Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-18 Thread Sean Reifschneider
FYI: Using protocol version 3 is also causing the same errors to be logged. So we've tried 2, 3, 4, and 6. Thanks, Sean -- Sean Reifschneider, Member of Technical Staff tummy.com, ltd. - Linux Consulting since 1995: Ask me about High Availability signature.asc Description: OpenPGP digital sig

Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-18 Thread Wietse Venema
Sean Reifschneider: > On 03/18/2010 05:57 AM, Wietse Venema wrote: > > If the Postfix milter_protocol setting specifies a too high > > version, the libmilter library simply hangs up without logging > > We've tried protocol versions 2, 4, and 6 with the same error. We've also > tried two d

Re: every...@example.com virtual_alias_maps using ldap query

2010-03-18 Thread Ronie Gilberto Henrich
Original Message  Subject: Re: every...@example.com virtual_alias_maps using ldap query From: Victor Duchovni To: Ronie Gilberto Henrich Cc: postfix-users@postfix.org Date: Thu Mar 18 2010 14:00:45 GMT-0300 Something like a support for variables (%u) on the left sid

Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-18 Thread Sean Reifschneider
On 03/18/2010 05:57 AM, Wietse Venema wrote: > If the Postfix milter_protocol setting specifies a too high > version, the libmilter library simply hangs up without logging We've tried protocol versions 2, 4, and 6 with the same error. We've also tried two different versions of the libmilt

Re: master.cf override main.cf parameters exception list?

2010-03-18 Thread /dev/rob0
On Thu, Mar 18, 2010 at 06:12:32PM -0400, zhong ming wu wrote: > I find that not all parameters in main.cf can be overridden in > master.cf with -o. > > So far I find that for example header_check , smtpd_data_restrictions, > and inet_interfaces cannot be overridden in master.cf > Is there a list

Re: RBL whitelist?

2010-03-18 Thread Erik Logtenberg
>>> This whitelist is 1409 records long, so indeed as you say very small. I >>> suppose I could download it and host it locally. Apparently AXFR is not >>> allowed, but plain text HTTP download is, so that's good enough. >>> Then I would only need an efficient and robust way for postfix to use >>>

Re: Anvil logs explained

2010-03-18 Thread Ralf Hildebrandt
* Erik Logtenberg : > Hi, > > I have a small question about anvil: every now and then it logs three > lines about statistics. I don't quite understand what they mean. This is > an example: > > 1/60s for (mx.mydomain.eu:smtp:168.100.1.7) at Mar 17 00:27:28 > Mar 17 00:30:49 mx postfix/anvil[28510]

Re: RBL whitelist?

2010-03-18 Thread Jan P. Kessler
This whitelist is 1409 records long, so indeed as you say very small. I suppose I could download it and host it locally. Apparently AXFR is not allowed, but plain text HTTP download is, so that's good enough. Then I would only need an efficient and robust way for postfix to use it. If they le

master.cf override main.cf parameters exception list?

2010-03-18 Thread zhong ming wu
Hi List I find that not all parameters in main.cf can be overridden in master.cf with -o. So far I find that for example header_check , smtpd_data_restrictions, and inet_interfaces cannot be overridden in master.cf Is there a list of such parameters documented somewhere? I am using three differe

Re: Mail rejected on "Received From"

2010-03-18 Thread Aaron Wolfe
On Thu, Mar 18, 2010 at 4:53 PM, Kaleb Hosie wrote: > Maybe this is not the best practice, however I don't block any incoming mail > (destined for a legit address) for the same reason. I use a program called > SpamAssassin Quarantine and I let it scan for the spam. > content scanning every mess

RE: Mail rejected on "Received From"

2010-03-18 Thread Kaleb Hosie
Maybe this is not the best practice, however I don't block any incoming mail (destined for a legit address) for the same reason. I use a program called SpamAssassin Quarantine and I let it scan for the spam. Spam is put in quarantine and doesn't effect the users. It sends out an email every day

Re: Mail rejected on "Received From"

2010-03-18 Thread /dev/rob0
On Thu, Mar 18, 2010 at 06:43:29PM +, Kay wrote: > I often see mail being rejected by recipient servers because > an IP in a Received From header is blacklisted somewhere. > > This strikes me as a rather bad practise, since it undermines > the whole idea of SMTP authentication. > > Here's an

