Re[7]: postfix 2.5 vmail hosting - Resource temporarily unavailable + mail transport unavailable - SOLVED

2008-11-03 Thread Éliás Tamás
Udv / Greetings! I did not have sysctl compiled in the kernel. that one caused the problem. (the old .config become incmpatible with the new one and I havent chacked is all options are in place) I don't know what the affect of sysctl to postfix, but definately has. Sunday, November 2, 2008, 3:34:

Re: Avoiding "cool-off" retry delay for some domains

2008-11-03 Thread Victor Duchovni
On Mon, Nov 03, 2008 at 05:56:48PM -0500, Terry Carmen wrote: > >The destination system is not Postfix. The sending system is experiencing > >connection problems. We don't know anything about configured concurrency > >limits, volumes, ... the OP has provided only minimal information. > > Sorry, I

Re: Avoiding "cool-off" retry delay for some domains

2008-11-03 Thread Terry Carmen
Victor Duchovni wrote: Is there any chance you could get them to try installing something like fail2ban, which can block connections from IPs that are doing the dictionary attacks? Trying to fix postfix to handle a DOS attack would seem to be more difficult than preventing it in the first pla

Re: mailboxes and aliases for an address

2008-11-03 Thread ML
Le 3 nov. 08 à 20:24, Victor Duchovni a écrit : On Mon, Nov 03, 2008 at 08:12:50PM +0100, Nicolas Letellier wrote: you need both redirect (to other alias and to mailbox) in virtual_alias_maps, reading your postconf i would suggest the following lines : [EMAIL PROTECTED] [EMAIL PROTECTE

Re: Avoiding "cool-off" retry delay for some domains

2008-11-03 Thread Victor Duchovni
On Mon, Nov 03, 2008 at 04:33:47PM -0500, Terry Carmen wrote: > Is there any chance you could get them to try installing something like > fail2ban, which can block connections from IPs that are doing the > dictionary attacks? > > Trying to fix postfix to handle a DOS attack would seem to be mor

Re: Avoiding "cool-off" retry delay for some domains

2008-11-03 Thread Terry Carmen
Vintinner, M. Scott wrote: One of our very important clients (a major bank), is having ongoing problems with denial-of-service style dictionary SPAM attacks. Their anti-spam/firewall teams are slow to respond to these outbreaks, so there may be periods of several hours where we will get frequen

Re: Check MX entry before virtual domains maps

2008-11-03 Thread Jorey Bump
M. wrote, at 11/03/2008 03:41 PM: > On Mon, 2008-11-03 at 15:26 -0500, Jorey Bump wrote: >> Although checking the MX record before provisioning would provide the >> ultimate verification, it would expose the domain to the possibility of >> lost mail, since it requires the customer to change the MX

Re: Check MX entry before virtual domains maps

2008-11-03 Thread Wietse Venema
M.: > On Mon, 2008-11-03 at 15:26 -0500, Jorey Bump wrote: > > Although checking the MX record before provisioning would provide the > > ultimate verification, it would expose the domain to the possibility of > > lost mail, since it requires the customer to change the MX before the > > destination

Re: Check MX entry before virtual domains maps

2008-11-03 Thread Victor Duchovni
On Mon, Nov 03, 2008 at 09:41:17PM +0100, M. wrote: > On Mon, 2008-11-03 at 15:26 -0500, Jorey Bump wrote: > > Although checking the MX record before provisioning would provide the > > ultimate verification, it would expose the domain to the possibility of > > lost mail, since it requires the cust

Re: Check MX entry before virtual domains maps

2008-11-03 Thread M.
On Mon, 2008-11-03 at 15:26 -0500, Jorey Bump wrote: > Although checking the MX record before provisioning would provide the > ultimate verification, it would expose the domain to the possibility of > lost mail, since it requires the customer to change the MX before the > destination is ready to ac

Re: Check MX entry before virtual domains maps

2008-11-03 Thread Victor Duchovni
On Mon, Nov 03, 2008 at 03:26:20PM -0500, Jorey Bump wrote: > Although checking the MX record before provisioning would provide the > ultimate verification, it would expose the domain to the possibility of > lost mail, since it requires the customer to change the MX before the > destination is rea

Re: Check MX entry before virtual domains maps

2008-11-03 Thread Jorey Bump
Wietse Venema wrote, at 11/03/2008 03:06 PM: > M.: >> On Mon, 2008-11-03 at 19:32 +0100, mouss wrote: >>> and the problem is? If they "control the domain", then you have no problem! >> OK, I will try to explain that by example: >> >> 0. user buys domain mydomain.com >> >> 1. user adds mx record mai

