Re: best practices for workstations that occasionally disconnect

On Wed, Jun 24, 2009 at 11:39:15PM -0700, William Yardley wrote: > On Thu, Jun 25, 2009 at 12:25:41AM -0500, Noel Jones wrote: > Maybe setting $bounce_queue_lifetime to 0 but leaving > $maximal_queue_lifetime set to 5d+ would do the trick? [The main issue with this approach is that it will get ri

Re: spammers masquerading as me

On 1681 0, Stuart Matthews wrote: > Hi everyone, > > I am the systems administrator for the Electronic Frontier Foundation. I > have been having a problem with getting spam that has a from of, for > example, t...@eff.org (which is a valid email address). I would like my > mail server to not acc

Re: best practices for workstations that occasionally disconnect

On Thu, Jun 25, 2009 at 12:25:41AM -0500, Noel Jones wrote: > The best practice for "occasional" fairly brief (less than a couple days) > outages is just ignore them. Postfix should handle things pretty well up > to several thousand deferred messages. If you're expecting tens of > thousands o

Re: best practices for workstations that occasionally disconnect

William Yardley wrote: I'm just wondering if anyone has a good suggestion for how to deal with workstations, setup with a $relayhost for all outbound mail, which occasionally get unplugged from the network or otherwise taken offline. While this doesn't happen to our machines a lot, it does cause

Re: rejecting client=unknown[ip.ad.dr.ess]

On Wed, Jun 24, 2009 at 10:15:39PM -0600, LuKreme wrote: > On 23-Jun-2009, at 06:31, Jan P. Kessler wrote: >> Another option is to use selective greylisting on "unknown" clients: >> >> MAIN.CF >> smtpd_recipient:_restrictions = >> permit_mynetworks, >> <...others...>, >> check_client_access = p

Re: rejecting client=unknown[ip.ad.dr.ess]

On 23-Jun-2009, at 06:31, Jan P. Kessler wrote: Another option is to use selective greylisting on "unknown" clients: MAIN.CF smtpd_recipient:_restrictions = permit_mynetworks, <...others...>, check_client_access = pcre:/etc/postfix/client_check /etc/postfix/client_check: /^unknown$/ check

best practices for workstations that occasionally disconnect

I'm just wondering if anyone has a good suggestion for how to deal with workstations, setup with a $relayhost for all outbound mail, which occasionally get unplugged from the network or otherwise taken offline. While this doesn't happen to our machines a lot, it does cause some annoyance when a mac

Re: Oldest message in the queue

On Thu, Jun 25, 2009 at 01:57:31AM +, George Forman wrote: > It appears we would need to write a script to parse all the messages. > What is an efficient way to get the age of the oldest message in the queue? If the deferred queue is large enough, it is more efficient to parse the logs, espec

Oldest message in the queue

Hi, It appears we would need to write a script to parse all the messages. What is an efficient way to get the age of the oldest message in the queue? George _ Microsoft brings you a new way to search the web. Try Bing™ now http://

Re: spammers masquerading as me

On Wed June 24 2009 18:21:19 Stuart Matthews wrote: > I am the systems administrator for the Electronic Frontier > Foundation. I have been having a problem with getting spam that has a And I talked to you yesterday in IRC. > from of, for example, t...@eff.org (which is a valid email address). > I

Re: spammers masquerading as me

Stuart Matthews: > Hi everyone, > > I am the systems administrator for the Electronic Frontier Foundation. I > have been having a problem with getting spam that has a from of, for > example, t...@eff.org (which is a valid email address). I would like my > mail server to not accept mail that say

Re: spammers masquerading as me

Stuart Matthews wrote: I have already tried editing /usr/local/etc/postfix/access, adding: eff.orgREJECTyou can't send mail as me! And of course I ran postmap after this. I have also tried using the setting that rejects mail that says HELO eff.org. You say check_sender_access didn't

Re: spammers masquerading as me

Stuart Matthews a écrit : > Hi everyone, > > I am the systems administrator for the Electronic Frontier Foundation. I > have been having a problem with getting spam that has a from of, for > example, t...@eff.org (which is a valid email address). I would like my > mail server to not accept mail th

