Re: Fighting Backscatter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 18.10.2010 20:06, Wietse Venema a écrit : >> 1) SpamCo forges a message from innoc...@victim.com and sends it to >> mya...@familyname.com >> >> 2) My server (familyname.com) accepts the message because >> mya...@familyname is a valid recipient that appears in my virtual >> aliases file, then forwards the message (based on the info in that >> virtual aliases file) to my aunt's actual email address of >> auntiemildredloveskitt...@cox.net > > 3) YOUR SERVER tries to forward the SPAM to Cox. > > 4) Cox rejects the SPAM. > > 5) The SPAM is still on YOUR SERVER. > > 6) YOUR SERVER "returns" the SPAM to an innocent person. > > 7) YOUR SERVER is blacklisted because it sends backscatter. > > Wietse yes ++ plus plus Wieste - -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iD8DBQFMvJVftXI/OwkhZKcRApgAAJ97O5QYL5aVIGYNM4CVUdHkcVeUbACfcJiG fhzF7TL3kESBVRFMSVBqB1I= =dR5G -END PGP SIGNATURE- 0x092164A7.asc Description: application/pgp-keys 0x092164A7.asc.sig Description: Binary data
Re: Upgrade 2.5.4
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 19.10.2010 19:42, Victor Duchovni a écrit : > On Tue, Oct 19, 2010 at 12:17:23PM -0400, Linux Addict wrote: > >> Hello, I am running postfix 2.5.4 and would like to upgrade it to latest >> stable 2.7.0. What is the best way upgrade? Do a clean install and port the >> settings to newer version? Any help is appreciated. > > No. Do an upgrade. If installing from source: > > Read the RELEASE_NOTES file for 2.6 and 2.7, then: > > % make > % su root > # postfix stop > # make upgrade > # postfix start > > If installing from a well constructed package: > > Read the RELEASE_NOTES file for 2.6 and 2.7, then: > > # postfix stop > # some-command-to-install-updated-package > # postfix start > > In either case, save the updated main.cf and master.cf files that > are automatically upgraded as part of the install process. > > If the package is not well constructed: > > Read the RELEASE_NOTES file for 2.6 and 2.7, then: > > # postfix stop > > # mkdir -p /etc/postfix/cfsavedir > # cp /etc/postfix/main.cf /etc/postfix/master.cf \ > /etc/postfix/cfsavedir/ > > # some-command-to-install-updated-poorly-constructed-package > > # cp /etc/postfix/cfsavedir/main.cf /etc/postfix/cfsavedir/master.cf \ > /etc/postfix/ > # postfix set-permissions upgrade-configuration > > # postfix start > > A package is not well contstructed if it fails to preserve and upgrade > your existing main.cf and master.cf files. > thanks Victor mouss must also appreciate being a face to similar problem and clear this particular response - -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iD8DBQFMvfN4tXI/OwkhZKcRAuvVAJsGl2vJzkSBQqvkt6XwTPUnisByDACfR+wg eob4NzUYEPLV3Qhadkv7cMk= =CbXp -END PGP SIGNATURE- 0x092164A7.asc Description: application/pgp-keys 0x092164A7.asc.sig Description: Binary data
Re: upgrade 2.5.4 to 2.6.5-1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 20.10.2010 03:15, fake...@fakessh.eu a écrit : > hello postfix network > hello wieste > hello guru of postfix > > I did not follow the ads but the version 2.6.5 causes changes in mail.cf > and master.cf you can enlighten me on my postconf-n > What changes have been put in main.cf for postfix 2.6.5 > I encounter errors with sid-milter no longer working avecd es fatal error > > would you be very kind to point me to realize changes > my actual postfonf -n my main problem that is that sid-milter seems inconsistent with recent packages postfix -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iD8DBQFMvqrZtXI/OwkhZKcRAriaAJ9MEjTm7b9XdRrizDSkzxZztl1qUQCfdw4b DXH6oIei4EdYWoPv8EqOmSU= =mphI -END PGP SIGNATURE- 0x092164A7.asc Description: application/pgp-keys 0x092164A7.asc.sig Description: Binary data
Re: upgrade 2.5.4 to 2.6.5-1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 20.10.2010 10:39, fake...@fakessh.eu a écrit : > Le 20.10.2010 03:15, fake...@fakessh.eu a écrit : >> hello postfix network >> hello wieste >> hello guru of postfix > >> I did not follow the ads but the version 2.6.5 causes changes in mail.cf >> and master.cf you can enlighten me on my postconf-n >> What changes have been put in main.cf for postfix 2.6.5 >> I encounter errors with sid-milter no longer working avecd es fatal error > >> would you be very kind to point me to realize changes >> my actual postfonf -n > my main problem that is that sid-milter seems inconsistent with recent > packages postfix I finally this is a configuration with postfix 2.6.5-1 its ok I would like to know what are the new products to appear in main.cf - -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iD8DBQFMvr+1tXI/OwkhZKcRAlaUAJ4u2VZZiDdLGVRlty9aIMHa5JOcDACghHXQ mx8Sw6zu4B50nRLxqh21yg0= =Y1Es -END PGP SIGNATURE- 0x092164A7.asc Description: application/pgp-keys 0x092164A7.asc.sig Description: Binary data
Re: upgrade 2.5.4 to 2.6.5-1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 20.10.2010 14:54, Brian Evans - Postfix List a écrit : > On 10/19/2010 9:15 PM, fake...@fakessh.eu wrote: >> hello postfix network >> hello wieste >> hello guru of postfix >> I solved my problem of milter what are the habits and customs to the main.cf and master.cf of postfix 2.7.1-1 from 2.5.4-1 - -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7 gpg --keyserver pgp.mit.edu --recv-key 092164A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iD8DBQFMvvBNtXI/OwkhZKcRAm0sAJ41WYQWCZMZpLfCn16D+QIBvNqPZACcC49Q O6Os3rVK2JDe5H6oSHvgvOk= =5pSY -END PGP SIGNATURE-
Re: Sender-ID validation via Blackberry failing
On Tuesday 25 January 2011 14:23, Sharma, Ashish wrote: > Hi, > > I have a Postfix mail receiving server, on this I am using sid-milter > (found at http://sourceforge.net/projects/sid-milter/ got from > http://www.postfix.org/addon.html) tool to validate senderID and SPF. > > Here the problem is for mail servers that implement Sender-ID, mail servers > that are implementing sender-ID and having their mails sent via Blackberry > are having their sender-ID (sender-id=neutral) not getting verified on my > postfix end. > > Following are the mail headers that I am receiving: > SEnderID add special header in the mail exemple of SEnder ID header X-SenderID: Sendmail Sender-ID Filter v1.0.0 r13151.ovh.net 9306957E93 > Can anybody tell me what needs to be done at my end to get sender-ID for > mails sent via Blackberry to be verified and passed correctly. > > Thanks > Ashish Sharma pgpXfYZ5NPNTq.pgp Description: PGP signature
Re: /var/mail
Le samedi 20 juin 2009 01:08, mouss a écrit : > Carlos Williams a écrit : > > I notice that when I create a user in my Postfix server, I also create > > a file located in /var/spool/mail: > > > > > > > > [r...@mail mail]# ls -l > > total 0 > > -rw-rw 1 user1mail 0 Jun 8 11:35 user1 > > -rw-rw 1 user2mail 0 Jun 5 08:41 user2 > > -rw-rw 1 user3mail 0 Jun 9 10:00 user3 > > -rw-rw 1 user4mail 0 Jun 8 10:37 user4 > > -rw-rw 1 user5mail 0 May 21 15:15 user5 > > -rw-rw 1 user6mail 0 May 28 16:06 user6 > > -rw-rw 1 user7mail 0 May 21 15:20 user7 > > -rw-rw 1 user8mail 0 May 20 10:04 user8 > > > > > > > > I have Postfix running with /Maildir style mailboxes and all the users > > email gets stored in their /home directory so I am not > > sure why my Linux / Postfix system is generating these files. I > > normally don't mess with files in /var unless I know what I am > > doing which I obviously don't. Can someone tell me: > > > > 1 - Why this files are being generated > > it's your "adduser" command. This is not postfix related. > > > 2 - Can I delete them > > Probably, unless something relies on. I would just leave them. > . > > 3 - How can I prevent future new users from having files generated in > > this directory > > don't fight against the system. peace near fight peace near live peace for all them > > > All the files are blank / empty so it does not appear to be doing much > > from what I can see. > > These are not the only useless files your system, so why lose your time?