Re: Check MX entry before virtual domains maps

2008-11-03 Thread mouss
M. wrote: On Mon, 2008-11-03 at 19:32 +0100, mouss wrote: and the problem is? If they "control the domain", then you have no problem! OK, I will try to explain that by example: 0. user buys domain mydomain.com 1. user adds mx record mailserver.com to his domain 2. user adds (by perl script)

Re: Avoiding "cool-off" retry delay for some domains

2008-11-03 Thread Victor Duchovni
On Mon, Nov 03, 2008 at 12:02:59PM -0800, Jay Chandler wrote: > > On Nov 3, 2008, at 10:32 AM, Victor Duchovni wrote: > > > > >smtp-finger: Connected to wec-imail1.wachovia.com[169.200.91.91]:25 > >smtp-finger: < 220 wec-imail1.wachovia.com ESMTP Ready. > >smtp-finger: > EHLO hqmtaint02.ms.com >

Re: Check MX entry before virtual domains maps

2008-11-03 Thread Wietse Venema
M.: > On Mon, 2008-11-03 at 19:32 +0100, mouss wrote: > > and the problem is? If they "control the domain", then you have no problem! > > OK, I will try to explain that by example: > > 0. user buys domain mydomain.com > > 1. user adds mx record mailserver.com to his domain > > 2. user adds (by

Re: Avoiding "cool-off" retry delay for some domains

2008-11-03 Thread Jay Chandler
On Nov 3, 2008, at 10:32 AM, Victor Duchovni wrote: smtp-finger: Connected to wec-imail1.wachovia.com[169.200.91.91]:25 smtp-finger: < 220 wec-imail1.wachovia.com ESMTP Ready. smtp-finger: > EHLO hqmtaint02.ms.com smtp-finger: < 250-wec-imail1.wachovia.com Hello hqmtaint02.ms.com [205.228.53

Re: mailboxes and aliases for an address

2008-11-03 Thread Victor Duchovni
On Mon, Nov 03, 2008 at 08:12:50PM +0100, Nicolas Letellier wrote: > > you need both redirect (to other alias and to mailbox) in > > virtual_alias_maps, reading your postconf i would suggest the > > following lines : > > > > [EMAIL PROTECTED] [EMAIL PROTECTED] > > [EMAIL PROTECTED] [EMAIL

Re: Check MX entry before virtual domains maps

2008-11-03 Thread Jorey Bump
M. wrote, at 11/03/2008 01:51 PM: > 4. user can add *any* domain he wants to my postfix's virtual domains > maps by perl script. If that particular domain is listed in virtual > domains maps postfix will not check MX record. I want to avoid it. I > need to force postfix to use DNS before checking

Re: mailboxes and aliases for an address

2008-11-03 Thread Nicolas Letellier
On Mon, 3 Nov 2008 12:12:35 +0100 ML <[EMAIL PROTECTED]> wrote: > > Le 3 nov. 08 à 12:02, Nicolas Letellier a écrit : > > > Hello. > > > > I would like to have this possibility in postfix : > > > > I have [EMAIL PROTECTED] It's a mailbox (pop or imap), and it's TOO > > an alias (to [EMAIL PROT

Re: Check MX entry before virtual domains maps

2008-11-03 Thread M.
On Mon, 2008-11-03 at 19:32 +0100, mouss wrote: > and the problem is? If they "control the domain", then you have no problem! OK, I will try to explain that by example: 0. user buys domain mydomain.com 1. user adds mx record mailserver.com to his domain 2. user adds (by perl script) entry to vi

Re: Avoiding "cool-off" retry delay for some domains

2008-11-03 Thread Victor Duchovni
On Fri, Oct 31, 2008 at 06:44:50PM -0400, Vintinner, M. Scott wrote: > The result is that some really unlucky messages end up being delayed by > an hour or more. In the meantime, the client receives messages from > other companies with only minor delays, so the client and my boss both > blame our

Re: Check MX entry before virtual domains maps

2008-11-03 Thread mouss
M. wrote: On Mon, 2008-11-03 at 13:07 -0500, Brian Evans - Postfix List wrote: You also don't specify if this is virtual_alias_domains or virtual_mailbox_domains. virtual_mailbox_domains and virtual_alias_maps. Personally, I would never allow users to add domains simply because of the proble