Re: Mail rejected on "Received From"

2010-03-18 Thread Noel Jones
On 3/18/2010 1:43 PM, Kay wrote: Hi guys, I often see mail being rejected by recipient servers because an IP in a Received From header is blacklisted somewhere. This strikes me as a rather bad practise, since it undermines the whole idea of SMTP authentication. Here's an example reject: 550 5

Mail rejected on "Received From"

2010-03-18 Thread Kay
Hi guys, I often see mail being rejected by recipient servers because an IP in a Received From header is blacklisted somewhere. This strikes me as a rather bad practise, since it undermines the whole idea of SMTP authentication. Here's an example reject: 550 5.7.1 This system has been conf

Re: every...@example.com virtual_alias_maps using ldap query

2010-03-18 Thread Victor Duchovni
On Thu, Mar 18, 2010 at 01:54:08PM -0300, Ronie Gilberto Henrich wrote: > Isn't it a simpler way to accomplish that? No. > Something like a support for variables (%u) on the left side? > > Example: > everyone_query_filter = (&(accountStatus=active)(%u=everyone)) This is not "simpler" it is sim

Re: What is "queued as"

2010-03-18 Thread Victor Duchovni
On Thu, Mar 18, 2010 at 08:18:50AM -0700, Emmett Culley wrote: > The ones that don't get delivered to the remote mail server have log > entries like this: > > Mar 18 03:15:02 aoakley postfix/smtp[1714]: 6835847611D: > to=, relay=mail1.domain1.com[xxx.xxx.xx.x]:25, > delay=0.68, delays=0.06/0.01

Re: every...@example.com virtual_alias_maps using ldap query

2010-03-18 Thread Ronie Gilberto Henrich
Hi Victor, Thanks also for your reply. Isn't it a simpler way to accomplish that? Something like a support for variables (%u) on the left side? Example: everyone_query_filter = (&(accountStatus=active)(%u=everyone)) Thanks, Ronie Original Message Subject: Re: every...@exam

Re: policy service for multiple recipients

2010-03-18 Thread Noel Jones
On 3/18/2010 10:41 AM, Alex wrote: Hi All My problem is describe here http://www.mail-archive.com/postfix-users@postfix.org/msg16775.html Basically I have a mysql table with thousands recipients , on the left hand I have recipient and on the right hand I have the action (REJECT) and some additi

Re: MDN and mupliple recipients

2010-03-18 Thread Wietse Venema
> H Wietse Venema: > > Postfix does not send "mail read" notifications. > > Hi Wietse > > You mean that these notifications are not part of the Postfix System? Postfix sends *delivery* notifications; for examples of these, see the output from the "postconf -b" command. *Delivery* notifications

Re: policy service for multiple recipients

2010-03-18 Thread Victor Duchovni
On Thu, Mar 18, 2010 at 05:41:32PM +0200, Alex wrote: > Basically I have a mysql table with thousands recipients , on the left hand > I have recipient and on the right hand I have the action (REJECT) and some > additional text > > u...@domain.tld REJECT Additional text > > In case of am mu

Re: every...@example.com virtual_alias_maps using ldap query

2010-03-18 Thread Victor Duchovni
On Thu, Mar 18, 2010 at 01:31:11PM -0300, Ronie Gilberto Henrich wrote: >The problem about your solution below is that it will go into a loop. Only if you go out of your way to make it loop. The address expansion in virtual(5) is recursive, but it stops as soon as address expands to itself.

