Problem with spam messages

2009-09-09 Thread an...@iguanait.com
Hi, in our two mail servers i see last weeks this: non-SMTP command from 250.84.221.62.dyn.idknet.com[62.221.84.250]: From: ? VIAGRA ? Official Site How can i block these accesses? our system is : Centos 5.3 - postfix-2.3.3-2.1.el5_2 - amavisd-maia-2.2.1-2_1.0.2.centos5 - clamd-0.95.2-4.el5.rf

Re: hardisk space is running low, 10% left

2009-09-09 Thread Paul Beard
On Sep 9, 2009, at 10:42 PM, liyas m wrote: I have xserve set as email server running postfix. The client is squirrelmail. It seems that a lot spammer are attacking the server and the system hardisk is getting eaten up 1% per day. I have checked the log file (deleted some of the files) and

Postfix not sending SMFIC_RCPT to milter, libmilter rejecting state transition

2009-09-09 Thread Stephen Warren
I'm writing a milter using pymilter-0.9.3, which interfaces to libmilter1.0.1 (from sendmail 8.14.3) and running under postfix-2.6.5. This is on Ubuntu jaunty (I have built the newer pymilter and postfix versions in a PPA. The same postfix behaviour was observed with the stock postfix 2.5.x package

hardisk space is running low, 10% left

2009-09-09 Thread liyas m
Dear all, I have xserve set as email server running postfix. The client is squirrelmail. It seems that a lot spammer are attacking the server and the system hardisk is getting eaten up 1% per day. I have checked the log file (deleted some of the files) and updated to the latest update available..

Re: Postfix DKIM

2009-09-09 Thread KLaM Postmaster
Mark Johnson wrote: > All, > > I wonder which DKIM should I use for Postfix? Any suggestion? > > I found this: > http://dkimproxy.sourceforge.net > > > Thanks. > > Mark I found the easiest way by far, was to use the DKIM feature of amavisd-new

Formatting of 544- ... lines in "Undelivered Mail Returned to Sender"

2009-09-09 Thread Robin Whittle
Thanks, as always, for Postfix! I have been using it for at least ten years what I describe below is the first time I have questioned how well it works. This is version 2.3.3 on CentOS 5.1. When Postfix (or any other MTA) attempts to send a message to another MTA, and that remote MTA rejects the

Re: piped transports error message

2009-09-09 Thread Marcel Montes
Wietse Venema さんは書きました: I have a suggestion. When the script fails, don't lose control and spill the guts all over the place. Instead, catch the error and report an appropriate response. Yes, that's the ideal thing to do. In fact I'm doing it. What I'm actually doing wrong is being lazy and de

Re: piped transports error message

2009-09-09 Thread Marcel Montes
Sahil Tandon さんは書きました: AFAIK, hiding the error output is not configurable. Concealing important portions of the DSN seems silly and might even be a violation of RFC 3464 (something you might or might not care about). I've checked the RFC, and about RFC3462 (about the report format) and I thin

Re: Postfix DKIM

2009-09-09 Thread Thomas Gelf
牛粥 wrote: I wonder which DKIM should I use for Postfix? Any suggestion? >>> Please read first RFCs. Then you'll realize why we use DKIM. >> That totally wasn't the question the OP was asking.. :) > Thanks for advice! > By the way, i thought that it is needed to folks starting to use > DKIM. A

Re: Postfix DKIM

2009-09-09 Thread 牛粥
Evan Platt writes: > At 03:11 PM 9/9/2009, you wrote: >>Mark Johnson writes: >> >> > All, >> > >> > I wonder which DKIM should I use for Postfix? Any suggestion? >> >>Please read first RFCs. Then you'll realize why we use DKIM. > > That totally wasn't the question the OP was asking.. :) Thanks

RE: Postfix DKIM

2009-09-09 Thread Dave
Hi, I'd recommend either dkimproxy if your using a proxy setup or amavisd-new if you've already got amavisd going that way might be easier. Hth Dave. -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Evan Platt Sent: We

Re: Postfix DKIM

2009-09-09 Thread Evan Platt
At 03:11 PM 9/9/2009, you wrote: Mark Johnson writes: > All, > > I wonder which DKIM should I use for Postfix? Any suggestion? Please read first RFCs. Then you'll realize why we use DKIM. That totally wasn't the question the OP was asking.. :)

