Negation in header_checks doesn't work as expected?

Hi All, I'm new to postfix as well as to this mailing list, so I apologize in advance for any blunder ;) Need some expert advice on what I'm trying to achieve but encountered a major roadblock so far. I need a mail server with a catch-all address but limit the recipient pattern to -keyw...@ex

Re: reverse hostname (ok) -> fw dns query (ko) -> unknow

On Wed, 2010-07-14 at 04:50:11 +0200, Amedeo Rinaldo wrote: > when a client has a reverse hostname but the corresponding fw dns > query doesn't exists .. here a sample.. > > 94.96.8.3 -> reverse lookup -> 94.96.8.3.dynamic.saudi.net.sa. > 94.96.8.3.dynamic.saudi.net.sa. -> fw lookup -> NXDOMAIN >

reverse hostname (ok) -> fw dns query (ko) -> unknow

(I apologize for my terrible English) In order to minimize dnsbl queries and, globally, to decrease external services dependency i started to test some pcre rules (check_client_access on various stages) in which i'm trying to 'whitelist' properly configured dns hosts and to slow down/rate limi

Re: MAIL FROM problem after upgrade

Johan Vromans put forth on 7/13/2010 2:36 AM: > The problem: although I have configured > > mydomain = squirrel.nl > myorigin = squirrel.nl > > postfix stil uses the real, local hostname in the SMTP envelope: What do you want the SMTP host name to be? squirrel.nl ? johan.squirrel.nl ? /e

Re: PATCH: defer when pipe command dies

On Jul 13, 2010, at 7:03 PM, Wietse Venema wrote: > What are the symptoms of the problem? postfix/pipe[22169]: 5991748: to=, relay=dovecot, delay=1.9, delays=1.8/0.05/0/0.03, dsn=5.3.0, status=bounced (Command died with signal 7: "/usr/libexec/dovecot/deliver") postfix/bounce[22171]: 5991748: s

Re: PATCH: defer when pipe command dies

Thomas Arnett: > HISTORY, 20061207: > Compatibility with Postfix < 2.3: undo the change to bounce > instead of defer after pipe-to-command delivery fails with > a signal. File: global/pipe_command.c. > > Part 1: http://article.gmane.org/gmane.mail.postfix.user/154616 > > Part 2 (teste

Re: MAIL FROM problem after upgrade

On 7/13/2010 11:13 AM, Johan Vromans wrote: Victor Duchovni writes: Postfix address rewriting did not change between these releases. That's what I thought, too. You clearly also changed the application that injects email into Postfix. Possibly, though unlikely. This is my favourite test

PATCH: defer when pipe command dies

HISTORY, 20061207: Compatibility with Postfix < 2.3: undo the change to bounce instead of defer after pipe-to-command delivery fails with a signal. File: global/pipe_command.c. Part 1: http://article.gmane.org/gmane.mail.postfix.user/154616 Part 2 (tested with Postfix 2.6.6): --- src/

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

--On Tuesday, July 13, 2010 12:49 PM -0400 Victor Duchovni wrote: Test with chroot off, if that fixes it, either GNUTLS or Postfix is unhappy in the jail, and given lack of "panic" log entries, I am guessing GNUTLS, but the evidence is not yet conclusive. As a side note, the OpenLDAP team do

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

On Tue, Jul 13, 2010 at 06:19:19PM +0200, Jon Kristensen wrote: > On 7/13/2010 6:07 PM, Victor Duchovni wrote: >> perhaps your LDAP is using GNUTLS (it used to exit() in the library when >> entropy was not available > The LDAP library does indeed use GNU TLS: > > cybersec:~# ldd /usr/sbin/slapd |

Re: MAIL FROM problem after upgrade

Johan Vromans: > double checked and verified that postfix 2.5 generates the 'right' > domain names in the MAIL FROM, even without masquerade_domains being > set. Again, Postfix does not change the MAIL FROM domain unless you configure it otherwise. Wietse

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

On 7/13/2010 6:07 PM, Victor Duchovni wrote: perhaps your LDAP is using GNUTLS (it used to exit() in the library when entropy was not available The LDAP library does indeed use GNU TLS: cybersec:~# ldd /usr/sbin/slapd | grep tls libgnutls.so.26 => /usr/lib/libgnutls.so.26 (0xb7526000)

Re: MAIL FROM problem after upgrade

Victor Duchovni writes: > Postfix address rewriting did not change between these releases. That's what I thought, too. > You clearly also changed the application that injects email into > Postfix. Possibly, though unlikely. This is my favourite test command: date | mail -s xxx h...@somewher

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

On Tue, Jul 13, 2010 at 05:58:53PM +0200, Jon Kristensen wrote: > On 7/13/2010 5:42 PM, Wietse Venema wrote: >> Jon Kristensen: >>> cybersec:~# tail -f /var/log/mail.log >>> Jul 13 14:28:52 cybersec postfix/master[2422]: warning: process >>> /usr/lib/postfix/trivial-rewrite pid 2457 killed by si

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

On 7/13/2010 5:42 PM, Wietse Venema wrote: Jon Kristensen: cybersec:~# tail -f /var/log/mail.log Jul 13 14:28:52 cybersec postfix/master[2422]: warning: process /usr/lib/postfix/trivial-rewrite pid 2457 killed by signal 6 You need to search your logfiles for lines with the word "panic".

