Re: DNS RBL error

2010-04-19 Thread Noel Jones
On 4/19/2010 8:03 PM, donovan jeffrey j wrote: question on my setup. my primary MX server sits inside my network, with a NATed IP. my postfix config references only the inside network. should i move this MX server outside and use it's public address in the config ? inbound mail gets checked an

Re: DNS RBL error

2010-04-19 Thread Noel Jones
On 4/19/2010 8:22 PM, Steve wrote: Original-Nachricht Datum: Mon, 19 Apr 2010 21:03:51 -0400 Von: donovan jeffrey j An: Ralf Hildebrandt CC: Postfix users Betreff: Re: DNS RBL error On Apr 19, 2010, at 3:07 PM, Ralf Hildebrandt wrote: Rather test with: 2.0.0.127.zen.spam

Re: Set submission as to bypass RBLs

2010-04-19 Thread Noel Jones
On 4/19/2010 6:07 PM, David Cottle wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am having some issues with my server blocking ISP IP addresses. I know a recent update to plesk-9.5.1 changed my postfix main.cf and master.cf (the timestamps changed). I managed to fix main.cf as on the

Re: DNS RBL error

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 9:22 PM, Steve wrote: > You can run that caching DNS where ever you want as long as you secure that > DNS. If you use BIND and are using forwarders to your ISP name servers then > that caching will not necessarily help much if your ISP's NS are the problem. > thanks for the

Re: DNS RBL error

2010-04-19 Thread Steve
Original-Nachricht > Datum: Mon, 19 Apr 2010 21:03:51 -0400 > Von: donovan jeffrey j > An: Ralf Hildebrandt > CC: Postfix users > Betreff: Re: DNS RBL error > > On Apr 19, 2010, at 3:07 PM, Ralf Hildebrandt wrote: > > > > Rather test with: > > 2.0.0.127.zen.spamhaus.org > >

Re: DNS RBL error

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 3:07 PM, Ralf Hildebrandt wrote: > > Rather test with: > 2.0.0.127.zen.spamhaus.org > > which should return: > 2.0.0.127.zen.spamhaus.org has address 127.0.0.2 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.4 > 2.0.0.127.zen.spamhaus.org has address 127.0.0.10 yes this is

Re: Set submission as to bypass RBLs

2010-04-19 Thread Sahil Tandon
On Tue, 20 Apr 2010, David Cottle wrote: > I know a recent update to plesk-9.5.1 changed my postfix main.cf and > master.cf (the timestamps changed). I managed to fix main.cf as on > the smtpd_client_restrictions, they put the RBLs first. > > Can anyone see what is wrong in the master.cf? > > I

Set submission as to bypass RBLs

2010-04-19 Thread David Cottle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am having some issues with my server blocking ISP IP addresses. I know a recent update to plesk-9.5.1 changed my postfix main.cf and master.cf (the timestamps changed). I managed to fix main.cf as on the smtpd_client_restrictions, they put the RBLs

Re: DNS RBL error

2010-04-19 Thread Stan Hoeppner
Ralf Hildebrandt put forth on 4/19/2010 8:29 AM: > * John Peach : > >> Your nslookup shows you using 207.172.3.20 as a nameserver: >> >> 20.3.172.207.in-addr.arpa name = auth1.dns.rcn.net >> >> Your ISP's nameserver. You need to run your own, so that you query >> spamhaus directly. They are

Re: Unknown senders and spam

2010-04-19 Thread mouss
Alex a écrit : > Hi, > >>> I'm trying to do: >>> >>> warn_if_reject = reject_rbl_client backscatter.spameatingmonkey.net >>> >> wrong syntax. it's >>warn_if_reject reject_rbl_client $yourlist >> There's no 'equal' sign. > > $ postfix check > postfix: fatal: /etc/postfix/main.cf, line

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-19 Thread Victor Duchovni
On Mon, Apr 19, 2010 at 06:28:47PM +0200, Gregory BELLIER wrote: > Hi all ! > > I would like to set up authentication between 2 postfix hosted on Debian > Lenny and until now it doesn't work. > > Here is a log sample : > warning: SASL authentication failure: No worthy mechs found > SASL authentic

Re: DNS RBL error ::solved::

2010-04-19 Thread /dev/rob0
On Mon, Apr 19, 2010 at 01:09:28PM -0400, donovan jeffrey j wrote: > i don't think I did anything other than stop lookups for a bit. > thanks for your assistance. Give thanks to the LORD[1], perhaps. He works in mysterious ways, or so I hear. :) [1] LinfORD PS: Seriously. I doubt this is solved

