Re: upgrade from 2.6.2 to 2.7.1

2010-06-15 Thread Victor Duchovni
On Tue, Jun 15, 2010 at 06:00:08PM -0700, Terry Barnum wrote: > I noticed that macports has updated the postfix port to 2.7.1_0. I looked > through the release notes and didn't see any upgrade gotchas but thought I'd > ask here before pulling the trigger. Download and read: ftp://ftp.porc

upgrade from 2.6.2 to 2.7.1

2010-06-15 Thread Terry Barnum
I noticed that macports has updated the postfix port to 2.7.1_0. I looked through the release notes and didn't see any upgrade gotchas but thought I'd ask here before pulling the trigger. Here's my 2.6.2 postconf -n. Any recommended changes for 2.7.1? broken_sasl_auth_clients = yes command_dire

Re: Smtpd_sender_maps and sender / recipient restrictions

2010-06-15 Thread Wietse Venema
Andrew G. Grant: > I just got smtpd_sender_maps to work with smtpd_sender_restrictions > using reject_authenticated_sender_login_mismatch. > > While researching how that worked, I saw information indicating > that you could apply the reject_sender_login_mismatch to the > smtpd_recipient_restriction

Re: Smtpd_sender_maps and sender / recipient restrictions

2010-06-15 Thread Jeroen Geilman
I just got smtpd_sender_maps to work with smtpd_sender_restrictions using reject_authenticated_sender_login_mismatch. While researching how that worked, I saw information indicating that you could apply the reject_sender_login_mismatch to the smtpd_recipient_restrictions. Can someone explain

Re: Does postfix smtp always log every receipient?

2010-06-15 Thread Jeroen Geilman
On 6/15/2010 4:30 PM, Jeroen Geilman wrote: Hi, Postfix smtp logs outgoing emails like this: postfix/smtp[13950]: E6DA025473: to=, relay=none, delay=4537, delays=4536/0.06/0.53/0, dsn=4.4.1, status=etc... I noticed that when an email has more than one receipient, smtp will log separate mess

Smtpd_sender_maps and sender / recipient restrictions

2010-06-15 Thread Andrew G. Grant
I just got smtpd_sender_maps to work with smtpd_sender_restrictions using reject_authenticated_sender_login_mismatch. While researching how that worked, I saw information indicating that you could apply the reject_sender_login_mismatch to the smtpd_recipient_restrictions. Can someone explain ho

Re: [SP] Re: How to force SMTP AUTH to restrict Sender Addresses…

2010-06-15 Thread Andrew G . Grant
Thank you. I will give that a try. Can anyone answer the question about how SASL is able to authenticate Users with their Passwords stored in Open Directory, but not pull their Email addresses? On Jun 15, 2010, at 3:14 PM, Jerrale Gayle wrote: On 6/15/2010 12:33 PM, Andrew G. Grant wrote: > >

Re: Does postfix smtp always log every receipient?

2010-06-15 Thread Erik Logtenberg
On 06/15/2010 11:54 PM, Noel Jones wrote: > On 6/15/2010 4:30 PM, Jeroen Geilman wrote: >>> >>> Hi, >>> >>> Postfix smtp logs outgoing emails like this: >>> >>> postfix/smtp[13950]: E6DA025473: to=, relay=none, >>> delay=4537, delays=4536/0.06/0.53/0, dsn=4.4.1, status=etc... >>> >>> I noticed that

Re: Does postfix smtp always log every receipient?

2010-06-15 Thread Erik Logtenberg
On 06/15/2010 11:30 PM, Jeroen Geilman wrote: >> >> Hi, >> >> Postfix smtp logs outgoing emails like this: >> >> postfix/smtp[13950]: E6DA025473: to=, relay=none, >> delay=4537, delays=4536/0.06/0.53/0, dsn=4.4.1, status=etc... >> >> I noticed that when an email has more than one receipient, smtp w

Re: Does postfix smtp always log every receipient?

2010-06-15 Thread Noel Jones
On 6/15/2010 4:30 PM, Jeroen Geilman wrote: Hi, Postfix smtp logs outgoing emails like this: postfix/smtp[13950]: E6DA025473: to=, relay=none, delay=4537, delays=4536/0.06/0.53/0, dsn=4.4.1, status=etc... I noticed that when an email has more than one receipient, smtp will log separate messag

Re: Does postfix smtp always log every receipient?

