Re: Delay Warnings are not being sent

2010-03-17 Thread Stephen Carville
On Wed, Mar 17, 2010 at 12:08 PM, Wietse Venema wrote: > Stephen Carville: >> On Tue, Mar 16, 2010 at 5:41 PM, Wietse Venema wrote: >> > Stephen Carville: >> >> I am trying to get delay warnings to be sent to users with no success. >> > >> > How do you know the difference between "not sent" and "

Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-17 Thread Sahil Tandon
On Wed, 17 Mar 2010, Sean Reifschneider wrote: > Mar 16 12:50:11 mailhost postfix/cleanup[9490]: warning: milter >inet:127.0.0.1:2092: can't read SMFIC_HEADER reply packet header: Success What is the output of 'postconf milter_protocol'? This might be totally unrelated, but I wonder if it ha

Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-17 Thread Sean Reifschneider
I'm reporting this primarily because the other searching I've done has turned up this same error message, but with nothing that clearly points out what the root of the issue really is. I'm hoping someone can shed some light on it. We've been having little if any luck tracking down an issue where

Re: Remove Postfix From Message Headers

2010-03-17 Thread Carlos Mennens
On Wed, Mar 17, 2010 at 6:25 PM, mouss wrote: > Don't try to hide. if you're not ready to fight, find another job. Very encouraging but my Postfix server is used by a .mil TLD and the U.S. Army... I am always ready to fight and help save lives in the process. I am not hiding the fact I am using

Re: Sender Access Restrictions and MySQL Table

2010-03-17 Thread mouss
Asai a écrit : > Greetings, > > I'm using Postfix with MySQL, and am trying to restrict certain users to > send and receive from my network only. I have had marginal success with > this using a MySQL query. > > In the MySQL table, these users have 'local_only' in the smtp_access > column, all ot

Re: Remove Postfix From Message Headers

2010-03-17 Thread mouss
Carlos Mennens a écrit : > Is it possible to alter the fact that my message headers indicate that > my MTA is a Postfix server? I don't know if this is possible and while > I don't specifically want to hide the fact that I use Postfix because > I love this software more than I could express, I just

Re: reject_authenticated_sender_login_mismatch only for some logins

2010-03-17 Thread mouss
ram a écrit : > I need to implement smtpd login maps on our postfix servers so as > minimize the chances of a compromised client machine screwing our smtp > relay. auth is good, but it's not enough. A compromised client can authenticate. you still need rate limits and log parsing. and if so, auth

Re: reroute mail based on headers

2010-03-17 Thread mouss
Ryan Suarez a écrit : > [snip] > Cisco Unity allows users to receive their voicemail through email (as > .wav attachment). This email contains the header > 'X-CiscoUnity-MessageType'. They can also forward their voicemail to > another user through email by sending it to > 'someotheru...@unityser

Re: reroute mail based on headers

2010-03-17 Thread Kenneth Marshall
Can you use a pcre/regex map instead? Ken On Wed, Mar 17, 2010 at 04:53:37PM -0400, Ryan Suarez wrote: > Noel Jones wrote: >> On 3/17/2010 3:35 PM, Ryan Suarez wrote: >>> Greetings, >>> >>> I would like to reroute mail for all our recipients if a certain header >>> is present. >>> >>> Eg. Mail to

Re: reroute mail based on headers

2010-03-17 Thread Victor Duchovni
On Wed, Mar 17, 2010 at 04:34:32PM -0500, Noel Jones wrote: >> But this entails that a user remember the unityserver domain. We'd like >> the process to be cleaner by allowing forwards to their public address. >> Then our smtp will be responsible for rerouting it to the unity server. >> Hope this

Re: reroute mail based on headers

2010-03-17 Thread Noel Jones
On 3/17/2010 4:17 PM, Ryan Suarez wrote: Noel Jones wrote: On 3/17/2010 3:53 PM, Ryan Suarez wrote: Noel Jones wrote: On 3/17/2010 3:35 PM, Ryan Suarez wrote: Greetings, I would like to reroute mail for all our recipients if a certain header is present. Eg. Mail to 'm...@mydomain.org' has t

Re: reroute mail based on headers

2010-03-17 Thread Ryan Suarez
Noel Jones wrote: On 3/17/2010 3:53 PM, Ryan Suarez wrote: Noel Jones wrote: On 3/17/2010 3:35 PM, Ryan Suarez wrote: Greetings, I would like to reroute mail for all our recipients if a certain header is present. Eg. Mail to 'm...@mydomain.org' has the header 'SomeHeader'. I would like t