Re: Rejecting Spam Based on Spamassassin Score

2010-04-19 Thread Noel Jones
On 4/19/2010 12:34 PM, Aaron Clausen wrote: This has probably been asked a hundred times before, but a client of mine has requested the ability to reject emails if their spam score is above a certain score, rather than marking it as spam. Is this a possibility with Postfix? Yes, but the filte

Re: Rejecting Spam Based on Spamassassin Score

2010-04-19 Thread Sean Reifschneider
On 04/19/2010 11:34 AM, Aaron Clausen wrote: > This has probably been asked a hundred times before, but a client of > mine has requested the ability to reject emails if their spam score is The problem is that this has to happen after the DATA phase, which is well after the RCPT phase. If there ar

Rejecting Spam Based on Spamassassin Score

2010-04-19 Thread Aaron Clausen
This has probably been asked a hundred times before, but a client of mine has requested the ability to reject emails if their spam score is above a certain score, rather than marking it as spam. Is this a possibility with Postfix? -- Aaron Clausen mightymartia...@gmail.com

Re: DNS RBL error ::solved::

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 12:58 PM, Wietse Venema wrote: > donovan jeffrey j: >> by the time i typed this email. i got an authoritative answer; >> >> dns:~ root# nslookup 2.0.0.127.zen.spamhaus.org >> Server: 209.96.96.2 >> Address:209.96.96.2#53 > > You should do such tests as a non

Re: DNS RBL error

2010-04-19 Thread Wietse Venema
donovan jeffrey j: > by the time i typed this email. i got an authoritative answer; > > dns:~ root# nslookup 2.0.0.127.zen.spamhaus.org > Server: 209.96.96.2 > Address:209.96.96.2#53 You should do such tests as a non-root user. Postfix does not query the DNS as root. Wie

Re: DNS RBL error

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 12:36 PM, /dev/rob0 wrote: > On Mon, Apr 19, 2010 at 08:31:19AM -0400, donovan jeffrey j wrote: >> abuseat.org is working fine. I'm only having trouble with zen. >> Apr 19 08:29:12 mail2 postfix/smtpd[21642]: NOQUEUE: reject: RCPT >> from unknown[117.201.68.108]: 554 Service

Re: DNS RBL error

2010-04-19 Thread /dev/rob0
On Mon, Apr 19, 2010 at 08:31:19AM -0400, donovan jeffrey j wrote: > abuseat.org is working fine. I'm only having trouble with zen. > Apr 19 08:29:12 mail2 postfix/smtpd[21642]: NOQUEUE: reject: RCPT > from unknown[117.201.68.108]: 554 Service unavailable; Client host > [117.201.68.108] blocked u

Re: relayhost + backup relayhost

2010-04-19 Thread Noel Jones
On 4/19/2010 9:34 AM, CT wrote: My relay sends as follows: 90% - relayhost 10% - other hosts in transport (these go "directly" out) This works well. my question: When the primary relayhost is "unavailable" what would be the best way to *send* the 90% out.. ? (not about load balancing) If yo

Relay between 2 Postfix : SASL authentication failure

2010-04-19 Thread Gregory BELLIER
Hi all ! I would like to set up authentication between 2 postfix hosted on Debian Lenny and until now it doesn't work. Here is a log sample : warning: SASL authentication failure: No worthy mechs found SASL authentication failed; cannot authenticate to server 10.0.0.6[10.0.0.6]: no mechanism

Re: NMAP information about postfix

2010-04-19 Thread Wietse Venema
Gaby L: > Hi > I scan with my postfix server with NMap from other location. > The NMAP creats report smtp port open (It is OK) but apear Postfix smtpd and > other information about MTA program. > I dont want to apear any information about my MTA server. To disclose no information, close the SMTP

NMAP information about postfix

2010-04-19 Thread Gaby L
Hi I scan with my postfix server with NMap from other location. The NMAP creats report smtp port open (It is OK) but apear Postfix smtpd and other information about MTA program. I dont want to apear any information about my MTA server. Thanks Gaby

Re: DNS RBL error

2010-04-19 Thread Steve Linford
On 19 Apr 2010, at 14:53, donovan jeffrey j wrote: > On Apr 19, 2010, at 8:41 AM, Ralf Hildebrandt wrote: > >> * donovan jeffrey j : >>> Greetings >>> >>> i have been seeing tons of errors coming from spamhaus, it seems it's not >>> resolving. at least for me. is anyone else having any problems

Re: Unknown senders and spam

2010-04-19 Thread /dev/rob0
On Sun, Apr 18, 2010 at 10:38:46PM -0500, Noel Jones wrote: > On 4/18/2010 9:56 PM, /dev/rob0 wrote: >> >>> reject_unauth_pipelining, >> >> Might catch some zombies. > > Note that with older postfix (postfix < 2.6 IIRC) > reject_unauth_pipelining must be used in smtpd_data_restrictions >

Re: Protection against stolen credentials?

