Re: Relay certain domains in the sender part by defined ip addresses

2010-04-06 Thread Dimitrios Karapiperis
O/H mouss έγραψε: Dimitrios Karapiperis a écrit : Hi there! I am using Postfix 2.6 along with GNU Mailman for mailing lists. My question is if there is any way to relay e-mails with sender (MAIL FROM) of defined domain names (eg. x...@domain.tld) originated by a predefined set of ip addresse

Re: pop-before-smtp why I use.

2010-04-06 Thread LuKreme
On 6-Apr-2010, at 08:32, /dev/rob0 wrote: > > What "new type of spam" is this? I think there is no such thing. You > need to show NON-VERBOSE logs of this "new spam" coming in. My WAG is that his users are responding to the phishing emails and giving out their usernames and password and then th

Re: What does postfix need to be in a dmz zone?

2010-04-06 Thread Wietse Venema
Josh Cason: > I have a dmz zone on my network. The postfix sits behind the dmz zone. > The public IP address is translated (nat) to the dmz zone. I asked > about the proxy interfaces command in the main.cf file. I was told I > needed to put in the public ip address for the server. What does t

Re: Error compiling postfix with SASL

2010-04-06 Thread Wietse Venema
Geoff Sweet: > I having a heck of a time compiling 2.6.5 onto my CentOS 5.4 system (x86) > with SASL support. I can verify that the libssl and libcrypto libraries are > present: > > $ ls /usr/lib/libssl.so > /usr/lib/libssl.so > > $ ls /usr/lib/libcrypto.so > /usr/lib/libcrypto.so > > so I

Error compiling postfix with SASL

2010-04-06 Thread Geoff Sweet
I having a heck of a time compiling 2.6.5 onto my CentOS 5.4 system (x86) with SASL support. I can verify that the libssl and libcrypto libraries are present: $ ls /usr/lib/libssl.so /usr/lib/libssl.so $ ls /usr/lib/libcrypto.so /usr/lib/libcrypto.so so I make my Makefile like so per the doc

Re: Pop-Before-Smtp let spam through Answered More on Firewall with postfix?

2010-04-06 Thread Ansgar Wiechers
On 2010-04-06 Josh Cason wrote: > As for posting log files. If you go back into my other posts. Since you chose to not have any In-Reply-To or References header in your mails, and also chose to change the subject in virtually all of your replies, going back to your other mails turns out to be a ma

Verify User and IP Sender Address - SPAM Issue

2010-04-06 Thread Klaus Engelmann
Hello Everybody. I am running a Postfix postfix-2.3.3-2.1.el5_2 on a CentOS 5.4 box at a Federal University in Brazil. Our users (students and professors) suffered several social engineering attacks and spammers got some valid users and passwords. I know that the spammers are using a fake email (

What does postfix need to be in a dmz zone?

2010-04-06 Thread Josh Cason
I have a dmz zone on my network. The postfix sits behind the dmz zone. The public IP address is translated (nat) to the dmz zone. I asked about the proxy interfaces command in the main.cf file. I was told I needed to put in the public ip address for the server. What does this do since it di

Re: Help, still an open relay.?

2010-04-06 Thread Victor Duchovni
On Tue, Apr 06, 2010 at 01:21:26PM -0800, M M wrote: > [...] my server is an open relay according to online tests. > > mynetworks = 127.0.0.1/8, 198.100.50.0/24 Make sure external clients are not NAT translated into this address space. > virtual_mailbox_domains = > mysql:/etc/postfix/mysq

Help, still an open relay.‏

2010-04-06 Thread M M
Hello all, I just finished setting up a postfix server with mysql/virtual users. I can send and receive emails fine. But my server is an open relay according to online tests. I've tried many and they all list my server as an open relay. I've tried my best to correct this problem but i can't f

Re: Pop-Before-Smtp let spam through Answered More on Firewall with postfix?

2010-04-06 Thread Noel Jones
On 4/6/2010 3:40 PM, Josh Cason wrote: Major question: First of all can you be a little more clear on the fw setting. I need to get with my firewall guy and check with him. I'm pretty sure it is wrong. It is doing src and nat translation. I cannot get more specific since I didn't setup the fw.

Re: cant deliver emails to gmail - no bounced msgs either

2010-04-06 Thread mouss
Jeff Lacki a écrit : > [snip] My server relays through my ISP. you say you're relaying through your ISP. > [snip] I tried commenting out the relay_host line so it would go > directly to gmail and I got: > > Apr 5 22:33:01 myserver postfix/smtp[27160]: connect to > alt3.gmail-smtp-in.l.google.