Re: reroute mail based on headers

2010-03-17 Thread Noel Jones
On 3/17/2010 3:53 PM, Ryan Suarez wrote: Noel Jones wrote: On 3/17/2010 3:35 PM, Ryan Suarez wrote: Greetings, I would like to reroute mail for all our recipients if a certain header is present. Eg. Mail to 'm...@mydomain.org' has the header 'SomeHeader'. I would like to reroute this email to

Re: reroute mail based on headers

2010-03-17 Thread Ryan Suarez
Noel Jones wrote: On 3/17/2010 3:35 PM, Ryan Suarez wrote: Greetings, I would like to reroute mail for all our recipients if a certain header is present. Eg. Mail to 'm...@mydomain.org' has the header 'SomeHeader'. I would like to reroute this email to 'm...@some-server.mydomain.org'. What is

Re: reroute mail based on headers

2010-03-17 Thread Noel Jones
On 3/17/2010 3:35 PM, Ryan Suarez wrote: Greetings, I would like to reroute mail for all our recipients if a certain header is present. Eg. Mail to 'm...@mydomain.org' has the header 'SomeHeader'. I would like to reroute this email to 'm...@some-server.mydomain.org'. What is the best way to acc

reroute mail based on headers

2010-03-17 Thread Ryan Suarez
Greetings, I would like to reroute mail for all our recipients if a certain header is present. Eg. Mail to 'm...@mydomain.org' has the header 'SomeHeader'. I would like to reroute this email to 'm...@some-server.mydomain.org'. What is the best way to accomplish this in postfix? thanks, R

Re: Delay Warnings are not being sent

2010-03-17 Thread Wietse Venema
Stephen Carville: > On Tue, Mar 16, 2010 at 5:41 PM, Wietse Venema wrote: > > Stephen Carville: > >> I am trying to get delay warnings to be sent to users with no success. > > > > How do you know the difference between "not sent" and "not received"? > > Good point. All I know is to look at the w

Re: Delay Warnings are not being sent

2010-03-17 Thread Stephen Carville
On Tue, Mar 16, 2010 at 5:41 PM, Wietse Venema wrote: > Stephen Carville: >> I am trying to get delay warnings to be sent to users with no success. > > How do you know the difference between "not sent" and "not received"? Good point. All I know is to look at the warning_message_time and see if i

Re: RBL whitelist?

2010-03-17 Thread Stefan Foerster
* Wietse Venema : > Erik Logtenberg: > > Wietse, is there a reason why you would not want a permit_rbl_client > > feature in postfix? If not, then I would like to hereby suggest this > > feature request. > > If you would approve the feature request but don't have the time and/or > > other incentive

Re: Proper setup to require internal PKI/certificate

2010-03-17 Thread Noel Jones
On 3/17/2010 12:05 PM, Security Admin (NetSec) wrote: I currently use Postfix 2.6.5 as mail gateway and Exchange 2007 for internal e-mail. Right now I have a soft TLS requirement on outbound mail, i.e. Exchange 2007 is setup to connects via TLS only. For Postfix to require TLS connection from int

Proper setup to require internal PKI/certificate

2010-03-17 Thread Security Admin (NetSec)
I currently use Postfix 2.6.5 as mail gateway and Exchange 2007 for internal e-mail. Right now I have a soft TLS requirement on outbound mail, i.e. Exchange 2007 is setup to connects via TLS only. For Postfix to require TLS connection from internal mail server what would I have to change to t

Re: Dynamic message_size_limit

2010-03-17 Thread Wietse Venema
Giovanni Mancuso: > Hi, > > i have a question about message_size_limit parameter. > > Can i set this parameter to get the value from ldap? > > Else, can i write a Policy Delegator that do it? The policy delegation protocol allows you to reject arbitrary message sizes. However, you do not know

Re: Dynamic message_size_limit

2010-03-17 Thread Manuel Mely
On Wed, Mar 17, 2010 at 5:41 AM, Giovanni Mancuso wrote: > Hi, > > i have a question about message_size_limit parameter. > > Can i set this parameter to get the value from ldap? > > Else, can i write a Policy Delegator that do it? > > Bye > I have something that could help you!

Re: Dynamic message_size_limit

2010-03-17 Thread Noel Jones
On 3/17/2010 4:41 AM, Giovanni Mancuso wrote: Hi, i have a question about message_size_limit parameter. Can i set this parameter to get the value from ldap? Else, can i write a Policy Delegator that do it? Bye As documented, message_size_limit accepts a number value, not a file or path.