Re: FYI: Imminent closure of SORBS...

kj a écrit : > Good riddance. > oh please. this is the postfix mailing list. Viktor simply wanted people to be aware of the possible shutdown. now, sorbs will most probably survive.

spammers masquerading as me

Hi everyone, I am the systems administrator for the Electronic Frontier Foundation. I have been having a problem with getting spam that has a from of, for example, t...@eff.org (which is a valid email address). I would like my mail server to not accept mail that says it is from @eff.org unless

Re: Incoming smtp: 554 Access Denied

Jesse Kretschmer wrote: If you can explain what you mean by "allow these tls connections" we can give more pointers. Looking at the logs, the company that is having issues with our mail server only has issue occasionally. It appears to be one server in particular. This one server always start

Re: Incoming smtp: 554 Access Denied

Noel Jones wrote: The "smtps" service is for your own mail clients to use. This is a deprecated method of encryption sometimes called SSL (not to be confused with HTTPS/SSL) in some mail clients. Clients that don't authenticate via SASL should be rejected. Typically only "older" MUAs and s

Re: Incoming smtp: 554 Access Denied

Noel Jones wrote: The "smtps" service is for your own mail clients to use. This is a deprecated method of encryption sometimes called SSL (not to be confused with HTTPS/SSL) in some mail clients. Clients that don't authenticate via SASL should be rejected. Typically only "older" MUAs and s

Re: FYI: Imminent closure of SORBS...

Good riddance. --kj

Re: multiple signatures DK multiple selector

use dkimproxy 1.1.0 Le mercredi 24 juin 2009 22:34, fake...@fakessh.eu a écrit : > dkim I know it supports multiple signatures > but DK domains and selector keys ? > > Le mercredi 24 juin 2009 22:28, Noel Jones a écrit : > > fake...@fakessh.eu wrote: > > > hi list > > > hi all > > > > > > dkimpro

Re: multiple signatures DK multiple selector

dkim I know it supports multiple signatures but DK domains and selector keys ? Le mercredi 24 juin 2009 22:28, Noel Jones a écrit : > fake...@fakessh.eu wrote: > > hi list > > hi all > > > > dkimproxy I can not specify that only selector. > > how to have multiple signatures DK > > multiple n

Re: Incoming smtp: 554 Access Denied

Jesse Kretschmer wrote: Ralf Hildebrandt wrote: smtp inet n - n - - smtpd smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_au

Re: multiple signatures DK multiple selector

fake...@fakessh.eu wrote: hi list hi all dkimproxy I can not specify that only selector. how to have multiple signatures DK multiple number selectors thanks for all your feedbacks both dkim-milter and amavisd-new support multiple dkim selectors. They both work well. -- Noel Jones

multiple signatures DK multiple selector

hi list hi all dkimproxy I can not specify that only selector. how to have multiple signatures DK multiple number selectors thanks for all your feedbacks

Re: Slowly drain the active queue

* George Forman : > > Hi, > I'm trying to understand how I can control postfix active queue. What is there to control? > We ran into a problem where out back end LMTP deposit service had > failures. Therefore, the queues grew quite large. But not the active, but the defered queue. > We had t

Re: Incoming smtp: 554 Access Denied

* Jesse Kretschmer : >>>smtp inet n - n - - smtpd >>>smtps inet n - n - - smtpd >>> -o smtpd_tls_wrappermode=yes >>> -o smtpd_sasl_auth_enable=yes >>> -o smtpd_client_restrictions=permit_sasl_authenticate

Re: Incoming smtp: 554 Access Denied

* Noel Jones : > Jesse, > > You may find it helpful to add >-o syslog_name=postfix-smtps > to the above options to differentiate logging from the smtps service. Amen to that! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benja

Re: Pre Queue Spam Assassin Advice

On Wed, Jun 24, 2009 at 08:43:15PM +0100, Steve wrote: > My train of thought is to filter in this order; > POSTFIX NATIVE > client checks (RATE CONTROL, IP, PTR, RBL, CUSTOM LISTS, HEADER & BODY) > PRE-QUEUE CONTENT FILTER (CLAMAV using clamsmtp) > PRE-QUEUE CONTENT FILTER (spamass-milter) > Thi