Re: Relay certain domains in the sender part by defined ip addresses

2010-04-06 Thread mouss
Dimitrios Karapiperis a écrit : > Hi there! > > I am using Postfix 2.6 along with GNU Mailman for mailing lists. > My question is > if there is any way to relay e-mails with sender (MAIL FROM) of defined > domain names (eg. x...@domain.tld) originated by a predefined set of ip > addresses > and re

Re: Pop-Before-Smtp let spam through Answered More on Firewall with postfix?

2010-04-06 Thread Josh Cason
Major question: First of all can you be a little more clear on the fw setting. I need to get with my firewall guy and check with him. I'm pretty sure it is wrong. It is doing src and nat translation. I cannot get more specific since I didn't setup the fw. Better explination: I think we a

Re: Using Spamhaus DNSL feed

2010-04-06 Thread mouss
Ralf Hildebrandt a écrit : > The spamhaus DBL can be used to query sender domains and hostnames (no > IPs). > > So generally, one could use: >reject_rhsbl_sender dbl.spamhaus.org >reject_rhsbl_reverse_client dbl.spamhaus.org > > but when one subscribes to Spamhaus's DNSBL feed (wh

Re: Am I really using a CIDR map?

2010-04-06 Thread Wietse Venema
Robert Lopez: > On Tue, Apr 6, 2010 at 12:23 PM, Wietse Venema wrote: > > Robert Lopez: > > Now that you mention the documentation: > > > >> SYNOPSIS > >> ? ? ? ?postmap -q "string" cidr:/etc/postfix/filename > >> > >> ? ? ? ?postmap -q - cidr:/etc/postfix/filename >> > >> DESCRIPTION > > ... > >

Relay certain domains in the sender part by defined ip addresses

2010-04-06 Thread Dimitrios Karapiperis
Hi there! I am using Postfix 2.6 along with GNU Mailman for mailing lists. My question is if there is any way to relay e-mails with sender (MAIL FROM) of defined domain names (eg. x...@domain.tld) originated by a predefined set of ip addresses and reject all the others that originate from othe

Re: Am I really using a CIDR map?

2010-04-06 Thread Robert Lopez
I replied to Charles thinking I was replying to the list... On Tue, Apr 6, 2010 at 12:40 PM, Charles Marcus wrote: > On 2010-04-06 2:35 PM, Robert Lopez wrote: >> If I remove the .db ile (As Noel points out not necessary) then I get >> an error because postmap seems to only look in database files

Re: Am I really using a CIDR map?

2010-04-06 Thread Robert Lopez
On Tue, Apr 6, 2010 at 12:48 PM, Noel Jones wrote: > On 4/6/2010 1:42 PM, Robert Lopez wrote: >>> >>> The Postfix mail system uses optional lookup tables as described in >>> the DATABASE_README document. Lists of IP addresses can be specified >>> in CIDR (Classless Inter-Domain Routing) form. In t

Re: Am I really using a CIDR map?

2010-04-06 Thread Noel Jones
On 4/6/2010 1:42 PM, Robert Lopez wrote: The Postfix mail system uses optional lookup tables as described in the DATABASE_README document. Lists of IP addresses can be specified in CIDR (Classless Inter-Domain Routing) form. In this case, a plain text file is the map, with the standard "key white

Re: Am I really using a CIDR map?

2010-04-06 Thread Robert Lopez
On Tue, Apr 6, 2010 at 12:33 PM, /dev/rob0 wrote: > On Tue, Apr 06, 2010 at 11:57:00AM -0600, Robert Lopez wrote: >> On Tue, Apr 6, 2010 at 10:52 AM, Noel Jones >> wrote: >> > On 4/6/2010 11:39 AM, Robert Lopez wrote: >> >> Why does postfix not like the source file being removed from the >> >> /e

Re: Am I really using a CIDR map?

2010-04-06 Thread Charles Marcus
On 2010-04-06 2:35 PM, Robert Lopez wrote: > If I remove the .db ile (As Noel points out not necessary) then I get > an error because postmap seems to only look in database files: > > $ postmap -q 222.254.228.0/24 cidr-ip > postmap: fatal: open database cidr-ip.db: No such file or directory Did y

Re: Am I really using a CIDR map?

2010-04-06 Thread Noel Jones
On 4/6/2010 1:35 PM, Robert Lopez wrote: On Tue, Apr 6, 2010 at 12:23 PM, Wietse Venema wrote: Robert Lopez: Now that you mention the documentation: SYNOPSIS postmap -q "string" cidr:/etc/postfix/filename postmap -q - cidr:/etc/postfix/filename ... To test lookup tab

Re: Am I really using a CIDR map?