Re: reject_authenticated_sender_login_mismatch only for some logins

2010-03-17 Thread Wietse Venema
ram: > I need to implement smtpd login maps on our postfix servers so as > minimize the chances of a compromised client machine screwing our smtp > relay. > > But this cannot be done overnight. There are various clients who use > different envelope sender domains (for perfectly legitimate reasons)

Re: LMTP delivery and VERP

2010-03-17 Thread Wietse Venema
Jesus Cea: > >> If I send a mail to "jcea+...@jcea.es", Postfix checks "j...@jcea.es" in > >> the virtual table and recognizes the user. But when Postfix sends the > >> message to the storage backend, via LMTP, the destination is > >> "jcea+...@jcea.es", and I would like to get the LMTP "rcpt to" >

Re: Relaying denied

2010-03-17 Thread Patric Falinder
Patric Falinder skrev 2010-03-17 14:36: Brian Evans - Postfix List skrev 2010-03-17 13:43: On 3/17/2010 6:05 AM, Patric Falinder wrote: Thats just it, I'm not even sure if I have configured it right and I'm starting to think there is something wrong with it cause I'm not 100% sure how sasl work

Re: LMTP delivery and VERP

2010-03-17 Thread Jesus Cea
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/17/2010 02:32 PM, Wietse Venema wrote: > Jesus Cea: >> Hi all. >> >> Sorry if the question is a FAQ, but I am a new postfix user, Google has >> not helped me, neither the postfix online docs. >> >> If I send a mail to "jcea+...@jcea.es", Postfix

reject_authenticated_sender_login_mismatch only for some logins

2010-03-17 Thread ram
I need to implement smtpd login maps on our postfix servers so as minimize the chances of a compromised client machine screwing our smtp relay. But this cannot be done overnight. There are various clients who use different envelope sender domains (for perfectly legitimate reasons) and I cannot get

Re: delivery temporarily suspended

2010-03-17 Thread Sasa
...also after increase values I have always: 9B83D1AAD17 1333 Wed Mar 17 14:01:37 milan.notificati...@domain.com (conversation with 127.0.0.1[127.0.0.1] timed out while receiving the initial server greeting) acco...@domain.biz ...perhaps the parameters (max_servers and maxproc) must be

Re: delivery temporarily suspended

2010-03-17 Thread Sasa
I have modified the value of: $max_servers=10 --> (from 2 to 10) and maxproc in master.cf smtp-amavis unix - - n - 5 smtp --> (from 2 to 5) now I must: #postsuper -r ALL #postfix flush for to use a new parameter and for requeue the postfix queue ? sorry for my banal q

Re: Remove Postfix From Message Headers

2010-03-17 Thread Sahil Tandon
On Mar 17, 2010, at 8:59 AM, Carlos Mennens wrote: Is it possible to alter the fact that my message headers indicate that my MTA is a Postfix server? I don't know if this is possible and while I don't specifically want to hide the fact that I use Postfix because I love this software more than

Re: Relaying denied

2010-03-17 Thread Patric Falinder
Brian Evans - Postfix List skrev 2010-03-17 13:43: On 3/17/2010 6:05 AM, Patric Falinder wrote: Thats just it, I'm not even sure if I have configured it right and I'm starting to think there is something wrong with it cause I'm not 100% sure how sasl works.. I attached my main.cf to this mail. I

Re: LMTP delivery and VERP

2010-03-17 Thread Wietse Venema
Jesus Cea: > Hi all. > > Sorry if the question is a FAQ, but I am a new postfix user, Google has > not helped me, neither the postfix online docs. > > If I send a mail to "jcea+...@jcea.es", Postfix checks "j...@jcea.es" in > the virtual table and recognizes the user. But when Postfix sends the >

Re: Remove Postfix From Message Headers

2010-03-17 Thread Wolfgang Zeikat
On 03/17/2010 01:59 PM, Carlos Mennens wrote: Is it possible to alter the fact that my message headers indicate that my MTA is a Postfix server? You can configure that in main.cf via setting mail_name = See http://www.postfix.org/postconf.5.html#mail_name Regards, wolfgang

Re: delivery temporarily suspended

2010-03-17 Thread Wietse Venema
Sasa: > I can this errore in log: > > Mar 17 11:47:36 mail postfix/smtp[7690]: 77F5726A1E9: > to=, orig_to=, > relay=127.0.0.1[127.0.0.1]:10024, delay=1868, delays=0.36/1568/300/0, > dsn=4.4.2, status=deferred (conversation with 127.0.0.1[127.0.0.1] timed out > while receiving the initial serv

Remove Postfix From Message Headers

2010-03-17 Thread Carlos Mennens
Is it possible to alter the fact that my message headers indicate that my MTA is a Postfix server? I don't know if this is possible and while I don't specifically want to hide the fact that I use Postfix because I love this software more than I could express, I just don't feel the risk to share wit

Re: Relaying denied

2010-03-17 Thread Brian Evans - Postfix List
On 3/17/2010 6:05 AM, Patric Falinder wrote: > Thats just it, I'm not even sure if I have configured it right and I'm > starting to think there is something wrong with it cause I'm not 100% > sure how sasl works.. > I attached my main.cf to this mail. I have read the Postfix SASL > Readme but I'm s

Many thanks (was: Re: If a message is destined for a content_filter, must we really check the transport map?)

