Re: smtp authentication failure

2008-11-15 Thread mouss
Nasser Heidari wrote: Here is my saslfinger output: [EMAIL PROTECTED] ~]# saslfinger -s saslfinger - postfix Cyrus sasl configuration Sun Nov 16 10:23:19 IRST 2008 version: 1.0.2 mode: server-side SMTP AUTH -- basics -- Postfix: 2.3.3 System: CentOS release 5.2 (Final) -- smtpd is linked to --

Re: Virtual canonical domains?

2008-11-15 Thread mouss
;m learning the system) defined virtual_mailbox_domains, virtual_mailbox_maps, virtual_alias_domains, and _virtual_alias_maps as individual files: The mentioned domains are obviously internal.. #virtual_alias_domains: thirddomain.com 20081114 fourthdomain.com 20081115 #virtual_

Re: Move Postfix Virtual Maildirs to a new server?

2008-11-15 Thread mouss
Dan Farrell wrote: Greetings postfix gurus, I have a modest postfix server; my own mailbox has thousands of messages, but most boxes have hundreds or even less. But, I want to migrate to a new server which also runs postfix, but uses mysql for some storage, and perhaps even mail message stora

RE: smtp authentication failure

2008-11-15 Thread Nasser Heidari
Here is my saslfinger output: [EMAIL PROTECTED] ~]# saslfinger -s saslfinger - postfix Cyrus sasl configuration Sun Nov 16 10:23:19 IRST 2008 version: 1.0.2 mode: server-side SMTP AUTH -- basics -- Postfix: 2.3.3 System: CentOS release 5.2 (Final) -- smtpd is linked to -- libsasl2.so.2 =

Re: smtp authentication failure

2008-11-15 Thread mouss
Nasser Heidari wrote: Hello, I have been installed this package before: [EMAIL PROTECTED] ~]# rpm -q cyrus-sasl-sql cyrus-sasl-sql-2.1.22-4 also I change my smtpd.conf as you mentioned , but I'm still getting this message in my maillog : [snip] And here is my /var/log/messages last lines:

Re: Timeout after DATA

2008-11-15 Thread DJ Lucas
DJ Lucas wrote: This has been on by default in every piece of Cisco equipment that I've messed with (admittedly not many), did you try and disable it yet? Oops..I forgot to mention, on the newer models, the config item for the 'smtp fu**up protocol' is now /'inspect esmtp'...have no idea about

Re: Timeout after DATA

2008-11-15 Thread DJ Lucas
Barney Desmond wrote: * Noone's pointed out the your first packet capture also exhibits the same "missing data" problem. After the client sends RCPT TO and you respond with an Ok, the next thing it drops on the wire is "Received: from srv1.shoppingsquare.com.au" in frame 12. I'm not that confiden

Re: Timeout after DATA

2008-11-15 Thread Barney Desmond
I can't add much to the already-fairly-technical discussion so far, but I do have a couple of thoughts. * You mentioned being able to replace the Cisco router with another one. Could you try a non-Cisco one? Some Cisco gear is infamous for silently munging SMTP transactions in the name of "securit

RE: Re[2]: smtp authentication failure

2008-11-15 Thread Nasser Heidari
Hello, I have been installed this package before: [EMAIL PROTECTED] ~]# rpm -q cyrus-sasl-sql cyrus-sasl-sql-2.1.22-4 also I change my smtpd.conf as you mentioned , but I'm still getting this message in my maillog : Nov 16 08:52:14 prmail postfix/smtpd[3616]: connect from unknown[192.168.18.214]

Case folding with address extensions

2008-11-15 Thread Joel Reicher
The mailbox transport I use is a pipe to an MDA that treats the username case-sensitively, so I have given the "u" flag in the transport, but I also have recipient_delimiter = + and the address extensions are being downcased as well. Does postfix offer a better solution, will it, or is this the

Virtual canonical domains?

2008-11-15 Thread Ville Walveranta
system) defined virtual_mailbox_domains, virtual_mailbox_maps, virtual_alias_domains, and _virtual_alias_maps as individual files: The mentioned domains are obviously internal.. #virtual_alias_domains: thirddomain.com 20081114 fourthdomain.com 20081115 #virtual_mailbox_domains: someotherdomain.c

Re: Timeout after DATA

2008-11-15 Thread Petr Janda
by the way postmaster@ wont work. we dont set them up as the email addresses are stored in ldap and its just a hassle to create an extra postmaster@ address for each domain we host. if you want maybe try [EMAIL PROTECTED] Petr On 11/16/08, Petr Janda <[EMAIL PROTECTED]> wrote: >> Can you verify t

