Newbie question: difference config options

2010-04-20 Thread M.S. Lucas
Hello, I'm trying to migrate a qmail server to postfix and have a small question. At the bottom is a part of my main.cf file I'm missing what the real difference is between some options. In my words this is the difference but please correct me if I'm wrong. - alias_maps - alias_database Both are

mail from(Return-Path) when a mail relay via alias

2010-04-20 Thread Jeff Huang
Hi All. I found when I send a email via alias,the Return-Path is null. For example,the alias : i...@domain1.com:i...@domain2.com when I sent a email from i...@domain.com to i...@domain1.com,I found I recevie from i...@domain2.com and found the Return-Path is null. How can I set it to enable r

Re: Unknown senders and spam

2010-04-20 Thread Alex
Hi, >> $ postfix check >> postfix: fatal: /etc/postfix/main.cf, line 700: missing '=' after >> attribute name: "warn_if_reject reject_maps_rbl >> backscatter.spameatingmonkey.net" >> Apr 19 02:35:33 smtp01 postfix[13351]: fatal: /etc/postfix/main.cf, >> line 700: missing '=' after attribute name:

Re: Postfix Mail Gateway restrcitions implementations

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 05:34:26PM -0500, Noel Jones wrote: > Something like: > > # main.cf > smtpd_sender_restrictions = > check_sender_access hash:/etc/postfix/sender_only > reject_unauth_destination > > # sender_only > example.com OK > > Warning: use this in smtpd_sender_restrictions as s

Re: Postfix Mail Gateway restrcitions implementations

2010-04-20 Thread Noel Jones
On 4/20/2010 2:09 PM, Chaminda Indrajith wrote: Dear all, I have a postfix mail gateway which is used for all incoming and outgoing mails of our backend mail server. I have restricted the Gateway to accept mails only for my domain (example.com) from outside. My Question is that, can we set a s

Re: Spam to sender_bcc_maps

2010-04-20 Thread Noel Jones
On 4/20/2010 5:24 PM, Jack Knowlton wrote: Hi all. Somehow spammers got hold of a couple addresses in my sender_bcc_maps and are sending mail directly to those. How can I restrict the source of messages to those addresses to localhost only? Thanks, -JK General idea can be found here: http://w

Spam to sender_bcc_maps

2010-04-20 Thread Jack Knowlton
Hi all. Somehow spammers got hold of a couple addresses in my sender_bcc_maps and are sending mail directly to those. How can I restrict the source of messages to those addresses to localhost only? Thanks, -JK

Re: Set submission as to bypass RBLs

2010-04-20 Thread mouss
David Cottle a écrit : > I am having some issues with my server blocking ISP IP addresses. > > I know a recent update to plesk-9.5.1 changed my postfix main.cf and > master.cf (the timestamps changed). I managed to fix main.cf as on > the smtpd_client_restrictions, they put the RBLs first. > > C

Re: Fixing reverse DNS lookup for a virtual domain

2010-04-20 Thread Noel Jones
On 4/20/2010 2:03 PM, Kārlis Repsons wrote: On Tuesday 20 April 2010 18:46:51 Noel Jones wrote: For your server (from list mail headers) Received: from pasts.trikata.com (unknown [85.15.210.5]) Well and if I have a domain 11.lv, for which this is given: host 11.lv 11.lv has address 85.15.210.5

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 09:37:48PM +0200, Gregory BELLIER wrote: In the session below, the client did not want to use PLAIN, presumably because TLS was not in effect. Leave TLS enabled. I asked you to disable TLS very verbose logging (smtp*_tls_loglevel=0 or 1) not TLS. Now test with a client tha

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Gregory BELLIER
Victor Duchovni a écrit : On Tue, Apr 20, 2010 at 12:21:35PM +0200, Gregory BELLIER wrote: Did you read the logs? I did. Why are you offering CRAM-MD5 and NTLM on mta1, when only PLAIN works? Because in my file sasl/smtpd.conf, every time I set a mech_list, it doesn't work. So I didn'