Re: Incoming smtp: 554 Access Denied

Noel Jones wrote: Jesse Kretschmer wrote: # postconf -n delay_warning_time = 10m Quite short, but won't break anything. maximal_queue_lifetime = 2d recommended minimum is 3 days, default is 5 days. If you have lots of undeliverable mail in your queue, address the source of the undelive

Re: Slowly drain the active queue

On Wed, Jun 24, 2009 at 07:42:11PM +, George Forman wrote: > > Hi, > I'm trying to understand how I can control postfix active queue.We > ran into a problem where out back end LMTP deposit service had > failures.Therefore, the queues grew quite large.We had trouble stabilizing > the LTMP back

Re: Pre Queue Spam Assassin Advice

On Wed, 2009-06-24 at 15:35 -0400, Victor Duchovni wrote: > On Wed, Jun 24, 2009 at 08:29:42PM +0100, Steve wrote: > > > > > My only confusion is where do I put the symlink. To make matters a > > > > struggle for me I'm dyslexic so please forgive me a little as I'm > > > > struggling to follow thi

Slowly drain the active queue

Hi, I'm trying to understand how I can control postfix active queue.We ran into a problem where out back end LMTP deposit service had failures.Therefore, the queues grew quite large.We had trouble stabilizing the LTMP back end because postfix active queuewas trying to deliver very quickly to LM

Re: Incoming smtp: 554 Access Denied

Ralf Hildebrandt wrote: * Jesse Kretschmer : Oops. I've never actually touched the master.cf file, so when I read the line, I just assumed main.cf. Thanks for bearing with me. Without further ado: # sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/master.cf smtp inet

Re: Pre Queue Spam Assassin Advice

On Wed, Jun 24, 2009 at 08:29:42PM +0100, Steve wrote: > > > My only confusion is where do I put the symlink. To make matters a > > > struggle for me I'm dyslexic so please forgive me a little as I'm > > > struggling to follow this: /home/mail/email/home/mail/email - I see the > > > same things tw

Re: Pre Queue Spam Assassin Advice

On Wed, 2009-06-24 at 14:58 -0400, Victor Duchovni wrote: > On Wed, Jun 24, 2009 at 07:20:00PM +0100, EASY > steve.h...@digitalcertainty.co.uk wrote: > > > > It looks like some of your smtpd(8) master.cf entries are chrooted and > > > others are not. You should use the unchrooted pathname in both

Re: Incoming smtp: 554 Access Denied

Jesse Kretschmer wrote: Thanks for the many quick responses. I should have started with this: # postconf -n delay_warning_time = 10m Quite short, but won't break anything. maximal_queue_lifetime = 2d recommended minimum is 3 days, default is 5 days. If you have lots of undeliverable mail

Re: Incoming smtp: 554 Access Denied

* Jesse Kretschmer : >Oops.  I've never actually touched the master.cf file, so when I read the >line, I just assumed main.cf. > >Thanks for bearing with me.  Without further ado: > ># sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/master.cf >smtp  inet  n   -   

Re: Incoming smtp: 554 Access Denied

Ralf Hildebrandt wrote: * Jesse Kretschmer : Ralf Hildebrandt wrote: Nothing in here cold cause what you see. Show master.cf please [r...@mail ~]# sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/main.cf This hardly shows master.cf :)

Re: Incoming smtp: 554 Access Denied

* Jesse Kretschmer : > Ralf Hildebrandt wrote: >> Nothing in here cold cause what you see. >> Show master.cf please > [r...@mail ~]# sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/main.cf This hardly shows master.cf :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité

Re: Incoming smtp: 554 Access Denied

Ralf Hildebrandt wrote: Nothing in here cold cause what you see. Show master.cf please [r...@mail ~]# sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/main.cf soft_bounce = no content_filter=smtp-amavis:[127.0.0.1]:10024 queue_directory = /var/spool/postfix command_directory = /usr/local/sbin