Re: Regular expression with fighting against spam
Le samedi 20 juin 2009 01:25, mouss a écrit : > Jaroslaw Grzabel a écrit : > > Jorey Bump wrote: > >> To be fair, your original question reveals that you are somewhat > >> unfamiliar with basic concepts of email administration, and that is why > >> noone is eager to help you shoot yourself in the foot, especially if it > >> means the bullet may ricochet off the floor and hit us. > >> > >> That said, you must escape the pipe: > >> > >> /^\|/ REJECT > >> > >> And you must also apply this rule to the envelope sender, not the From: > >> header. See the Postfix docs for more information. > >> > >> But it's a moot point. You are fixing the wrong problem. > > > > Thank you for that. > > I've got different opinion about it but it's not the place to argue with > > anyone. My question was simple without unnecessary details. Maybe too > > simple ? > > If somebody will ask you what's the color of your car will you answer > > what engine is yours ? > > But this is not a (silly) answering machine. people here want to > understand your problem and to give you a good response. we feel happy > when we really help others, and for that we try to guess what problem > they are trying to fix. you can ask your doctor "I have foo-ache, give > bar-idicine". he can give you what you ask for, but then he would be a > silly doctor. > > and the other thing you must keep in mind is that this is a public list, > and the answers are archived and will be used by other people. > > after all, if you think about this, you'll find that it is no different > than in real life. > > > Anyway if we want we can just only discuss about > > it on private. > > you're right, we're getting off topic... > "Buddha" nearless > > Anyway I would like to thank to anybody who took a part in that discuss. > > > > Regards, > > Jarek
sid-milter with postfix
Hi all, documentation postfix understand a line on sid-milter. can we find other documentation on sid-milter with postfix there may be another way to implement SenderID on postfix that the electronic process. a milter thanks peace for all "Buddha" Keep onlive
Re: sid-milter with postfix
I will try to install it correctly ...; you know a webpage "a sort of how-to" describing the installation, documentation clearer than the one ligne on the website postfix Le samedi 20 juin 2009 17:15, Noel Jones a écrit : > fake...@fakessh.eu wrote: > > Hi all, > > > > documentation postfix understand a line on sid-milter. > > can we find other documentation on sid-milter with postfix > > sid-milter is pretty easy to use with postfix. > 1. - see sid-milter documentation for installing and > configuring sid-milter. > 2. - tell postfix what socket sid-milter is listening on. > See the postfix MILTER_README for help with this part. > > Some old versions of sid-milter needed a trivial patch to work > properly with postfix. This is no longer needed; the current > version 1.0 of sid-milter works fine with postfix. > > > there may be another way to implement SenderID on postfix that the > > electronic process. a milter > > You can alternately use a policy server to check SenderID/SPF. > Here's the postfix documentation on using a policy server: > http://www.postfix.org/SMTPD_POLICY_README.html > There are several policy servers that support SID, here are a few: > http://www.postfix.org/addon.html#policy > http://www.openspf.org/Software > > > >-- Noel Jones
Re: sid-milter with postfix
Hi list sid-milter 1.0.0 work so fine on my box thanks for all your feedbacks > fake...@fakessh.eu wrote: > > I will try to install it correctly ...; > > > > you know a webpage "a sort of how-to" describing the installation, > > documentation clearer than the one ligne on the website postfix > > Please don't top-post. > > See the sid-milter documentation for installing and > configuring sid-milter. It's quite easy. > > Most likely there's an sid-milter package available for your > system - ports, or yum, or RPM or whatever your system uses. > > Then you start the sid-filter program using the options you > need. Mine looks like this (all one line): > /usr/bin/sid-filter -p inet:9967 -t -d megan.vbhcs.org -D -l > -P /var/run/milter/sid-filter.pid -u milter > You should read "man sid-filter" to see what those command > options do. > > See the postfix MILTER_README for instructions on telling > postfix where to talk to sid-milter. > http://www.postfix.org/MILTER_README.html > > My postfix main.cf entry looks like this: > smtpd_milters = inet:127.0.0.1:9967 > >-- Noel Jones
multiple signatures DK multiple selector
hi list hi all dkimproxy I can not specify that only selector. how to have multiple signatures DK multiple number selectors thanks for all your feedbacks
Re: multiple signatures DK multiple selector
dkim I know it supports multiple signatures but DK domains and selector keys ? Le mercredi 24 juin 2009 22:28, Noel Jones a écrit : > fake...@fakessh.eu wrote: > > hi list > > hi all > > > > dkimproxy I can not specify that only selector. > > how to have multiple signatures DK > > multiple number selectors > > > > thanks for all your feedbacks > > both dkim-milter and amavisd-new support multiple dkim > selectors. They both work well. > >-- Noel Jones
Re: multiple signatures DK multiple selector
use dkimproxy 1.1.0 Le mercredi 24 juin 2009 22:34, fake...@fakessh.eu a écrit : > dkim I know it supports multiple signatures > but DK domains and selector keys ? > > Le mercredi 24 juin 2009 22:28, Noel Jones a écrit : > > fake...@fakessh.eu wrote: > > > hi list > > > hi all > > > > > > dkimproxy I can not specify that only selector. > > > how to have multiple signatures DK > > > multiple number selectors > > > > > > thanks for all your feedbacks > > > > both dkim-milter and amavisd-new support multiple dkim > > selectors. They both work well. > > > >-- Noel Jones
virtual table user bounced
Hi all , Hi list I have a weird problem I issued my logs [r...@r13151 ~]# tail -f /var/log/maillog Jun 28 07:17:08 r13151 postfix/lmtp[19757]: EC99F24681: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=4.2, delays=1.2/0.01/0.01/3, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=17237-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as E30E92468A) Jun 28 07:17:08 r13151 postfix/qmgr[19330]: EC99F24681: removed Jun 28 07:17:09 r13151 postfix/error[19761]: E30E92468A: to=, relay=none, delay=1.3, delays=0.34/0.32/0/0.67, dsn=5.0.0, status=bounced (User unknown in virtual alias table) Jun 28 07:17:09 r13151 postfix/cleanup[19756]: 3F05B2468B: message-id=<20090628051709.3f05b24...@r13151.ovh.net> Jun 28 07:17:09 r13151 postfix/qmgr[19330]: 3F05B2468B: from=<>, size=3055, nrcpt=1 (queue active) Jun 28 07:17:09 r13151 postfix/trivial-rewrite[19755]: warning: do not list domain fakessh.eu in BOTH mydestination and virtual_alias_domains Jun 28 07:17:09 r13151 postfix/bounce[19762]: E30E92468A: sender non-delivery notification: 3F05B2468B Jun 28 07:17:09 r13151 postfix/qmgr[19330]: E30E92468A: removed Jun 28 07:17:10 r13151 postfix/local[19763]: 3F05B2468B: to=, relay=local, delay=1.3, delays=0.27/0.43/0/0.62, dsn=2.0.0, status=sent (delivered to maildir) Jun 28 07:17:10 r13151 postfix/qmgr[19330]: 3F05B2468B: removed Jun 28 07:18:43 r13151 postfix/smtpd[19719]: connect from ABayonne-257-1-2-88.w90-55.abo.wanadoo.fr[90.55.121.88] Jun 28 07:18:45 r13151 postfix/smtpd[19719]: 1927F24680: client=ABayonne-257-1-2-88.w90-55.abo.wanadoo.fr[90.55.121.88], sasl_method=PLAIN, sasl_username=fake...