Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Scott Haneda
On Jul 8, 2009, at 10:00 PM, ram wrote: On Wed, 2009-07-08 at 19:10 +0200, Ignacio Garcia wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk- email fr

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread ram
On Wed, 2009-07-08 at 19:10 +0200, Ignacio Garcia wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi guys. I've been googling around looking for info on this without much > sucess. Here we are: Some of my customers insist on sending bulk-email > from their web php sites (you know, bul

Re: Logging sender recipient pairs

2009-07-08 Thread Victor Duchovni
On Thu, Jul 09, 2009 at 06:23:09AM +0200, Magnus Bäck wrote: > On Thursday, July 09, 2009 at 03:44 CEST, > Sahil Tandon wrote: > > [...] > > > You might be able to use the fact that qmgr(8) logs the original recipient > > count. Example: > > > > postfix/qmgr[54662]: 98EF25C51: from=, siz

Re: postfix+mysql one postmaster for all virtual domains?

2009-07-08 Thread Magnus Bäck
On Wednesday, July 08, 2009 at 23:37 CEST, Ignacio Garcia wrote: > Hi, we have postfix+mysql with virtual domains. Until now for each > virtual domain we have created a postmaster account for each domain > (that means customer), and at the end, none of my customers read the > mail. I've been

Re: Logging sender recipient pairs

2009-07-08 Thread Magnus Bäck
On Thursday, July 09, 2009 at 03:44 CEST, Sahil Tandon wrote: [...] > You might be able to use the fact that qmgr(8) logs the original recipient > count. Example: > > postfix/qmgr[54662]: 98EF25C51: from=, size=717, nrcpt=5 > > Take care to avoid double counting in situations where mail

Re: Logging sender recipient pairs

2009-07-08 Thread Sahil Tandon
On Wed, 08 Jul 2009, Chris Turan wrote: > The idea is to count the number of envelope recipients to determine > who's sending to lots of people. If someone goes over 500 per day, flag > them as suspicious and alert me. It might be better to define a "someone" as an IP rather than an envelope

Re: SMTP connectivity problem

2009-07-08 Thread Noel Jones
OK, I give on the top-posting. Turn off your antivirus for testing, or try a different computer. -- Noel Jones New Old Stk wrote: Noel Server is real. It does look like problem at my end however I have replaced modem+router (DrayTek + Cisco ASA) with generic Zoom ADSL modem and still cannot

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
Noel Server is real. It does look like problem at my end however I have replaced modem+router (DrayTek + Cisco ASA) with generic Zoom ADSL modem and still cannot connect. I will keep investigating the issue so thank you all for input. George On Wed, Jul 8, 2009 at 11:14 PM, Noel Jones wrote: >

Re: Logging sender recipient pairs

2009-07-08 Thread Barney Desmond
2009/7/9 Chris Turan : > The idea is to count the number of envelope recipients to determine who's > sending to lots of people.  If someone goes over 500 per day, flag them as > suspicious and alert me. > > Postfix already logs part of this in syslog but the recipient list is > truncated or split u

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Barney Desmond
2009/7/9 Ignacio Garcia : > can trigger undesired actions. People sometimes have poorly designed web > pages with a not-too good php emailing code. Practically guaranteed :) > For instance. I'd like to find a way (maybe through some header checks > in outgoing email) so if it detects a large amou

Re: hiding relay client info in headers

2009-07-08 Thread Noel Jones
GeoffSweet wrote: Greetings all, we have corporate postfix mail servers that act as our central point for inbound mail as well as acting as smarthosts for outbound for our Exchange servers in various locations. We do this by allowing the exchange servers to relay off the Postfix servers by in

hiding relay client info in headers

2009-07-08 Thread GeoffSweet
Greetings all, we have corporate postfix mail servers that act as our central point for inbound mail as well as acting as smarthosts for outbound for our Exchange servers in various locations. We do this by allowing the exchange servers to relay off the Postfix servers by including them in the

Re: SMTP connectivity problem

2009-07-08 Thread Noel Jones
New Old Stk wrote: Looks like I spoke to early about tricky Cisco router. Just had our modem/router equipment replaced, hoping it would fix the problem but to no avail! I give up. On Wed, Jul 08, 2009 at 04:25:43PM +0100, New Old Stk wrote: > Noel, connecting to server remote

