Re: Mac OS X 10.5.5 postfix security issue

2008-10-17 Thread Jim Wright
On Oct 17, 2008, at 1:47 PM, Larry Stone wrote: On Fri, 17 Oct 2008, Jim Wright wrote: If you have compiled your own version of Postfix, this update will overwrite it. Be prepared to reinstall your own version, or at minimum restore any configuration files you've changed from the default

Re: Finally blocking some spam

2008-10-17 Thread Jorey Bump
Joey wrote, at 10/17/2008 09:14 PM: >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] >> On Behalf Of j debert >> Sent: Thursday, October 16, 2008 11:26 AM >> To: postfix-users@postfix.org >> Subject: Re: Finally blocking some spam > >> That's still too simple

Re: About command on virtual interface

2008-10-17 Thread Barney Desmond
Stephen Liu wrote: > Could you please shed me some light on running following commands:- Well... what about them? > 1) > hostname - xen02.satimis.com (guest running on Xen box) > > postconf -e 'myhostname = virtual.xen02.satimis.com' > postconf -e 'mydestination = virtual.xen02.satimis.com, loca

About command on virtual interface

2008-10-17 Thread Stephen Liu
Hi folks, Debian Etch Postfix 2.3.8 (on a virtual interface) Could you please shed me some light on running following commands:- 1) hostname - xen02.satimis.com (guest running on Xen box) postconf -e 'myhostname = virtual.xen02.satimis.com' postconf -e 'mydestination = virtual.xen02.satimis.

RE: Finally blocking some spam

2008-10-17 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of j debert > Sent: Thursday, October 16, 2008 11:26 AM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Joey さんは書きました:

Re: Masquerade domains and sender_canonical_maps

2008-10-17 Thread Noel Jones
Camron W. Fox wrote: Victor Duchovni wrote: On Thu, Oct 16, 2008 at 01:05:06PM -1000, Camron W. Fox wrote: Alle, We have the current setup under Postfix 2.3.3: masquerade_domains = AAA.BBB.org, BBB.org, AAACCC.org, AAA.DDD.ac.jp sender_canonical_maps=hash:/etc/postfix/canonical /etc/po

Re: Masquerade domains and sender_canonical_maps

2008-10-17 Thread Camron W. Fox
Victor Duchovni wrote: On Thu, Oct 16, 2008 at 01:05:06PM -1000, Camron W. Fox wrote: Alle, We have the current setup under Postfix 2.3.3: masquerade_domains = AAA.BBB.org, BBB.org, AAACCC.org, AAA.DDD.ac.jp sender_canonical_maps=hash:/etc/postfix/canonical /etc/postfix/canonical:

Re: R: R: R: read timeout on cleanup socket on two different machines

2008-10-17 Thread Victor Duchovni
On Fri, Oct 17, 2008 at 12:46:13PM +0200, Luigi Iotti wrote: > > > Two seconds later we have 46 bytes of data from the sender. > > > > Or is window scaling in effect? And perhaps an edge firewall at the > > sender's edge system that fails to take window scaling into account? > > > > We'd need to

Re: Mac OS X 10.5.5 postfix security issue

2008-10-17 Thread Larry Stone
On Fri, 17 Oct 2008, Wieste Venema wrote: On MAC client machines, Postfix runs only briefly when a user submits mail. Apparently, Apple's client configuration runs an SMTP server that receives mail from the network. This client configuration is subject to the same rules as any Postfix installat

Re: active queue fluctuation when not enough free memory

2008-10-17 Thread Victor Duchovni
On Fri, Oct 17, 2008 at 01:19:17PM -0400, Ofer Inbar wrote: > Wietse Venema <[EMAIL PROTECTED]> wrote: > > Ofer Inbar: > > > Victor Duchovni <[EMAIL PROTECTED]> wrote: > > > > Your queue manager is crashing. > > > [...] > > > > Queue manager re-starts. > > > > > > Is that a bug? Should it handle

Re: active queue fluctuation when not enough free memory

2008-10-17 Thread Wietse Venema
Ofer Inbar: > Wietse Venema <[EMAIL PROTECTED]> wrote: > > Ofer Inbar: > > > Victor Duchovni <[EMAIL PROTECTED]> wrote: > > > > Your queue manager is crashing. > > > [...] > > > > Queue manager re-starts. > > > > > > Is that a bug? Should it handle this situation more gracefully? > > > > No, you

Re: Mac OS X 10.5.5 postfix security issue

2008-10-17 Thread Jim Wright
On Oct 17, 2008, at 12:03 PM, Larry Stone wrote: I rejoined the list earlier this week thinking I might see some mention of this but as I haven't, here goes. I run Postfix on my Macintosh running Mac OS X 10.5.5 to serve mail for my domain. This is the standard (client) version of OS X, not

Re: How to block dsn and counties.