Re: Pre Queue Spam Assassin Advice

On Wed, Jun 24, 2009 at 07:20:00PM +0100, EASY steve.h...@digitalcertainty.co.uk wrote: > > It looks like some of your smtpd(8) master.cf entries are chrooted and > > others are not. You should use the unchrooted pathname in both cases, > > and make a symlink: > > > > /home/mail/email/home/m

Re: Incoming smtp: 554 Access Denied

* Jesse Kretschmer : > Thanks for the many quick responses.I should have started with this: > > # postconf -n Nothing in here cold cause what you see. Show master.cf please > smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated > reject_unauth_destination check_client_ac

Re: Incoming smtp: 554 Access Denied

Thanks for the many quick responses.I should have started with this: # postconf -n broken_sasl_auth_clients = yes command_directory = /usr/local/sbin config_directory = /usr/local/etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 daemon_directory = /usr/local/libexec/postfix data_director

Re: Pre Queue Spam Assassin Advice

On Wed, 2009-06-24 at 13:29 -0500, Noel Jones wrote: > EASY steve.h...@digitalcertainty.co.uk wrote: > > On Wed, 2009-06-24 at 14:02 -0400, Victor Duchovni wrote: > >> On Wed, Jun 24, 2009 at 06:54:37PM +0100, Steve wrote: > >> > >>> milter_default_action = tempfail > >> "/private/samilte"

Re: Incoming smtp: 554 Access Denied

On Jun 24, 2009, at 2:23 PM, Jesse Kretschmer wrote: Howdy, I've seen error "Client host rejected: Access denied" in many other postings, but more than a day of reading has not led me to a solution. A client is having issues sending mail to our server. I investigated and found that postf

Re: Incoming smtp: 554 Access Denied

>These are now my current settings from main.cf Show "postconf -n" output. >Jun 24 09:30:50 mail postfix/smtpd[44853]: NOQUEUE: reject: RCPT from >bb02d1.eurorscg.com[69.74.116.40]: 554 5.7.1 >: Client host rejected: Access denied; >from= to=<[1]xremov...@psyop.tv> proto=ESMTP

Re: Incoming smtp: 554 Access Denied

* Noel Jones : > Jesse Kretschmer wrote: >> Howdy, >> I've seen error "Client host rejected: Access denied" in many other >> postings, but more than a day of reading has not led me to a solution. >> >> A client is having issues sending mail to our server. I investigated >> and found that postf

Re: Incoming smtp: 554 Access Denied

Jesse Kretschmer wrote: Howdy, I've seen error "Client host rejected: Access denied" in many other postings, but more than a day of reading has not led me to a solution. A client is having issues sending mail to our server. I investigated and found that postfix was rejecting the sending serv

Re: Pre Queue Spam Assassin Advice

EASY steve.h...@digitalcertainty.co.uk wrote: On Wed, 2009-06-24 at 14:02 -0400, Victor Duchovni wrote: On Wed, Jun 24, 2009 at 06:54:37PM +0100, Steve wrote: milter_default_action = tempfail "/private/samilte" != /home/mail/email/private/samilter Postfix runs chrooted and the absolute woul

Incoming smtp: 554 Access Denied

Howdy, I've seen error "Client host rejected: Access denied" in many other postings, but more than a day of reading has not led me to a solution. A client is having issues sending mail to our server.  I investigated and found that postfix was rejecting the sending server with: NOQUEUE: reject

Re: Pre Queue Spam Assassin Advice

On Wed, 2009-06-24 at 14:02 -0400, Victor Duchovni wrote: > On Wed, Jun 24, 2009 at 06:54:37PM +0100, Steve wrote: > > > > > > > milter_default_action = tempfail > > > > > > > > > > "/private/samilte" != /home/mail/email/private/samilter > > > > > > > > > Postfix runs chrooted and the absolute w

Re: Pre Queue Spam Assassin Advice

On Wed, Jun 24, 2009 at 06:54:37PM +0100, Steve wrote: > > > > > milter_default_action = tempfail > > > > > > > > "/private/samilte" != /home/mail/email/private/samilter > > > > > > > Postfix runs chrooted and the absolute would be incorrect. It's chrooted > > > to /home/mail/email hence it is c