Re: Address Extensions

2009-07-08 Thread Noel Jones
Daniel L. Miller wrote: Noel Jones wrote: Sahil Tandon wrote: On Tue, 07 Jul 2009, Sahil Tandon wrote: On Tue, 07 Jul 2009, Daniel L. Miller wrote: So...my initial thought was I'd have to create a public Internet name for the fax gateway, and apply some level of security to only accept s

Re: Address Extensions

2009-07-08 Thread Noel Jones
Daniel L. Miller wrote: Daniel L. Miller wrote: Noel Jones wrote: either way, use smtpd_*_restrictions to restrict access to the recipient. What kind of "allow" restrictions would make sense as I am looking to receive from a domain I do not control (e.g. Intuit)? Would check_sender_acces

Re: postfix+mysql one postmaster for all virtual domains?

2009-07-08 Thread Martin Strand
You could add another mysql alias map: [main.cf] virtual_alias_maps = proxy:mysql:/path/to/virtual_alias_maps [virtual_alias_maps] query = select 'supportst...@isp.ltd' from your_virtual_domains where '%u' in ('postmaster', 'abuse', 'any-other-local-part') and domain =

postfix+mysql one postmaster for all virtual domains?

2009-07-08 Thread Ignacio Garcia
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, we have postfix+mysql with virtual domains. Until now for each virtual domain we have created a postmaster account for each domain (that means customer), and at the end, none of my customers read the mail. I've been trying to find out a way so we d

Re: Multiple Aliases Files - Same Domain

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 04:04:33PM -0400, wiskbr...@hotmail.com wrote: > alias_maps = dbm:/etc/postfix/aliases, dbm:/etc/newcompany/aliases, > nis:mail.aliases Are you sure you want a local aliases(5) file and not a virtual(5) aliases file? Generally, and especially for non-system users, the lat

OT - Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Chris Babcock
> > There are various "band-aid" approaches, like running the outbound > > mail through spamassassin and HOLDing the "spammy" mail, however > > this may or may not catch what you want, since even SpamAssassin > > has no idea if the user actually wanted the mail or not. > > Yes, we already do that

Logging sender recipient pairs

2009-07-08 Thread Chris Turan
Hi All, I'm attempting to come up with a better solution for detecting email customers who attempt to send email campaigns using my mail servers. I'd like to find a way to have postfix log the sender and recipient addresses into a flat file, as well as the message id and timestamp. The idea

Multiple Aliases Files - Same Domain

2009-07-08 Thread wiskbroom
All; My organization has recently acquired a very small company that has and manages their own exchange servers. We would like this company to begin using the same email domain addresses that we use. The only problem is that we are not yet able to capture their aliases into our own aliases f

Re: sender verification

2009-07-08 Thread Magnus Bäck
On Wed, July 8, 2009 8:48 pm, K bharathan said: > On Wed, Jul 8, 2009 at 1:42 PM, Magnus Bäck wrote: > > > SAV is not recommended for general use with all domains. What problem > > do you think you would solve with SAV? > > sorry i posted my reply in some other thread; > i read about SAV in backs

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 12:44:17PM -0600, LuKreme wrote: > On Jul 7, 2009, at 9:15 AM, Michael Durket > wrote: > >> So what's the best way to quickly (i.e. less than a few seconds) get the >> current queue count out of Postfix? > > ls -1 [queue directory] | wc -l The Perl code I posted works wh

Re: Address Extensions

2009-07-08 Thread Daniel L. Miller
Daniel L. Miller wrote: Noel Jones wrote: either way, use smtpd_*_restrictions to restrict access to the recipient. What kind of "allow" restrictions would make sense as I am looking to receive from a domain I do not control (e.g. Intuit)? Would check_sender_access against the domain be s

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread LuKreme
On Jul 7, 2009, at 9:15 AM, Michael Durket wrote: So what's the best way to quickly (i.e. less than a few seconds) get the current queue count out of Postfix? ls -1 [queue directory] | wc -l ?

Re: Address Extensions

2009-07-08 Thread Daniel L. Miller
Noel Jones wrote: Sahil Tandon wrote: On Tue, 07 Jul 2009, Sahil Tandon wrote: On Tue, 07 Jul 2009, Daniel L. Miller wrote: So...my initial thought was I'd have to create a public Internet name for the fax gateway, and apply some level of security to only accept submissions from Intuit.

