is reject_unknown_client_hostname safe now? (aka FCRDNS)

A big ISP here in Austria started to use reject_unknown_client_hostname (http://www.postfix.org/postconf.5.html#reject_unknown_client_hostname) also known as http://en.wikipedia.org/wiki/Forward_Confirmed_reverse_DNS Is this option safe today? About 2 years ago it was not, rejecting lots of goo

Re: customizing postfix logs with a mailing id

Stéphane MERLE a écrit : > Hi, > > First, I would like to appologize if I don't do thing correctly, but > english is not my mother langage and I'm not alway sure of what I > understand ... (I think of "Please do not top-post.", which I though I > wasn't doing, as I stay in the same thread ...). >

Re: running a delivery agent as a daemon?

Matt Burgoon: > > I'm running into some performance issues with the sheer volume of email > I'm dealing with that is destined to a perl script for final email > delivery. The start up cost of this particular perl script is not > insubstantial, and is slowly bringing this poor box to its knees.

Re: Signing outgoing mailman mail with DKIM

Zbigniew Szalbot a écrit : > Hello, > > I used to have a working setup where all outgoing mail, including > mailman, was being signed. However, I decided to stop using maia for > content scanning (most of my mail is variuos subscriptions sent to > outside users) and just sign the outgoing mail wit

Re: Disabling a domain

Hi, > > > I read about mysql maps and now I understand how it works. > > My problem was that my /etc/postfix/mysql_something.cf > > didn't have an additional conditional to the > > postfix's query. > > > > To enable what I want, was need add directive additional_condit

Re: Multiple groups for user in pipe entry master.cf

Rolf E. Sonneveld: > Wietse Venema wrote: > > Rolf E. Sonneveld: > > > >> Hi, > >> > >> running Postfix 2.4.5 > >> > >> According to http://www.postfix.org/pipe.8.html it is possible to define > >> a 'user:group' in a pipe entry in master.cf: > >> > >> > >>>*user*=/username/:/group

Re: running a delivery agent as a daemon?

Matt Burgoon a écrit : > > I'm running into some performance issues with the sheer volume of email > I'm dealing with that is destined to a perl script for final email > delivery. The start up cost of this particular perl script is not > insubstantial, and is slowly bringing this poor box to its k

Re: Disabling a domain

Eduardo Júnior a écrit : > > Hi, > > On Fri, May 29, 2009 at 11:25 PM, Barney Desmond > mailto:barneydesm...@gmail.com>> wrote: > > 2009/5/30 Eduardo Júnior >: > > On Thu, May 28, 2009 at 11:15 PM, Sahil Tandon > wrote: >

running a delivery agent as a daemon?

I'm running into some performance issues with the sheer volume of email I'm dealing with that is destined to a perl script for final email delivery. The start up cost of this particular perl script is not insubstantial, and is slowly bringing this poor box to its knees. I've done as much opti

Re: Multiple groups for user in pipe entry master.cf

Wietse Venema wrote: Rolf E. Sonneveld: [ Charset ISO-8859-1 unsupported, converting... ] Hi, running Postfix 2.4.5 According to http://www.postfix.org/pipe.8.html it is possible to define a 'user:group' in a pipe entry in master.cf: *user*=/username/:/groupname/

Re: Illegal mix of collations error

Thanks for the reply on this. I have now changed the collation of the tables to latin1_swedish_ci, but am still getting these errors. Dont quite understand what todo from here? Can anyone assist further please? Thanks!! Simon The issue is that you are comparing two strings, one that uses on

Re: Multiple groups for user in pipe entry master.cf

Rolf E. Sonneveld: [ Charset ISO-8859-1 unsupported, converting... ] > Hi, > > running Postfix 2.4.5 > > According to http://www.postfix.org/pipe.8.html it is possible to define > a 'user:group' in a pipe entry in master.cf: > > >*user*=/username/:/groupname/ > > Execute t

