Re: postcat ENVELOPE RECORDS output?

2010-04-16 Thread Curtis
>It's not documented, because there is no promise that it will work >the same way in a future Postfix version. > >However, the names of the records give a hint. > >> Most particularly, I'm concerned about the following three fields: >> >> named_attribute: dsn_orig_rcpt=rfc822;em...@example.com >> o

RE: postcat ENVELOPE RECORDS output?

2010-04-16 Thread Curtis
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Wietse Venema > Sent: Friday, April 16, 2010 5:04 PM > To: Postfix users > Subject: Re: postcat ENVELOPE RECORDS output? > > Curtis: > > Oops... that was embarrassing... my

Re: crl support?

2010-04-16 Thread zhong ming wu
On Thu, Apr 15, 2010 at 11:52 PM, Victor Duchovni wrote: > On Thu, Apr 15, 2010 at 07:16:58PM -0400, zhong ming wu wrote: > >> I don't find anywhere in TLS documentation how to make postfix respect a crl >> so that client's whose certs have been revoked cannot use the submission >> server. > > Th

Re: postcat ENVELOPE RECORDS output?

2010-04-16 Thread Wietse Venema
Curtis: > Oops... that was embarrassing... my message was missing a subject. (fixed) > > I apologize if this is answered in the documention. but I'm having trouble > finding where the "ENVELOPE RECORDS" section of the postcat output is > described. It's not documented, because there is no promis

postcat ENVELOPE RECORDS output?

2010-04-16 Thread Curtis
Oops... that was embarrassing... my message was missing a subject. (fixed) -Original Message- From: Curtis [mailto:postfixu...@isparks.com] Sent: Friday, April 16, 2010 4:05 PM To: 'postfix-users@postfix.org' Subject: I apologize if this is answered in the documention. but I'm having t

[no subject]

2010-04-16 Thread Curtis
I apologize if this is answered in the documention. but I'm having trouble finding where the "ENVELOPE RECORDS" section of the postcat output is described. Most particularly, I'm concerned about the following three fields: named_attribute: dsn_orig_rcpt=rfc822;em...@example.com original_recipien

Re: Protection against stolen credentials?

2010-04-16 Thread John Fawcett
On 15/04/10 17:28, Ignacio García wrote: > The way I think this could be solved is by having a program that: > > 1.- Checks the logs for authenticated smtp usage and saves > smtp_authenticated_user, originating IPs, and country, which is > dicovered using ip geolocation. > 2.- During the following

RE: TLS Exception for Remote Sender

2010-04-16 Thread Franck MAHE
Hello, In fact the right configuration is smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/ehlo_maps.cidr If the remote smtp server (Sender) has a buggy TLS, so I can refuse the use of STARTTLS by this server. So my problem is now solved. Thanks to all and sorry if I did not read the

Re: Fwd: Re: [Dovecot] catch-all not working with postfix dovecot lda

2010-04-16 Thread Noel Jones
On 4/16/2010 1:31 PM, fakessh wrote: hi all hi wieste hi all users of this list hi much many people good god, I come with the same question I always wonder how to build a catch-all I asked the same question on the list dovecot http://www.mail-archive.com/postfix-users@postfix.org/msg22963.html

Re: Stop sending Success DSN

2010-04-16 Thread Wietse Venema
Stephen Carville: > Today Postmaster forwarded me a message that appear to be a bounce > notification for a Success DSN from postfix. The original DSN appears > to have originated on the postfix server (mx01.lereta.com). Frankly I > didn't know they were being sent and prefer they not be. Is the

Fwd: Re: [Dovecot] catch-all not working with postfix dovecot lda

2010-04-16 Thread fakessh
hi all hi wieste hi all users of this list hi much many people good god, I come with the same question I always wonder how to build a catch-all I asked the same question on the list dovecot http://www.mail-archive.com/postfix-users@postfix.org/msg22963.html after discussion, it appears that the w

Stop sending Success DSN

2010-04-16 Thread Stephen Carville
Today Postmaster forwarded me a message that appear to be a bounce notification for a Success DSN from postfix. The original DSN appears to have originated on the postfix server (mx01.lereta.com). Frankly I didn't know they were being sent and prefer they not be. Is there anyway to turn off just

Re: TLS Exception for Remote Sender

2010-04-16 Thread Victor Duchovni
On Fri, Apr 16, 2010 at 09:28:33AM -0700, Stephen Carville wrote: > On Mon, Apr 12, 2010 at 11:38 PM, Franck MAHE wrote: > > > How to force some remote smtp server not to use TLS? I found the way > > for me to use the clear communication to send emails to specific > > domains, but I'm not able t

Re: TLS Exception for Remote Sender

2010-04-16 Thread Stephen Carville
On Mon, Apr 12, 2010 at 11:38 PM, Franck MAHE wrote: > How to force some remote smtp server not to use TLS? I found the way for me > to use the >clear communication to send emails to specific domains, but I'm not able to >find a solution >for my issue. Any clue? I think smtp_tls_policy_maps mi

Re: hold queue management

2010-04-16 Thread Victor Duchovni
On Fri, Apr 16, 2010 at 08:24:52AM -0400, Wietse Venema wrote: > > However, the re-queued mail gets delivered to the mailbox. Is this > > default behavior? Can it be changed? > > The smtpd_*_restrictions apply ONLY when mail arrives via SMTP. > > However, header_checks, body_checks and externa

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-04-16 Thread Victor Duchovni
On Thu, Mar 25, 2010 at 06:16:22PM +0100, Gregory BELLIER wrote: > However, I didn't ask if new code was necessary in Postfix so it can be > aware of a new cipher. As you said, it's automatical. I asked if, in your > opinion, it would be necessary to build postfix (as is) against a new > OpenSS