OT: Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Terry Carmen
>>> Hi guys. I've been googling around looking for info on this without much >>> sucess. Here we are: Some of my customers insist on sending bulk-email >>> from their web php sites (you know, bulletins and such). My worst >>> nightmare would be having our servers listed in any RBL list because of >

Re: sender verification

2009-07-08 Thread K bharathan
sorry i posted my reply in some other thread; i read about SAV in backscatterer.org and want to confirm with list thanks On Wed, Jul 8, 2009 at 1:42 PM, Magnus Bäck wrote: > On Wed, July 8, 2009 8:57 am, K bharathan said: > > > is it effective if i use sender verification; i understand there is

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Ignacio Garcia
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Terry Carmen escribió: >> Hi guys. I've been googling around looking for info on this without much >> sucess. Here we are: Some of my customers insist on sending bulk-email >> from their web php sites (you know, bulletins and such). My worst >> nightma

Re: Filtering emails on server

2009-07-08 Thread K bharathan
i read about SAV in backscatterer.org and want to confirm with the list thanks On Wed, Jul 8, 2009 at 3:46 PM, Robert Jakob wrote: > Thank you, this was the hint I was looking for! > > Magnus Bäck schrieb: > > On Wed, July 8, 2009 1:44 pm, Robert Jakob said: >> >> >> >>> I am listed in several

Re: Question About Maildir Mailboxes

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 01:54:54PM -0400, Carlos Williams wrote: > On Wed, Jul 8, 2009 at 1:48 PM, Victor > Duchovni wrote: > > > This is the default value. You don't need this, unless someone > > (perhaps an O/S distribution) supplied you with a main.cf file > > that overrides the default. > >

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Leonardo Rodrigues
Terry Carmen escreveu: There are various "band-aid" approaches, like running the outbound mail through spamassassin and HOLDing the "spammy" mail, however this may or may not catch what you want, since even SpamAssassin has no idea if the user actually wanted the mail or not. another ap

Re: SMTP connectivity problem

2009-07-08 Thread Charles Marcus
On 7/8/2009 2:16 PM, New Old Stk wrote: > Looks like I spoke to early about tricky Cisco router. Just had our > modem/router equipment replaced, hoping it would fix the problem but to > no avail! I give up. Replaced... with another Cisco? If so, try to disable smtp_fixup on it... -- Best regar

Re: SMTP connectivity problem

2009-07-08 Thread donovan jeffrey j
On Jul 8, 2009, at 2:16 PM, New Old Stk wrote: Looks like I spoke to early about tricky Cisco router. Just had our modem/router equipment replaced, hoping it would fix the problem but to no avail! I give up. in the cisco box , did you remove any " fixup smtp "protocols / ports ? On Wed

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
Looks like I spoke to early about tricky Cisco router. Just had our modem/router equipment replaced, hoping it would fix the problem but to no avail! I give up. On Wed, Jul 8, 2009 at 6:03 PM, New Old Stk wrote: > Guys thanks a lot for helping out with my problem. I just tried sending > mail from

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Terry Carmen
> Hi guys. I've been googling around looking for info on this without much > sucess. Here we are: Some of my customers insist on sending bulk-email > from their web php sites (you know, bulletins and such). My worst > nightmare would be having our servers listed in any RBL list because of > this. H

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread Wietse Venema
Michael Durket: > Thanks to all who replied. I'll be trying out the various ideas. But > they all > seem awkward. In my MVS days, when we wrote large scale systems > like this, we'd keep important statistics in the link pack area, > constantly > updated, so monitor programs could just map that

Re: Question About Maildir Mailboxes

2009-07-08 Thread Carlos Williams
On Wed, Jul 8, 2009 at 1:48 PM, Victor Duchovni wrote: > This is the default value. You don't need this, unless someone > (perhaps an O/S distribution) supplied you with a main.cf file > that overrides the default. Hmmm... I am using the Debian provided main.cf when I used apt-get to install thei

Re: Question About Maildir Mailboxes

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 01:40:58PM -0400, Carlos Williams wrote: > I am setting up a new server to run Maildir style in-boxes. In my > main.cf, I added the following parameter: > > "home_mailbox = Maildir/" > > The above seems to be working fine in my main.cf. It auto created the > directory upo