2010-06-15 Thread Jeroen Geilman
Hi, Postfix smtp logs outgoing emails like this: postfix/smtp[13950]: E6DA025473: to=, relay=none, delay=4537, delays=4536/0.06/0.53/0, dsn=4.4.1, status=etc... I noticed that when an email has more than one receipient, smtp will log separate messages, one for every receipient. Will smtp alway

Re: Does postfix smtp always log every receipient?

2010-06-15 Thread Michael J Wise
On Jun 15, 2010, at 1:37 PM, Erik Logtenberg wrote: > Postfix smtp logs outgoing emails like this: > > postfix/smtp[13950]: E6DA025473: to=, relay=none, > delay=4537, delays=4536/0.06/0.53/0, dsn=4.4.1, status=etc... > > I noticed that when an email has more than one receipient, smtp will log >

Re: How to force SMTP AUTH to restrict Sender Addresses?

2010-06-15 Thread Andrew G. Grant
Viktor, You said: "You need correct mappings in smtpd_sender_login_maps, mapping each sender address to the correct SASL login." Does that mean that Postfix will not pull the User Name and Email address from the Open Directory? I had assumed that it was already pulling the User Na

Does postfix smtp always log every receipient?

2010-06-15 Thread Erik Logtenberg
Hi, Postfix smtp logs outgoing emails like this: postfix/smtp[13950]: E6DA025473: to=, relay=none, delay=4537, delays=4536/0.06/0.53/0, dsn=4.4.1, status=etc... I noticed that when an email has more than one receipient, smtp will log separate messages, one for every receipient. Will smtp always

Re: Fetchmail/Postfix

2010-06-15 Thread mouss
JC Putter a écrit : > hi everyone, > > i have a postfix (2.3.3) server running with fetchmail to retrieve mail > from the actual mailserver, the problem is that only the office users > get their my from the local postfix/fetchmail server, nobody "gets" mail using postfix nor fetchmail. users "g

Re: How to force SMTP AUTH to restrict Sender Addresses?

2010-06-15 Thread Victor Duchovni
On Tue, Jun 15, 2010 at 11:32:07AM -0700, Andrew G. Grant wrote: > Thank you Viktor. That does in fact stop the email if there is a mismatch. > However, now I cannot send anything as it tells me that I don't own the > email address I am trying to send to. > > Can you tell me what it is checking

Re: How to force SMTP AUTH to restrict Sender Addresses?

2010-06-15 Thread Andrew G. Grant
Thank you Viktor. That does in fact stop the email if there is a mismatch. However, now I cannot send anything as it tells me that I don't own the email address I am trying to send to. Can you tell me what it is checking to verify that the User Name belongs to the Email address the user is sendi

Re: How to force SMTP AUTH to restrict Sender Addresses?

2010-06-15 Thread Victor Duchovni
On Tue, Jun 15, 2010 at 09:33:12AM -0700, Andrew G. Grant wrote: > Hello, > > I have configured the default install of Postfix (version 2.5.5) on > Apple OS X Server 10.6.3 (Darwin 10.3.0). Everything seems to run very > well with the exception that once authenticated, a user can claim to be > an

Re: postscreen doesn't seem to work anymore

2010-06-15 Thread Ralf Hildebrandt
* Ralf Hildebrandt : I think it was due to me using: postscreen_blacklist_action = drop and no postscreen_dnsbl_action at all. Once I set postscreen_dnsbl_action = drop it seems to work as intended. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin

Re: postscreen doesn't seem to work anymore

2010-06-15 Thread Ralf Hildebrandt
* Wietse Venema : > More thoroughly, when I search for all IP addresses that show up > in postscreen "DNSBL rank XXX" records: > > % egrep "`awk '/DNSBL rank/ { print $NF }' /var/log/maillog | sort -u`" > /var/log/maillog | grep smtpd If I try this, I'm getting: -bash: /bin/egrep: Argument list