Re: Illegal mix of collations error

On Mon, Jun 8, 2009 at 10:09 AM, Darren Pilgrim wrote: > Simon wrote: > >> Jun 8 07:15:19 mail-in1 postfix/trivial-rewrite[23183]: warning: mysql >> query failed: Illegal mix of collations (latin1_swedish_ci,IMPLICIT) and >> (utf8_general_ci,COERCIBLE) for operation '=' >> Jun 8 07:15:19 mail-in

Multiple groups for user in pipe entry master.cf

Hi, running Postfix 2.4.5 According to http://www.postfix.org/pipe.8.html it is possible to define a 'user:group' in a pipe entry in master.cf: *user*=/username/:/groupname/ Execute the external command with the rights of the specified /username/. The soft

Re: Header Filter Time Range

On 15-Jun-2009, at 02:52, EASY steve.h...@digitalcertainty.co.uk wrote: Look at it like this, if you go to the supermarket when it is closed for business you don't expect to be able to get in :-) Supermarkets close? But what about mailing lists? I sent my message at 0200 or so this morning

Re: SSL_accept error from - somebody that could tell me what to do

On Mon, Jun 15, 2009 at 04:48:26PM +0200, Jelle de Jong wrote: > Thank you Wietse, I have asked the other server party to see if they can > sent me the logs, I hope they will sent them, they say the problem is on > my end, but I have no diffidence for that so far. > > I will also sent the debug i

Re: SASL authentication failure

* Gerard : > This is just probably a harmless warning; however, I was wondering how > to make it go away if possible. > > I am using 'clamsmtpd' with postfix. I have SASL enabled as well. When > I connect from my MUA, an error message regarding SALA authentication > failure is placed in the maillo

Re: Problem with 450 bounce notices

> I'm hoping someone knows the key to this. > > I use a backup MX service to accompany my Postfix mail server. Right now > the Backup MX service has more than 1,200 messages waiting to be > delivered. As near as I can tell (from the Postfix logs) all of them are > addressed to addresses that eithe

SASL authentication failure

This is just probably a harmless warning; however, I was wondering how to make it go away if possible. I am using 'clamsmtpd' with postfix. I have SASL enabled as well. When I connect from my MUA, an error message regarding SALA authentication failure is placed in the maillog. The message is sent

Re: delay between delivery for a specific transport.

Wietse Venema: > St_phane MERLE: > > even if the 1s pause looks like pleasing hotmail, this will not > > be usable for the amount of email we send (multi million a day). > > Is there other ways to drop the rate delivery for a specific > > transport ? > > I suppose you overlooked this text in the d

Re: Postfix-2.6.0 RPM

On Sun, May 24, 2009 at 9:07 AM, Simon J Mudd wrote: > sjm...@pobox.com (Simon J Mudd) writes: > >> For those interested I've updated the packages and you should be able >> to find: >>         postfix-2.6.0-1.src.rpm and >>         postfix-2.6.0-1.rhel5.x86_64.rpm > > Updated to 2.6.1 as I hadn't s

Re: backup mx and with header checks

Terry L. Inzauro wrote, at 06/15/2009 01:52 PM: > I like the idea of verifying addresses, but this stuck out. > > > > WARNING > > The sender/recipient address verification feature described in this document > is suitable only for low-traffic sites. It > performs poorly under high load; excess

Re: backup mx and with header checks

2009/6/16 Terry L. Inzauro : > I like the idea of verifying addresses, but this stuck out. > > > > > WARNING > > The sender/recipient address verification feature described in this document > is suitable only for low-traffic sites. It > performs poorly under high load; excessive sender address ve

Re: trivial-rewrite warning although mydestination is empty

Noel Jones: > > Jun 14 14:26:54 [postfix/trivial-rewrite] warning: do not list domain > > lunox.net in BOTH mydestination and virtual_alias_domains Other possibilities: - You have "-o mydestination=domain" in master.cf. - You have more than one main.cf file. Wietse

Re: Signing outgoing mailman mail with DKIM

Zbigniew Szalbot wrote: Hello, I used to have a working setup where all outgoing mail, including mailman, was being signed. However, I decided to stop using maia for content scanning (most of my mail is variuos subscriptions sent to outside users) and just sign the outgoing mail with DKIM.