2010-04-06 Thread Robert Lopez
On Tue, Apr 6, 2010 at 12:23 PM, Wietse Venema wrote: > Robert Lopez: > Now that you mention the documentation: > >> SYNOPSIS >>        postmap -q "string" cidr:/etc/postfix/filename >> >>        postmap -q - cidr:/etc/postfix/filename > >> DESCRIPTION > ... >>        To test lookup tables, use th

Re: Am I really using a CIDR map?

2010-04-06 Thread /dev/rob0
On Tue, Apr 06, 2010 at 11:57:00AM -0600, Robert Lopez wrote: > On Tue, Apr 6, 2010 at 10:52 AM, Noel Jones > wrote: > > On 4/6/2010 11:39 AM, Robert Lopez wrote: > >> Why does postfix not like the source file being removed from the > >> /etc/postfix directory? > > > > cidr tables are plain-text t

Re: Am I really using a CIDR map?

2010-04-06 Thread Wietse Venema
Robert Lopez: Now that you mention the documentation: > SYNOPSIS >postmap -q "string" cidr:/etc/postfix/filename > >postmap -q - cidr:/etc/postfix/filename > DESCRIPTION ... >To test lookup tables, use the "postmap -q" command as >described in the SYNOPSIS ab

Re: Relay host and transport maps

2010-04-06 Thread Scott Thomson
Thanks Wietse, I'll try what I think will work tonight and post results. Scott On Mon, Apr 5, 2010 at 10:44 AM, Wietse Venema wrote: > > Scott Thomson: > > Hey Folks, > > > > Thanks in advance for any help you can provide.  I think it might make the > > most sense to start by describing what I'm

Re: Am I really using a CIDR map?

2010-04-06 Thread Noel Jones
On 4/6/2010 12:57 PM, Robert Lopez wrote: On Tue, Apr 6, 2010 at 10:52 AM, Noel Jones wrote: On 4/6/2010 11:39 AM, Robert Lopez wrote: For some time I have been tracking changes to the access table with RCS. Each time a change is made the "ci access" results in the removal of the access file

Re: customized relocated bounces

2010-04-06 Thread mailinglists
> mailingli...@belfin.ch: >> > mailingli...@belfin.ch: >> >> Is there a way to customize the relocated bounce message? >> > >> > Postfix has configurable "bounce", "delayed", "success" and "trace" >> > template text. >> > >> > Postfix has configurable "relocated_maps" responses > ... >> Talking abo

Re: Am I really using a CIDR map?

2010-04-06 Thread Robert Lopez
On Tue, Apr 6, 2010 at 10:52 AM, Noel Jones wrote: > On 4/6/2010 11:39 AM, Robert Lopez wrote: >> >> For some time I have been tracking changes to the access table with RCS. >> Each time a change is made the "ci access" results in the removal of >> the access file  from /etc/postfix and leaving th

Re: Messages held in hold queue didn't bounce after release

2010-04-06 Thread Daniel Cizinsky
On Thu, Apr 01, 2010 at 05:12:52PM -0400, Victor Duchovni wrote: > Move it to the "maildrop" queue of a different Postfix queue (instance) > whose queue directory is on the same file-system, and main.cf contains > > content_filter = error:... Thanks a lot! That worked well. -- Daniel Cizin

Re: Am I really using a CIDR map?

2010-04-06 Thread Noel Jones
On 4/6/2010 11:39 AM, Robert Lopez wrote: For some time I have been tracking changes to the access table with RCS. Each time a change is made the "ci access" results in the removal of the access file from /etc/postfix and leaving the /etc/postfix.access.db file. Today I tried to check in a cidr

Re: Am I really using a CIDR map?

2010-04-06 Thread Wietse Venema
Robert Lopez: > A "postmap -q cidr-ip" returns the rest of the > matching line correctly. This uses the default database type, which is "hash:" on most systems. Thus. Postfix opens "hash:cidr-ip" which results in opening cidr-ip.db. To query a CIDR file, specify cidr:filename, just like you have

Am I really using a CIDR map?