2008-10-17 Thread Payne
Noel Jones wrote: Payne wrote: Hi, I need to know a way I can block dsn. Someone is out there spoofing my domain. I am about to hopefully stop some of that with setting up spf signture for my domain. But I like a way to block the dsn that are flooding my network. I really like a way to find

Re: active queue fluctuation when not enough free memory

2008-10-17 Thread Ofer Inbar
Wietse Venema <[EMAIL PROTECTED]> wrote: > Ofer Inbar: > > Victor Duchovni <[EMAIL PROTECTED]> wrote: > > > Your queue manager is crashing. > > [...] > > > Queue manager re-starts. > > > > Is that a bug? Should it handle this situation more gracefully? > > No, you should not restart the queue ma

Re: active queue fluctuation when not enough free memory

2008-10-17 Thread Wietse Venema
Ofer Inbar: > Victor Duchovni <[EMAIL PROTECTED]> wrote: > > Your queue manager is crashing. > [...] > > Queue manager re-starts. > > Is that a bug? Should it handle this situation more gracefully? No, you should not restart the queue manager willy-nilly. Wietse

Re: Mac OS X 10.5.5 postfix security issue

2008-10-17 Thread Wietse Venema
On MAC client machines, Postfix runs only briefly when a user submits mail. Apparently, Apple's client configuration runs an SMTP server that receives mail from the network. This client configuration is subject to the same rules as any Postfix installation, i.e. you have to work hard to turn it in

Mac OS X 10.5.5 postfix security issue

2008-10-17 Thread Larry Stone
I rejoined the list earlier this week thinking I might see some mention of this but as I haven't, here goes. I run Postfix on my Macintosh running Mac OS X 10.5.5 to serve mail for my domain. This is the standard (client) version of OS X, not the server version. Last week, Apple issued a secur

Re: active queue fluctuation when not enough free memory

2008-10-17 Thread Ofer Inbar
Victor Duchovni <[EMAIL PROTECTED]> wrote: > Your queue manager is crashing. [...] > Queue manager re-starts. Is that a bug? Should it handle this situation more gracefully? Now, a more interesting question: What is the incremental memory cost of each smtp process? According to pmap -d, the s

Re: active queue fluctuation when not enough free memory

2008-10-17 Thread Victor Duchovni
On Fri, Oct 17, 2008 at 11:16:44AM -0400, Ofer Inbar wrote: > We recently observed something strange: After doubling the number of > smtp processes in master.cf and restarting, the size of the active > queue started fluctuating over time in almost exact inverse of the > incoming queue. I'm using

active queue fluctuation when not enough free memory

2008-10-17 Thread Ofer Inbar
We recently observed something strange: After doubling the number of smtp processes in master.cf and restarting, the size of the active queue started fluctuating over time in almost exact inverse of the incoming queue. I'm using Ganglia to track the sizes of the queues on a graph, and the queue gr

Re: Unable to attach disclaimer - permission denied

2008-10-17 Thread Barney Desmond
Paul Cocker wrote: > Thanks for the pointer, but I think I'll try and solve the issue. Once > the server goes live it will be next to impossible to ever switch > SELinux back on, while it's undergoing build I can happily try and > figure this stuff out and better understand it for next time. A cra

Re: relay and sending

2008-10-17 Thread mouss
Please do not top post. put your replies after the text you reply to (like I'm doing below). Roland de Lepper a écrit : > /var/mail is a symlinks to /var/spool/mail. > > Ok, I managed to get the restrictions working so only users from a > specific domain are able to relay. > I specified a file (n

Re: Mail server can't receive mail but can send mail

2008-10-17 Thread Wietse Venema
Stephen Liu: > Oct 17 11:58:26 xen01 postfix/smtp[1717]: 8BAEA205A8: > to=<[EMAIL PROTECTED]>, relay=mail.satimis.com[220.232.213.178]:25, > delay=1.2, delays=1.1/0.01/0.09/0, dsn=5.4.6, status=bounced (mail for > mail.satimis.com loops back to myself) If this must be delivered on xen01, see http:

Re: how to strip tab character from subject line using postfix

2008-10-17 Thread Wietse Venema
Justin McAleer: > Victor Duchovni wrote: > > On Thu, Oct 16, 2008 at 07:28:57PM +0300, [EMAIL PROTECTED] wrote: > > > > Trying to index "pcre" tables. Don't do that. > > Would it be worth making postmap notice when someone is trying to index > one of the non-indexed table types, and give a more s

Re: Postfix - Procmail -Cyrus IMAP

2008-10-17 Thread Björn Puttmann
Am 17.10.2008 um 14:28 schrieb Reinaldo de Carvalho: I wrote a polycd-daemon (python) to check quota on cyrus using imap protocol (as cyrus admin user). This policy-daemon search on ldap to check if email is a alias, to get and retrive quota from real user. This program is not complete to pub