Re: trivial-rewrite warning although mydestination is empty

Bernd Lommerzheim wrote: Hello Noel Jones, thank you very much for your answer. Guess #1: You didn't run "postfix reload" after changing the configuration. First I had the same idea. But I restarted Postfix via '/etc/init.d/postfix restart' and trivial-rewrite is still raising these warnings.

Re: backup mx and with header checks

Terry L. Inzauro wrote: Noel Jones wrote: Terry L. Inzauro wrote: List, I operate a backup mx for one of my customers. In doing so, I have run into an issue where I must accept all email regardless of weather or not the messages is destined for a valid email account in my customers email syst

Re: backup mx and with header checks

Noel Jones wrote: > Terry L. Inzauro wrote: >> List, >> >> I operate a backup mx for one of my customers. In doing so, I have run >> into an issue where I must accept all email regardless >> of weather or not the messages is destined for a valid email account >> in my customers email system (which

Re: Problem with 450 bounce notices

> I use a backup MX service to accompany my Postfix mail server. Right now > the Backup MX service has more than 1,200 messages waiting to be > delivered. As near as I can tell (from the Postfix logs) all of them are > addressed to addresses that either never existed or no longer exist. The > Postf

Problem with 450 bounce notices

I'm hoping someone knows the key to this. I use a backup MX service to accompany my Postfix mail server. Right now the Backup MX service has more than 1,200 messages waiting to be delivered. As near as I can tell (from the Postfix logs) all of them are addressed to addresses that either never

Re: Accepting A Specific Network

Dennis Putnam wrote: > The 'smtpdreject' contains, as the first entry: > > nnn.nnn.nnn.0 OK As Magnus points out, this is too little information. Also, this will never match anything. access(5) says that: net.work.addr.ess net.work.addr net.work netMatches the speci

Re: Accepting A Specific Network

On Monday, June 15, 2009 at 18:51 CEST, Dennis Putnam wrote: > I am having a problem with a network that does not have reverse DNS at > this time. I am trying to configure postfix (v2.1.5) so that it will > accept hosts from that network. I thought the order of the commands in > 'smtpd_clien

Accepting A Specific Network

I am having a problem with a network that does not have reverse DNS at this time. I am trying to configure postfix (v2.1.5) so that it will accept hosts from that network. I thought the order of the commands in 'smtpd_client_restrictions' section was significant but it does not seem to work

Re: backup mx and with header checks

Terry L. Inzauro schrieb: > List, > > I operate a backup mx for one of my customers. In doing so, I have run into > an issue where I must accept all email regardless > of weather or not the messages is destined for a valid email account in my > customers email system (which is MS Exchange 2003)

Re: backup mx and with header checks

Terry L. Inzauro wrote: List, I operate a backup mx for one of my customers. In doing so, I have run into an issue where I must accept all email regardless of weather or not the messages is destined for a valid email account in my customers email system (which is MS Exchange 2003). I thought

Re: backup mx and with header checks

On Monday, June 15, 2009 at 16:49 CEST, "Terry L. Inzauro" wrote: > I operate a backup mx for one of my customers. In doing so, I have run > into an issue where I must accept all email regardless of weather or > not the messages is destined for a valid email account in my customers > email s

Re: tcp policy service and spawn

Michael Moritz: > Hi, my apologies if this has been answered before. I was just reading through > the smtpd_policy_readme and documentation on spawn but I'm looking for > clarification of this. > Let's say I have this in main.cf > > smtpd_recipient_restrictions = > reject_unauth_destin

tcp policy service and spawn

Hi, my apologies if this has been answered before. I was just reading through the smtpd_policy_readme and documentation on spawn but I'm looking for clarification of this. Let's say I have this in main.cf smtpd_recipient_restrictions = reject_unauth_destination check_policy_se

Re: delay between delivery for a specific transport.