Re: Timeout after DATA

2008-11-15 Thread Wietse Venema
Petr Janda: > > Can you verify that your machine really announces a MSS of 1460? > > Actually you caught me while tempering with the MTU, Ive had it set to > 800 for testing and some of the lost mail started getting through, but > with a setting this low IMAP authentication stopped working > altog

Re: Timeout after DATA

2008-11-15 Thread Petr Janda
> Can you verify that your machine really announces a MSS of 1460? Actually you caught me while tempering with the MTU, Ive had it set to 800 for testing and some of the lost mail started getting through, but with a setting this low IMAP authentication stopped working altogether. Its back to 1500.

Move Postfix Virtual Maildirs to a new server?

2008-11-15 Thread Dan Farrell
Greetings postfix gurus, I have a modest postfix server; my own mailbox has thousands of messages, but most boxes have hundreds or even less. But, I want to migrate to a new server which also runs postfix, but uses mysql for some storage, and perhaps even mail message storage itself. If I wa

Re: Timeout after DATA

2008-11-15 Thread Wietse Venema
Wietse Venema: > Petr Janda: > > > If there is a traffic shaper at your end, it may replace your > > > TCP stack's MSS=1460 announcement by something smaller, like 890. > > > > Could this also be caused by the ISP? > > Something is throwing away the first 7300 bytes of the email message. > > Dep

Re: Timeout after DATA

2008-11-15 Thread Wietse Venema
Petr Janda: > > If there is a traffic shaper at your end, it may replace your > > TCP stack's MSS=1460 announcement by something smaller, like 890. > > Could this also be caused by the ISP? Something is throwing away the first 7300 bytes of the email message. Depending on how pervasive this beha

Re: Timeout after DATA

2008-11-15 Thread Petr Janda
> If there is a traffic shaper at your end, it may replace your > TCP stack's MSS=1460 announcement by something smaller, like 890. Could this also be caused by the ISP? Petr

Re: Timeout after DATA

2008-11-15 Thread Sahil Tandon
Petr Janda <[EMAIL PROTECTED]> wrote: > > If there is a traffic shaper at your end, it may replace your > > TCP stack's MSS=1460 announcement by something smaller, like 890. > > Could this also be caused by the ISP? It could be caused by some router that sits and passes packets between the send

Re: Specifying bounce messages from pipe exit codes

2008-11-15 Thread Listas
Wietse Venema wrote: > The parts of Postfix that you can play with are documented. The > bounce(8) service protocol and internals are not documented, > therefore you cannot play with them. Only the documented behavior > has a promise of backwards compatibility. > > That said, the Postfix pipe(8)

Re: Specifying bounce messages from pipe exit codes

2008-11-15 Thread Wietse Venema
Listas: > Hello, > > I wonder if it is possible to specify the informative text for bounce > messages, depending on the exit code from pipe(8). > > Something like having this in master.cf: > > mycmdunix - n n - 10 pipe > bounce_message_map=/path/to/pipemap flags=... user=... arg

Specifying bounce messages from pipe exit codes

2008-11-15 Thread Listas
Hello, I wonder if it is possible to specify the informative text for bounce messages, depending on the exit code from pipe(8). Something like having this in master.cf: mycmdunix - n n - 10 pipe bounce_message_map=/path/to/pipemap flags=... user=... argv=/path/to/script And the

Re: Address Verification Header

2008-11-15 Thread Noel Jones
Jason Wohlford wrote: Is there any way to perform an address verification on a message and then add a header to the message? I'd like to let postfix do address verification and then report the result to spamassassin. Suggestions? Cheers, Jason Postfix doesn't have a mechanism to record the

send "bounce" to a pipe to analize and dump

2008-11-15 Thread Esteban Ribičić
hello folks! We have a social network which has the ability of messaging between users. this users have the option, to fw this system messages to their personal email address. Since the number of users is pretty big, and smoetimes their email servers are not working (or their email addreses are wr

Re: smtp authentication failure

2008-11-15 Thread mouss
Алексей Доморадов wrote: [snip] Also I don't want to use sasldb for my authentication; my user information is in mysql database. If you store user information in mysql, you also need to install cyrus-sasl-sql package yes. unless he sores passwords encrypted, in which case he should use aut

RE: Customize NDR for large messages?