Re: Question About Maildir Mailboxes

2009-07-08 Thread Sahil Tandon
On Jul 8, 2009, at 1:40 PM, Carlos Williams wrote: I am setting up a new server to run Maildir style in-boxes. In my main.cf, I added the following parameter: "home_mailbox = Maildir/" The above seems to be working fine in my main.cf. It auto created the directory upon receiving the 1st ema

Question About Maildir Mailboxes

2009-07-08 Thread Carlos Williams
I am setting up a new server to run Maildir style in-boxes. In my main.cf, I added the following parameter: "home_mailbox = Maildir/" The above seems to be working fine in my main.cf. It auto created the directory upon receiving the 1st email but I was also reading I need to add the following par

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 10:30:23AM -0700, Michael Durket wrote: > Since Postfix knows the queue size, and other relevant > statistics, Postfix does not know the size of the deferred, incoming or maildrop queues. This is intentional. -- Viktor. Disclaimer: off-list followups get on-lis

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread Michael Durket
Thanks to all who replied. I'll be trying out the various ideas. But they all seem awkward. In my MVS days, when we wrote large scale systems like this, we'd keep important statistics in the link pack area, constantly updated, so monitor programs could just map that area and get the data (or

Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Ignacio Garcia
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk-email from their web php sites (you know, bulletins and such). My worst nightmare would be having our servers list

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
Guys thanks a lot for helping out with my problem. I just tried sending mail from friend's mail server (SBS 2003) and same problem occured. Looks like Cisco box in our office messing up. Appreciate all the input and many many thanks! George On Wed, Jul 8, 2009 at 4:34 PM, Victor Duchovni < victo

Re: Rerouting mail in queue to another SMTP

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 12:42:33PM -0400, Wietse Venema wrote: > # cat >>/etc/postfix/transport > example.com host.example.com Surely: example.com relay:[host.example.com] > # postmap hash:/etc/postfix/transport > # postconf -e transport_maps=hash:/etc/postfix/

Re: Rerouting mail in queue to another SMTP

2009-07-08 Thread Wietse Venema
Frank DeChellis: > Hi there, > > New to postfix and the list. > > We have a new postfix install (v 2.5.6) that we are trying to get going. > > My problem is ... I setup that server to be our gateway in our DNS so the > address has propagated when I needed it. But I left it on with the postfix

Re: Rerouting mail in queue to another SMTP

2009-07-08 Thread Barney Desmond
2009/7/9 Frank DeChellis : > We have a new postfix install (v 2.5.6) that we are trying to get going. > > My problem is ...  I setup that server to be our gateway in our DNS so the > address has propagated when I needed it.  But I left it on with the postfix > running for a few hours. > > So now I

Re: SMTP connectivity problem

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 04:25:43PM +0100, New Old Stk wrote: > Noel, connecting to server remotely didn't work. I wonder what's the reason > as no ports seem to be blocked. > > > g2$ openssl s_client -starttls smtp -crlf -connect one.mailexpeditor.com:25 > CONNECTED(0003) > 157:error:140770F

Rerouting mail in queue to another SMTP

2009-07-08 Thread Frank DeChellis
Hi there, New to postfix and the list. We have a new postfix install (v 2.5.6) that we are trying to get going. My problem is ... I setup that server to be our gateway in our DNS so the address has propagated when I needed it. But I left it on with the postfix running for a few hours. So now

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
Noel, connecting to server remotely didn't work. I wonder what's the reason as no ports seem to be blocked. g2$ openssl s_client -starttls smtp -crlf -connect one.mailexpeditor.com:25 CONNECTED(0003) 157:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:601: I a

Re: SMTP connectivity problem

2009-07-08 Thread Noel Jones
New Old Stk wrote: I tried both Thunderbird and Outlook 2007. SMTP port in both was set to 25. I experimented with all combinations of SSL/TLS settings available in TB and Outlook as well. Thunderbird though displayed the following message (TLS/25): Sending of message failed. An error oc

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
I tried both Thunderbird and Outlook 2007. SMTP port in both was set to 25. I experimented with all combinations of SSL/TLS settings available in TB and Outlook as well. Thunderbird though displayed the following message (TLS/25): Sending of message failed. An error occured sending mail: Unable t