@r13151.ovh.net Jun 28 07:18:45 r13151 postfix/cleanup[19756]: 1927F24680: message-id=<200906280718.42880.fake...@fakessh.eu> Jun 28 07:18:45 r13151 postfix/qmgr[19330]: 1927F24680: from=, size=631, nrcpt=1 (queue active) Jun 28 07:18:45 r13151 postfix/smtpd[19719]: disconnect from ABayonne-257-1-2-88.w90-55.abo.wanadoo.fr[90.55.121.88] Jun 28 07:18:46 r13151 postfix/smtpd[19760]: connect from localhost.localdomain[127.0.0.1] Jun 28 07:18:46 r13151 postfix/smtpd[19760]: E62D02468E: client=localhost.localdomain[127.0.0.1] Jun 28 07:18:46 r13151 postfix/cleanup[19756]: E62D02468E: message-id=<200906280718.42880.fake...@fakessh.eu> Jun 28 07:18:47 r13151 postfix/qmgr[19330]: E62D02468E: from=, size=1286, nrcpt=1 (queue active) Jun 28 07:18:47 r13151 postfix/smtpd[19760]: disconnect from localhost.localdomain[127.0.0.1] Jun 28 07:18:47 r13151 amavis[17238]: (17238-01) Passed CLEAN, [90.55.121.88] [90.55.121.88] -> , Message-ID: <200906280718.42880.fake...@fakessh.eu>, mail_id: 6c39N16wCPAQ, Hits: 2.43, queued_as: E62D02468E, 1838 ms Jun 28 07:18:47 r13151 postfix/lmtp[19757]: 1927F24680: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=2.2, delays=0.36/0/0.01/1.8, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=17238-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as E62D02468E) Jun 28 07:18:47 r13151 postfix/qmgr[19330]: 1927F24680: removed Jun 28 07:18:47 r13151 postfix/error[19761]: E62D02468E: to=, relay=none, delay=0.61, delays=0.35/0/0/0.26, dsn=5.0.0, status=bounced (User unknown in virtual alias table) Jun 28 07:18:47 r13151 postfix/cleanup[19756]: 86A0224680: message-id=<20090628051847.86a0224...@r13151.ovh.net> Jun 28 07:18:47 r13151 postfix/qmgr[19330]: 86A0224680: from=<>, size=3053, nrcpt=1 (queue active) Jun 28 07:18:47 r13151 postfix/trivial-rewrite[19755]: warning: do not list domain fakessh.eu in BOTH mydestination and virtual_alias_domains Jun 28 07:18:47 r13151 postfix/bounce[19762]: E62D02468E: sender non-delivery notification: 86A0224680 Jun 28 07:18:47 r13151 postfix/qmgr[19330]: E62D02468E: removed Jun 28 07:18:48 r13151 postfix/local[19763]: 86A0224680: to=, relay=local, delay=0.71, delays=0.28/0/0/0.42, dsn=2.0.0, status=sent (delivered to maildir) Jun 28 07:18:48 r13151 postfix/qmgr[19330]: 86A0224680: removed ^X [r...@r13151 ~]# [r...@r13151 ~]# tail -f /var/log/maillog Jun 28 07:18:47 r13151 postfix/lmtp[19757]: 1927F24680: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=2.2, delays=0.36/0/0.01/1.8, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=17238-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as E62D02468E) Jun 28 07:18:47 r13151 postfix/qmgr[19330]: 1927F24680: removed Jun 28 07:18:47 r13151 postfix/error[19761]: E62D02468E: to=, relay=none, delay=0.61, delays=0.35/0/0/0.26, dsn=5.0.0, status=bounced (User unknown in virtual alias table) Jun 28 07:18:47 r13151 postfix/cleanup[19756]: 86A0224680: message-id=<20090628051847.86a0224...@r13151.ovh.net> Jun 28 07:18:47 r13151 postfix/qmgr[19330]: 86A0224680: from=<>, size=3053, nrcpt=1 (queue active) Jun 28 07:18:47 r13151 postfix/trivial-rewrite[19755]: warning: do not list domain fakessh.eu in BOTH mydestination and virtual_alias_domains Jun 28 07:18:47 r13151 postfix/bounce[19762]: E62D02468E: sender non-delivery notification: 86A0224680 Jun 28 07:18:47
Re: virtual table user bounced
its work fine thanks peace for all Le dimanche 28 juin 2009 10:36, Sahil Tandon a écrit : > On Sun, 28 Jun 2009, fake...@fakessh.eu wrote: > > I have a weird problem > > > > I issued my logs > > > > [r...@r13151 ~]# tail -f /var/log/maillog > > Jun 28 07:17:08 r13151 postfix/lmtp[19757]: EC99F24681: > > to=, relay=127.0.0.1[127.0.0.1]:10024, > > delay=4.2, delays=1.2/0.01/0.01/3, dsn=2.6.0, status=sent (250 2.6.0 Ok, > > id=17237-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as > > E30E92468A) Jun 28 07:17:08 r13151 postfix/qmgr[19330]: EC99F24681: > > removed > > Jun 28 07:17:09 r13151 postfix/error[19761]: E30E92468A: > > to=, relay=none, delay=1.3, > > delays=0.34/0.32/0/0.67, dsn=5.0.0, status=bounced (User unknown in > > virtual alias table) > > Jun 28 07:17:09 r13151 postfix/cleanup[19756]: 3F05B2468B: > > message-id=<20090628051709.3f05b24...@r13151.ovh.net> > > Jun 28 07:17:09 r13151 postfix/qmgr[19330]: 3F05B2468B: from=<>, > > size=3055, nrcpt=1 (queue active) > > Jun 28 07:17:09 r13151 postfix/trivial-rewrite[19755]: warning: do not > > list domain fakessh.eu in BOTH mydestination and virtual_alias_domains > > This is pretty clear direction in your logs; DO NOT LIST A DOMAIN IN BOTH > $mydestination AND $virtual_alias_domains within main.cf. > > > nb : smile yourself > > NB: RTFM: http://www.postfix.org/VIRTUAL_README.html
dk dkim with dkimproxy
I have a strange error that I do not understand I have the impression of having set dkimproxy well my config # specify what address/port DKIMproxy should listen on listen127.0.0.1:10028 # specify what address/port DKIMproxy forwards mail to relay 127.0.0.1:10029 # specify what domains DKIMproxy can sign for (comma-separated, no spaces) domainfakessh.eu,renelacroute.fr # specify what signatures to add signature dkim(c=relaxed) signature domainkeys(c=nofws) # specify location of the private key keyfile /usr/local/dkimproxy/keys/fakessh.eu.key keyfile /usr/local/dkimproxy/keys/renelacroute.fr.key # specify the selector (i.e. the name of the key record put in DNS) #selector renelacroute selector fakessh.eu selector renelacroute.fr fakessh.eu dkim(c=simple,s=fakessh.eu,a=rsa-sha1,key=/usr/local/dkimproxy/keys/fakessh.eu.key) domainkeys(c=nofws,s=fakessh.eu,key=/usr/local/dkimproxy/keys/fakessh.eu.key) renelacroute.fr dkim(c=simple,s=renelacroute.fr,a=rsa-sha1,key=/usr/local/dkimproxy/keys/renelacroute.fr.key) domainkeys(c=nofws,s=renelacroute.fr,key=/usr/local/dkimproxy/keys/renelacroute.fr.key) dk dkim and does not work on the fakessh work well on renelacroute.fr how to have two accounts at the same time walk Received: from r13151.ovh.net (91.121.205.40) by verifier.port25.com (PowerMTA(TM) v3.6a1) id h8uri60hse83 for ; Sun, 28 Jun 2009 14:32:01 -0400 (envelope-from ) Authentication-Results: verifier.port25.com smtp.mail=fake...@fakessh.eu; mfrom=pass; (trace: RE5TIHJlY29yZChzKToKICAgIGZha2Vzc2guZXUuIDM4NDAwIElOIFRYVCAidj1zcGYxIG lwNDo5MS4xMjEuMjA1LjQwIGEgbXg6bWFpbC5mYWtlc3NoLmV1ID9hbGwiCg==) Authentication-Results: verifier.port25.com header.from=fake...@fakessh.eu; domainkeys=permerror (DK_STAT_NOKEY: No public key available (permanent failure)); (trace: RE5TIHJlY29yZChzKToKICAgIHJlbmVsYWNyb3V0ZS5mci5fZG9tYWlua2V5LmZha2Vzc2 guZXUuIFRYVCAoTlhET01BSU4pCg==) Authentication-Results: verifier.port25.com; dkim=permerror (key "renelacroute.fr._domainkey.fakessh.eu" doesn't exist); (trace: Q2Fub25pY2FsaXplZCBIZWFkZXJzOgogICAgZnJvbToiZmFrZXNzaEBmYWtlc3NoLmV1Ii cyMCc8ZmFrZXNzaEBmYWtlc3NoLmV1PicwRCcnMEEnCiAgICB0bzphdXRoLXJlc3VsdHNAdmVyaWZ pZXIucG9ydDI1LmNvbSwnMjAnYXV0aC1yZXN1bHRzMkB2ZXJpZmllci5wb3J0MjUuY29tLCcyMCdj aGVjay1hdXRoQHZlcmlmaWVyLnBvcnQyNS5jb20nMEQnJzBBJwogICAgZGF0ZTpTdW4sJzIwJzI4J zIwJ0p1bicyMCcyMDA5JzIwJzIwOjM3OjQxJzIwJyswMjAwJzBEJycwQScKICAgIG1pbWUtdmVyc2 lvbjoxLjAnMEQnJzBBJwogICAgY29udGVudC10eXBlOnRleHQvcGxhaW47JzIwJ2NoYXJzZXQ9InV zLWFzY2lpIicwRCcnMEEnCiAgICBjb250ZW50LXRyYW5zZmVyLWVuY29kaW5nOjdiaXQnMEQnJzBB JwogICAgbWVzc2FnZS1pZDo8MjAwOTA2MjgyMDM3LjQyMDcyLmZha2Vzc2hAZmFrZXNzaC5ldT4nM EQnJzBBJwogICAgZGtpbS1zaWduYXR1cmU6dj0xOycyMCdhPXJzYS1zaGExOycyMCdjPXJlbGF4ZW Q7JzIwJ2Q9ZmFrZXNzaC5ldTsnMjAnaD1mcm9tOnRvOmRhdGUnMjAnOm1pbWUtdmVyc2lvbjpjb25 0ZW50LXR5cGU6Y29udGVudC10cmFuc2Zlci1lbmNvZGluZzptZXNzYWdlLWlkOycyMCdzPXJlbmVs YWNyb3V0ZS5mcjsnMjAnYmg9dW9xMW9DZ0xsVHFwZERYL2lVYkx5N0oxV2ljPTsnMjAnYj0KCkNhb m9uaWNhbGl6ZWQgQm9keToKICAgICcwRCcnMEEnCiAgICAKCkROUyByZWNvcmQocyk6CiAgICByZW 5lbGFjcm91dGUuZnIuX2RvbWFpbmtleS5mYWtlc3NoLmV1LiBUWFQgKE5YRE9NQUlOKQo=) Authentication-Results: verifier.port25.com header.from=fake...