Re: Postfix DKIM

2009-09-09 Thread 牛粥
Mark Johnson writes: > All, > > I wonder which DKIM should I use for Postfix? Any suggestion? Please read first RFCs. Then you'll realize why we use DKIM. Sincerely, -- "What do you wish me to do?" "I want you to use all your powers, all your skill, as you love me. I do not wish his mother to

Re: Alias members based on LDAP attribute value

2009-09-09 Thread Victor Duchovni
On Wed, Sep 09, 2009 at 10:37:04AM +0200, Edgar Fuß wrote: > I hope this has not been asked before. I've searched the archive and > ldap_table(5), LDAP_README and LOCAL_RECIPIENT_README. > > I'm looking for a way to specify a fixed alias which expands to (the > mail attribute of) all LDAP entrie

Re: Exempting localhost from STARTTLS

2009-09-09 Thread Victor Duchovni
On Wed, Sep 09, 2009 at 03:19:11PM -0400, Gerard wrote: > I use fetchmail to harvest mail from a couple of accounts. I added this > to the main.cf file and fetchmail stopped delivering mail. > > smtpd_tls_security_level = encrypt This requires all clients to use SSL/TLS. > I then added this to

Re: Exempting localhost from STARTTLS

2009-09-09 Thread Wietse Venema
Gerard: > I use fetchmail to harvest mail from a couple of accounts. I added this > to the main.cf file and fetchmail stopped delivering mail. > > smtpd_tls_security_level = encrypt > > This was the error message: > > fetchmail: SMTP error: 530 5.7.0 Must issue a STARTTLS command first > fetchma

Exempting localhost from STARTTLS

2009-09-09 Thread Gerard
I use fetchmail to harvest mail from a couple of accounts. I added this to the main.cf file and fetchmail stopped delivering mail. smtpd_tls_security_level = encrypt This was the error message: fetchmail: SMTP error: 530 5.7.0 Must issue a STARTTLS command first fetchmail: SMTP server requires S

Re: Weird postfix looping for some emails

2009-09-09 Thread Wietse Venema
Preston Lord: > Hi All, > > We are having an issue with postfix where some messages keep looping to the > local recipient every hour or so. Servers that we consistently have trouble > with are apple.com servers : in this example bz1.apple.com . > > I will post the details below, but the server bz

Re: Weird postfix looping for some emails

2009-09-09 Thread Kenneth Marshall
Hi Preston, Your delivery looks normal. You need to logs from the other end of the connection that is re-trying the message incorrectly. Maybe they are not seeing the final response do to a firewall issue or your delivery is part of a group that is retried because someone else's delivery in the gr

Weird postfix looping for some emails

2009-09-09 Thread Preston Lord
Hi All, We are having an issue with postfix where some messages keep looping to the local recipient every hour or so. Servers that we consistently have trouble with are apple.com servers : in this example bz1.apple.com . I will post the details below, but the server bz1.apple.com sends them messa

Re: Postfix DKIM

2009-09-09 Thread Joe
Mark Johnson wrote: All, I wonder which DKIM should I use for Postfix? Any suggestion? I found this: http://dkimproxy.sourceforge.net I've been using dkim-milter - it's a sendmail milter but works fine with postfix - http://sourceforge.net/projects/dkim-milter/ Joe

Re: Force smtpauth for all mails including myhostname bound mails

2009-09-09 Thread Victor Duchovni
On Wed, Sep 09, 2009 at 08:06:09PM +0530, ram wrote: > > > RCPT TO: > > > 250 2.1.5 Ok Mail to "$address_verify_sender" (qualified with @$myorigin if a bare user name) is not subject to recipient restrictions, by default. In many versions of Postfix, "postmaster" is the default value of $address_

Re: Postfix DKIM

2009-09-09 Thread Mark Martinec
> I'm using dkim-milter now. Btw, the dkim-milter seems rather abandoned now, its development has been picked up by OpenDKIM (same author, who previously worked on dkim-milter). http://www.opendkim.org/ So, either amavisd-new or OpenDKIM should be fine. Mark

Re: Force smtpauth for all mails including myhostname bound mails

2009-09-09 Thread ram
On Wed, 2009-09-09 at 07:37 -0500, Noel Jones wrote: > On 9/9/2009 5:58 AM, ram wrote: > > Hi, > > > > I have a very basic ( and old) postfix installation and I want to accept > > mails only after smtpauth > > > > The rule works fine except when the recipient belongs to $myhostname > > > > > > ===