2010-04-19 Thread John Fawcett
On 18/04/10 17:27, Ignacio García wrote: > John, thanks so much for your interest. I just downloaded it. Tomorrow > I will be meeting my partner (he's the php guy) adn we will take a > look at it. I'll certainly keep you posted of any developments. > > Best regards, > > Ignacio I have made an updat

relayhost + backup relayhost

2010-04-19 Thread CT
My relay sends as follows: 90% - relayhost 10% - other hosts in transport (these go "directly" out) This works well. my question: When the primary relayhost is "unavailable" what would be the best way to *send* the 90% out.. ? (not about load balancing) Thx Charles

Re: DNS RBL error

2010-04-19 Thread Ralf Hildebrandt
* donovan jeffrey j : > ins2:~ root# cat /etc/resolv.conf > search beth.k12.pa.us > nameserver 10.135.1.2 > nameserver 209.96.96.2 > nameserver 207.172.3.20 > > ins2:~ root# nslookup zen.spamhaus.org > Server: 207.172.3.20 > Address:207.172.3.20#53 > > ** server can't find zen.sp

Re: DNS RBL error

2010-04-19 Thread Ralf Hildebrandt
* John Peach : > Your nslookup shows you using 207.172.3.20 as a nameserver: > > 20.3.172.207.in-addr.arpa name = auth1.dns.rcn.net > > Your ISP's nameserver. You need to run your own, so that you query > spamhaus directly. They are counting all the hits from RCN. apt-get install pdns-rec

Re: DNS RBL error

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 9:15 AM, Ralf Hildebrandt wrote: > * donovan jeffrey j : >> >> On Apr 19, 2010, at 9:03 AM, Ralf Hildebrandt wrote: >> >>> * donovan jeffrey j : >>> this system in question picks up mail ( primary MX ) for about 2000 users. >>> >>> This should well be within the limit

Re: DNS RBL error

2010-04-19 Thread John Peach
On Mon, 19 Apr 2010 09:09:38 -0400 donovan jeffrey j wrote: > > On Apr 19, 2010, at 9:03 AM, Ralf Hildebrandt wrote: > > > * donovan jeffrey j : > > > >> this system in question picks up mail ( primary MX ) for about > >> 2000 users. > > > > This should well be within the limits. We're execee

Re: DNS RBL error

2010-04-19 Thread Ralf Hildebrandt
* donovan jeffrey j : > > On Apr 19, 2010, at 9:03 AM, Ralf Hildebrandt wrote: > > > * donovan jeffrey j : > > > >> this system in question picks up mail ( primary MX ) for about 2000 users. > > > > This should well be within the limits. We're execeeding the limit at > > about 30k users. Maybe

Re: DNS RBL error

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 9:03 AM, Ralf Hildebrandt wrote: > * donovan jeffrey j : > >> this system in question picks up mail ( primary MX ) for about 2000 users. > > This should well be within the limits. We're execeeding the limit at > about 30k users. Maybe you're using your ISPs DNS forwarder? I

Re: Mail server responded 5.7.1

2010-04-19 Thread Wietse Venema
mohamad rahimi: >In our group we are using suse and Postfix SMTP server. Every thing >was fine until last month when we restart our mail server and also >firewall. The first problem is that when we use Thunderbird with >security and Authentication it is impossible to send a email. we >receive this

Re: DNS RBL error

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 8:58 AM, John Peach wrote: > On Mon, 19 Apr 2010 08:53:03 -0400 > donovan jeffrey j wrote: > >> >> On Apr 19, 2010, at 8:41 AM, Ralf Hildebrandt wrote: >> >>> * donovan jeffrey j : Greetings i have been seeing tons of errors coming from spamhaus, it seems >

