whitelist for smtp_recipient_restrictions

2010-03-24 Thread Schwalbe, Oliver
Hi community, in the last time i have some problems with smtp-senders who are blocked by dnsbl-lists like uceprotect.net. The owner of the mailservers assured me not to generate and send any SPAM. How can i implement a whitelist for some friendly senderdomains to bypass the reject_rbl_client r

Re: Managing bounces/undeliverable properly

2010-03-24 Thread Victor Duchovni
On Wed, Mar 24, 2010 at 10:19:03PM -0400, Alex wrote: > I have a system with some user accounts and is the final destination > for a few domains. Some of these users forward email off the system to > another system, such as yahoo or gmail. The problem I'm having is when > a user is forwarding thei

Managing bounces/undeliverable properly

2010-03-24 Thread Alex
Hi, I have a system with some user accounts and is the final destination for a few domains. Some of these users forward email off the system to another system, such as yahoo or gmail. The problem I'm having is when a user is forwarding their email to an expired yahoo account, for example, and how

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread James Lever
On 25/03/2010, at 10:43 AM, Wietse Venema wrote: >> * all mail to be sent on to a relayhost regardless of whether >> the local MTA thinks it should be delivered locally or not. >> (this is the specfic issue I currently have) > > relayhost = $mydomain This still doesn’t solve the issue of local

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread Wietse Venema
James Lever: > * all mail to be sent on to a relayhost regardless of whether > the local MTA thinks it should be delivered locally or not. > (this is the specfic issue I currently have) relayhost = $mydomain > * all mail to be rewritten in the form $lo...@$mydomain (preferrably > in that ge

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-03-24 Thread Victor Duchovni
On Wed, Mar 24, 2010 at 11:09:44AM +0100, Gregory BELLIER wrote: > if I copy an existing cipher in OpenSSL and rename it, it will act as if it > is a new cipher. On the wire SSL ciphers have numeric ids, not names. If you "rename" a cipher, it just changes how it is displayed in logs. Renaming c

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread Victor Duchovni
On Thu, Mar 25, 2010 at 07:51:53AM +1000, James Lever wrote: > > On 25/03/2010, at 3:45 AM, Victor Duchovni wrote: > > >> > >> http://www.postfix.org/BASIC_CONFIGURATION_README.html#myorigin > >> > >> See the *second* paragraph. > > > > Also: http://www.postfix.org/MULTI_INSTANCE_README.html#

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread James Lever
Hi Wietse, On 25/03/2010, at 8:59 AM, Wietse Venema wrote: > See http://www.postfix.org/ADRESS_REWRITING_README.html, option > address masquerading. So that is what I was trying to use. The problem with this is that to get it to work the way I (think) I want it to work, I need to do the follow

Re: Small amount of spam still routed through server and anotherproblem with spam

2010-03-24 Thread Ansgar Wiechers
First and foremost, please read the fine Postfix Debugging HOWTO [1]. It will provide guidance in troubleshooting your problem. On 2010-03-24 Josh Cason wrote: > First I hope I'm posting a reply back. I'll try to explain better. > Since I cannot find the log I need to post. What operating system

Re: Small amount of spam still routed through server and another problem with spam

2010-03-24 Thread Josh Cason
It isn't just aol. It is any isp system that they seem to be spamming. As I said a person connnects up. (not one of the email users). Just a random ip number. Sometimes it is postini (we use postini), aol, etc, etc. That sends one message in with mutiple reciepients. Then it sends out like

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread Wietse Venema
James Lever: > On 25/03/2010, at 3:45 AM, Victor Duchovni wrote: > >> > >> http://www.postfix.org/BASIC_CONFIGURATION_README.html#myorigin > >> > >> See the *second* paragraph. > > > > Also: http://www.postfix.org/MULTI_INSTANCE_README.html#quick > > Unfortunately, the problem with both of thes

Re: Relaying and backskatter problem

2010-03-24 Thread Stan Hoeppner
Randy put forth on 3/24/2010 3:55 PM: > dig -x 208.43.143.111 > ;; ANSWER SECTION: > 111.143.43.208.in-addr.arpa. 3600 INPTR > 208.43.143.111-static.reverse.softlayer.com. Your problem isn't the Exchange server per se. Your problem is that you're forwarding spam to it, and its anti-spam

Re: Small amount of spam still routed through server and another problem with spam