@fakessh.eu; pra=pass; (trace: RE5TIHJlY29yZChzKToKICAgIGZha2Vzc2guZXUuIDM4NDAwIElOIFRYVCAidj1zcGYxIG lwNDo5MS4xMjEuMjA1LjQwIGEgbXg6bWFpbC5mYWtlc3NoLmV1ID9hbGwiCg==) Received: from localhost (localhost.localdomain [127.0.0.1]) by r13151.ovh.net (Postfix) with ESMTP id 10E0328C78; Sun, 28 Jun 2009 20:37:51 +0200 (CEST) X-Virus-Scanned: amavisd-new at Received: from r13151.ovh.net ([127.0.0.1]) by localhost (r13151.ovh.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id g7onlWMdktYn; Sun, 28 Jun 2009 20:37:46 +0200 (CEST) Received: from r13151.ovh.net (localhost.localdomain [127.0.0.1]) by r13151.ovh.net (Postfix) with ESMTP id 2C80A28D20; Sun, 28 Jun 2009 20:37:46 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=fakessh.eu; h=from:to:date :mime-version:content-type:content-transfer-encoding:message-id; s=renelacroute.fr; bh=uoq1oCgLlTqpdDX/iUbLy7J1Wic=; b=A+et5D0sN kFVjIXyxmDAGkAWDTkoAFpgLFLc7x+upGTHfhFtG/LWEoUWPYcAm0Mr48b12672N G5u4xifrBv0nz9BaopY0XiWaJyM1bsIa8twwqxsvdgAdV4JEdAHql+XwMLfjseBb 1NJ4d6lPCgA9SFVOxApenzllGFO6KV2l4I= DomainKey-Signature: a=rsa-sha1; c=nofws; d=fakessh.eu; h=from:to:date :mime-version:content-type:content-transfer-encoding:message-id; q=dns; s=renelacroute.fr; b=rHflnYFzSmqSFVCcsnJzcAzqzFF5SEbar0s fUbsuRcH4L9fUYfhAksUl8toDhUEJZelsYoKKub4ZVrLF2q3pe5JsUATujbIfFu8 iDuAjeH39/ZywE4WPyg8bMuWlGdLT5CHAP68eMcyWEeHm/X47pw7bPYEdOIEVvJm 1/sBaxRs= Received: from your-ab6cd29f8e (ABayonne-257-1-17-14.w90-30.abo.wanadoo.fr [90.30.248.14]) (Authenticated sender: fake...@r13151.ovh.net) by r13151.ovh.net (Postfix) with ESMTP id C2A8528C
Re: dk dkim with dkimproxy
that right now [swilt...@your-ab6cd29f8e ~]$ host -t txt fakessh.eu._domainkey.fakessh.eu. fakessh.eu._domainkey.fakessh.eu descriptive text "v=DKIM1\; t=s\;k=rsa\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC29FIrlsKuQCL8gsJb7gBTG3NlPaDeycOVbix/TBSfrY300mjguwkDy3lJ88VR6VTGtTrtG4JND6YgA7ncvRbgDWfN5kepMRwyfWwYOh6u3M/X8AgMGIst85CLuG5NjXkJ+cmnzVTDUcGFEq3nw8WLM689opyKB2S4vALldhWr6QIDAQAB" [swilt...@your-ab6cd29f8e ~]$ Le lundi 29 juin 2009 03:09, vous avez écrit : > "fake...@fakessh.eu" writes: > [...] > > > fakessh.eu > > dkim(c=simple,s=fakessh.eu,a=rsa-sha1,key=/usr/local/dkimproxy/keys/fakes > >sh.eu.key) > > domainkeys(c=nofws,s=fakessh.eu,key=/usr/local/dkimproxy/keys/fakessh.eu. > >key) > > [...] > > > dk dkim and does not work on the fakessh > > [...] > b...@betla:~> host -t txt fakessh.eu._domainkey.fakessh.eu. > Host fakessh.eu._domainkey.fakessh.eu. not found: 3(NXDOMAIN) > > done.
Re: dk dkim with dkimproxy
that right now [swilt...@your-ab6cd29f8e ~]$ nslookup -type=TXT fakessh.eu._domainkey.fakessh.eu. Server: 192.168.1.1 Address:192.168.1.1#53 Non-authoritative answer: fakessh.eu._domainkey.fakessh.eutext = "v=DKIM1\; t=s\;k=rsa\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC29FIrlsKuQCL8gsJb7gBTG3NlPaDeycOVbix/TBSfrY300mjguwkDy3lJ88VR6VTGtTrtG4JND6YgA7ncvRbgDWfN5kepMRwyfWwYOh6u3M/X8AgMGIst85CLuG5NjXkJ+cmnzVTDUcGFEq3nw8WLM689opyKB2S4vALldhWr6QIDAQAB" Authoritative answers can be found from: [swilt...@your-ab6cd29f8e ~]$ [swilt...@your-ab6cd29f8e ~]$ dig +short fakessh.eu._domainkey.fakessh.eu. TXT "v=DKIM1\; t=s\;k=rsa\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC29FIrlsKuQCL8gsJb7gBTG3NlPaDeycOVbix/TBSfrY300mjguwkDy3lJ88VR6VTGtTrtG4JND6YgA7ncvRbgDWfN5kepMRwyfWwYOh6u3M/X8AgMGIst85CLuG5NjXkJ+cmnzVTDUcGFEq3nw8WLM689opyKB2S4vALldhWr6QIDAQAB" [swilt...@your-ab6cd29f8e ~]$ Le lundi 29 juin 2009 03:31, Byung-Hee HWANG a écrit : > "fake...@fakessh.eu" writes: > > I have a strange error that I do not understand > > I have the impression of having set dkimproxy well > > my config > > [...] > > > fakessh.eu > > dkim(c=simple,s=fakessh.eu,a=rsa-sha1,key=/usr/local/dkimproxy/keys/fakes > >sh.eu.key) > > domainkeys(c=nofws,s=fakessh.eu,key=/usr/local/dkimproxy/keys/fakessh.eu. > >key) > > [...] > Well i think that you have wrong position in DNS record. Please check > your DNS with careful, as follow: > > $ nslookup -type=TXT fakessh.eu._domainkey.fakessh.eu. > > or > > $ dig +short fakessh.eu._domainkey.fakessh.eu. TXT > > Sincerely,
Re: dk dkim with dkimproxy
I put selector , mail . it was not until the spread of dns Le lundi 29 juin 2009 05:12, Byung-Hee HWANG a écrit : > "fake...@fakessh.eu" writes: > > that right now > > [swilt...@your-ab6cd29f8e ~]$ host -t txt > > fakessh.eu._domainkey.fakessh.eu. fakessh.eu._domainkey.fakessh.eu > > descriptive text "v=DKIM1\; > > t=s\;k=rsa\;p=MIG[...] > > OK, your check seems good. Then you check try again with external public > DNS (eg, bitsy.mit.edu) ;; > > $ host -t txt fakessh.eu._domainkey.fakessh.eu. bitsy.mit.edu. > > Sincerely,
Re: dk dkim with dkimproxy
i dkimproxy update to the latest version which is in beta my secondary dns is not to me he plays tricks Le lundi 29 juin 2009 05:12, Byung-Hee HWANG a écrit : > "fake...@fakessh.eu" writes: > > that right now > > [swilt...@your-ab6cd29f8e ~]$ host -t txt > > fakessh.eu._domainkey.fakessh.eu. fakessh.eu._domainkey.fakessh.eu > > descriptive text "v=DKIM1\; > > t=s\;k=rsa\;p=MIG[...] > > OK, your check seems good. Then you check try again with external public > DNS (eg, bitsy.mit.edu) ;; > > $ host -t txt fakessh.eu._domainkey.fakessh.eu. bitsy.mit.edu. > > Sincerely,
Re: dk dkim with dkimproxy
I get a weird error [swilt...@localhost ~]$ host -t txt mail._domainkey.fakessh.eu. bitsy.mit.edu. Using domain server: Name: bitsy.mit.edu. Address: 18.72.0.3#53 Aliases: Host mail._domainkey.fakessh.eu not found: 3(NXDOMAIN) [swilt...@localhost ~]$ [swilt...@localhost ~]$ host -t txt mail._domainkey.renelacroute.fr. bitsy.mit.edu. Using domain server: Name: bitsy.mit.edu. Address: 18.72.0.3#53 Aliases: mail._domainkey.renelacroute.fr descriptive text "v=DKIM1\;t=s\;k=rsa\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9HIrVMndj/1F6YXlOae/1CukcWClnD2iJ9zslFaM2vAEwNJNfJkq/0aVdTCNF/EVZi3x51FKg8wjGFWNbPW3eFaVt8ZjX0wBPFviKFeVDd2VCDwgKgk9xw0AW31kok8OX2Inikid+lPiEffoqZ2j2QOgnUJ7WnFfbKbNsm+MPLQIDAQAB" [swilt...@localhost ~]$ the 2 areas are located on the same machine one telnet fakessh.eu 2525 its ok its not NXDOMAIN Le lundi 29 juin 2009 21:52, fake...@fakessh.eu a écrit : > i dkimproxy update to the latest version which is in beta > > my secondary dns is not to me he plays tricks > > Le lundi 29 juin 2009 05:12, Byung-Hee HWANG a écrit : > > "fake...@fakessh.eu" writes: > > > that right now > > > [swilt...@your-ab6cd29f8e ~]$ host -t txt > > > fakessh.eu._domainkey.fakessh.eu. fakessh.eu._domainkey.fakessh.eu > > > descriptive text "v=DKIM1\; > > > t=s\;k=rsa\;p=MIG[...] > > > > OK, your check seems good. Then you check try again with external public > > DNS (eg, bitsy.mit.edu) ;; > > > > $ host -t txt fakessh.eu._domainkey.fakessh.eu. bitsy.mit.edu. > > > > Sincerely,
Re: dk dkim with dkimproxy
problem solved. I had forgotten it. at the end of the statement Le lundi 29 juin 2009 22:27, fake...@fakessh.eu a écrit : > I get a weird error > > [swilt...@localhost ~]$ host -t txt mail._domainkey.fakessh.eu. > bitsy.mit.edu. > Using domain server: > Name: bitsy.mit.edu. > Address: 18.72.0.3#53 > Aliases: > > Host mail._domainkey.fakessh.eu not found: 3(NXDOMAIN) > [swilt...@localhost ~]$ > > [swilt...@localhost ~]$ host -t txt mail._domainkey.renelacroute.fr. > bitsy.mit.edu. > Using domain server: > Name: bitsy.mit.edu. > Address: 18.72.0.3#53 > Aliases: > > mail._domainkey.renelacroute.fr descriptive > text > "v=DKIM1\;t=s\;k=rsa\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9HIrVMndj/1F >6YXlOae/1CukcWClnD2iJ9zslFaM2vAEwNJNfJkq/0aVdTCNF/EVZi3x51FKg8wjGFWNbPW3eFaV >t8ZjX0wBPFviKFeVDd2VCDwgKgk9xw0AW31kok8OX2Inikid+lPiEffoqZ2j2QOgnUJ7WnFfbKbN >sm+MPLQIDAQAB" [swilt...@localhost ~]$ > the 2 areas are located on the same machine > > one telnet fakessh.eu 2525 its ok > its not NXDOMAIN > > Le lundi 29 juin 2009 21:52, fake...@fakessh.eu a écrit : > > i dkimproxy update to the latest version which is in beta > > > > my secondary dns is not to me he plays tricks > > > > Le lundi 29 juin 2009 05:12, Byung-Hee HWANG a écrit : > > > "fake...@fakessh.eu" writes: > > > > that right now > > > > [swilt...@your-ab6cd29f8e ~]$ host -t txt > > > > fakessh.eu._domainkey.fakessh.eu. fakessh.eu._domainkey.fakessh.eu > > > > descriptive text "v=DKIM1\; > > > > t=s\;k=rsa\;p=MIG[...] > > > > > > OK, your check seems good. Then you check try again with external > > > public DNS (eg, bitsy.mit.edu) ;; > > > > > > $ host -t txt fakessh.eu._domainkey.fakessh.eu. bitsy.mit.edu. > > > > > > Sincerely, > > ___ > bind-users mailing list > bind-us...@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users
Re: help with dkimproxy
Le jeudi 2 juillet 2009 16:23, fake...@fakessh.eu a écrit : i have posted on dkimproxy-uses list > I have two domain names sign with dkimproxy > fakessh.eu and renelacroute.fr > I use the latest version available on sourceforge > in centos 5.3 > its the same bad error for the 2 areas > > We hope this service has been helpful to you. > > Authentication System: DomainKeys Identified Mail > Result: DKIM signature confirmed BAD > Description: Signature verification failed, message may > have been tampered with or corrupted > Reporting host: sendmail.net > More information: http://mipassoc.org/dkim/ > Sendmail milter: https://sourceforge.net/projects/dkim-milter/ > > Authentication System: Domain Keys > Result: DK signature confirmed BAD > Description: Signature verification failed, message may > have been tampered with or corrupted > Reporting host: sendmail.net > More information: http://antispam.yahoo.com/domainkeys > Sendmail > milter: https://sourceforge.net/projects/domainkeys-milter/ > > Authentication System: Sender ID > Result: SID data confirmed GOOD > Description: Sending host is authorized for sending domain > Reporting host: sendmail.net > More information: http://www.microsoft.com/senderid > Sendmail milter: https://sourceforge.net/projects/sid-milter/ > > Authentication System: Sender Permitted From (SPF) > Result: SPF data confirmed GOOD > Description: Sending host is authorized for sending domain > Reporting host: sendmail.net > More information: http://spf.pobox.com/ > > --- >--- ___ > dkimproxy-users mailing list > dkimproxy-us...@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/dkimproxy-users
Re: help with dkimproxy
my key is good use now http://rpms.netmindz.net/el5/SRPMS.netmindz/repoview/dkimproxy.html result idem not good Le jeudi 2 juillet 2009 17:21, Luis Daniel Lucio Quiroz a écrit : > Le jeudi 2 juillet 2009 09:31:29, fake...@fakessh.eu a écrit : > > Le jeudi 2 juillet 2009 16:23, fake...@fakessh.eu a écrit : > > i have posted on dkimproxy-uses list > > > > > I have two domain names sign with dkimproxy > > > fakessh.eu and renelacroute.fr > > > I use the latest version available on sourceforge > > > in centos 5.3 > > > its the same bad error for the 2 areas > > > > > > We hope this service has been helpful to you. > > > > > > Authentication System: DomainKeys Identified Mail > > >Result: DKIM signature confirmed BAD > > >Description: Signature verification failed, message may > > > have been tampered with or corrupted > > >Reporting host: sendmail.net > > >More information: http://mipassoc.org/dkim/ > > >Sendmail milter: > > > https://sourceforge.net/projects/dkim-milter/ > > > > > > Authentication System: Domain Keys > > >Result: DK signature confirmed BAD > > >Description: Signature verification failed, message may > > > have been tampered with or corrupted > > >Reporting host: sendmail.net > > >More information: http://antispam.yahoo.com/domainkeys > > >Sendmail > > > milter: https://sourceforge.net/projects/domainkeys-milter/ > > > > > > Authentication System: Sender ID > > >Result: SID data confirmed GOOD > > >Description: Sending host is authorized for sending > > > domain Reporting host: sendmail.net > > >More information: http://www.microsoft.com/senderid > > >Sendmail milter: > > > https://sourceforge.net/projects/sid-milter/ > > > > > > Authentication System: Sender Permitted From (SPF) > > >Result: SPF data confirmed GOOD > > >Description: Sending host is authorized for sending > > > domain Reporting host: sendmail.net > > >More information: http://spf.pobox.com/ > > > > > > --- > > >-- -- --- ___ > > > dkimproxy-users mailing list > > > dkimproxy-us...@lists.sourceforge.net > > > https://lists.sourceforge.net/lists/listinfo/dkimproxy-users > > I dond uderstand what are you asking for
Re: help with dkimproxy
Le jeudi 2 juillet 2009 20:07, fake...@fakessh.eu a écrit : > my key is good > > use now > http://rpms.netmindz.net/el5/SRPMS.netmindz/repoview/dkimproxy.html > > result idem not good > > Le jeudi 2 juillet 2009 17:21, Luis Daniel Lucio Quiroz a écrit : > > Le jeudi 2 juillet 2009 09:31:29, fake...@fakessh.eu a écrit : > > > Le jeudi 2 juillet 2009 16:23, fake...@fakessh.eu a écrit : > > > i have posted on dkimproxy-uses list > > > > > > > I have two domain names sign with dkimproxy > > > > fakessh.eu and renelacroute.fr > > > > I use the latest version available on sourceforge > > > > in centos 5.3 > > > > its the same bad error for the 2 areas > > > > > > > > We hope this service has been helpful to you. > > > > > > > > Authentication System: DomainKeys Identified Mail > > > >Result: DKIM signature confirmed BAD > > > >Description: Signature verification failed, message > > > > may have been tampered with or corrupted > > > >Reporting host: sendmail.net > > > >More information: http://mipassoc.org/dkim/ > > > >Sendmail milter: > > > > https://sourceforge.net/projects/dkim-milter/ > > > > > > > > Authentication System: Domain Keys > > > >Result: DK signature confirmed BAD > > > >Description: Signature verification failed, message > > > > may have been tampered with or corrupted > > > >Reporting host: sendmail.net > > > >More information: http://antispam.yahoo.com/domainkeys > > > >Sendmail > > > > milter: https://sourceforge.net/projects/domainkeys-milter/ > > > > > > > > Authentication System: Sender ID > > > >Result: SID data confirmed GOOD > > > >Description: Sending host is authorized for sending > > > > domain Reporting host: sendmail.net > > > >More information: http://www.microsoft.com/senderid > > > >Sendmail milter: > > > > https://sourceforge.net/projects/sid-milter/ > > > > > > > > Authentication System: Sender Permitted From (SPF) > > > >Result: SPF data confirmed GOOD > > > >Description: Sending host is authorized for sending > > > > domain Reporting host: sendmail.net > > > >More information: http://spf.pobox.com/ > > > > > > > > - > > > >-- -- -- --- ___ > > > > dkimproxy-users mailing list > > > > dkimproxy-us...@lists.sourceforge.net > > > > https://lists.sourceforge.net/lists/listinfo/dkimproxy-users > > > > I dond uderstand what are you asking for
