Re: Country IP block list

2009-08-23 Thread Olivier Nicole
Hi, > Could someone provide links to sites where IP addresses are grouped by coun= > try? ASNs would work too but would prefer IP lists that I could put in a f= > ile that my postfix mail gateway could read. Obvious countries like China = > and Brazil I would like to block wholesale. As mention

Re: Relaying mail through remote server?

2009-08-23 Thread MySQL Student
Hi, >> What is the "submission" port? It doesn't have anything to do with >> postfix or SASL? > > postfix running on the submission port.   You need to configure your postfix > for SMTP AUTH (SASL) and also configure postfix to listen on the submission > port. Ah, got it, thanks so much. Best re

Re: Relaying mail through remote server?

2009-08-23 Thread Noel Jones
On 8/23/2009 7:51 PM, MySQL Student wrote: Hi, with, so I had to add an entire /24 to mynetworks so he wouldn't have a problem connecting. Er... the day I do something like that to work around the asstards at Verizon is the day someone needs to shoot me in the head. Yeah, not fun, but have

Re: Significant relay delays

2009-08-23 Thread Noel Jones
On 8/23/2009 7:01 PM, MySQL Student wrote: Hi, I'm also pretty sure it's not a network issue. After passing billions of packets there isn't a single error. I'm also pretty sure DNS is configured properly. Have you checked the connection between postfix and the exchange machines? After some ye

Re: issues with postfix-ldap

2009-08-23 Thread Daniel Corbe
Hi, I did some digging around and I didn't get much further: # postmap -q corbe.net ldap:acceptdomains postmap: warning: dict_ldap_lookup: Search error 50: Insufficient access It's almost as if postfix is simply ignoring the fact that I've asked it to bind a specific DN and is trying to bind an

Re: Relaying mail through remote server?

2009-08-23 Thread MySQL Student
Hi, >> with, so I had to add an entire /24 to mynetworks so he wouldn't have >> a problem connecting. > > Er... the day I do something like that to work around the asstards at > Verizon is the day someone needs to shoot me in the head. Yeah, not fun, but have to keep the customer > What is it ex

Re: Relaying mail through remote server?

2009-08-23 Thread LuKreme
On 23-Aug-2009, at 17:50, MySQL Student wrote: I have a user that travels frequently. We have been using pop-before-smtp, and that's worked well. He now has a Verizon Air card, and the IP changes faster than the popb4smtp db can keep up with, so I had to add an entire /24 to mynetworks so he woul

Re: Relaying mail through remote server?

2009-08-23 Thread Bill Weiss
MySQL Student(mysqlstud...@gmail.com)@Sun, Aug 23, 2009 at 07:50:39PM -0400: > Hi, > > I have a user that travels frequently. We have been using > pop-before-smtp, and that's worked well. He now has a Verizon Air > card, and the IP changes faster than the popb4smtp db can keep up > with, so I had

Re: Significant relay delays

2009-08-23 Thread MySQL Student
Hi, >> I'm also pretty sure it's not a network issue. After passing >> billions of packets there isn't a single error. I'm also pretty sure >> DNS is configured properly. > > Have you checked the connection between postfix and the exchange > machines? After some years, a cable can get bad, lousy,

Re: Significant relay delays

2009-08-23 Thread MySQL Student
Hi, > problem today. Mail was queuing up on one of our servers with exactly > the same messages as what you had. In our case a perl script on the > postfix server had gone crazy and started consuming all the memory and > swap space on the machine. Once that was fixed, the errors cleared up > and t

Re: Relay access denied, but I think it shouldn't be. (SOLVED)

2009-08-23 Thread Boyd Lynn Gerber
On Sun, 23 Aug 2009, lst_ho...@kwsoft.de wrote: Zitat von Boyd Lynn Gerber : I have a mental block and need an other set of eyes to maybe spot it. I have replaced the gmail username with user below. So below is the mail log and my postconf -n Aug 23 11:25:55 suse104 postfix/smtpd[16378]: NOQ

Relaying mail through remote server?

2009-08-23 Thread MySQL Student
Hi, I have a user that travels frequently. We have been using pop-before-smtp, and that's worked well. He now has a Verizon Air card, and the IP changes faster than the popb4smtp db can keep up with, so I had to add an entire /24 to mynetworks so he wouldn't have a problem connecting. He mentione

issues with postfix-ldap

2009-08-23 Thread Daniel Corbe
Hi, I'm seeing the following errors in my syslog being generated by trivial-rewrite after a MAIL FROM: command hits my MTA. I've been trying to enable LDAP lookups for my mail system without much success. The error messages aren't very helpful (even with verbose logging turned on for the triv

Re: rbl checks, best place + ipv6?

2009-08-23 Thread Mark Martinec
On Sunday August 23 2009 04:10:06 Dave Täht wrote: > What I found after fighting with an exchange server that what seems to > work best is assigning my first mx host to be ipv6 only, and my fallback > to be a mx ipv6 and ipv4 host. My choice is to have the first MX have both the IPv6 and IPv4 addr

Re: Relay access denied, but I think it shouldn't be.

2009-08-23 Thread /dev/rob0
On Sunday 23 August 2009 14:57:00 Boyd Lynn Gerber wrote: > Aug 23 11:25:55 suse104 postfix/smtpd[16378]: NOQUEUE: reject: RCPT from > localhost[::1]: 554 5.7.1 : Relay access denied; The IPv6 address for localhost is not in mynetworks. This client on localhost is using IPv6 to connect. > and her

Re: Relay access denied, but I think it shouldn't be.

2009-08-23 Thread lst_hoe02
Zitat von Boyd Lynn Gerber : Hello, I have a mental block and need an other set of eyes to maybe spot it. I have replaced the gmail username with user below. So below is the mail log and my postconf -n Aug 23 11:25:55 suse104 postfix/smtpd[16378]: NOQUEUE: reject: RCPT from localhost[::1

Relay access denied, but I think it shouldn't be.

2009-08-23 Thread Boyd Lynn Gerber
Hello, I have a mental block and need an other set of eyes to maybe spot it. I have replaced the gmail username with user below. So below is the mail log and my postconf -n Aug 23 11:25:55 suse104 postfix/smtpd[16378]: NOQUEUE: reject: RCPT from localhost[::1]: 554 5.7.1 : Relay access denie

Re: Country IP block list

2009-08-23 Thread lst_hoe02
Zitat von Daniel L'Hommedieu : On Aug 23, 2009, at 8:08, Byung-Hee HWANG wrote: At Sat, 22 Aug 2009 08:56:28 -0700, Security Admin (NetSec) wrote: [1 ] Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too but would prefer IP lists that I co

Re: Country IP block list

2009-08-23 Thread J.D. Bronson
We use pf and tables here to block as well. I have huge CIDR blocks as we don't communicate directly with anyone outside the USA either. Spam has fallen seriously. The only ones we typically see now are the residential IP blocks from Verizon or RoadRunner.. -- J.D. Bronson

Re: Country IP block list

2009-08-23 Thread Daniel L'Hommedieu
On Aug 23, 2009, at 8:08, Byung-Hee HWANG wrote: At Sat, 22 Aug 2009 08:56:28 -0700, Security Admin (NetSec) wrote: [1 ] Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too but would prefer IP lists that I could put in a file that my postfix

Re: Country IP block list

2009-08-23 Thread mouss
Benny Pedersen a écrit : > On Sun 23 Aug 2009 04:41:02 PM CEST, Justin Piszcz wrote > >> What I have found most useful is: geoip-policyd > > reminds me of maRBL > >> It uses geoip as well but as a small policy server framework, you can >> do whatever you want to do depending on where an IP origi

Re: Country IP block list

2009-08-23 Thread Benny Pedersen
On Sun 23 Aug 2009 04:41:02 PM CEST, Justin Piszcz wrote What I have found most useful is: geoip-policyd reminds me of maRBL It uses geoip as well but as a small policy server framework, you can do whatever you want to do depending on where an IP originates from (re: GeoIP). Come from c

Re: Country IP block list

2009-08-23 Thread Justin Piszcz
On Sun, 23 Aug 2009, postfix@cmulcahy.com wrote: Ralf Hildebrandt wrote: * Security Admin (NetSec) : Could someone provide links to sites where IP addresses are grouped by country? I use (the free) geoip database for that. This script has proven useful for me... http://www.cyberciti

Re: Country IP block list

2009-08-23 Thread postfix . org
Ralf Hildebrandt wrote: * Security Admin (NetSec) : Could someone provide links to sites where IP addresses are grouped by country? I use (the free) geoip database for that. This script has proven useful for me... http://www.cyberciti.biz/faq/block-entier-country-using-iptables/ (Y

Re: Country IP block list

2009-08-23 Thread Byung-Hee HWANG
At Sat, 22 Aug 2009 08:56:28 -0700, Security Admin (NetSec) wrote: > > [1 ] > Could someone provide links to sites where IP addresses are grouped by > country? ASNs would work too but would prefer IP lists that I could put in a > file that my postfix mail gateway could read. Obvious countries

Re: Country IP block list

2009-08-23 Thread Ralf Hildebrandt
* Security Admin (NetSec) : > Could someone provide links to sites where IP addresses are grouped by > country? I use (the free) geoip database for that. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburg

Re: Reg:Virtual Aliases forwarding

2009-08-23 Thread Benny Pedersen
On Sat 22 Aug 2009 12:57:27 AM CEST, Priyanka Tyagi wrote I have set up SPF record for 'mydomain.com' and passes SPF, in case email originates from my postfix server. But SPF verification fails while it forwards email using virtual aliases. why forward emails at all ? anyway 2 ways to solve it

Re: Building milter in PHP

2009-08-23 Thread Mikael Bak
rank1see...@gmail.com wrote: > It did, but not anymore. > It is now depreciated.(php-milter) > > I use PHP 5.3 and already have working filter. > > To finalise it, I just need a list and description of milter commands. > Those milter commands works for any type of coding language > > Up to now I

Re: rbl checks, best place

2009-08-23 Thread Stefan Förster
* /dev/rob0 : > On Friday 21 August 2009 00:23:07 Olivier Nicole wrote: > > > > This is a difficult question. > > > > > > I disagree. > > > > Just that because you disagree makes the question not simple :) > > Perhaps you didn't understand. I tried to explain why the choice of > pre-DATA reject_rb

Quick Test

2009-08-23 Thread Joey
Quick test. sorry. Thanks! Jack