2010-03-24 Thread mouss
Josh Cason a écrit : > I have two problems. I built a new postfix e-mail system that worked > great for about 1 year. Then I started getting spam that comes into our > system as one msg and is then routed out to mutiple e-mail addresses > like aol.com. so you forward mail to aol and the like? ple

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-03-24 Thread mouss
Gregory BELLIER a écrit : > Hi. > > if I copy an existing cipher in OpenSSL and rename it, it will act as if > it is a new cipher. > > Would I need to build postfix against this new OpenSSL to be able to use > the new cipher? I think it's not required but I have a doubt. > How does the TLS negoci

Re: filtering messages without using another LDA

2010-03-24 Thread mouss
Mauro Faccenda a écrit : >>> This is harder than it looks. do you really need to worry about all this >>> stuff or are you inventing problems? > > Well, I don't think I'm inventing problems, maybe I could do it in a > easier way, and that's why I sent this mail to this list. ;) > > I had a lot o

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread James Lever
On 25/03/2010, at 3:45 AM, Victor Duchovni wrote: >> >> http://www.postfix.org/BASIC_CONFIGURATION_README.html#myorigin >> >> See the *second* paragraph. > > Also: http://www.postfix.org/MULTI_INSTANCE_README.html#quick Unfortunately, the problem with both of these configurations is that I ca

Re: Greylist server recommendations?

2010-03-24 Thread mouss
Nikolai K. Bochev a écrit : > And your point is ? please do not top post. my point is what I said: v2 has nothing to do with v1. it's the same name but it's not the same program. if you have something to say about this, feel free to express yourself... Until then, - v1 is a single threaded C pr

RE: Relaying and backskatter problem

2010-03-24 Thread Terry Gilsenan
duyz 仍然们 ent from my HTC -Original Message噢 From: Wietse Venema 万维网 Sent: Thursday, 25 March 2010 6:29 AM To: Postfix users Subject: Re: Relaying and backskatter problem Sean Reifschneider: > On 03/24/2010 10:36 AM, Randy wrote: > > EX: > > : Sender address rejected: Domain not found (in > >

Re: question about MX records and postfix (repost)

2010-03-24 Thread Wietse Venema
Daniel L'Hommedieu: > > If all you want is treat anything.example.com as example.com, use: > > > > /etc/postfix/main.cf: > > mydestination = localhost example.com pcre:/etc/postfix/mydestination.pcre > > > > /etc/postfix/mydestination.pcre: > > /\.example\.com$/ whatever > > > > Where "whatev

Re: Small amount of spam still routed through server and anotherproblem with spam

2010-03-24 Thread Wietse Venema
Maybe you should look into spam feedback loops, to get notified when users at remote ISPs are flagging your mail as SPAM. http://www.google.com/search?q=spam+feedback+loop Wietse

Re: question about MX records and postfix (repost)

2010-03-24 Thread Daniel L'Hommedieu
On Mar 24, 2010, at 16:26, Wietse Venema wrote: > Daniel L'Hommedieu: >> On Mar 24, 2010, at 12:40, Wietse Venema wrote: >>> Daniel L'Hommedieu: Hi all. I posted this the other day but got no replies, on or off list. I'm really hoping someone might have an idea of what I can do

Re: Relaying and backskatter problem

2010-03-24 Thread Randy
Wietse Venema wrote: Sean Reifschneider: On 03/24/2010 10:36 AM, Randy wrote: EX: : Sender address rejected: Domain not found (in reply to RCPT TO command)) I'd be tempted to set up a milter or policy filter that for each rcpt would connect to the Exchange server (assuming that'

Re: Small amount of spam still routed through server and anotherproblem with spam

2010-03-24 Thread Josh Cason
First I hope I'm posting a reply back. I'll try to explain better. Since I cannot find the log I need to post. The spam comes from any place. Mostly just foreign IP numbers. Yea we could block the ip numbers but they change. We also use postini and to my surprise it even show up through the

Re: Relaying and backskatter problem

2010-03-24 Thread Wietse Venema
Sean Reifschneider: > On 03/24/2010 10:36 AM, Randy wrote: > > EX: > > : Sender address rejected: Domain not found (in > > reply to RCPT TO command)) > > I'd be tempted to set up a milter or policy filter that for each rcpt > would connect to the Exchange server (assuming that's where it's destine

Re: question about MX records and postfix (repost)