Re: FW: PCI Compliance

2010-03-18 Thread Victor Duchovni
On Thu, Mar 18, 2010 at 04:14:31PM -, Jonathan Tripathy wrote: > > It works in practice. A few Postfix TLS proxies have been terminating TLS > > connections, making access control decisions and forwarding unencrypted > > SMTP to a non-Postfix server for many years now. > > > > These systems o

Re: every...@example.com virtual_alias_maps using ldap query

2010-03-18 Thread Ronie Gilberto Henrich
Hi Reinaldo, The problem about your solution below is that it will go into a loop. 1) Loop: every...@example.com forward to us...@example.com and every...@example.com, which forward again to us...@example.com and every...@example.com, and again, and again, and again... If you are a developer

Re: MDN and mupliple recipients

2010-03-18 Thread Ansgar Wiechers
On 2010-03-18 ?? ?? wrote: > O/H Wietse Venema : >> Dimitrios Karapiperis: >>> When someone sends an e-mail to multiple recipients and requests >>> read receipt the MDN mechanism works fine but on the receipt >>> message itself, the sender receives th

Re: MDN and mupliple recipients

2010-03-18 Thread Δημήτριος Καραπιπέρης
O/H Victor Duchovni έγραψε: On Thu, Mar 18, 2010 at 05:41:24PM +0200, ?? ?? wrote: Postfix does not send "mail read" notifications. You mean that these notifications are not part of the Postfix System? They can't be. Postfix is a doctor not

RE: FW: PCI Compliance

2010-03-18 Thread Jonathan Tripathy
It works in practice. A few Postfix TLS proxies have been terminating TLS connections, making access control decisions and forwarding unencrypted SMTP to a non-Postfix server for many years now. These systems only run "smtpd" as a proxy, and use various internal services, but otherwise there is no

Re: MDN and mupliple recipients

2010-03-18 Thread Victor Duchovni
On Thu, Mar 18, 2010 at 05:41:24PM +0200, ?? ?? wrote: >> Postfix does not send "mail read" notifications. > > You mean that these notifications are not part of the Postfix System? They can't be. Postfix is a doctor not escalator (oops an MTA not a mail client

Re: FW: PCI Compliance

2010-03-18 Thread Victor Duchovni
On Thu, Mar 18, 2010 at 11:00:14AM -0300, Reinaldo de Carvalho wrote: > On Thu, Mar 18, 2010 at 10:53 AM, Jonathan Tripathy > wrote: > > > > BTW, the machines in the CDE will all have anti-virus and automatic updates > > enabled. > > > > So, back to postfix, can it do such a thing? Act as a "pro

Move queue

2010-03-18 Thread Sasa
Hi, I have a mail server with postfix-2.5.6 and now in queue there's more 2900 mails that I cann't delivery, I would copy the queue from official mail server to backup mail server, for this purpose ie I have: mail server A (official) mail server B (backup) on server A I must: #postfix stop #c

policy service for multiple recipients

2010-03-18 Thread Alex
Hi All My problem is describe here http://www.mail-archive.com/postfix-users@postfix.org/msg16775.html Basically I have a mysql table with thousands recipients , on the left hand I have recipient and on the right hand I have the action (REJECT) and some additional text u...@domain.tld REJE

Re: MDN and mupliple recipients

2010-03-18 Thread Δημήτριος Καραπιπέρης
O/H Wietse Venema έγραψε: Dimitrios Karapiperis: Hi When someone sends an e-mail to multiple recipients and requests read receipt the MDN mechanism works fine but on the receipt message itself, the sender receives that recipie...@domain.tld, recipie...@domain.tld have read the message without

What is "queued as"

2010-03-18 Thread Emmett Culley
I am seeing that some email appears in the the intended receivers mail box and some don't. The ones that don't get delivered to the remote mail server have log entries like this: Mar 18 03:15:02 aoakley postfix/smtp[1714]: 6835847611D: to=, relay=mail1.domain1.com[xxx.xxx.xx.x]:25, delay=0.6

Re: delivery temporarily suspended

2010-03-18 Thread Wietse Venema
Please follow instructions in: http://www.postfix.org/DEBUG_README.html#logging Do not change the logging. Use the EXISTING logging. Wietse

Re: delivery temporarily suspended

2010-03-18 Thread Sasa
for investigate about my problem I must use: /usr/sbin/sendmail -bv address or strace -p process-id thanks. -- Salvatore. - Original Message - From: "Wietse Venema" To: "Sasa" Cc: "Wietse Venema" ; "Vladimir Dvorak" ; Sent: Thursday, March 18, 2010 3:41 PM Subject: Re:

Re: delivery temporarily suspended

2010-03-18 Thread Wietse Venema
Sasa: > sorry but but what logging I can enable for investigate about my problem ? > for me is very strange that the new mail are delivered and the old mails in > queue no. Don't CHANGE the logging. Use the EXISTING logging. Wietse > > -- > >Salvatore. > > > - Original

Re: delivery temporarily suspended

2010-03-18 Thread Sasa
for to disable amavis I have removed in master.cf this line: 127.0.0.1:10025 inet n - n - - smtpd pheraps for this I have (for mail in spool) the error message ? this line must be enable ? thanks. -- Salvatore. - Original Message - From: "Sasa" To: "Wiet

Re: delivery temporarily suspended

2010-03-18 Thread Sasa
sorry but but what logging I can enable for investigate about my problem ? for me is very strange that the new mail are delivered and the old mails in queue no. Thanks. -- Salvatore. - Original Message - From: "Wietse Venema" To: "Sasa" Cc: "Vladimir Dvorak" ; Sent: Thur

Re: MDN and mupliple recipients

2010-03-18 Thread Wietse Venema
Dimitrios Karapiperis: > Hi > When someone sends an e-mail to multiple recipients and requests > read receipt the MDN mechanism works fine but on the receipt > message itself, the sender receives that recipie...@domain.tld, > recipie...@domain.tld have read the message without knowing who > exactly

Re: delivery temporarily suspended

2010-03-18 Thread Wietse Venema
Sasa: > I have disabled amavisd-new and the new mail are deliveriy quickly but for > all mails that stay in queue I have: > > mail transport unavailable > > ?? > what I can to delivery all mails ? http://www.postfix.org/DEBUG_README.html#logging

Re: FW: PCI Compliance

2010-03-18 Thread Wietse Venema
Jonathan Tripathy: > So, back to postfix, can it do such a thing? Act as a "proxy" and > not a "store and forward relay" http://www.postfix.org/SMTPD_PROXY_README.html Someone will still have to monitor the logfile, and deal with "postmaster notification" email depending on how the notify_classes

Re: FW: PCI Compliance

2010-03-18 Thread Mark Goodge
On 18/03/2010 13:53, Jonathan Tripathy wrote: So, back to postfix, can it do such a thing? Act as a "proxy" and not a "store and forward relay" In SMTP terms, a proxy is effectively the same thing as a store-and-forward relay. But yes, Postfix will do this very well. For inbound mail, you ca

Re: delivery temporarily suspended

2010-03-18 Thread Sasa
I have disabled amavisd-new and the new mail are deliveriy quickly but for all mails that stay in queue I have: mail transport unavailable ?? what I can to delivery all mails ? Thanks. -- Salvatore. - Original Message - From: "Sasa" To: "Vladimir Dvorak" Cc: Sent: Wedne

MDN and mupliple recipients

2010-03-18 Thread Dimitrios Karapiperis
Hi When someone sends an e-mail to multiple recipients and requests read receipt the MDN mechanism works fine but on the receipt message itself, the sender receives that recipie...@domain.tld, recipie...@domain.tld have read the message without knowing who exactly is the reader; recipent1 or re

Re: FW: PCI Compliance

2010-03-18 Thread Reinaldo de Carvalho
On Thu, Mar 18, 2010 at 10:53 AM, Jonathan Tripathy wrote: > > BTW, the machines in the CDE will all have anti-virus and automatic updates > enabled. > > So, back to postfix, can it do such a thing? Act as a "proxy" and not a > "store and forward relay" > > > In theory you can to use 'smtpd_proxy

FW: PCI Compliance

2010-03-18 Thread Jonathan Tripathy
> Any ideas on how to set up an "SMTP Proxy Server" to attain PCI Compliance? > I literally need postfix to just pass through mail to our ISP's smtp server. > We would then set outlook to use this local smtp proxy server. I work for a hosting company, we find it's usually an iterative process. Thi

Re: PCI Compliance

2010-03-18 Thread Barney Desmond
On 18 March 2010 23:59, J. Roeleveld wrote: > Does this mean that the service-desk of companies are not compliant either? Hehe, in a way. Social engineering is thankfully(?) outside the scope of PCI-DSS compliance. > 1) Check in phonebook for number of VISA credit card service desk > 2) Call lis