Re: Avoiding "cool-off" retry delay for some domains

2008-11-03 Thread Victor Duchovni
On Fri, Oct 31, 2008 at 07:42:59PM -0400, Vintinner, M. Scott wrote: > When their servers are experiencing an "outage" , I see: > > Oct 28 09:24:41 mta1 postfix/smtp[24419]: connect to > wec-imail1.bank.com[xxx.xxx.91.91]: Connection refused (port 25) Connection refused is not what you would exp

Re: Mail "on behalf of"

2008-11-03 Thread mouss
Goet, Kees wrote: One of our customers, who is a reviewer with a magazine, has the following email-account with this magazine: [EMAIL PROTECTED], however she uses her company-address as from-address: [EMAIL PROTECTED] Now she sends me an email from the account she has with

Re: Check MX entry before virtual domains maps

2008-11-03 Thread M.
On Mon, 2008-11-03 at 13:07 -0500, Brian Evans - Postfix List wrote: > You also don't specify if this is virtual_alias_domains or > virtual_mailbox_domains. virtual_mailbox_domains and virtual_alias_maps. > Personally, I would never allow users to add domains simply because of > the problems you

Re: Check MX entry before virtual domains maps

2008-11-03 Thread Brian Evans - Postfix List
M. wrote: > Hello, > > is it possible to perform dns query before checking domains maps? > > My users can add entries to virtual domains map and alias maps. I want > to avoid scenario that someone adds gmail.com domain and catch outbound > mails for gmail.com. > Fix the addition script/process

Re: Backscatter issues with non-delivery notifications

2008-11-03 Thread mouss
Dave Buchanan (Abo Ltd) wrote: Dear postfix users I have re-configured our postfix mailservers to remove catch all aliases to remove the ammount of mail accepted. I know have one more issue to resolve with respect to non delivery notifications - backscatter the setup is as follows [EMAIL P

Check MX entry before virtual domains maps

2008-11-03 Thread M.
Hello, is it possible to perform dns query before checking domains maps? My users can add entries to virtual domains map and alias maps. I want to avoid scenario that someone adds gmail.com domain and catch outbound mails for gmail.com. Second solution I figured out is to make relay_host to oth

Re: Fail to telnet

2008-11-03 Thread Ofer Inbar
Stephen Liu <[EMAIL PROTECTED]> wrote: > reload postfix. Problem remains. > # tail /var/log/mail.log > Nov 3 17:06:13 xen03 postfix/postfix-script[1778]: refreshing the > Postfix mail system > Nov 3 17:06:13 xen03 postfix/master[1144]: reload configuration > /etc/postfix > Nov 3 17:07:03 xen03

Re: Fail to telnet

2008-11-03 Thread Stephen Liu
--- Brian Evans - Postfix List <[EMAIL PROTECTED]> wrote: > Stephen Liu wrote: > > Nov 3 15:50:45 xen03 postfix/smtpd[1574]: fatal: open > > /etc/postfix/virtual/mysql-relay-domains.cf: Not a directory > > Nov 3 15:50:45 xen03 postfix/qmgr[1575]: fatal: open > > /etc/postfix/virtual/mysql-relay

Re: Backscatter issues with non-delivery notifications

2008-11-03 Thread MailingListe
Zitat von "Dave Buchanan (Abo Ltd)" <[EMAIL PROTECTED]>: Dear postfix users I have re-configured our postfix mailservers to remove catch all aliases to remove the ammount of mail accepted. I know have one more issue to resolve with respect to non delivery notifications - backscatter t

Re: Backscatter issues with non-delivery notifications

2008-11-03 Thread Jorey Bump
Dave Buchanan (Abo Ltd) wrote, at 11/03/2008 10:32 AM: > Dear postfix users > > I have re-configured our postfix mailservers to remove catch all aliases to > remove the ammount of mail accepted. > > I know have one more issue to resolve with respect to non delivery > notifications - backscatte

Re: Fail to telnet

2008-11-03 Thread Brian Evans - Postfix List
Stephen Liu wrote: > Nov 3 15:50:45 xen03 postfix/smtpd[1574]: fatal: open > /etc/postfix/virtual/mysql-relay-domains.cf: Not a directory > Nov 3 15:50:45 xen03 postfix/qmgr[1575]: fatal: open > /etc/postfix/virtual/mysql-relay-domains.cf: Not a directory > Fix this error, post 'postconf -n'