Re: Pre Queue Spam Assassin Advice

On Wed, 2009-06-24 at 13:46 -0400, Victor Duchovni wrote: > On Wed, Jun 24, 2009 at 06:36:41PM +0100, EASY > steve.h...@digitalcertainty.co.uk wrote: > > > > > If I have a milter set up and it creates a 'unix socket' on start up, > > > > e.g. > > > > /home/mail/email/private/samilter > > > > >

Re: Pre Queue Spam Assassin Advice

On Wed, Jun 24, 2009 at 06:36:41PM +0100, EASY steve.h...@digitalcertainty.co.uk wrote: > > > If I have a milter set up and it creates a 'unix socket' on start up, > > > e.g. > > > /home/mail/email/private/samilter > > > > > > then defining the milter in main.cf like this (bear in mind Postfix

Re: Pre Queue Spam Assassin Advice

On Wed, 2009-06-24 at 13:32 -0400, Victor Duchovni wrote: > On Wed, Jun 24, 2009 at 05:49:45PM +0100, Steve wrote: > > > Hi List, > > > > I've been having some adventures with pre queue filtering with > > SpamAssassin. This has introduced me to 'milters' which look really > > interesting. > > >

Re: Pre Queue Spam Assassin Advice

On Wed, Jun 24, 2009 at 05:49:45PM +0100, Steve wrote: > Hi List, > > I've been having some adventures with pre queue filtering with > SpamAssassin. This has introduced me to 'milters' which look really > interesting. > > I've been trying to set up suggested spamassassin milter > (spamass-milter

Pre Queue Spam Assassin Advice

Hi List, I've been having some adventures with pre queue filtering with SpamAssassin. This has introduced me to 'milters' which look really interesting. I've been trying to set up suggested spamassassin milter (spamass-milter) but I'm find large gaps in my basic Linux understanding.I don't mind a

Re: warning: maildir access problem for UID/GID=4444/4444: create maildir file

On Wed, Jun 24, 2009 at 03:35:08AM -0700, Michael Wang wrote: >> Why i get permission denied error while i have set permission 777 ? o Postfix may decline to use a mode "777" directory, try 1777 or a properly owned more 0700 directory with a delivery agent running with a fixed user id and IMAP se

Re: Testing For Open Relay

Carlos Williams wrote: I just finished a new Postfix 2.6 installation on a Debian server in a co-location and just wanted to make sure I am properly testing this machine is not a 'open relay' before I open it out to the public: I was told to go to the following URL http://www.abuse.net/relay.htm

Testing For Open Relay

I just finished a new Postfix 2.6 installation on a Debian server in a co-location and just wanted to make sure I am properly testing this machine is not a 'open relay' before I open it out to the public: I was told to go to the following URL http://www.abuse.net/relay.html and I entered my extern

Re: Query on customize the over-quota bounce message on postfix2.2

MSG Support: > Hi all, > > My current postfix version installed is postfix-2.2.10-1.1.el4 Postfix 2.3 and later will extract the 5.2.2 status code in your bounce message below. The mail user agent can then translate it into human-readable text in the user's own language. According to RFC 3463, s

Re: Query on customize the over-quota bounce message on postfix2.2

On 6/24/2009, MSG Support (msgsupport@gmail.com) wrote: > My current postfix version installed is postfix-2.2.10-1.1.el4 This is really old... upgrading to a more current release would be a good thing in any case... > The user's mail over-quota, it will automatically send a bounced mail > to

Re: Need a resolution to a weird error

On Tue, Jun 23, 2009 at 09:02:19PM -0700, Evan Platt wrote: > At 08:54 PM 6/23/2009, you wrote: >> Looks as if postifx will not send to mailbox >> which has close to 50M in the mailbox. >> >> Can this be overriden? > > http://www.postfix.org/postconf.5.html > > mailbox_size_limit (default: 5120

Re: Email in Active Queue without delivery attempts

Jacky Chan: > > > > Victor Duchovni wrote: > > > > On Tue, Jun 23, 2009 at 07:57:00PM -0700, Jacky Chan wrote: > > > > The rate_delay feature was repaired in Postfix 2.5.7. All users of > > this feature should be using a Postfix release with a mail_release_date > > after 20090305. > > > > +20

Re: Anvil Syntax ?