St?phane MERLE: > even if the 1s pause looks like pleasing hotmail, this will not > be usable for the amount of email we send (multi million a day). > Is there other ways to drop the rate delivery for a specific > transport ? I suppose you overlooked this text in the documentation: To enable t

Re: delay between delivery for a specific transport.

Wietse Venema a écrit : Stephane MERLE: Hi, Can I set the parameter : transport_destination_rate_delay to less than a second ? Can you read the documentation? I am sorry, again, I apology, I do not want to waste your time or the one anybody would spend to help me out ... but

Re: delay between delivery for a specific transport.

St?phane MERLE: > Hi, > > Can I set the parameter : transport_destination_rate_delay to less > than a second ? Can you read the documentation? > if not, where is that sleep() in the code ? There is no sleep in the code. The delay is enforced by the scheduler, and the scheduler cannot use sle

Re: delay between delivery for a specific transport.

Hi, Can I set the parameter : transport_destination_rate_delay to less than a second ? if not, where is that sleep() in the code ? Thanks, Stéphane Stéphane MERLE a écrit : Hi, I try to add a 1 second delay between each smtp sent to a spécifique transport. I followed this help file

Re: SSL_accept error from - somebody that could tell me what to do

Wietse Venema wrote: > Jelle de Jong: >> Jun 15 13:57:46 emily postfix/smtpd[23401]: input attribute name: seed >> Jun 15 13:57:46 emily postfix/smtpd[23401]: input attribute value: >> YuvlIV0a1sMFU6JK6BcvsKr6WJm8YP7zsFNJz/XEv+w= >> Jun 15 13:57:46 emily postfix/smtpd[23401]: private/tlsmgr: wante

Re: Doubt about smtpd_delay_reject

* Eduardo Júnior : > Hi, > > > when I set smtpd_delay_reject = yes, all restrictions (helo, sender, client > and recipients) will be apllied just in the RCPT TO stage. Yes. It's the default. > So, In my main.cf, I can put all restrictions in the > smtpd_recipient_restrictions? Yes. > Or I mu

backup mx and with header checks

List, I operate a backup mx for one of my customers. In doing so, I have run into an issue where I must accept all email regardless of weather or not the messages is destined for a valid email account in my customers email system (which is MS Exchange 2003). I thought about asking my customer

Doubt about smtpd_delay_reject

Hi, when I set smtpd_delay_reject = yes, all restrictions (helo, sender, client and recipients) will be apllied just in the RCPT TO stage. So, In my main.cf, I can put all restrictions in the smtpd_recipient_restrictions? Or I must put each restrictions in each stage? []'s -- Eduardo Júnior

Re: SSL_accept error from - somebody that could tell me what to do

Wietse Venema: > Jelle de Jong: > > Jun 15 13:57:46 emily postfix/smtpd[23401]: input attribute name: seed > > Jun 15 13:57:46 emily postfix/smtpd[23401]: input attribute value: > > YuvlIV0a1sMFU6JK6BcvsKr6WJm8YP7zsFNJz/XEv+w= > > Jun 15 13:57:46 emily postfix/smtpd[23401]: private/tlsmgr: wanted

Re: SSL_accept error from - somebody that could tell me what to do

Jelle de Jong: > Jun 15 13:57:46 emily postfix/smtpd[23401]: input attribute name: seed > Jun 15 13:57:46 emily postfix/smtpd[23401]: input attribute value: > YuvlIV0a1sMFU6JK6BcvsKr6WJm8YP7zsFNJz/XEv+w= > Jun 15 13:57:46 emily postfix/smtpd[23401]: private/tlsmgr: wanted attribute: > (list termi

SSL_accept error from - somebody that could tell me what to do

Hello everybody, I am getting the following error on a fully updated Debian stable production server. The connection is closed by a SSL_accept error and I have no idea what goes on. It seems smtpd is getting values that it is not expecting, but who is responsible and what to do about it? I attach