Fail to telnet

2008-11-03 Thread Stephen Liu
Hi folks, Debian Etch Postfix MySQL Fail to telnet # telnet localhost 25 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'. ehlo localhost Nothing printed out. # tail /var/log/mail.log Nov 3 15:49:45 xen03 postfix/master[1144]: warning: process /usr/libexec/

Re: Backscatter issues with non-delivery notifications

2008-11-03 Thread Stefan Förster
* "Dave Buchanan (Abo Ltd)" <[EMAIL PROTECTED]> wrote: > This is what happens to an e-mail that has spam / virus etc from > > Mail is accepted by our servers for delivery and then passed on to [EMAIL > PROTECTED] > The demon.net mailserver rejects this mail with a 550 error > our mailserver then

Re: header_cheks and REDIRECT

2008-11-03 Thread Reinaldo de Carvalho
On Mon, Nov 3, 2008 at 11:40 AM, Daniel Chojecki <[EMAIL PROTECTED]> wrote: > Hello, > > i want to redirect all messages sent to exact "external" email addres > to my "internal" addres - i use header_checks and REDIRECT action > > When external addres is in TO: field - action is taken. > When exter

Re: Backscatter issues with non-delivery notifications

2008-11-03 Thread Terry Carmen
Dave Buchanan (Abo Ltd) wrote: Dear postfix users I have re-configured our postfix mailservers to remove catch all aliases to remove the ammount of mail accepted. I know have one more issue to resolve with respect to non delivery notifications - backscatter the setup is as follows [EMAIL P

Re: Mail "on behalf of"

2008-11-03 Thread Brian Evans - Postfix List
Goet, Kees wrote: > > > > The mail-headers contain: > > From: [EMAIL PROTECTED] > > Sender: [EMAIL PROTECTED] > > Return-Path: [EMAIL PROTECTED] > > > > But, in the Postfix logfile I see: > > [EMAIL PROTECTED] > > > > This gives problems with SP

Re: ldap/ad lookup timeout errors

2008-11-03 Thread Terry Carmen
Kammen van, Marco, Springer SBM NL wrote: Dear All, As of lately we are getting more and more ldap lookup timeouts during the day Nov 3 12:44:59 servername postfix/proxymap[31451]: warning: dict_ldap_lookup: Search error -5: Timed out Nov 3 12:45:09 servername postfix/proxymap[28685]:

Backscatter issues with non-delivery notifications

2008-11-03 Thread Dave Buchanan (Abo Ltd)
Dear postfix users I have re-configured our postfix mailservers to remove catch all aliases to remove the ammount of mail accepted. I know have one more issue to resolve with respect to non delivery notifications - backscatter the setup is as follows [EMAIL PROTECTED] -> [EMAIL PROTECTED] (d

Mail "on behalf of"

2008-11-03 Thread Goet, Kees
One of our customers, who is a reviewer with a magazine, has the following email-account with this magazine: [EMAIL PROTECTED], however she uses her company-address as from-address: [EMAIL PROTECTED] Now she sends me an email from the account she has with the magazine:

header_cheks and REDIRECT

2008-11-03 Thread Daniel Chojecki
Hello, i want to redirect all messages sent to exact "external" email addres to my "internal" addres - i use header_checks and REDIRECT action When external addres is in TO: field - action is taken. When external addres is in CC: and BCC field - email is sent to external MX. My header_checks loo

ldap/ad lookup timeout errors

2008-11-03 Thread Kammen van, Marco, Springer SBM NL
Dear All, As of lately we are getting more and more ldap lookup timeouts during the day Nov 3 12:44:59 servername postfix/proxymap[31451]: warning: dict_ldap_lookup: Search error -5: Timed out Nov 3 12:45:09 servername postfix/proxymap[28685]: warning: dict_ldap_lookup: Search error -5: T

RE: authentication failed

2008-11-03 Thread Rocco Scappatura
> > > postfix/smtpd[19545]: warning: unknown[xxx.yyy.www.zzz]: SASL LOGIN > > > authentication failed: authentication failure > > > > I do get those all the time. Users mistyping their passwords, > > usernames, client's getting AUTH all wrong and so on. > > OK. > > > > then > > > > > > postfix/sm