Re: Mail server can't receive mail but can send mail

2008-10-17 Thread Stephen Liu
--- mouss <[EMAIL PROTECTED]> wrote: - snip - > > I think my problem is on virtualization networking. Unfortunately > I > > haven't figure out how to solve it. > > > > > > This is a Xen box with only one external IP, 220.232.213.178 > connected > > to the Host. The network setup is as follo

Re: Postfix - Procmail -Cyrus IMAP

2008-10-17 Thread Reinaldo de Carvalho
> > Is there any way to prevent postfix from calling mailbox_transport > for an account that is over quota and instead produce a bounce message > notifying the sender of the fact that the mail could not be deliverd? > > If not, is there way to make sure that procmail will not end up bouncing > mess

Re: how to strip tab character from subject line using postfix

2008-10-17 Thread Justin McAleer
Victor Duchovni wrote: On Thu, Oct 16, 2008 at 07:28:57PM +0300, [EMAIL PROTECTED] wrote: Trying to index "pcre" tables. Don't do that. Would it be worth making postmap notice when someone is trying to index one of the non-indexed table types, and give a more specific warning about bein

RE: Unable to attach disclaimer - permission denied

2008-10-17 Thread Paul Cocker
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: 17 October 2008 12:33 > To: Paul Cocker > Cc: postfix users list > Subject: RE: Unable to attach disclaimer - permission denied > > > > Oct 17 11:29:07 server kernel: audit(1224239347.861:12): > avc: denie

RE: Unable to attach disclaimer - permission denied

2008-10-17 Thread eerov
Oct 17 11:29:07 server kernel: audit(1224239347.861:12): avc: denied { execute } for pid=3055 comm="pipe" name="disclaimer" dev=dm-0 ino=10223661 scontext=system_u:system_r:postfix_pipe_t:s0 tcontext=user_u:object_r:postfix_etc_t:s0 tclass=file Oct 17 11:29:07 server kernel: audit(1224239347

RE: Unable to attach disclaimer - permission denied

2008-10-17 Thread Paul Cocker
> -Original Message- > From: Wietse Venema [mailto:[EMAIL PROTECTED] > Sent: 17 October 2008 11:48 > To: Paul Cocker > Cc: postfix users list > Subject: Re: Unable to attach disclaimer - permission denied > > Paul Cocker: > > I'm trying to setup disclaimers for e-mails using altermime. I'

Re: Unable to attach disclaimer - permission denied

2008-10-17 Thread Wietse Venema
Paul Cocker: > I'm trying to setup disclaimers for e-mails using altermime. I've found > a guide - > http://www.howtoforge.com/add-disclaimers-to-outgoing-emails-with-alterm > ime-postfix-debian-etch, and have set everything up accordingly. > > I've added the following lines to master.cf > > smtp

R: R: R: read timeout on cleanup socket on two different machines

2008-10-17 Thread Luigi Iotti
> -Messaggio originale- > Da: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Per conto di Victor Duchovni > Inviato: venerdì 17 ottobre 2008 3.26 > Cc: postfix-users@postfix.org > Oggetto: Re: R: R: read timeout on cleanup socket on two > different machines > > > On Thu, Oct 16, 2008 at

Unable to attach disclaimer - permission denied

2008-10-17 Thread Paul Cocker
I'm trying to setup disclaimers for e-mails using altermime. I've found a guide - http://www.howtoforge.com/add-disclaimers-to-outgoing-emails-with-alterm ime-postfix-debian-etch, and have set everything up accordingly. I've added the following lines to master.cf smtp inet n - n

R: R: R: read timeout on cleanup socket on two different machines

2008-10-17 Thread Luigi Iotti
> Da: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Per conto di Wietse Venema > Luigi Iotti: > > 02:11:15.006582 IP (tos 0x0, ttl 64, id 43044, offset 0, > flags [DF], proto: > > TCP (6), length: 52) 192.168.0.100.smtp > > squid-cache.org.54737: ., cksum > > 0x1d47 (correct), 134:134(0) ack 2

Re: relay and sending

2008-10-17 Thread Roland de Lepper
/var/mail is a symlinks to /var/spool/mail. Ok, I managed to get the restrictions working so only users from a specific domain are able to relay. I specified a file (network_table) with CDIR notation e.g. 130.146.105.0/24 and specifyed my networks = /etc/postfix/network_table. This works only for

Re: relay and sending

2008-10-17 Thread mouss
Roland de Lepper wrote: I'm trying to migrate from a sendmail installation to postfix, but i'm facing some difficulties. setup: 1. mail will be stored on an automount /var/spool/ in mbox format you mean /var/spool/mail/? If you have this directory on your system, then it's probably the defau