Postfix config for static:hold on all unauthenticated mail

2010-05-17 Thread Simon
Hi There, We have a postfix (2.5.5) mail server (debian lenny) that runs behind our firewall and acts as a SMTP server all hosts on our network. At the moment i have all those servers listed in mynetworks and then the following smtpd_sender_restrictions (see below). This allows the servers behind

Re: Drop mail when X-Something header contains "value" AND destination domain == "somedomain.com"

2010-05-17 Thread mouss
Roman Medina-Heigl Hernandez a écrit : > m[snip] > > No, my need is: > 1/ permit_networs + SASL -> no amavisd AND no header check > 2/ incoming mail to my mailboxes -> amavisd but no header check > 3/ incoming mail to be relayed to another MX -> amavisd AND header check! > that's what I thought

Re: OpenSSL 0.9.8 <-> 1.0.0 CApath (in)compatibility

2010-05-17 Thread Victor Duchovni
On Mon, May 17, 2010 at 10:23:16AM +0300, Eray Aslan wrote: > On 17.05.2010 03:02, Victor Duchovni wrote: > > If you want to be really clever, you may be able to hash two copies > > of the root CA directories with the same set of certificates each with > > a different version of c_rehash (and corr

Re: Postfix, SASL sending mail through Postfix.

2010-05-17 Thread Noel Jones
On 5/17/2010 10:34 AM, BABEDH-DHRA wrote: -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Noel Jones Sent: Monday, May 17, 2010 11:10 AM To: postfix-users@postfix.org Subject: Re: Postfix, SASL sending mail through Postfix

RE: Postfix, SASL sending mail through Postfix.

2010-05-17 Thread BABEDH-DHRA
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Noel Jones > Sent: Monday, May 17, 2010 11:10 AM > To: postfix-users@postfix.org > Subject: Re: Postfix, SASL sending mail through Postfix. > > On 5/17/2010 10:02 AM, BAB

Re: Filter only unauthenticated connections

2010-05-17 Thread Jon Tullett
On 17 May 2010 17:05, Noel Jones wrote: > On 5/17/2010 9:50 AM, Jon Tullett wrote: >> >> Hi all >> >> I'm hoping to configure postfix to only apply content filtering to >> mail that comes from unauthenticated sources, or outside sources if >> that's not possible. Basically, I want unauthenticated

Re: Postfix, SASL sending mail through Postfix.

2010-05-17 Thread Noel Jones
On 5/17/2010 10:02 AM, BABEDH-DHRA wrote: [BABEDH-DHRA] I can log into Dovecot but I am thinking... the username and password to log into DYNDNS is not in Dovecot at all. I do not have a user with that name or password for DYNDNS in Dovecot. Are you trying to configure client-side SASL to se

Re: Filter only unauthenticated connections

2010-05-17 Thread Noel Jones
On 5/17/2010 9:50 AM, Jon Tullett wrote: Hi all I'm hoping to configure postfix to only apply content filtering to mail that comes from unauthenticated sources, or outside sources if that's not possible. Basically, I want unauthenticated email checked for spam+viruses, but not authenticated emai

RE: Postfix, SASL sending mail through Postfix.

2010-05-17 Thread BABEDH-DHRA
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Noel Jones > Sent: Monday, May 17, 2010 10:58 AM > To: postfix-users@postfix.org > Subject: Re: Postfix, SASL sending mail through Postfix. > > On 5/17/2010 9:18 AM, BABE

Re: Postfix, SASL sending mail through Postfix.

2010-05-17 Thread Noel Jones
On 5/17/2010 9:18 AM, BABEDH-DHRA wrote: -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Charles Marcus Sent: Monday, May 17, 2010 6:43 AM To: postfix-users@postfix.org Subject: Re: Postfix, SASL sending mail through Postf

Filter only unauthenticated connections

2010-05-17 Thread Jon Tullett
Hi all I'm hoping to configure postfix to only apply content filtering to mail that comes from unauthenticated sources, or outside sources if that's not possible. Basically, I want unauthenticated email checked for spam+viruses, but not authenticated email, because we've had the occasional problem

RE: Postfix, SASL sending mail through Postfix.

2010-05-17 Thread BABEDH-DHRA
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Charles Marcus > Sent: Monday, May 17, 2010 6:43 AM > To: postfix-users@postfix.org > Subject: Re: Postfix, SASL sending mail through Postfix. > > On 2010-05-16 6:27 PM,

Re: Receipent Access

2010-05-17 Thread Noel Jones
On 5/17/2010 6:22 AM, Simon Croome wrote: Hi, I'm trying to configure our postfix servers to only accept email for valid recipents from a hash table, I have in a file following an example online that it should be in the format of zhu...@example.com OK Can anyone confirm if this is correct ? T

Re: Drop mail when X-Something header contains "value" AND destination domain == "somedomain.com"

2010-05-17 Thread Roman Medina-Heigl Hernandez
mouss escribió: > Roman Medina-Heigl Hernandez a écrit : >> [snip] >> >> I'd like to drop email if *any* of the following conditions are met: >> 1/ "X-Amavis-Alert" *contains* "INFECTED" or "BANNED" >> 2/ "X-Spam-Flag" *contains* "YES" >> >> Relating your 2nd question, perhaps it's not that easy. I

Re: ISP bounces email

2010-05-17 Thread Benny Pedersen
On søn 16 maj 2010 23:53:36 CEST, "Daniel V. Reinhardt" wrote [mail.zetnet.co.uk] esperance.zetnet.co.uk:X remove [] and content around : is user:pass not host port the user part is the same as in all other clients mxhost user:pass success -- xpoint

Receipent Access

2010-05-17 Thread Simon Croome
Hi, I'm trying to configure our postfix servers to only accept email for valid recipents from a hash table, I have in a file following an example online that it should be in the format of zhu...@example.com OK Can anyone confirm if this is correct ? Thanks

Re: Postfix, SASL sending mail through Postfix.

2010-05-17 Thread Charles Marcus
On 2010-05-16 6:27 PM, BABEDH-DHRA wrote: > Now I did have a special program installed so my mail could be > filtered through port 2525 instead of the standard port 25. This > came directly from the programmer. > Any other suggestions? 1. As has been asked more than once, please stop top-postin

Re: OpenSSL 0.9.8 <-> 1.0.0 CApath (in)compatibility

2010-05-17 Thread Eray Aslan
On 17.05.2010 03:02, Victor Duchovni wrote: > If you want to be really clever, you may be able to hash two copies > of the root CA directories with the same set of certificates each with > a different version of c_rehash (and corresponding utilities from the > appropriate OpenSSL version) and then