Steve: > Hi, > > I'm running through the brilliant 'Book of Postfix' and running into > some confusion with anvil/rate control - specifically syntax. around > page 384 > > smtpd_client_connection_limit_exceptions = > smtpd_client_connection_rate_limit = 3 > smtpd_client_connection_count_limit =

Re: warning: maildir access problem for UID/GID=4444/4444: create maildir file

Flash Web wrote: When i send a mail to local postfix installation, i get error Jun 23 16:13:22 linux postfix/virtual[2526]: warning: maildir access problem for UID/GID=/: create maildir file /home/vmail/info/tmp/1245753802.P2526.linux.localdomain: Permission denied I have set vmail owners

Re: Need a resolution to a weird error

2009/6/24 Evan Platt : > At 08:54 PM 6/23/2009, you wrote: >> >> Looks as if postifx will not send to mailbox >> which has close to 50M in the mailbox. > > http://www.postfix.org/postconf.5.html > > mailbox_size_limit (default: 5120) > > The maximal size of any

Re: Anvil Syntax THANKS

On Wed, 2009-06-24 at 11:07 +0200, Ralf Hildebrandt wrote: > * Steve : > > > smtpd_client_event_limit_exceptions = my_networks > > smtpd_client_event_limit_exceptions = $mynetworks > > > or > > > > smtpd_client_event_limit_exceptions = my_networks, 1.2.3.4, 5.6.7.8 > > smtpd_client_event_lim

Re: Anvil Syntax ?

* Steve : > smtpd_client_event_limit_exceptions = my_networks smtpd_client_event_limit_exceptions = $mynetworks > or > > smtpd_client_event_limit_exceptions = my_networks, 1.2.3.4, 5.6.7.8 smtpd_client_event_limit_exceptions = $mynetworks, 1.2.3.4, 5.6.7.8 > and that will be good? Yep You

Re: Anvil Syntax ?

On Wed, 2009-06-24 at 10:59 +0200, Ralf Hildebrandt wrote: > * Ralf Hildebrandt : > > > > Which makes me wonder what the right syntax should be. Has the syntax > > > changed since the box was produced or is it going to change in the near > > > future? > > > > The former. The concept stays the sam

Re: Anvil Syntax ?

* Ralf Hildebrandt : > > Which makes me wonder what the right syntax should be. Has the syntax > > changed since the box was produced or is it going to change in the near > > future? > > The former. The concept stays the same, though. Reason: When the book was written, anvil was only in the snap

Re: Anvil Syntax ?

* Steve : > Hi, > > I'm running through the brilliant 'Book of Postfix' and running into > some confusion with anvil/rate control - specifically syntax. around > page 384 > > smtpd_client_connection_limit_exceptions = > smtpd_client_connection_rate_limit = 3 > smtpd_client_connection_count_limit

Anvil Syntax ?

Hi, I'm running through the brilliant 'Book of Postfix' and running into some confusion with anvil/rate control - specifically syntax. around page 384 smtpd_client_connection_limit_exceptions = smtpd_client_connection_rate_limit = 3 smtpd_client_connection_count_limit = 3 client_connection_rate_

Query on customize the over-quota bounce message on postfix2.2

Hi all, My current postfix version installed is postfix-2.2.10-1.1.el4 The user's mail over-quota, it will automatically send a bounced mail to the sender as below: ___Begining of the message__ This is the Postfix program at host myhostname.mydomain.com I'm sorry to h

Re: Email in Active Queue without delivery attempts

Victor Duchovni wrote: > > On Tue, Jun 23, 2009 at 07:57:00PM -0700, Jacky Chan wrote: > > The rate_delay feature was repaired in Postfix 2.5.7. All users of > this feature should be using a Postfix release with a mail_release_date > after 20090305. > > +20090305 > + > + Bugfix: in the