SSL_accept error from - somebody that could tell me what goes on

Hello everybody, I am getting the following error on a fully updated Debian stable production server. The connection is closed by a SSL_accept error and I have no idea what goes on. It seems smtpd is getting values that it is not expecting, but who is responsible and what to do about it? I attach

Re: customizing postfix logs with a mailing id

St?phane MERLE: [ Charset ISO-8859-1 unsupported, converting... ] > Hi, > > First, I would like to appologize if I don't do thing correctly, but > english is not my mother langage and I'm not alway sure of what I > understand ... (I think of "Please do not top-post.", which I though I > wasn't

Re: customizing postfix logs with a mailing id

Hi, First, I would like to appologize if I don't do thing correctly, but english is not my mother langage and I'm not alway sure of what I understand ... (I think of "Please do not top-post.", which I though I wasn't doing, as I stay in the same thread ...). My aim, is to be able to séparate

Re: customizing postfix logs with a mailing id

On Mon, June 15, 2009 12:47 pm, Wietse Venema said: > Magnus Bäck: > > > Use the queue id to correlate log entries for a single message. That'll > > let you obtain statistics for delivered and rejected messages. Bounces > > are another thing -- there is no way for Postfix to know that a > > partic

Re: Header Filter Time Range

On Mon, 2009-06-15 at 13:13 +0200, Jan P. Kessler wrote: > Steve schrieb: > > I have to be honest, I looked at Postfwd a couple of weeks back and it > > left me with a bad feeling. It was utter dependency hell to install - > > > > It's your decision, but the only dependencies are Net::DNS and >

Re: Header Filter Time Range

Steve schrieb: > I have to be honest, I looked at Postfwd a couple of weeks back and it > left me with a bad feeling. It was utter dependency hell to install - > It's your decision, but the only dependencies are Net::DNS and Net::Server perl modules and perl itself, of course. > like Russian D

Re: customizing postfix logs with a mailing id

Magnus B?ck: > On Mon, June 15, 2009 10:35 am, St?phane MERLE said: > > > I would love to customize a little the logs of postfix. We are using > > postfix for massmailing and I'd like to be able to get statistic on > > mailing, so I would like to tag each mail with the mailing number so I > > can

Re: Header Filter Time Range

Here is another possibility with Postfix version 2.6 and later. Cron job at midnight: postconf -e master_service_disable=inet (or: smtp.inet) postfix reload Cron job at 07:00: postconf -e master_service_disable= postfix reload There are many other uses of cron that would also achive the desired

Re: customizing postfix logs with a mailing id

On Mon, June 15, 2009 12:01 pm, Stéphane MERLE said: > Can I, at least, add the from in the logs ? > > Jun 15 11:59:01 smtp postfix/smtp[3061]: 683EB37AECA3: > to=, relay=mx1.hotmail.com[65.55.92.136]:25, > conn_use=91, delay=401662, delays=401197/464/0.13/0.32, dsn=2.0.0, > status=sent (250 <200

Re: delay between delivery for a specific transport.

Title: stephane Hi, I did update to the last 2.6-20081205 looks perfect :o) can I specify a rate_delay of less than 1s ? The aim of all these is to deal with " The mail server IP connecting to Windows Live Hotmail server has exceeded the rate limit allowed." messages in logs. Even by droppin

Re: customizing postfix logs with a mailing id

2009/6/15 Stéphane MERLE : > Can I, at least, add the from in the logs ? > > Jun 15 11:59:01 smtp postfix/smtp[3061]: 683EB37AECA3: > to=, relay=mx1.hotmail.com[65.55.92.136]:25, > conn_use=91, delay=401662, delays=401197/464/0.13/0.32, dsn=2.0.0, > status=sent (250  <20090610182440.0a14a3776...@sm

Re: customizing postfix logs with a mailing id

Can I, at least, add the from in the logs ? Jun 15 11:59:01 smtp postfix/smtp[3061]: 683EB37AECA3: to=, relay=mx1.hotmail.com[65.55.92.136]:25, conn_use=91, delay=401662, delays=401197/464/0.13/0.32, dsn=2.0.0, status=sent (250 <20090610182440.0a14a3776...@smtp.domaineamoi.com> Queued mail f