2010-03-24 Thread Wietse Venema
Daniel L'Hommedieu: > On Mar 24, 2010, at 12:40, Wietse Venema wrote: > > Daniel L'Hommedieu: > >> Hi all. > >> > >> I posted this the other day but got no replies, on or off list. > >> I'm really hoping someone might have an idea of what I can do > >> here. I've been looking into things for the

Re: Relaying and backskatter problem

2010-03-24 Thread Sean Reifschneider
On 03/24/2010 10:36 AM, Randy wrote: > EX: > : Sender address rejected: Domain not found (in > reply to RCPT TO command)) I'd be tempted to set up a milter or policy filter that for each rcpt would connect to the Exchange server (assuming that's where it's destined) and see if that server will acc

RE: Forward local mailbox to relayhost

2010-03-24 Thread Isak Badenhorst
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Victor Duchovni > Sent: 24 March 2010 20:02 > To: postfix-users@postfix.org > Subject: Re: Forward local mailbox to relayhost > > On Wed, Mar 24, 2010 at 04:51:33PM +0200,

Re: question about MX records and postfix (repost)

2010-03-24 Thread Daniel L'Hommedieu
On Mar 24, 2010, at 12:40, Wietse Venema wrote: > Daniel L'Hommedieu: >> Hi all. >> >> I posted this the other day but got no replies, on or off list. >> I'm really hoping someone might have an idea of what I can do >> here. I've been looking into things for the last couple days and >> have not m

Re: Forward local mailbox to relayhost

2010-03-24 Thread Victor Duchovni
On Wed, Mar 24, 2010 at 04:51:33PM +0200, Isak Badenhorst wrote: > I have asked before with no sucess and want ask again because I have spent > quite a few days now searching for the answer with no luck. Maybe I am just > not reading well enough but I cannot find my answer. > > I have just moved

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread Victor Duchovni
On Wed, Mar 24, 2010 at 09:43:18AM -0400, Wietse Venema wrote: > James Lever: > > I_ve been banging my head away at this for a while today and all > > I have is a headache. > > > > Is there a (preferably generic) way to redirect *all* delivery to > > local accounts to $lo...@$mydomain instead of

Re: question about MX records and postfix (repost)

2010-03-24 Thread Wietse Venema
Daniel L'Hommedieu: > Hi all. > > I posted this the other day but got no replies, on or off list. > I'm really hoping someone might have an idea of what I can do > here. I've been looking into things for the last couple days and > have not made any progress. You forgot to follow the mailing list

Relaying and backskatter problem

2010-03-24 Thread Randy
A configuration was introduced ( from the holy powers ) which happens to cause our server to backskatter and I am trying to fix the problem on our end ASAP. 1. We relay to an offsite mail server for a few of our users ( contracted mail hosting ) 2. This is M$exchange, and they have rules whi

question about MX records and postfix (repost)

2010-03-24 Thread Daniel L'Hommedieu
Hi all. I posted this the other day but got no replies, on or off list. I'm really hoping someone might have an idea of what I can do here. I've been looking into things for the last couple days and have not made any progress. Thanks. Daniel --- Today I think I am trying to do something si

Forward local mailbox to relayhost

2010-03-24 Thread Isak Badenhorst
I have asked before with no sucess and want ask again because I have spent quite a few days now searching for the answer with no luck. Maybe I am just not reading well enough but I cannot find my answer. I have just moved from sendmail and have this one problem. I have a local server in the offi

Re: Relayhost dependend on destination MX

2010-03-24 Thread Robert Schetterer
Am 24.03.2010 14:31, schrieb Martijn de Munnik: > Hi, > > Our smtp server has some issues when talking to some remote mx's. This > results in a timeout and the message not being delivered (this was > discussed on this mailinglist but there doesn't seem to be a real > solution available now). When

Re: mail for xxxx loops back to myself

2010-03-24 Thread Wietse Venema
Query your mysql tables for the domains that loop: $ postmap -q 126.com mysql:/etc/postfix/mysql-va.cf || echo not found $ postmap -q 126.com mysql:/etc/postfix/mysql-vd.cf || echo not found In both cases the output should be the text "not found". Wietse

Re: Small amount of spam still routed through server and another problem with spam

2010-03-24 Thread Ansgar Wiechers
On 2010-03-24 Josh Cason wrote: > I have two problems. I built a new postfix e-mail system that worked > great for about 1 year. Then I started getting spam that comes into > our system as one msg and is then routed out to mutiple e-mail > addresses like aol.com. Check your logs to find out how th