2010-03-17 Thread Michael Alan Dorman
Wietse and Victor, I just wanted to follow up and say thank you to both of you for your gentle corrections of my misconceptions, as well as all the work you've done on Postfix itself. The ease with which I was able to convert my production systems to a multiple-instance setup was, frankly, astoni

LMTP delivery and VERP

2010-03-17 Thread Jesus Cea
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all. Sorry if the question is a FAQ, but I am a new postfix user, Google has not helped me, neither the postfix online docs. If I send a mail to "jcea+...@jcea.es", Postfix checks "j...@jcea.es" in the virtual table and recognizes the user. But wh

Re: delivery temporarily suspended

2010-03-17 Thread Sasa
I can this errore in log: Mar 17 11:47:36 mail postfix/smtp[7690]: 77F5726A1E9: to=, orig_to=, relay=127.0.0.1[127.0.0.1]:10024, delay=1868, delays=0.36/1568/300/0, dsn=4.4.2, status=deferred (conversation with 127.0.0.1[127.0.0.1] timed out while receiving the initial server greeting) I us

Re: every...@example.com virtual_alias_maps using ldap query

2010-03-17 Thread Reinaldo de Carvalho
On Tue, Mar 16, 2010 at 10:38 PM, Ronie Gilberto Henrich wrote: > Hi Reinaldo, > > Let me explain better how virtual_alias_maps works in this case: > 1) Someone send an email to every...@example.com > 2) Query ldap:everyone result has to be us...@example.com, > us...@example.com, and so on (all ma

delivery temporarily suspended

2010-03-17 Thread Sasa
Hi, I have a smtp/pop3 public mail server, this server is in production enviroment form 3/4 years nobody problems but from two days I have sometimes that smtpd not responding and I have this error:: 2B85826A5B3 8913 Tue Mar 16 16:41:11 listbounc...@domain.eu (delivery temporarily suspended:

Postfix + AWStats

2010-03-17 Thread Marcos Lorenzo de Santiago
Hello everyone, I'm running Postfix 2.5.5 on a Debian system and I'm trying to get AWstats to process my postfix mail log. I've read all FAQ at awstats' and postix's homepage and none is aplicable. As I read on http://awstats.sourceforge.net/docs/awstats_faq.html#MAIL it is said that LogFormat has

RE: Configuring a separate transport for NDRs

2010-03-17 Thread Aaron Roberts
>If they won't give you a recipient list the easy way, get one the hard way. > From http://www.postfix.org/ADDRESS_VERIFICATION_README.html, Thanks, I actually enabled recipient address verification, using temporary reject codes. Aaron

Re: Relaying denied

2010-03-17 Thread Daniel Ryslink
Hello, I think the server does not offer TLS authentication to you at all (only PLAIN and LOGIN authentication which you could probably use, if you have valid credentials). You should really contact the administrator of the server and clarify things up - how are you supposed to authenticate

Re: Relaying denied

2010-03-17 Thread Patric Falinder
Thats just it, I'm not even sure if I have configured it right and I'm starting to think there is something wrong with it cause I'm not 100% sure how sasl works.. I attached my main.cf to this mail. I have read the Postfix SASL Readme but I'm still not sure about how it works or if my config is

Relaying denied

2010-03-17 Thread Patric Falinder
Hi! I act as a "spamcheck"-relay for a couple of servers but I get this error message for one server when I'm trying to relay a message to it: Mar 17 10:28:07 myrelay postfix/smtp[4910]: 1358410A329: to=, relay=mail.domain.se[81.228.XXX.XXX]:25, delay=0.4, delays=0.08/0.01/0.27/0.05, dsn=5.7

Dynamic message_size_limit

2010-03-17 Thread Giovanni Mancuso
Hi, i have a question about message_size_limit parameter. Can i set this parameter to get the value from ldap? Else, can i write a Policy Delegator that do it? Bye

Re: Best practice: Spam-filtering outgoing e-mail

2010-03-17 Thread Alex
mouss wrote: ram a écrit : On Tue, 2010-03-16 at 15:40 +0100, Vegard Svanberg wrote: Hi, we are trying to mitigate the impact of having infected users, brute force hacked webmail accounts etc. sending (larging amounts of) outbound spam. The best idea we've come up with so far is to perform