2010-04-06 Thread Robert Lopez
For some time I have been tracking changes to the access table with RCS. Each time a change is made the "ci access" results in the removal of the access file from /etc/postfix and leaving the /etc/postfix.access.db file. Today I tried to check in a cidr table named cidr-ip. Upon check-in (and res

Re: problems with permit_sasl and unknown_address

2010-04-06 Thread Yves Dorfsman
Noel Jones wrote: On 4/4/2010 8:03 PM, Yves Dorfsman wrote: This accepts mail from SASL-authenticated clients and rejects unknown stuff from SASL-unauthenticated clients. Your mail is rejected because the client is not SASL authenticated. That's right I get rejected before I even have the ti

Re: smtpd_recipient_restrictions = check_recipient_access & sendmail

2010-04-06 Thread Dan Farrell
On Mon, 05 Apr 2010 15:01:24 -0500 Noel Jones wrote: > On 4/5/2010 2:48 PM, Dan Farrell wrote: > > Hi List! Hail, Postfix Gurus! > > > > I'm having problems using smtpd_recipient_restrictions with > > check_recipient_access. > > > > My goal is to send mail from this machine only to email address

Re: Using Spamhaus DNSL feed

2010-04-06 Thread Noel Jones
On 4/6/2010 10:34 AM, Ralf Hildebrandt wrote: The spamhaus DBL can be used to query sender domains and hostnames (no IPs). So generally, one could use: reject_rhsbl_sender dbl.spamhaus.org reject_rhsbl_reverse_client dbl.spamhaus.org but when one subscribes to Spamhaus's DNSBL f

Re: customized relocated bounces

2010-04-06 Thread Wietse Venema
mailingli...@belfin.ch: > > mailingli...@belfin.ch: > >> Is there a way to customize the relocated bounce message? > > > > Postfix has configurable "bounce", "delayed", "success" and "trace" > > template text. > > > > Postfix has configurable "relocated_maps" responses ... > Talking about bounce te

Re: Using Spamhaus DNSL feed

2010-04-06 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] > blocked using dbl.spamhaus.org${rbl_reason?; $rbl_reason} This assumes it's the only RBL being queried. Otherwise one would use rbl_reply_maps -- Ralf Hildebrandt Geschäftsbereich IT | Abteilun

Using Spamhaus DNSL feed

2010-04-06 Thread Ralf Hildebrandt
The spamhaus DBL can be used to query sender domains and hostnames (no IPs). So generally, one could use: reject_rhsbl_sender dbl.spamhaus.org reject_rhsbl_reverse_client dbl.spamhaus.org but when one subscribes to Spamhaus's DNSBL feed (which we have to), one gets a special domain

Re: customized relocated bounces

2010-04-06 Thread mailinglists
> mailingli...@belfin.ch: >> Is there a way to customize the relocated bounce message? > > Postfix has configurable "bounce", "delayed", "success" and "trace" > template text. > > Postfix has configurable "relocated_maps" responses do you mean by this the Section 'Table Format' in http://www.postf

Re: pop-before-smtp why I use.

2010-04-06 Thread /dev/rob0
On Tue, Apr 06, 2010 at 08:11:02AM -0600, Josh Cason wrote: > When I built the server after doing tons of research. (the old > servers ran sendmail and I didn't have a hand in setting them up.) > pop-before-smtp worked great for customers outside the network. At best, pop-before-smtp is an ugly kl

Re: pop-before-smtp why I use.

2010-04-06 Thread Noel Jones
On 4/6/2010 9:11 AM, Josh Cason wrote: When I built the server after doing tons of research. (the old servers ran sendmail and I didn't have a hand in setting them up.) pop-before-smtp worked great for customers outside the network. If I disabled pop-before-smtp they would not work. Just internal

Re: pop-before-smtp why I use.

2010-04-06 Thread Robert Schetterer
Am 06.04.2010 16:11, schrieb Josh Cason: > When I built the server after doing tons of research. (the old servers > ran sendmail and I didn't have a hand in setting them up.) > pop-before-smtp worked great for customers outside the network. If I > disabled pop-before-smtp they would not work. Just

re: pop-before-smtp why I use.

2010-04-06 Thread Josh Cason
When I built the server after doing tons of research. (the old servers ran sendmail and I didn't have a hand in setting them up.) pop-before-smtp worked great for customers outside the network. If I disabled pop-before-smtp they would not work. Just internal users. So without any changes to

Re: cant deliver emails to gmail - no bounced msgs either

2010-04-06 Thread Jerry
On Tue, 6 Apr 2010 08:35:32 -0400, Daniel L'Hommedieu articulated: > > Why not just use port 587? You will have to configure SASL, etc; > > however, once done it should work just fine. That is how I do it. > > Jerry, > > For me that wasn't a workable solution, since many of the recipients, >