Re: R: R: R: some user must send email only mydomain

2008-11-03 Thread mouss
Gabriele Di Giambelardini wrote: Ok, I used that directive, now my postconf -n is this: [snip] daemon started -- version 2.3.8, configuration /etc/postfix Nov 3 14:05:44 hosting postfix/smtpd[31371]: fatal: parameter "smtpd_recipient_restrictions": specify at least one working instance of: che

R: R: R: some user must send email only mydomain

2008-11-03 Thread Gabriele Di Giambelardini
Ok, I used that directive, now my postconf -n is this: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases,ldap:aliases config_directory = /etc/postfix debug_peer_level = 2 default_destination_concurrency_limit = 50 double_bounce_sender = postmaster forward_path = $home/.forward home

Re: Multiple transports per domain

2008-11-03 Thread Magnus Bäck
On Mon, November 3, 2008 11:22 am, Toni Van Remortel <[EMAIL PROTECTED]> said: > > Avoid stating problems and goals in terms of solutions (think in the > > "problem domain", not in the "solution domain"). I am certain you don't > > care about transports. what you want is the message to be delivere

Re: mailboxes and aliases for an address

2008-11-03 Thread mouss
ML wrote: Le 3 nov. 08 à 12:02, Nicolas Letellier a écrit : Hello. I would like to have this possibility in postfix : I have [EMAIL PROTECTED] It's a mailbox (pop or imap), and it's TOO an alias (to [EMAIL PROTECTED]) When a mail is sent for [EMAIL PROTECTED], the mail must arrive in user

Re: mailboxes and aliases for an address

2008-11-03 Thread mouss
Nicolas Letellier wrote: Hello. I would like to have this possibility in postfix : I have [EMAIL PROTECTED] It's a mailbox (pop or imap), and it's TOO an alias (to [EMAIL PROTECTED]) virtual_alias_maps: [EMAIL PROTECTED] [EMAIL PROTECTED], [EMAIL PROTECTED] When a mail is

Re: mailboxes and aliases for an address

2008-11-03 Thread ML
Le 3 nov. 08 à 12:02, Nicolas Letellier a écrit : Hello. I would like to have this possibility in postfix : I have [EMAIL PROTECTED] It's a mailbox (pop or imap), and it's TOO an alias (to [EMAIL PROTECTED]) When a mail is sent for [EMAIL PROTECTED], the mail must arrive in user mailbox

Re: Multiple transports per domain

2008-11-03 Thread mouss
Toni Van Remortel <[EMAIL PROTECTED]> wrote: I never talked about a remote server. 0 is a number ;-p other.example.com mda2: and define mda2 to pass the message to the second MDA. (you can skip the smtp_generic_maps part). The 2 mailboxes reside on the same mailserver, only in a

mailboxes and aliases for an address

2008-11-03 Thread Nicolas Letellier
Hello. I would like to have this possibility in postfix : I have [EMAIL PROTECTED] It's a mailbox (pop or imap), and it's TOO an alias (to [EMAIL PROTECTED]) When a mail is sent for [EMAIL PROTECTED], the mail must arrive in user mailbox, AND be redirected to [EMAIL PROTECTED] I have a postfi

RE: Multiple transports per domain

2008-11-03 Thread Toni Van Remortel
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of mouss > Sent: Monday, November 03, 2008 10:49 AM > To: postfix-users@postfix.org > Subject: Re: Multiple transports per domain > > Toni Van Remortel <[EMAIL PROTECTED]> wrote: > >> -Original Message

Re: R: R: some user must send email only mydomain

2008-11-03 Thread mouss
Gabriele Di Giambelardini wrote: Ok, excuse me. Now I post my postconf -n: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases,ldap:aliases config_directory = /etc/postfix debug_peer_level = 2 default_destination_concurrency_limit = 50 double_bounce_sender = postmaster forward_p

Re: Multiple transports per domain

2008-11-03 Thread mouss
Toni Van Remortel <[EMAIL PROTECTED]> wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On [snip] use virtual_alias_maps: [EMAIL PROTECTED] [EMAIL PROTECTED], [EMAIL PROTECTED] Virtual_alias_maps will work for 1 transport > multiple domains. What I want,

R: R: some user must send email only mydomain

2008-11-03 Thread Gabriele Di Giambelardini
Ok, excuse me. Now I post my postconf -n: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases,ldap:aliases config_directory = /etc/postfix debug_peer_level = 2 default_destination_concurrency_limit = 50 double_bounce_sender = postmaster forward_path = $home/.forward home_mailbox