Re: DNS RBL error

2010-04-19 Thread Ralf Hildebrandt
* donovan jeffrey j : > this system in question picks up mail ( primary MX ) for about 2000 users. This should well be within the limits. We're execeeding the limit at about 30k users. Maybe you're using your ISPs DNS forwarder? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk C

Re: DNS RBL error

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 8:54 AM, Ralf Hildebrandt wrote: > * donovan jeffrey j : > >> I certainly do not want to exceed any limits, how do i avoid that ? > > Well, how big is your server? oh it's about this high " - - - " j/k this system in question picks up mail ( primary MX ) for about 2000 use

Re: DNS RBL error

2010-04-19 Thread John Peach
On Mon, 19 Apr 2010 08:53:03 -0400 donovan jeffrey j wrote: > > On Apr 19, 2010, at 8:41 AM, Ralf Hildebrandt wrote: > > > * donovan jeffrey j : > >> Greetings > >> > >> i have been seeing tons of errors coming from spamhaus, it seems > >> it's not resolving. at least for me. is anyone else ha

Re: DNS RBL error

2010-04-19 Thread Ralf Hildebrandt
* donovan jeffrey j : > I certainly do not want to exceed any limits, how do i avoid that ? Well, how big is your server? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel.

Re: DNS RBL error

2010-04-19 Thread donovan jeffrey j
On Apr 19, 2010, at 8:41 AM, Ralf Hildebrandt wrote: > * donovan jeffrey j : >> Greetings >> >> i have been seeing tons of errors coming from spamhaus, it seems it's not >> resolving. at least for me. is anyone else having any problems ? > > You might have been blocked because you exceeded the

Re: DNS RBL error

2010-04-19 Thread Ralf Hildebrandt
* donovan jeffrey j : > Greetings > > i have been seeing tons of errors coming from spamhaus, it seems it's not > resolving. at least for me. is anyone else having any problems ? You might have been blocked because you exceeded the limits for free usage. -- Ralf Hildebrandt Geschäftsbereich

DNS RBL error

2010-04-19 Thread donovan jeffrey j
Greetings i have been seeing tons of errors coming from spamhaus, it seems it's not resolving. at least for me. is anyone else having any problems ? Apr 19 08:21:48 mail2 postfix/smtpd[21485]: warning: 130.60.141.41.zen.spamhaus.org: RBL lookup error: Host or domain name not found. Name servic

Re: Unknown senders and spam

2010-04-19 Thread Noel Jones
On 4/19/2010 12:11 AM, Alex wrote: The "warn_if_reject" feature predates "reject_unauth_pipelining", which you seem to be using successfully. I strongly suspect there was some other error -- probably a simple typo in your config -- that kept warn_if_reject from working for you. I'm trying to

Re: Receiving bounce messages back to local-host

2010-04-19 Thread CT
Noel Jones wrote: On 4/18/2010 4:40 PM, groups wrote: Noel Jones wrote, On 04/18/2010 04:20 PM: On 4/18/2010 4:16 PM, groups wrote: Postfix logs help you know what happened to a particular message. Look in your logs for bounces (sender=<>) arriving from your relayhost, and see what postfix

Re: Mail server responded 5.7.1

2010-04-19 Thread mohamad rahimi
From: Simon Waters To: postfix-users@postfix.org Sent: Mon, April 19, 2010 11:19:04 AM Subject: Re: Mail server responded 5.7.1 On Monday 19 April 2010 09:51:52 mohamad rahimi wrote: > In our group we are using suse and > Postfix SMTP server. Every thing was

Re: Mail server responded 5.7.1

2010-04-19 Thread Simon Waters
On Monday 19 April 2010 09:51:52 mohamad rahimi wrote: > In our group we are using suse and > Postfix SMTP server. Every thing was fine until last month when we > restart our mail server and also firewall. > The first problem is that when we use > Thunderbird with security and Authentication it is

Mail server responded 5.7.1

2010-04-19 Thread mohamad rahimi
In our group we are using suse and Postfix SMTP server. Every thing was fine until last month when we restart our mail server and also firewall. The first problem is that when we use Thunderbird with security and Authentication it is impossible to send a email. we receive this error “Unable to

Re: Unknown senders and spam

2010-04-19 Thread Stan Hoeppner
Alex put forth on 4/19/2010 12:11 AM: > It looks like I have a big project ahead of me to upgrade. What kind > of process is involved with going from such an old version to the > current, independent of all the other software? Not much. Just create/modify the new main.cf and any other config fil