2008-11-15 Thread Paul Hutchings
Ah damn of course I'm not thinking am I, the client gets the size from the HELO/EHLO info - thanks for that, obvious when you have your memory jogged! -Original Message- From: Wietse Venema [mailto:[EMAIL PROTECTED] Sent: 15 November 2008 16:16 To: Paul Hutchings Cc: postfix users list Su

Re: Address Verification Header

2008-11-15 Thread Jason Wohlford
On Nov 15, 2008, at 10:12 AM, Wietse Venema wrote: Jason Wohlford: Is there any way to perform an address verification on a message and then add a header to the message? I'd like to let postfix do address verification and then report the result to spamassassin. Suggestions? By design, addres

Re: Customize NDR for large messages?

2008-11-15 Thread Wietse Venema
Paul Hutchings: > Is it possible (for a novice who knows nothing about source code mods) > to customize the bounce generated by a message that is larger than the > size accepted under message_size_limit please? No. In fact, if the message is rejected during the inbound SMTP session, the NDR is sen

Re: Address Verification Header

2008-11-15 Thread Wietse Venema
Jason Wohlford: > Is there any way to perform an address verification on a message and > then add a header to the message? I'd like to let postfix do address > verification and then report the result to spamassassin. Suggestions? By design, address verification "messages" are never delivered.

Re: Timeout after DATA

2008-11-15 Thread Wietse Venema
Petr Janda: > > Something is badly screwing up TCP, perhaps by throwing away packets > > with flags that it does not like. > > A misconfigured firewall? Seems unlikely as this timeout problem > really happens a lot. Im also going to have a look at the Cisco ADSL > router, maybe try replacing it wi

Address Verification Header

2008-11-15 Thread Jason Wohlford
Is there any way to perform an address verification on a message and then add a header to the message? I'd like to let postfix do address verification and then report the result to spamassassin. Suggestions? Cheers, Jason -- Jason Wohlford <[EMAIL PROTECTED]>

Re[2]: smtp authentication failure

2008-11-15 Thread Алексей Доморадов
> Hi again. > Thanks for your answer, > I don't run postfix in a jail. > > [EMAIL PROTECTED] postfix]# grep smtpd master.cf > smtp inet n - n - - smtpd > 587 inet n - n - - smtpd > #submission inet n - n -

Customize NDR for large messages?

2008-11-15 Thread Paul Hutchings
Is it possible (for a novice who knows nothing about source code mods) to customize the bounce generated by a message that is larger than the size accepted under message_size_limit please? Instead of simply saying "too large" we would like to add a sentence saying "please visit http://xyx"; which

Re: Timeout after DATA

2008-11-15 Thread Petr Janda
> Something is badly screwing up TCP, perhaps by throwing away packets > with flags that it does not like. A misconfigured firewall? Seems unlikely as this timeout problem really happens a lot. Im also going to have a look at the Cisco ADSL router, maybe try replacing it with another one to make s

Re: Timeout after DATA

2008-11-15 Thread Wietse Venema
Petr Janda: > Hello, > Ive taken another tcpdump, this time with options: window scaling and > SACK disabled. > > Please let me know what you think. After Postfix replies with "354 End data with ." the client sends something that appears to start in the middle of an email message. MsoNormal alig

Re: Timeout after DATA

2008-11-15 Thread Petr Janda
Hello, Ive taken another tcpdump, this time with options: window scaling and SACK disabled. Please let me know what you think. Thanks, Petr postfix_dump2.tgz Description: GNU Zip compressed data

RE: smtp authentication failure

2008-11-15 Thread Nasser Heidari
Hi again. Thanks for your answer, I don't run postfix in a jail. [EMAIL PROTECTED] postfix]# grep smtpd master.cf smtp inet n - n - - smtpd 587 inet n - n - - smtpd #submission inet n - n - - smt

Re: smtp authentication failure

2008-11-15 Thread mouss
Nasser Heidari wrote: Hello, I'm running postfix on Centos 5.2 with virtual domain and users. I used http://high5.net/howto/ as a reference. I can send and receive email with webmail , and receive email with mail client but I can't send email . Here is maillog error : Nov 15 13:05:48 p

smtp authentication failure

2008-11-15 Thread Nasser Heidari
Hello, I'm running postfix on Centos 5.2 with virtual domain and users. I used http://high5.net/howto/ as a reference. I can send and receive email with webmail , and receive email with mail client but I can't send email . Here is maillog error : Nov 15 13:05:48 prmail postfix/smtpd[13408]

Re: Timeout after DATA

2008-11-15 Thread Petr Janda
> In the OPs packet dump, the window scale on the receiving system is 2^0, > but the sending system uses 2^7. Not much we can do about that from the > Postfix side... > So what is the problem here? Should they be same? What can be done about this? I dont mean as in you but in general how can we ge