Re: Fixing reverse DNS lookup for a virtual domain

2010-04-20 Thread Kārlis Repsons
On Tuesday 20 April 2010 18:46:51 Noel Jones wrote: > For your server (from list mail headers) > Received: from pasts.trikata.com (unknown [85.15.210.5]) Well and if I have a domain 11.lv, for which this is given: host 11.lv 11.lv has address 85.15.210.5 11.lv mail is handled by 10 mail.11.lv. 11.l

Postfix Mail Gateway restrcitions implementations

2010-04-20 Thread Chaminda Indrajith
Dear all, I have a postfix mail gateway which is used for all incoming and outgoing mails of our backend mail server. I have restricted the Gateway to accept mails only for my domain (example.com) from outside. My Question is that, can we set a similar restriction for the outgoing mails fr

Re: Fixing reverse DNS lookup for a virtual domain

2010-04-20 Thread Noel Jones
On 4/20/2010 1:00 PM, Kārlis Repsons wrote: Hi there, hopefully this can be easy: as I have $myhostname other than virtual domain name, when server relays my v.d. mails, it uses $myhostname and so sometimes I receive a refusal like this: "550 Reverse DNS lookup failed for host"; how should I make

Re: NMAP information about postfix

2010-04-20 Thread Wietse Venema
Linux Addict: > On Tue, Apr 20, 2010 at 1:33 PM, Brian Evans - Postfix List < > grkni...@scent-team.com> wrote: > > > On 4/20/2010 1:23 PM, Linux Addict wrote: > > > > > > > > > On Mon, Apr 19, 2010 at 11:37 AM, Wietse Venema > > > wrote: > > > > > > Gaby L: > > >

Fixing reverse DNS lookup for a virtual domain

2010-04-20 Thread Kārlis Repsons
Hi there, hopefully this can be easy: as I have $myhostname other than virtual domain name, when server relays my v.d. mails, it uses $myhostname and so sometimes I receive a refusal like this: "550 Reverse DNS lookup failed for host"; how should I make server use my virtual domain's name when r

Re: NMAP information about postfix

2010-04-20 Thread Linux Addict
On Tue, Apr 20, 2010 at 1:33 PM, Brian Evans - Postfix List < grkni...@scent-team.com> wrote: > On 4/20/2010 1:23 PM, Linux Addict wrote: > > > > > > On Mon, Apr 19, 2010 at 11:37 AM, Wietse Venema > > wrote: > > > > Gaby L: > > > Hi > > > I scan with my

Re: NMAP information about postfix

2010-04-20 Thread Brian Evans - Postfix List
On 4/20/2010 1:23 PM, Linux Addict wrote: > > > On Mon, Apr 19, 2010 at 11:37 AM, Wietse Venema > wrote: > > Gaby L: > > Hi > > I scan with my postfix server with NMap from other location. > > The NMAP creats report smtp port open (It is OK) but apear

Re: NMAP information about postfix

2010-04-20 Thread Linux Addict
On Mon, Apr 19, 2010 at 11:37 AM, Wietse Venema wrote: > Gaby L: > > Hi > > I scan with my postfix server with NMap from other location. > > The NMAP creats report smtp port open (It is OK) but apear Postfix smtpd > and other information about MTA program. > > I dont want to apear any information

Re: Wildcard certificate warning

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 05:58:23PM +0200, Jordi Espasa Clofent wrote: > The cert is a wildcard certificate for *.example.com. What SMTP server name is the MUA configured to use? Does the MUA support wild-card certificates? Which CA signed this certificate? Does the MUA trust this CA? > When the

Re: Wildcard certificate warning

2010-04-20 Thread Reinaldo de Carvalho
On Tue, Apr 20, 2010 at 12:58 PM, Jordi Espasa Clofent wrote: > Hi all, [... > > The cert is a wildcard certificate for *.example.com. > > When the MUA (tested in Microsoft Outlook and Mazilla Thunderbird) tries to > send email using this box, it show a warning about the cert. It happens when > it