Re: Header Filter Time Range

On Mon, 2009-06-15 at 11:48 +0200, Jan P. Kessler wrote: > EASY steve.h...@digitalcertainty.co.uk schrieb: > > Probably a stupid question, but in practical terms is it possible to set > > a header filter that will reject (or ideally defer) mail on time range? > > For example during the hours of 00:

Re: Header Filter Time Range

EASY steve.h...@digitalcertainty.co.uk schrieb: > Probably a stupid question, but in practical terms is it possible to set > a header filter that will reject (or ideally defer) mail on time range? > For example during the hours of 00:00 -> 07:00. > postfwd a policy server would do this with the

Re: customizing postfix logs with a mailing id

On Mon, June 15, 2009 10:35 am, Stéphane MERLE said: > I would love to customize a little the logs of postfix. We are using > postfix for massmailing and I'd like to be able to get statistic on > mailing, so I would like to tag each mail with the mailing number so I > can split the log files by ma

Re: Header Filter Time Range

On Mon, 2009-06-15 at 01:58 -0600, LuKreme wrote: > On 15-Jun-2009, at 01:09, EASY steve.h...@digitalcertainty.co.uk wrote: > > Probably a stupid question, but in practical terms is it possible to > > set > > a header filter that will reject (or ideally defer) mail on time > > range? > > For ex

customizing postfix logs with a mailing id

Hi, I would love to customize a little the logs of postfix. We are using postfix for massmailing and I'd like to be able to get statistic on mailing, so I would like to tag each mail with the mailing number so I can split the log files by mailing and then get the bounced/sent/spam detection f

Re: trivial-rewrite warning although mydestination is empty

Hello Noel Jones, thank you very much for your answer. > Guess #1: > You didn't run "postfix reload" after changing the configuration. First I had the same idea. But I restarted Postfix via '/etc/init.d/postfix restart' and trivial-rewrite is still raising these warnings. > Guess #2: > The confi

Re: Header Filter Time Range

Steve wrote: It seems a bit convoluted by my guess would be to set up two main.cf files, the seconds (short) version denying everything and then get cron to swap these in and out at the required times. I guess, doing it this way, I can set some exemptions and white listing in the second conf. W

Re: Header Filter Time Range

Steve wrote: I want to defer/reject all mail between those hours. The timing does not have to be totally accurate - a few minutes either way is no big issue. I am noticing that all connections overnight are UCE attempts. There has not been a legitimate one every in my logs. I appreciate that thi

Re: Header Filter Time Range

On 15-Jun-2009, at 01:09, EASY steve.h...@digitalcertainty.co.uk wrote: Probably a stupid question, but in practical terms is it possible to set a header filter that will reject (or ideally defer) mail on time range? For example during the hours of 00:00 -> 07:00. Erm.. well, yes, you COULD

Re: Header Filter Time Range

On Mon, 2009-06-15 at 09:26 +0200, Magnus Bäck wrote: > On Mon, June 15, 2009 9:09 am, EASY steve.h...@digitalcertainty.co.uk said: > > > Probably a stupid question, but in practical terms is it possible to set > > a header filter that will reject (or ideally defer) mail on time range? > > For exa

Re: Header Filter Time Range

On Mon, June 15, 2009 9:09 am, EASY steve.h...@digitalcertainty.co.uk said: > Probably a stupid question, but in practical terms is it possible to set > a header filter that will reject (or ideally defer) mail on time range? > For example during the hours of 00:00 -> 07:00. *Header* filter? Do yo

Header Filter Time Range

Probably a stupid question, but in practical terms is it possible to set a header filter that will reject (or ideally defer) mail on time range? For example during the hours of 00:00 -> 07:00. I appreciate that the action will probably have to be 'reject' if it is possible at all. Has anyone tried