Re: Postfix DKIM

2009-09-09 Thread Pascal Maes
Le 9 sept. 2009 à 15:58, Mark Johnson a écrit : All, I wonder which DKIM should I use for Postfix? Any suggestion? I found this: http://dkimproxy.sourceforge.net Thanks. Mark I have encountered some problems with dkimproxy used as a before-queue and postfix 2.6. I'm using dkim-milter

Re: Postfix DKIM

2009-09-09 Thread Guy
2009/9/9 Mark Johnson : > I wonder which DKIM should I use for Postfix? Any suggestion? > > I found this: > http://dkimproxy.sourceforge.net I had problems with high load using dkimproxy. amavisd-new includes DKIM which has worked well for me. http://www.ijs.si/software/amavisd/amavisd-new-docs.h

Postfix DKIM

2009-09-09 Thread Mark Johnson
All, I wonder which DKIM should I use for Postfix? Any suggestion? I found this: http://dkimproxy.sourceforge.net Thanks. Mark

Re: python framework for a policy daemon?

2009-09-09 Thread Boyd Lynn Gerber
On Wed, 9 Sep 2009, Gerardo Herzig wrote: Ralf Hildebrandt wrote: Is there a ready to use python framework for a policy daemon? I have a nice idea for a policy daemon :) Well, googling around 'python postfix policy' gives me some, but looks like only do a 'spf' test. http://sourceforge.net/pr

Re: Force smtpauth for all mails including myhostname bound mails

2009-09-09 Thread Noel Jones
On 9/9/2009 5:58 AM, ram wrote: Hi, I have a very basic ( and old) postfix installation and I want to accept mails only after smtpauth The rule works fine except when the recipient belongs to $myhostname postconf -n == alias_database = hash:/etc/postfix/aliases alias_maps = hash:/e

Re: python framework for a policy daemon?

2009-09-09 Thread Gerardo Herzig
Ralf Hildebrandt wrote: > Is there a ready to use python framework for a policy daemon? > I have a nice idea for a policy daemon :) > Well, googling around 'python postfix policy' gives me some, but looks like only do a 'spf' test. http://sourceforge.net/projects/p-ppolicyserver/ http://www.opens

Re: Force smtpauth for all mails including myhostname bound mails

2009-09-09 Thread Mikael Bak
ram wrote: > > I have a very basic ( and old) postfix installation and I want to accept > mails only after smtpauth > > The rule works fine except when the recipient belongs to $myhostname > [snip] > mydestination = mumbai.nstest.com [snip] Hi Ram, $mydestination is probably why the email get

Force smtpauth for all mails including myhostname bound mails

2009-09-09 Thread ram
Hi, I have a very basic ( and old) postfix installation and I want to accept mails only after smtpauth The rule works fine except when the recipient belongs to $myhostname postconf -n == alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases command_direc

python framework for a policy daemon?

2009-09-09 Thread Ralf Hildebrandt
Is there a ready to use python framework for a policy daemon? I have a nice idea for a policy daemon :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 |

Alias members based on LDAP attribute value

2009-09-09 Thread Edgar Fuß
I hope this has not been asked before. I've searched the archive and ldap_table(5), LDAP_README and LOCAL_RECIPIENT_README. I'm looking for a way to specify a fixed alias which expands to (the mail attribute of) all LDAP entries with a certain attribute having a certain value. I. e. mail to ,,fo

Re: relay_domains vs virtual_mailbox_domains

2009-09-09 Thread Mikael Bak
Steve Heaven wrote: > On Wed, 2009-09-09 at 08:11 +0100, Clunk Werclick wrote: > >> Are you saying that it is not possible to configure it to reject users >> that don't exist at the SMTP level? Are you *sure*? So if you telnet in >> to it and send mail for anyoldrubb...@domain.co.uk it accepts it?

Re: relay_domains vs virtual_mailbox_domains

2009-09-09 Thread Steve Heaven
On Wed, 2009-09-09 at 08:11 +0100, Clunk Werclick wrote: > Are you saying that it is not possible to configure it to reject users > that don't exist at the SMTP level? Are you *sure*? So if you telnet in > to it and send mail for anyoldrubb...@domain.co.uk it accepts it? > > I would be gobsmacked

Re: relay_domains vs virtual_mailbox_domains

2009-09-09 Thread Clunk Werclick
On Wed, 2009-09-09 at 07:16 +0100, Steve Heaven wrote: > On Wed, 2009-09-09 at 00:27 +0200, mouss wrote: > > Steve Heaven a écrit : > > > > > > > > > the old: "try to pass to next, until final server accepts or rejects" > > is n more acceptable. recipients must be checked at the "edge". > > > >