Re: temporarily putting ON HOLD

2010-04-06 Thread Victor Duchovni
On Tue, Apr 06, 2010 at 09:44:53AM +0200, Stefan Palme wrote: > Currently the "other server" will be down (for a long time - at > least more than the default "maximal_queue_lifetime"). Because > of this, I want all mails that would normally go to relay.other.server > to be put ON HOLD. You need t

Re: cant deliver emails to gmail - no bounced msgs either

2010-04-06 Thread Daniel L'Hommedieu
On Apr 6, 2010, at 08:30, Jerry wrote: > On Tue, 6 Apr 2010 07:41:31 -0400, Daniel L'Hommedieu > articulated: > >> On Apr 5, 2010, at 23:51, Sahil Tandon wrote: >>> On Mon, 05 Apr 2010, Jeff Lacki wrote: I havent touched the config in a few weeks so nothing should have changed from when

Re: customized relocated bounces

2010-04-06 Thread Wietse Venema
mailingli...@belfin.ch: > Is there a way to customize the relocated bounce message? Postfix has configurable "bounce", "delayed", "success" and "trace" template text. Postfix has configurable "relocated_maps" responses. Postfix appends "relocated_maps" responses AT THE END of the "bounce" delive

Re: cant deliver emails to gmail - no bounced msgs either

2010-04-06 Thread Jerry
On Tue, 6 Apr 2010 07:41:31 -0400, Daniel L'Hommedieu articulated: > On Apr 5, 2010, at 23:51, Sahil Tandon wrote: > > On Mon, 05 Apr 2010, Jeff Lacki wrote: > >> I havent touched the config in a few weeks so nothing should > >> have changed from when it worked. My server relays through > >> my

Re: customized relocated bounces

2010-04-06 Thread Charles Marcus
On 2010-04-06 7:54 AM, mailingli...@belfin.ch wrote: > Is there a way to customize the relocated bounce message? Since postfix isn't the MTA that generates the actual bounce message, the answer is no. The server that generates the actual bounce message is the SENDING server. -- Best regards,

Re: customized relocated bounces

2010-04-06 Thread mailinglists
> mailingli...@belfin.ch: >> Hi >> >> is there a way how to customize "relocated" bounces in a similar fashion >> as described in man 5 bounce? > > There are no "relocated" bounce messages. There are "bounce", > "delayed", "success" and "trace" messages. Hmm... looking up man 5 relocated: The opt

Re: cant deliver emails to gmail - no bounced msgs either

2010-04-06 Thread Daniel L'Hommedieu
On Apr 5, 2010, at 23:51, Sahil Tandon wrote: > On Mon, 05 Apr 2010, Jeff Lacki wrote: >> I havent touched the config in a few weeks so nothing should >> have changed from when it worked. My server relays through >> my ISP. My domain DNS records are working fine and I checked >> for blacklisting

Re: customized relocated bounces

2010-04-06 Thread Wietse Venema
mailingli...@belfin.ch: > Hi > > is there a way how to customize "relocated" bounces in a similar fashion > as described in man 5 bounce? There are no "relocated" bounce messages. There are "bounce", "delayed", "success" and "trace" messages. The content of "relocated" error (not bounce!) messag

Re: pop-before-smtp should not put localhost/server ip in the list then?

2010-04-06 Thread Ansgar Wiechers
On 2010-04-05 Josh Cason wrote: > So then from I could tell. Pop-Before-Smtp should not list 127.0.0.1 > and the server ip number then. It should if you're doing POP from 127.0.0.1 or the server's IP address. Which you probably shouldn't. Why are you doing POP-before-SMTP instead of SMTP-auth any

Re: ot: spf bounce on forwarded email

2010-04-06 Thread Sean Reifschneider
On 04/05/2010 08:00 PM, Voytek Eymont wrote: > I've set up a number of aliases to redirect emails to the desired new > addresses on a remote server, that seemed to work fine What you need to do is SRS -- Sender Rewriting Scheme: http://en.wikipedia.org/wiki/Sender_Rewriting_Scheme See the ver

customized relocated bounces

2010-04-06 Thread mailinglists
Hi is there a way how to customize "relocated" bounces in a similar fashion as described in man 5 bounce? Thanks, Philipp

temporarily putting ON HOLD

2010-04-06 Thread Stefan Palme
Hi, I have a postfix configuration with virtual aliases like this: u...@example.com u...@imap.server, u...@relay.other.server There are transport maps like this: imap.server lmtp:unix:/var/imap/socket/lmtp relay.other.serversmtp:[ip.address.of.other.server] With this I