Re: Some early postscreen results

2009-07-08 Thread LuKreme
On 7-Jul-2009, at 09:23, Wietse Venema wrote: You can find an overview of postscreen, and some pictures of early results, at http://www.porcupine.org/postfix-mirror/wip.html (and soon on Postfix documentation mirror websites). I've gone through the slides and the "Prototype postscreen archite

Re: SMTP connectivity problem

2009-07-08 Thread Brian Evans - Postfix List
New Old Stk wrote: > > > Sorry Brian, i didn't post the full command I was testing the > connection with. Yes, it had -starttls among other things and it did > work fine. I was able to connect, AUTH PLAIN generated string (below) > and get 235 2.0.0 Authentication successful: > > #perl -MMIM

Re: Filtering emails on server

2009-07-08 Thread Robert Jakob
Thank you, this was the hint I was looking for! Magnus Bäck schrieb: On Wed, July 8, 2009 1:44 pm, Robert Jakob said: I am listed in several mailing lists and I am looking for a possibility to put emails with some keywords regarding header-fields or content, into specific imap-sub-folders.

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
On Wed, Jul 8, 2009 at 2:11 PM, Brian Evans - Postfix List < grkni...@scent-team.com> wrote: > New Old Stk wrote: > For some unknown reason my mail client cannot connect > to newly built > > FreeBSD mail server to send emails - connection refused. Originally I > > was intending to build secure co

Re: SMTP connectivity problem

2009-07-08 Thread Brian Evans - Postfix List
New Old Stk wrote: > For some unknown reason my mail client cannot connect to newly built > FreeBSD mail server to send emails - connection refused. Originally I > was intending to build secure connection using SASL2 and TLS/SSL but > like I said I experience difficulties connecting to SMTP server.

[zot...@gmail.com: [mail/postfix]: don't build on latest current]

2009-07-08 Thread Sahil Tandon
FYI for FreeBSD users of the latest -CURRENT. I will not be able to test this until later this week / weekend, but just in case someone else runs into a similar problem. I know FreeBSD 8 is not "supported" as per the current makedefs, but there are still some people building on there. :) At firs

Re: Filtering emails on server

2009-07-08 Thread Magnus Bäck
On Wed, July 8, 2009 1:44 pm, Robert Jakob said: > I am listed in several mailing lists and I am looking for a > possibility to put emails with some keywords > regarding header-fields or content, into specific imap-sub-folders. > > Has anyone some tutorial or s.th. for this? Postfix' own delivery

Filtering emails on server

2009-07-08 Thread Robert Jakob
Hello, I am listed in several mailing lists and I am looking for a possibility to put emails with some keywords regarding header-fields or content, into specific imap-sub-folders. Has anyone some tutorial or s.th. for this? Example: IMAP-Folder-Structure: - Inbox - Lists |- Postfix |- Debia

Re: sender verification

2009-07-08 Thread Magnus Bäck
On Wed, July 8, 2009 8:57 am, K bharathan said: > is it effective if i use sender verification; i understand there is a risk > of getting blacklisted the mail server that's doing the SAV; what could be > the guidelines for putting this in postfix > guidance appreciated SAV is not recommended for

Re: sender verification

2009-07-08 Thread Charles Marcus
On 7/8/2009, K bharathan (kbhara...@gmail.com) wrote: > is it effective if i use sender verification; i understand there is a > risk of getting blacklisted the mail server that's doing the SAV; > what could be the guidelines for putting this in postfix > guidance appreciated Only use SAV against s

SMTP connectivity problem

2009-07-08 Thread New Old Stk
For some unknown reason my mail client cannot connect to newly built FreeBSD mail server to send emails - connection refused. Originally I was intending to build secure connection using SASL2 and TLS/SSL but like I said I experience difficulties connecting to SMTP server. My observations: 1. Rec

Re: Open Relay (???)

2009-07-08 Thread Ralf Hildebrandt
* Márcio Luciano Donada : > command_time_limit = 1h Why change this? > inet_protocols = all Default, why set this explicitly? > mydomain = domain.com.br > myhostname = mx.domain.com.br Setting myhostname to mx.domain.com.br implies mydomain = domain.com.br > relay_domains = $mydestination You