Re: help with dkimproxy
this is not a problem of software nb : sorry for the stupid top-post, its error Le jeudi 2 juillet 2009 20:12, fake...@fakessh.eu a écrit : > Le jeudi 2 juillet 2009 20:07, fake...@fakessh.eu a écrit : > > my key is good > > > > use now > > http://rpms.netmindz.net/el5/SRPMS.netmindz/repoview/dkimproxy.html > > > > result idem not good > > > > Le jeudi 2 juillet 2009 17:21, Luis Daniel Lucio Quiroz a écrit : > > > Le jeudi 2 juillet 2009 09:31:29, fake...@fakessh.eu a écrit : > > > > Le jeudi 2 juillet 2009 16:23, fake...@fakessh.eu a écrit : > > > > i have posted on dkimproxy-uses list > > > > > > > > > I have two domain names sign with dkimproxy > > > > > fakessh.eu and renelacroute.fr > > > > > I use the latest version available on sourceforge > > > > > in centos 5.3 > > > > > its the same bad error for the 2 areas > > > > > > > > > > We hope this service has been helpful to you. > > > > > > > > > > Authentication System: DomainKeys Identified Mail > > > > >Result: DKIM signature confirmed BAD > > > > >Description: Signature verification failed, message > > > > > may have been tampered with or corrupted > > > > >Reporting host: sendmail.net > > > > >More information: http://mipassoc.org/dkim/ > > > > >Sendmail milter: > > > > > https://sourceforge.net/projects/dkim-milter/ > > > > > > > > > > Authentication System: Domain Keys > > > > >Result: DK signature confirmed BAD > > > > >Description: Signature verification failed, message > > > > > may have been tampered with or corrupted > > > > >Reporting host: sendmail.net > > > > >More information: http://antispam.yahoo.com/domainkeys > > > > >Sendmail > > > > > milter: > > > > > https://sourceforge.net/projects/domainkeys-milter/ > > > > > > > > > > Authentication System: Sender ID > > > > >Result: SID data confirmed GOOD > > > > >Description: Sending host is authorized for sending > > > > > domain Reporting host: sendmail.net > > > > >More information: http://www.microsoft.com/senderid > > > > >Sendmail milter: > > > > > https://sourceforge.net/projects/sid-milter/ > > > > > > > > > > Authentication System: Sender Permitted From (SPF) > > > > >Result: SPF data confirmed GOOD > > > > >Description: Sending host is authorized for sending > > > > > domain Reporting host: sendmail.net > > > > >More information: http://spf.pobox.com/ > > > > > > > > > > --- > > > > >-- -- -- -- --- ___ > > > > > dkimproxy-users mailing list > > > > > dkimproxy-us...@lists.sourceforge.net > > > > > https://lists.sourceforge.net/lists/listinfo/dkimproxy-users > > > > > > I dond uderstand what are you asking for
Re: help with dkimproxy
this is not a problem of software Le jeudi 2 juillet 2009 20:07, fake...@fakessh.eu a écrit : > my key is good > > use now > http://rpms.netmindz.net/el5/SRPMS.netmindz/repoview/dkimproxy.html > > result idem not good > > Le jeudi 2 juillet 2009 17:21, Luis Daniel Lucio Quiroz a écrit : > > Le jeudi 2 juillet 2009 09:31:29, fake...@fakessh.eu a écrit : > > > Le jeudi 2 juillet 2009 16:23, fake...@fakessh.eu a écrit : > > > i have posted on dkimproxy-uses list > > > > > > > I have two domain names sign with dkimproxy > > > > fakessh.eu and renelacroute.fr > > > > I use the latest version available on sourceforge > > > > in centos 5.3 > > > > its the same bad error for the 2 areas > > > > > > > > We hope this service has been helpful to you. > > > > > > > > Authentication System: DomainKeys Identified Mail > > > >Result: DKIM signature confirmed BAD > > > >Description: Signature verification failed, message > > > > may have been tampered with or corrupted > > > >Reporting host: sendmail.net > > > >More information: http://mipassoc.org/dkim/ > > > >Sendmail milter: > > > > https://sourceforge.net/projects/dkim-milter/ > > > > > > > > Authentication System: Domain Keys > > > >Result: DK signature confirmed BAD > > > >Description: Signature verification failed, message > > > > may have been tampered with or corrupted > > > >Reporting host: sendmail.net > > > >More information: http://antispam.yahoo.com/domainkeys > > > >Sendmail > > > > milter: https://sourceforge.net/projects/domainkeys-milter/ > > > > > > > > Authentication System: Sender ID > > > >Result: SID data confirmed GOOD > > > >Description: Sending host is authorized for sending > > > > domain Reporting host: sendmail.net > > > >More information: http://www.microsoft.com/senderid > > > >Sendmail milter: > > > > https://sourceforge.net/projects/sid-milter/ > > > > > > > > Authentication System: Sender Permitted From (SPF) > > > >Result: SPF data confirmed GOOD > > > >Description: Sending host is authorized for sending > > > > domain Reporting host: sendmail.net > > > >More information: http://spf.pobox.com/ > > > > > > > > - > > > >-- -- -- --- ___ > > > > dkimproxy-users mailing list > > > > dkimproxy-us...@lists.sourceforge.net > > > > https://lists.sourceforge.net/lists/listinfo/dkimproxy-users > > > > I dond uderstand what are you asking for
Re: help with dkimproxy
I returned to the stable version no differents signatures I used [swilt...@your-ab6cd29f8e ~]$ host -t txt mail._domainkey.fakessh.eu ns1.novacrea.fr Using domain server: Name: ns1.novacrea.fr Address: 94.23.59.30#53 Aliases: mail._domainkey.fakessh.eu descriptive text "k=rsa\;t=s\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCuJYJEZdlRxylIv7i71EQGPfIdt4ujLTL+/mjtUeSaIdUKdWTCNn0gxm2/4FORe3DgtZ9405WTAbE+CCYQSTxsCdufY83Xf7ejwmDAzBfrmSXVT+4afqWnEalOAh1JCNTUAVLcBnhGj6L7Q+vScPpf+3z42tsUchPgnqMQRHzY/wIDAQAB" [swilt...@your-ab6cd29f8e ~]$ host -t txt mail._domainkey.renelacroute.fr ns1.novacrea.fr Using domain server: Name: ns1.novacrea.fr Address: 94.23.59.30#53 Aliases: mail._domainkey.renelacroute.fr descriptive text "k=rsa\;t=s\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDdyy2ixk4e2jqt1NiLs8iVrGxcPL6+Y8YSkD9mCV9BtpGUxfpWa1+usgAx6eRzSulA/UCOVx+e4LV8NtZYQOUI0T1yoj1xX9L7MvtU/T22lierjqjT7guitN4/eAvmLad1qay/4JypZIS+NfHr5/Z2NK0zfAypIZ+zDNcYgUGd2wIDAQAB" [swilt...@your-ab6cd29f8e ~]$ Le samedi 4 juillet 2009 06:35, vous avez écrit : > "fake...@fakessh.eu" writes: > > I have two domain names sign with dkimproxy > > fakessh.eu and renelacroute.fr > > this is not a problem of software > > [...] > > You are signing [fakessh.eu]'s signature with > [renelacroute.fr]'s private key, i guess. > That's why verifier.port25.com's reflector is > always complaining about your signatures. > > Please, double check your conf files(e.g., > dkimproxy_out.conf, sender_map.conf, ...). > > Meanwhile, Google also can be your good friend > as signature's verifier. See Gmail's header in > detail. There is some line on DKIM-Signature state. > > Sincerely,
Re: help with dkimproxy