Re: Postfix 2.6.5 address rewiting: removing invalid characters from email addresses

2010-04-16 Thread Noel Jones
On 4/16/2010 8:59 AM, Bernd Nies wrote: Hi, Is it possible to rewrite an email address that contains invalid characters? Example: Rewrite ":u...@domain.com" to "u...@domain.com" -- stripping of the leading ":" (colon). I read through the Postfix Address Rewriting README [1] but did not find a

Re: Postfix 2.6.5 address rewiting: removing invalid characters from email addresses

2010-04-16 Thread Wietse Venema
Bernd Nies: > Hi, > > Is it possible to rewrite an email address that contains invalid characters? > > Example: Rewrite ":u...@domain.com" to "u...@domain.com" -- stripping > of the leading ":" (colon). > > I read through the Postfix Address Rewriting README [1] but did not > find a hint. Post

Re: DKIM-milter only for outgoing

2010-04-16 Thread ram
On Fri, 2010-04-16 at 16:22 +0300, Birta Levente wrote: > On 15/04/2010 18:26, Tomoyuki Murakami wrote: > > From: Birta Levente > > Subject: DKIM-milter only for outgoing > > Date: Thu, 15 Apr 2010 17:23:12 +0300 > > > > > >> My postfix server is set up with amavisd-new and dkim-milter. > >> >

Postfix 2.6.5 address rewiting: removing invalid characters from email addresses

2010-04-16 Thread Bernd Nies
Hi, Is it possible to rewrite an email address that contains invalid characters? Example: Rewrite ":u...@domain.com" to "u...@domain.com" -- stripping of the leading ":" (colon). I read through the Postfix Address Rewriting README [1] but did not find a hint. Source routing looks close but that

Re: DKIM-milter only for outgoing

2010-04-16 Thread Wietse Venema
Birta Levente: > On 15/04/2010 18:26, Tomoyuki Murakami wrote: > > From: Birta Levente > > Subject: DKIM-milter only for outgoing > > Date: Thu, 15 Apr 2010 17:23:12 +0300 > > > > > >> My postfix server is set up with amavisd-new and dkim-milter. > >> > >> In the main.cf: > >> > >> content_fil

Re: DKIM-milter only for outgoing

2010-04-16 Thread Birta Levente
On 15/04/2010 18:26, Tomoyuki Murakami wrote: From: Birta Levente Subject: DKIM-milter only for outgoing Date: Thu, 15 Apr 2010 17:23:12 +0300 My postfix server is set up with amavisd-new and dkim-milter. In the main.cf: content_filter = smtp-amavis:[127.0.0.1]:10024 smtpd_milters = ine

Re: Put mail in queue when database is down.

2010-04-16 Thread Wietse Venema
Patric Falinder: > Hi, > > I have all my users (addresses, passwords etc) in a MySQL-database thats > not on the same server. So I was just wondering if its possible to put > every mail in the queue when the database is down for some reason? > Right now it just return a error message that it can't

Re: hold queue management

2010-04-16 Thread Rudy Gevaert
Wietse Venema wrote: Rudy Gevaert: Hello postfix users, I have question concerning the hold queue. I have a smtpd_*_restriction map that puts certain mails in the hold queue. (E.g. phishing messages). My idea was to then update the restriction to DISCARD or REJECT the message and to move the

Re: Many IP address outgoing messages

2010-04-16 Thread ram
On Thu, 2010-04-15 at 10:04 -0300, Eduardo Júnior wrote: > Hi, all > > > Due the high load of e-mails over my link, I want that > my messages outgoing through more IPs with only postfix box. > > I read about that, but not in official documentation. > > I want understand how this works and how

Put mail in queue when database is down.

2010-04-16 Thread Patric Falinder
Hi, I have all my users (addresses, passwords etc) in a MySQL-database thats not on the same server. So I was just wondering if its possible to put every mail in the queue when the database is down for some reason? Right now it just return a error message that it can't find the user and stuff so t

Re: hold queue management

2010-04-16 Thread Wietse Venema
Rudy Gevaert: > Hello postfix users, > > I have question concerning the hold queue. > > I have a smtpd_*_restriction map that puts certain mails in the hold > queue. (E.g. phishing messages). > > My idea was to then update the restriction to DISCARD or REJECT the > message and to move the mails

Re: Many IP address outgoing messages

2010-04-16 Thread Eduardo Júnior
Hi, On Thu, Apr 15, 2010 at 7:41 PM, Stan Hoeppner wrote: > Eduardo Júnior put forth on 4/15/2010 4:52 PM: > >> On Thu, Apr 15, 2010 at 6:35 PM, Stan Hoeppner >> wrote: >>> Eduardo Júnior put forth on 4/15/2010 8:04 AM: >>> Due the high load of e-mails over my link, I want that my me

Re: block specific IP addresses

2010-04-16 Thread CT
Ansgar Wiechers wrote: On 2010-04-15 groups wrote: Syntax follow up question... 1.2.3.4 REJECT or 1.2.3.4 REJECT 1.2.3.4 REJECT Regards Ansgar Wiechers Ansgar.. Thank you.. a tab issue "bit me" sometime ago in BSD hence the question.. Charles

Re: block specific IP addresses

2010-04-16 Thread Ansgar Wiechers
On 2010-04-15 groups wrote: > Syntax follow up question... > > 1.2.3.4 REJECT > or > 1.2.3.4 REJECT 1.2.3.4 REJECT Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky