/postconf.5.html#transport_maps

mydomain.com smtp:[realmx.mydomain.com]


Thanks,

Eric







mycingular.net verification failed: Name or service not known

2009-11-04 Thread Stan Hoeppner
Dan Schaefer put forth on 11/4/2009 2:18 PM:

> The OP was all I had in the log for that transaction.

If that's truly the case then your Postfix is horribly broken.  Every
inbound message must/will either be rejected by smtpd, or accepted and
queued for delivery, or deferred by, qmgr.  There should always be a log
entry stating the disposition of each message.  Any logging at all is
useless without this.

Either it's in there and you can't locate it, or you've totally hosed
Postfix's logging somehow.  Stop grepping for the message ID and cat the
file, looking manually for all the entries around that transaction
timestamp.

--
Stan


Re: How to override an MX value for a particular domain only?

2009-11-04 Thread Wolfgang Zeikat

Martijn de Munnik wrote:


On Nov 4, 2009, at 10:52 PM, Eric B. wrote:



How can I instruct Postfix on that server to ignore the MX record being
served by the internal DNS and actually query an external DNS server 
for the

MX pointer instead?  I looked through the main.cf config file, but can't
seem to find anything.  Can I configure Postfix to use a different DNS
server as opposed to the internal one specified by my resolve.conf file?

Any help or suggestions would be appreciated.


http://www.postfix.org/postconf.5.html#transport_maps

mydomain.com smtp:[realmx.mydomain.com]


Martijn's above suggestion will reliably send mail for mydomain.com to 
realmx.mydomain.com, which is what you may want to do.


Note: It does *not* query any DNS server for an MX record for 
mydomain.com, though. You would need to adapt it manually in case the 
external MX pointer is changed.



Hope this helps,

wolfgang



Re: mycingular.net verification failed: Name or service not known

2009-11-04 Thread Noel Jones

On 11/4/2009 4:13 PM, Stan Hoeppner wrote:

Dan Schaefer put forth on 11/4/2009 2:18 PM:


The OP was all I had in the log for that transaction.


If that's truly the case then your Postfix is horribly broken.  Every
inbound message must/will either be rejected by smtpd, or accepted and
queued for delivery, or deferred by, qmgr.  There should always be a log
entry stating the disposition of each message.  Any logging at all is
useless without this.


Don't slam the OP just yet...

It's very possible the mail client disconnected for some 
reason.  As one guess, maybe the client is configured to 
require TLS but the server doesn't offer it, so the client 
disconnects.  In that case, there wouldn't be a "reject: ..." 
message in the log.


Adding the client to debug_peer_list will probably give more 
information.


OP can grep the log for the smtpd process ID around the time 
in question to make sure nothing was missed.



  -- Noel Jones


Re: mycingular.net verification failed: Name or service not known

2009-11-04 Thread mouss
Dan Schaefer a écrit :
> One of my coworkers would like to send emails from her blackberry using
> the work mail server and her work address. Whenever she attempts to send
> a message, I get the following error messages in the mail log:
> Nov  4 13:28:35 pony postfix/smtpd[26853]: warning: 32.144.231.15:
> hostname mobile-032-144-231-015.mycingular.net verification failed: Name
> or service not known

that's an "informational" warning, nothing more.

> Nov  4 13:28:35 pony postfix/smtpd[26853]: connect from
> unknown[32.144.231.15]
> Nov  4 13:28:38 pony postfix/smtpd[26853]: disconnect from
> unknown[32.144.231.15]

for some reason, the client disconnected without attemtping to send mail.

> 
> This apparently is a DNS problem:

No. the DNS issue is just a warning. if you look at your logs, you'll
probably find that you receive mail from clients with reverse dns issues.

> [r...@pony ~]# host mobile-032-144-231-015.mycingular.net
> Host mobile-032-144-231-015.mycingular.net not found: 3(NXDOMAIN)
> 
> 
> I was wondering if errors like this could be ignored as long as her
> phone is setup to authenticate before sending messages?

By default, mail is accepted even if the client IP doesn't resolve.

time to reread the list welcome message, and provide infos about your
setup, ... etc.

note that your postfix and your client need to "agree" on tls &
authentication methods. if they disagree, your client will disconnect.


Re: How to override an MX value for a particular domain only?

2009-11-04 Thread Eric B.
"Wolfgang Zeikat"  wrote in message 
news:4af201f9.8060...@desy.de...
> Martijn de Munnik wrote:
>>
>> On Nov 4, 2009, at 10:52 PM, Eric B. wrote:
>
>>> How can I instruct Postfix on that server to ignore the MX record being
>>> served by the internal DNS and actually query an external DNS server for 
>>> the
>>> MX pointer instead?  I looked through the main.cf config file, but can't
>>> seem to find anything.  Can I configure Postfix to use a different DNS
>>> server as opposed to the internal one specified by my resolve.conf file?
>>>
>>> Any help or suggestions would be appreciated.
>>
>> http://www.postfix.org/postconf.5.html#transport_maps
>>
>> mydomain.com smtp:[realmx.mydomain.com]
>
> Martijn's above suggestion will reliably send mail for mydomain.com to 
> realmx.mydomain.com, which is what you may want to do.
>
> Note: It does *not* query any DNS server for an MX record for 
> mydomain.com, though. You would need to adapt it manually in case the 
> external MX pointer is changed.

This is definitely helpful information; thanks.  I'll take a look into that 
ASAP.  My only concern with this setup, of course, is that it requires me to 
manually update the MX for the domain if ever it changes.

Is there no way to direct Postfix to a different DNS server (as opposed to 
the ones specified in resolve.conf) either for a particular domain, or for 
all domains altogether?

Thanks,

Eric 





Re: How to override an MX value for a particular domain only?

2009-11-04 Thread Seth Mattinen
Eric B. wrote:
> 
> Is there no way to direct Postfix to a different DNS server (as opposed to 
> the ones specified in resolve.conf) either for a particular domain, or for 
> all domains altogether?
> 

No, that's outside of the purview of Postfix. You could probably do
something with BIND views though.

~Seth


Re: How to override an MX value for a particular domain only?

2009-11-04 Thread Victor Duchovni
On Wed, Nov 04, 2009 at 06:16:56PM -0500, Eric B. wrote:

> Is there no way to direct Postfix to a different DNS server (as opposed to 
> the ones specified in resolve.conf) either for a particular domain, or for 
> all domains altogether?

If you chroot-jail the smtp(8) delivery agent, it will use the resolv.conf
file in the chroot jail. This is ugly, you are probably solving the
wrong problem.

-- 
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:


If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.


Re: How to override an MX value for a particular domain only?

2009-11-04 Thread Kenneth Marshall
On Wed, Nov 04, 2009 at 03:26:07PM -0800, Seth Mattinen wrote:
> Eric B. wrote:
> > 
> > Is there no way to direct Postfix to a different DNS server (as opposed to 
> > the ones specified in resolve.conf) either for a particular domain, or for 
> > all domains altogether?
> > 
> 
> No, that's outside of the purview of Postfix. You could probably do
> something with BIND views though.
> 
> ~Seth
> 
You could also use a cronjob to check for a change and then update
the configuration based on that change. Why can't you update resolve.conf?

Cheers,
Ken