I have correctly configure 2 domain names thanks for all peace for all nb : "Buddha" peace themselve Le samedi 4 juillet 2009 06:35, Byung-Hee HWANG a écrit : > "fake...@fakessh.eu" writes: > > I have two domain names sign with dkimproxy > > fakessh.eu and renelacroute.fr > > this is not a problem of software > > [...] > > You are signing [fakessh.eu]'s signature with > [renelacroute.fr]'s private key, i guess. > That's why verifier.port25.com's reflector is > always complaining about your signatures. > > Please, double check your conf files(e.g., > dkimproxy_out.conf, sender_map.conf, ...). > > Meanwhile, Google also can be your good friend > as signature's verifier. See Gmail's header in > detail. There is some line on DKIM-Signature state. > > Sincerely,
sasl2auth how to
hi all hi list m you can specify how to configure sasl2auth for anything other than authentication PLAIN updated my postfix to postfix-2.5.1-1.mysql.sasl2.vda.rhel5.i386.rpm thanks for all your feedbacks nb : "Buddha" peace themselve
Re: sasl2auth how to
I applied some modifications to tls but I do not make a relay for ISP provider mail I have a real hostname I do not see what I could use mysql, I have real users some time ago, I was trying to walk without success http://www.postfix.org/SASL_README.html I know that smtpd.conf of sasl2 does not contain all the information necessary to the good functioning of sasl2authd. it often depends of OS Le dimanche 5 juillet 2009 20:18, Byung-Hee HWANG a écrit : > "fake...@fakessh.eu" writes: > > hi all > > hi list > > > > > > m you can specify how to configure sasl2auth > > for anything other than authentication PLAIN > > updated my postfix to postfix-2.5.1-1.mysql.sasl2.vda.rhel5.i386.rpm > > > > thanks for all your feedbacks > > > > nb : "Buddha" peace themselve > > If i understood your words correctly, you need this paper: > http://www.postfix.org/SASL_README.html > > Google also can be good friend as SASL Auth over TLS. Please have a look > this paper: http://souptonuts.sourceforge.net/postfix_tutorial.html > > Sincerely,
how to have amavisd-new dkimproxy and implemented in master.cf and main.cf
hi list hi all how to have amavisd-new dkimproxy , and implemented in master.cf and main.cf "Buddha" peace themselve
[SOLVED]Re: how to have amavisd-new dkimproxy and implemented in master.cf and main.cf
Le lundi 10 août 2009 17:47, Patrick Ben Koetter a écrit : > * fake...@fakessh.eu : > > how to have amavisd-new dkimproxy , and implemented > > in master.cf and main.cf > > Start here: > <http://www.ijs.si/software/amavisd/README.postfix.html> > > p...@rick google est ton ami "Buddha" peace themselve
Re: ptr records set to localhost spammers
"Buddha" peace themselve
that he spent the other day with the attack on the ml
double bouncing for killer
a post on our list, a UBE, I said that I had to send an email with my DK DKIM
signatures
They spoke on TV in the evening, the newspaper that the attack came from
france
I do not mention the great person company has been hosting French attack
my RPS has my key was' down 'for several days
Le lundi 10 août 2009 21:03, mouss a écrit :
> Robert Schetterer a écrit :
> > Hi,
> > some nets have
> > set their ptr records to localhost
> > this causes problems to several mailservers
> > i see no problems at mine but
> > just asked to clear
> >
> > dig -x 123.27.178.4
> >
> > ; <<>> DiG 9.3.5-P1 <<>> -x 123.27.178.4
> > ;; global options: printcmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46689
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
> >
> > ;; QUESTION SECTION:
> > ;4.178.27.123.in-addr.arpa. IN PTR
> >
> > ;; ANSWER SECTION:
> > 4.178.27.123.in-addr.arpa. 86266 IN PTR localhost.
> >
> > i only get warnings ( like ever )
> >
> > Aug 6 15:04:31 mxback postfix/smtpd[30131]: warning: 123.27.178.4:
> > address not listed for hostname localhost
> > Aug 6 15:04:31 mxback postfix/smtpd[30131]: connect from
> > unknown[123.27.178.4]
> >
> >
> > is this a hard coded match ( ptrs to localhost are resolved unknown? )
> > so i.e reject_unknown_reverse_client_hostname
> > will reject it ever ?
> >
> > after all this was warned by german heise pc magazin
> > http://www.heise.de/newsticker/Namens-Trick-oeffnet-Mailserver--/meldung/
> >143123
>
> I use somthing like this:
>
> smtpd_recipient_restrictions =
> ...
> check_reverse_client_hostname_access ${hash}/access_host
> check_helo_access ${hash}/access_host
> ...
>
> to reject things like:
>
> localhost
> unreachable
> .localhost
> .arpa
> .invalid
> .inv
> .test
> .local
> .lokaal
> .localdomain
> .lan
> .private
> .root
> .adsl
> .firewall
> .speedportw700v
> .belkin
> .kornet
> ...
>
>
> be them found in helo or in the PTR. I also use a pcre version to reject
> "." as PTR (among other things).
question about rfc
Hi all Hi list Following a crash of postfix, I posed the following question: email for emission it takes a field A on the dns server ? SL 'Buddha' peace themselve
Re: can't get postfix to work with amavisd-new
hi all hi list amavisd encounter many problems with selinux as described in the centos wiki. correction proposed by the selinux centos wiki is obsolete SL 'Buddha' peace themselve Le mardi 22 septembre 2009 21:55, Noel Jones a écrit : > On 9/22/2009 2:08 PM, Geoff Sweet wrote: > > Greetings everyone, > > I'm transitioning a lot of my mail servers from Qmail to Postfix and > > thus far it has gone very well. I got Postfix 2.3 (from the CentOS 5.3) > > up and running in a flash and then even got it all running with MySQL > > virtual users! My hats off to the Postfix devs. > > > > However now I want to incorporate a few things like ClamAV, and > > Spamassassin and it appears that Amavisd-new is the preferred way to do > > it. I installed it out of the RPMForge repositories and Spamassassin, > > ClamAV, and amavisd-new all seem to be running correctly. If I telnet > > to port 10024 on localhost I can successfully see the Amavisd-new > > prompts and commands. > > Welcome to postfix! > > Yes, amavisd-new is a popular and reliable way to integrate > SpamAssassin and clamav with postfix. > > Be aware that postfix 2.3 is getting rather long in the tooth. > The current patchlevel for the 2.3 series is 2.3.19. While > postfix 2.3.19 is quite reliable, it's lacking tons of useful > features introduced in newer versions. > > I think it's better to build a new server with the current > stable version rather than something already outdated; the > current postfix stable version is 2.6.5. > > > When I startup Postfix and attempt to send mail through it, I get this > > error in the maillog: > > > > Sep 18 17:02:03 mail postfix/qmgr[16473]: warning: connect to transport > > scan: Connection refused > > Looks like a leftover from a previous configuration when you > were using content_filter = scan:... > > Fix this by requeueing all mail with > postsuper -r ALL > > > Sep 18 17:02:03 mail postfix/cleanup[16474]: fatal: unsupported > > dictionary type: mysql > > Looks as if postfix doesn't have mysql support compiled in. > type "postconf -m" to see what map types your version of > postfix supports. > > > Sep 18 17:02:40 mail postfix/smtpd[16475]: warning: dict_nis_init: NIS > > domain name not set - NIS lookups disabled > > I assume you don't use NIS. You can get rid of this harmless > warning by setting in main.cf: > alias_maps = hash:/etc/aliases > > > Below are my main.cf and master.cf. As I am relatively new to this > > we strongly prefer "postconf -n" output as explained in the > list welcome message. > > If you have more questions, see: > http://www.postfix.org/DEBUG_README.html#mail > >-- Noel Jones
Re: Need help with configuration ...