Re: postscreen doesn't seem to work anymore

2010-06-15 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > Jun 15 18:30:20 mail postfix/dnsblog[15154]: addr 79.15.172.144 blocked by > domain mykey.zen.dq.spamhaus.net as 127.0.0.4 > Jun 15 18:30:24 mail postfix/postscreen[14995]: DNSBL rank 1 for 79.15.172.144 > > again, blacklisted, 15 minutes later. > > Jun 15 18:30:24 mail p

Re: postscreen doesn't seem to work anymore

2010-06-15 Thread Wietse Venema
Ralf Hildebrandt: > This is postfix-2.8-20100610 > > From my log: > > mail:~# fgrep 79.15.172.144 /var/log/mail.log > Jun 15 18:15:06 mail postfix/dnsblog[12235]: addr 79.15.172.144 blocked by > domain mykey.zen.dq.spamhaus.net as 127.0.0.4 > Jun 15 18:15:10 mail postfix/postscreen[14995]: DNSBL

postscreen doesn't seem to work anymore

2010-06-15 Thread Ralf Hildebrandt
This is postfix-2.8-20100610 >From my log: mail:~# fgrep 79.15.172.144 /var/log/mail.log Jun 15 18:15:06 mail postfix/dnsblog[12235]: addr 79.15.172.144 blocked by domain mykey.zen.dq.spamhaus.net as 127.0.0.4 Jun 15 18:15:10 mail postfix/postscreen[14995]: DNSBL rank 1 for 79.15.172.144 So it

How to force SMTP AUTH to restrict Sender Addre sses…

2010-06-15 Thread Andrew G . Grant
Hello, I have configured the default install of Postfix (version 2.5.5) on Apple OS X Server 10.6.3 (Darwin 10.3.0). Everything seems to run very well with the exception that once authenticated, a user can claim to be any valid email address on my network. I currently require SASL Authenticati

Re: Determine if an email to given domain will use TLS or not

2010-06-15 Thread Victor Duchovni
On Tue, Jun 15, 2010 at 05:03:08PM +0200, Jan C. wrote: > Hi Victor, > I know this is a submission service and this was only for > illustration/testing purpose. > > I just want to be sure how I can find a domain's TLS mapping from the > smtp_tls_policy_maps when transport mappings are involved.

Re: Determine if an email to given domain will use TLS or not

2010-06-15 Thread Jan C.
Hi Victor, I know this is a submission service and this was only for illustration/testing purpose. I just want to be sure how I can find a domain's TLS mapping from the smtp_tls_policy_maps when transport mappings are involved. Thanks, Jan

Re: local delivery fails ((unknown mail transport error) when combined with mailbox_transport_maps

2010-06-15 Thread Wietse Venema
j...@weitan.org: > But now for my understanding how mail is processed: > > the qmgr first makes a lookup locally and if not successful he will > proceed to the relay-entries? No, I guess that is how EXIM works. With Postfix, the queue manager asks a different daemon (trivial-rewrite). This daemo

Re: local delivery fails ((unknown mail transport error) when combined with mailbox_transport_maps

2010-06-15 Thread Victor Duchovni
On Tue, Jun 15, 2010 at 03:58:43PM +0200, j...@weitan.org wrote: > the qmgr first makes a lookup locally and if not successful he will > proceed to the relay-entries? No. See http://www.postfix.org/ADDRESS_REWRITING_README.html http://www.postfix.org/OVERVIEW.html http://

Re: Postfix and Disclaimer

2010-06-15 Thread Ralf Hildebrandt
* Stefano Villa : > I've the task to implement a disclaimer for all mail. > What product can I use? Altermime -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 5

Postfix and Disclaimer

2010-06-15 Thread Stefano Villa
Hi to all! I've a postfix (2.3.3 version) server on RHEL (2.6.18- 164.11.1.0.1.el5 version). The postfix role is to relay messages to another Exchange server. I've the task to implement a disclaimer for all mail. What product can I use? Thanks! -- Stefano Villa

Re: local delivery fails ((unknown mail transport error) when combined with mailbox_transport_maps

2010-06-15 Thread jan
Hi, > http://www.postfix.org/STANDARD_CONFIGURATION_README.html > > Look for mail gateway. Works. Thanks. But now for my understanding how mail is processed: the qmgr first makes a lookup locally and if not successful he will proceed to the relay-entries? qmgr -> try to deliver local if NOT suc