Re: Wildcard certificate warning

2010-04-20 Thread Wietse Venema
Jordi Espasa Clofent: > Hi all, > > I've configured a TLS/SSL smtpd in a box as follows: > > # postconf -n | grep -i tls > smtpd_tls_cert_file = /usr/local/home/example.com.crt > smtpd_tls_key_file = /usr/local/home/example.com.key > smtpd_tls_loglevel = 2 > smtpd_tls_received_header = yes > smtp

Wildcard certificate warning

2010-04-20 Thread Jordi Espasa Clofent
Hi all, I've configured a TLS/SSL smtpd in a box as follows: # postconf -n | grep -i tls smtpd_tls_cert_file = /usr/local/home/example.com.crt smtpd_tls_key_file = /usr/local/home/example.com.key smtpd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:/usr

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 05:18:48PM +0200, Gregory BELLIER wrote: > I managed to have an authentication but it's really weird. I'm on Debian > Lenny. > > In /etc/default/saslauthd on both mta1 and mta2, I have : > START=yes > DESC="SASL Authentication Daemon" > NAME="saslauthd" > MECHANISMS="shado

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 12:21:35PM +0200, Gregory BELLIER wrote: >> Try again, with a more useful log sample, and configuration settings >> for the receiving side. The log sample should include multiple lines >> of logging from the SMTP client, showing any TLS handshake, ... >> > Alright, pleas

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Gregory BELLIER
I managed to have an authentication but it's really weird. I'm on Debian Lenny. In /etc/default/saslauthd on both mta1 and mta2, I have : START=yes DESC="SASL Authentication Daemon" NAME="saslauthd" MECHANISMS="shadow" MECH_OPTIONS="" THREADS=5 OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd

Re: postfix loop detection

2010-04-20 Thread Wietse Venema
Vladimir Vassiliev: > Hi postfixers, > > Why this config > > pickupfifo n - n 60 1 pickup > -o content_filter=smtp:[127.0.0.1]:25 Content filters are supposed to use a different TCP port. Mail to the standard SMTP on the same MTA is a mail loop. Wi

postfix loop detection

2010-04-20 Thread Vladimir Vassiliev
Hi postfixers, Why this config pickupfifo n - n 60 1 pickup -o content_filter=smtp:[127.0.0.1]:25 postfix considers as loop but this one pickupfifo n - n 60 1 pickup -o content_filter=smtp:[127.0.0.1]:10027 doesn't?

Re: DNS RBL error

2010-04-20 Thread Steve
Original-Nachricht > Datum: Mon, 19 Apr 2010 20:52:57 -0500 > Von: Noel Jones > An: postfix-users@postfix.org > Betreff: Re: DNS RBL error > On 4/19/2010 8:22 PM, Steve wrote: > > > > Original-Nachricht > >> Datum: Mon, 19 Apr 2010 21:03:51 -0400 > >> Von: don

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Gregory BELLIER
Victor Duchovni a écrit : Try again, with a more useful log sample, and configuration settings for the receiving side. The log sample should include multiple lines of logging from the SMTP client, showing any TLS handshake, ... Alright, please take a look at the end of this email for the c

Re: Rejecting Spam Based on Spamassassin Score

2010-04-20 Thread Simon Waters
On Monday 19 April 2010 18:34:59 Aaron Clausen wrote: > This has probably been asked a hundred times before, but a client of > mine has requested the ability to reject emails if their spam score is > above a certain score, rather than marking it as spam. Is this a > possibility with Postfix? As n

safe migration

2010-04-20 Thread alex
hello I intend to make a full OS upgrade to one of my servers. Beside the OS I switch also the pop/imap server from courier to dovecot. Now I have two servers with postfix and the new one with dovecot and the old one with courier. In order to make a transparent migration I chose to move one mai