Re: PCI Compliance

2010-03-18 Thread J. Roeleveld
On Thursday 18 March 2010 13:26:43 Barney Desmond wrote: > On 18 March 2010 21:57, Jonathan Tripathy wrote: > 3. We read the report, and find things like "server exposes its > hostname in the greeting banner", or "server appears to allow the use > of the VRFY command". Does this mean that the

Re: dict_fnmatch again

2010-03-18 Thread Wietse Venema
Michael Tokarev: > A few years ago I implemented a new dict for Postfix, dict_fnmatch. > It is a shell-style pattern matcher with patterns placed _inline_, > right in the config file, without any additional files like > pcre/regex (the simplest dictionaries which does not use indexed > files) and o

Re: PCI Compliance

2010-03-18 Thread Barney Desmond
On 18 March 2010 21:57, Jonathan Tripathy wrote: > Any ideas on how to set up an "SMTP Proxy Server" to attain PCI Compliance? > I literally need postfix to just pass through mail to our ISP's smtp server. > We would then set outlook to use this local smtp proxy server. I work for a hosting compa

Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-18 Thread Wietse Venema
Sean Reifschneider: > I'm reporting this primarily because the other searching I've done has > turned up this same error message, but with nothing that clearly points out > what the root of the issue really is. I'm hoping someone can shed some > light on it. > > We've been having little if any lu

ot: Postconf's spamrep_byuser for logs older than yesterday

2010-03-18 Thread Voytek Eymont
I use Postconf's spamrep_byuser to generate daily, well, spam reports by user, that works very well, (thank you folks at Postconf) however, I just got asked for spam rep 'how far back can you go?' so, basically, I'd like to process all maillogs, around one month worth, for a particular user. is

Re: reroute mail based on headers

2010-03-18 Thread /dev/rob0
On Wed, Mar 17, 2010 at 05:09:00PM -0500, Kenneth Marshall wrote: > On Wed, Mar 17, 2010 at 04:53:37PM -0400, Ryan Suarez wrote: > > Does an entry in header_checks need to be defined for each > > recipient? If so, it wouldn't be feasible due to the number of > > addresses we have. Is there anoth

PCI Compliance

2010-03-18 Thread Jonathan Tripathy
Hi Folks, Any ideas on how to set up an "SMTP Proxy Server" to attain PCI Compliance? I literally need postfix to just pass through mail to our ISP's smtp server. We would then set outlook to use this local smtp proxy server. I'm not entirly sure if a "relay" server is good here, as how would t

Re: Reject_unlisted_recipient issue

2010-03-18 Thread Wietse Venema
Oleksii Krykun: > If I use smtpd_reject_unlisted_recipient=yes or > smtpd_recipient_restrictions=reject_unlisted_recipient options all > messages to non-existant addresses are rejected. > But if anybody sends message to multiple addresses in same domain and > one of them doesn't exist then postfix

Re: Relay Options

2010-03-18 Thread Jerry
On Thu, 18 Mar 2010 10:51:03 +0200 Wesley Bruwer replied: >Hi there, > >I am busy configuring a smtp server for our network. I have postfix, >Mailscanner and mailwatch installed, they are all working. If I set on >my PC, that my outgoing mail server is that server, lets say >192.168.100.180. t

Reject_unlisted_recipient issue

2010-03-18 Thread Oleksii Krykun
If I use smtpd_reject_unlisted_recipient=yes or smtpd_recipient_restrictions=reject_unlisted_recipient options all messages to non-existant addresses are rejected. But if anybody sends message to multiple addresses in same domain and one of them doesn't exist then postfix doesn't deliver such messa

Relay Options

2010-03-18 Thread Wesley Bruwer
Hi there, I am busy configuring a smtp server for our network. I have postfix, Mailscanner and mailwatch installed, they are all working. If I set on my PC, that my outgoing mail server is that server, lets say 192.168.100.180. then I can send no problem, scans the mail and everything. the p

dict_fnmatch again

2010-03-18 Thread Michael Tokarev
A few years ago I implemented a new dict for Postfix, dict_fnmatch. It is a shell-style pattern matcher with patterns placed _inline_, right in the config file, without any additional files like pcre/regex (the simplest dictionaries which does not use indexed files) and others. The usage is quite