Re: different IP for outbound mail

2010-06-15 Thread Wietse Venema
Avinash Pawar // Viva: > Dear Sir/Madam, > > When any e-mail sent from postfix, the system's IP address will be use in > email header. > > But I want that each mail should take different ip's. > > These ip's will store in ip tables or they will save in virtual interfaces. > > Please suggest me

Re: Determine if an email to given domain will use TLS or not

2010-06-15 Thread Victor Duchovni
On Tue, Jun 15, 2010 at 10:00:51AM +0200, Jan C. wrote: > This works for domains which are looked up via DNS MX. Now, since the > gmail MTAs do not support TLS, I add the following transport mapping > in transport_maps > "gmail.com smtp.gmail.com:587" Don't. This is a submission service. Not an

Re: TLS smtp_tls_CApath and /etc/ssl/certs

2010-06-15 Thread Wietse Venema
Jan C.: > Did you just add this config option in Postfix 2.8 > http://www.postfix.org/postconf.5.html#tls_append_default_CA Yes. Wietse

Re: Central mail server for cron messages

2010-06-15 Thread Matias E. Fernandez
On 2010-06-15, at 12:53, Wietse Venema wrote: > Have you tried the suggestion? I'm the person who wrote Postfix. If course I tried. And of course I know that you're the one who wrote Postfix (thank you very much for that!), that's why I asked why you find my config weird. With the your suggest

different IP for outbound mail

2010-06-15 Thread Avinash Pawar // Viva
Dear Sir/Madam, When any e-mail sent from postfix, the system's IP address will be use in email header. But I want that each mail should take different ip's. These ip's will store in ip tables or they will save in virtual interfaces. Please suggest me whether this is possible or not. If possibl

Re: Central mail server for cron messages

2010-06-15 Thread Wietse Venema
Matias E. Fernandez: [blah blah 20 lines] > > /etc/postfix/main.cf: > >masquerade_domains = $mydomain > >masquerade_classes = envelope_recipient, envelope_sender [blah blah 10 lines] Have you tried the suggestion? I'm the person who wrote Postfix. Wietse

Re: local delivery fails ((unknown mail transport error) when combined with mailbox_transport_maps

2010-06-15 Thread Wietse Venema
j...@weitan.org: [ Charset ISO-8859-1 unsupported, converting... ] > Hi, > > > Do not list weitan.org in mydestination. It should be a relay > > destination. Therefore, use relay_domains and relay_recipient_maps > > as explained in ADDRESS_CLASS_README and STANDARD_CONFIGURATION_README. > > > Use

Re: Spoofed freemail domains protection not working for postmaster

2010-06-15 Thread Покотиленко Костик
В Пнд, 14/06/2010 в 09:39 -0500, Noel Jones пишет: > On 6/14/2010 2:46 AM, Покотиленко Костик wrote: > > Also can somebody state that my postfix version (Debian say its > > 2.5.5-1.1) doesn't have postmaster hardcoded internal checks? It seems > > like it have, because there is no postmaster accept

Re: TLS smtp_tls_CApath and /etc/ssl/certs

2010-06-15 Thread Jan C.
Did you just add this config option in Postfix 2.8 http://www.postfix.org/postconf.5.html#tls_append_default_CA ?

Determine if an email to given domain will use TLS or not

2010-06-15 Thread Jan C.
Hello, I have Postfix with TLS policy maps set up to send traffic via TLS to remote MTAs. I'm writing an application which should be able to determine if an email to given domain will be sent through an TLS connection or not, just by reading the Postfix configuration. I thought that having a look i

Re: local delivery fails ((unknown mail transport error) when combined with mailbox_transport_maps

2010-06-15 Thread jan
Hi, > Do not list weitan.org in mydestination. It should be a relay > destination. Therefore, use relay_domains and relay_recipient_maps > as explained in ADDRESS_CLASS_README and STANDARD_CONFIGURATION_README. > Use virtual_alias_maps (NOT VIRTUAL ALIAS DOMAINS) to deliver that > one user locall