google provide many documentation for differents shemas for mysql table nb : 'google est ton ami' Le vendredi 9 octobre 2009 20:42, Rene Bartsch a écrit : > > Rene Bartsch wrote: > >>> Brian Evans - Postfix List wrote: > Rene Bartsch wrote: > >> Rene Bartsch wrote: > >>> Hi, > >>> I'm running the combination of Postfix, Postfix-GLD (Greylisting) > >>> and DBMail(MDA) as a > > > > stand-alone > > > >>> Internet host on a Ubuntu-9.04 system. The file 'sql-recipients.cf' > >>> provides the MySQL access > > > > information for the list of mail-aliases in DBMail and > > 'sql-domains.cf' provides the list of > >> > >> virtual domains extracted from the mail-aliases. > >> > >> According to your config below, you are trying to use local as > >> virtual. Don't do this. > > > > According to http://www.dbmail.org/dokuwiki/doku.php/setup_postfix I > > shall do this. > > This documentation tries to override the Address Classes that Postfix > has defined in the > >> > >> ADDRESS_CLASS_README. > >> > No guarantees are given with unsupported configurations. > > > If I use virtual as you proposed, remote clients can send mail to > > postfix, but postfix doesn't > >> > >> relay mail from local (loopback or private network) users to the > >> internet. > >> > > (Message not sent. Server replied: > >Action not performed: mailbox not available > >550 5.1.1 : Recipient address rejected: > > User unknown in virtual mailbox table > >>> > >>> In addition, why are you accepting mail locally as postfix.org? > >> > >> I do NOT ACCEPT mail as "postfix.org". That error occurrs when I try to > >> SEND MAIL to the internet > >> (in this case to the postfix ML). > >> > >> With the following configuration I can receive mail from the internet > >> with DBMAIL and send mail from local hosts to DBMAIL accounts, but I > >> CANNOT SEND MAIL TO THE INTERNET getting the error: "550 5.1.1 > >> $recipient: Recipient address rejected: User unknown in virtual mailbox > >> table" > >> > >> snip > >> --- > >> > >> append_dot_mydomain = no > >> biff = no > >> config_directory = /etc/postfix > >> mail_owner = postfix > >> mynetworks = 127.0.0.0/8, 10.214.224.0/24, 10.214.234.0/24 > >> myorigin = $mydomain > >> readme_directory = no > >> recipient_delimiter = + > >> relay_domains = > >> setgid_group = postdrop > >> smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) > >> virtual_mailbox_domains = > >> mysql:/etc/postfix/sql-virtual_mailbox_domains.cf virtual_mailbox_maps = > >> mysql:/etc/postfix/sql-virtual_mailbox_maps.cf virtual_transport = > >> dbmail-lmtp:127.0.0.1:24 > >> > >> snap > >> --- > >> > >> When I disable the virtual* entries I can send mail fine, but cannot > >> receive mail, of course. > >> > >> I used "postmap -q" to check the MySQL results: > >> > >> "mysql:/etc/postfix/sql-virtual_mailbox_domains.cf" returns a > >> comma-separated list of the domains > > > > I hope you are not trying to list all domains with every query. > > For virtual_(alias|mailbox)_domains or mydestination using a mysql map, > > Postfix expect to give a domain to a query . > > If *any* result is returned, the return value is ignored and the lookup > > is considered a success. > > > > This can be where Postfix is confusing all domains to be relayed locally. > > > > An example: > > query = SELECT 1 from domains where domain='%s' > > You're my hero! ;) > > After changing the MySQL-query to return '1' or nothing in > "mysql:/etc/postfix/sql-virtual_mailbox_domains.cf" it works like a charm! > :) > > Is there any reason why Postfix accepts the results without a error message > and behaves completely different? > > Best regards, > > Renne :)
Re: If you wanna have some fun...
This computer seems to address Brin Craig this infects Le samedi 14 novembre 2009 21:59, Evan Platt a écrit : > At 12:53 PM 11/14/2009, you wrote: > >http://www.SPAM.SPAM.host.sk/BWpzYBwiK2.html > > As if the .sk isn't enough warning, don't bother clicking on the link. > > Someoene's either spamming, or got their computer infested.
a test user account with postfix
hi all
hi list
hello, I carry on my installation of postfix, a test user account in which the
test user account I reserve the right to grant or not the test account
I would like to do safely
I do not find myself on the black list RBLs after 24 hours
I quote this message on the list postfix
Re: reject_sender_login_mismatch for client certificates
De :
"Jan P. Kessler"
À :
Florian Wagner
CC :
postfix-users@postfix.org
Date :
2009-06-08 14:58
that talks about this software
postfwd (a policy daemon found at http://www.postfwd.org) will do this
with a ruleset like:
I quote the entirety of the message to request special assistance I seek
&&TLS_DENY { REJECT wrong tls fingerprint for sender '$$sender'; };
sender==...@domain.tld ; ccert_fingerprint==!!(AA:BB:CC:DD:EE) ;
action=&&TLS_DENY
sender==al...@domain.tld ; ccert_fingerprint==!!(EE:DD:CC:BB:AA) ;
action=&&TLS_DENY
...
how do we know for the ccert_fingerprint. his and those of the tester
I have used CentOS utility "gen-key hostname" to generate the key pair
I do not know if this software is the tool I need for my test account
and help me I do not know how to get to me and the tester, the
ccert_fingerprint
and please help me how to walk properly this software
thanks all
thanks for all your feedbacks
SL
Re: Sender ID Filtering
Le dimanche 22 novembre 2009 09:49, Sahil Tandon a écrit : > On Sat, 21 Nov 2009, Roman Gelfand wrote: > > Could somebody recommend software that filters based on sender id > > reputation. I am refering to the sender id that microsoft uses as > > opposed to SPF. > > Some people use sid-milter, which implements SPF *and* Sender-ID. me too I use sid-milter and spf successfully but we must use the stable version of sid-milter sid-milter installed simply and without problems on CentOS 5.4 thanks ml for everything you taught me
Re: Sender ID Filtering
Hi older versions do not work well with Postfix, use the stable version, and all will be well https://sourceforge.net/projects/sid-milter/ Le dimanche 22 novembre 2009 12:14, Roman Gelfand a écrit : > It is interesting that you say this. I use sid-milter version 1.0,0. > I use postfix for mail gateway. My backend mail server exchange 2007 > with anti spam activated. I find that often when I get a response > NONE of PASS using sid-milter, I get FAIL on exchange server. Is my > sid-milter an old version? > > Thanks again > > On Sun, Nov 22, 2009 at 5:05 AM, fake...@fakessh.eu wrote: > > Le dimanche 22 novembre 2009 09:49, Sahil Tandon a écrit : > >> On Sat, 21 Nov 2009, Roman Gelfand wrote: > >> > Could somebody recommend software that filters based on sender id > >> > reputation. I am refering to the sender id that microsoft uses as > >> > opposed to SPF. > >> > >> Some people use sid-milter, which implements SPF *and* Sender-ID. > > > > me too I use sid-milter and spf successfully > > > > but we must use the stable version of sid-milter > > > > sid-milter installed simply and without problems on CentOS 5.4 > > > > > > thanks ml > > for everything you taught me
Re: valid checkers for POSTFIX/DKIM/DOMAINKEYS
Le mercredi 25 novembre 2009 03:55, Israel Garcia a écrit : > Hi > > I'm really sorry if it's OT but I'm having problems verifying my setup > of postfix/dkim/domainkeys. I've found some dkim/domainkeys online > checkers, one told me dkim/domainkeys valid others checkers not. When > sending the same test email to Google say it has domainkeys/dkim > valid, but yahoo doesn't. > > Which dkim/domain cheker is telling me the truth? > is there any official dkim/domainkeys checker? > > Also, Where can I find some good, new, tested guide to setup > postfix/dkim/domainkeys? > > NOTE: I don't use amavisd or any other mailscanner. My setup now is > simple, postfix, dkim-filter and dk-filter running on debian. > > thanks much! Hi there is autoresponders sa-t...@sendmail.net check-a...@verifier.port25.com check-au...@verifier.port25.com they respect the norms and standards