Re: Relayhost dependend on destination MX

2010-03-24 Thread Martijn de Munnik - Postfix List
On Wed, 24 Mar 2010 09:45:55 -0400 (EDT), Wietse Venema wrote: > Martijn de Munnik: >> Hi, >> >> Our smtp server has some issues when talking to some remote mx's. This >> results in a timeout and the message not being delivered (this was >> discussed on this mailinglist but there doesn't seem to

RE: mail for xxxx loops back to myself

2010-03-24 Thread motty.cruz
I had the same error at one time make sure you have this below in your main.conf mydestination = localhost.$mydomain, localhost, mateford.com, 126.com, 163.com Thanks, - Motty -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of

OFF-List attacks on Postfix users

2010-03-24 Thread Wietse Venema
Victor Duchovni: > On Tue, Mar 23, 2010 at 04:18:49PM +, rich...@buzzhost.co.uk wrote: > [ Received: from stytwo.spampig.org.uk (stytwo.spampig.org.uk > [212.69.52.158]) ] > > > On Tue, 2010-03-23 at 12:05 -0400, Victor Duchovni wrote: > > > > > Everything you need to know is the RELEASE_NOT

Re: Relayhost dependend on destination MX

2010-03-24 Thread Wietse Venema
Martijn de Munnik: > Hi, > > Our smtp server has some issues when talking to some remote mx's. This > results in a timeout and the message not being delivered (this was > discussed on this mailinglist but there doesn't seem to be a real > solution available now). When we relay the message through

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread Wietse Venema
James Lever: > I_ve been banging my head away at this for a while today and all > I have is a headache. > > Is there a (preferably generic) way to redirect *all* delivery to > local accounts to $lo...@$mydomain instead of delivering to > /var/mail/ ? > > (I_m trying to setup a true NULL CLIENT co

Relayhost dependend on destination MX

2010-03-24 Thread Martijn de Munnik
Hi, Our smtp server has some issues when talking to some remote mx's. This results in a timeout and the message not being delivered (this was discussed on this mailinglist but there doesn't seem to be a real solution available now). When we relay the message through another server the remote mx ha

Small amount of spam still routed through server and another problem with spam

2010-03-24 Thread Josh Cason
I have two problems. I built a new postfix e-mail system that worked great for about 1 year. Then I started getting spam that comes into our system as one msg and is then routed out to mutiple e-mail addresses like aol.com. I have since update my postfix config file to block even more spam

Re: All email forward a copy to testing server

2010-03-24 Thread Patric Falinder
Ansgar Wiechers skrev 2010-03-24 11:49: On 2010-03-24 Patric Falinder wrote: If I have a subdomain that I need to do this with, sub.domain.com, should it he like this then? /etc/postfix/recipient_bcc: if /@sub\.domain\.com/ /^...@sub\.domain\.com$/ $...@new.domain.com endif You can probably o

Re: All email forward a copy to testing server

2010-03-24 Thread Ansgar Wiechers
On 2010-03-24 Patric Falinder wrote: > If I have a subdomain that I need to do this with, sub.domain.com, > should it he like this then? > > /etc/postfix/recipient_bcc: > if /@sub\.domain\.com/ > /^...@sub\.domain\.com$/ $...@new.domain.com > endif You can probably omit the "if ... endif", the mat

Re: All email forward a copy to testing server

2010-03-24 Thread Patric Falinder
> (copy of an answer from a few days ago) > > To deliver to two destinations, you need two recipients. > > You can use a regexp recipient_bcc_maps to add another > recipient, then use smtp_generic_maps to rewrite it back to > the original during delivery. Use a transport_maps entry to > direct th

new cipher in OpenSSL, need to rebuild Postfix?

2010-03-24 Thread Gregory BELLIER
Hi. if I copy an existing cipher in OpenSSL and rename it, it will act as if it is a new cipher. Would I need to build postfix against this new OpenSSL to be able to use the new cipher? I think it's not required but I have a doubt. How does the TLS negociation work ? I guess it is done by Pos

Re: Greylist server recommendations?

2010-03-24 Thread Bas Mevissen
On Tue, 2010-03-23 at 19:31 -0600, LuKreme wrote: > > Anyway, the solution is simple > > u...@example.com = Rejected as spam > user+extens...@example.com = possibly accepted. > Good point. Bas.