Re: MAIL FROM problem after upgrade

On Tue, Jul 13, 2010 at 05:47:12PM +0200, Johan Vromans wrote: > The question remains: was this a deliberate change in 2.6 or 2.7? I > double checked and verified that postfix 2.5 generates the 'right' > domain names in the MAIL FROM, even without masquerade_domains being > set. Postfix address r

Re: MAIL FROM problem after upgrade

Victor Duchovni writes: > Postfix only uses myorigin to qualify *bare* email addresses. If the > application that submits the mail into Postfix (via SMTP or sendmail(1)) > already specified a domain name, Postfix is not going to change that > by default. Ok. > You can also use masquerade_domain

Re: Relaying mail from the same domain to another server

Le mardi 13 juillet 2010 14:12:22, John A. a écrit : > > On Tue, 13 Jul 2010 12:42:42 +0200 > > > > John A. articulated: > > > I tried to use transport as following: > > > > > > transport_maps = local.cf remote.cf > > > - local.cf contains a sql query which returns "virtual" if the > > > "u...@d

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

Jon Kristensen: > cybersec:~# tail -f /var/log/mail.log > Jul 13 14:28:52 cybersec postfix/master[2422]: warning: process > /usr/lib/postfix/trivial-rewrite pid 2457 killed by signal 6 You need to search your logfiles for lines with the word "panic". Wietse

Re: MAIL FROM problem after upgrade

On Tue, Jul 13, 2010 at 09:36:48AM +0200, Johan Vromans wrote: > Hi, > > I've been running postfix as my MTA for many years. Recently I > upgraded my main server and now I cannot send mail anymore. > > The system is running Fedora 13, with postfix 2.7.0 > (postfix-2.7.0-1.fc13.i686). My previous

Throttling, trivial-rewrite and problem talking to service errors when using LDAP

Hello! I'm getting some throttling/trivial-rewrite/problem talking to service errors when enabling LDAP with Postfix. My virtual map seems to work using postmap: cybersec:~# postmap -q jon.kristen...@cybersec.se ldap:/etc/postfix/virtual_mailbox_maps.cf /var/mail/virtual/cybersec/csjonkri/

Re: where to put domain name that's only it virtual map

On Tue, Jul 13, 2010 at 04:07, Simon Waters wrote: > On Monday 12 July 2010 20:53:46 Phil Howard wrote: >> I've added a domain name which has email addresses that are only in >> the virtual map. There are no real mailboxes over on Dovecot (via >> transport) for this one. Attempts to send mail to >

Re: where to put domain name that's only it virtual map

On Mon, Jul 12, 2010 at 19:02, Wietse Venema wrote: > Phil Howard: >> virtual_alias_domains already defaults to virtual_alias_maps.  But >> that wasn't working. > > If you believe it is broken then you must provide the evidence, > otherwise you are just spreading false rumors. I'm not saying it

RHSBL bcc_maps on rcpt-to for outbound spam checks

We provide smtp relay services for a lot of remote mailservers There are still some inadvertent spam outbreaks , either because the remote mail server has some weak username/password account. Or because there is some Micro$$oft windows desktop with a virus spewing spams We do partial outbound sp

Re: sender restrictions based on IP of sender

thank you Noel. so simple :-) and it works. regards, Wojtek Noel Jones wrote: > On 7/12/2010 8:59 AM, Wojtek Bogusz wrote: >> hi, could you please help me to understand is this possible with postfix >> configuration: >> >> i have postfix installed on the gateway computer and also on the >> interna

Re: Relaying mail from the same domain to another server

-- *** Jonathan Amiez Administrateur système j...@edatis.com it-pa...@edatis.com ad...@edatis.com *** Le mardi 13 juillet 2010 13:15:36, Jerry a écrit : > On Tue, 13 Jul 2010 12:42:42 +0200 > > John A. articulated: > > I tried to use transport as f

Re: body_checks only for special recipient domain

On Tuesday, July 13, 2010 at 10:44 CEST, "Körner, Uwe" wrote: > Am 13.07.2010 um 10:32 schrieb Magnus Bäck: > > > How does messages from the SMS gateway enter your Postfix system? If > > they can enter via a different SMTP listener (different IP address > > and/or port) you can set up an ad

Re: Relaying mail from the same domain to another server

On Tue, 13 Jul 2010 12:42:42 +0200 John A. articulated: > I tried to use transport as following: > > transport_maps = local.cf remote.cf > - local.cf contains a sql query which returns "virtual" if the "u...@domain" > matches. > - remote.cf contains a sql query which return "smtp:[mail.gateway

Re: Relaying mail from the same domain to another server

I tried to use transport as following: transport_maps = local.cf remote.cf - local.cf contains a sql query which returns "virtual" if the "u...@domain" matches. - remote.cf contains a sql query which return "smtp:[mail.gateway]" if the domain matches. Did this according to TABLE SEARCH ORDER se

Re: Relaying mail from the same domain to another server

Le lundi 12 juillet 2010 19:10:38, Jeroen Geilman a écrit : > On 07/12/2010 04:41 PM, John A. wrote: > > Hi. > > > > I'm trying to setup a multi-server mail architecture with a mail gateway > > and 2 final dest. servers hosting mailboxes, all on the same domain. > > I'm using virtual mailboxes wi

Re: body_checks only for special recipient domain

Hi Magnus, the messages will be send to the SMS gateway via postfix. a user is sending a mail (for example) to +41123456...@sms -> postfix is doing a rewriting to +41123456...@examplesmsgateway.ch and delivers the mail. Cheers Uwe Am 13.07.2010 um 10:32 schrieb Magnus Bäck: > On Tuesday, Jul

Re: body_checks only for special recipient domain

On Tuesday, July 13, 2010 at 09:58 CEST, "Körner, Uwe" wrote: > i'm runing a postfix server as gateway on a local network just for > routing between different backends and the DMZ systems. I have to > delete some special lines in the mail body (auto-generated by a > backend) for a sms gatewa

Re: where to put domain name that's only it virtual map

On Monday 12 July 2010 20:53:46 Phil Howard wrote: > I've added a domain name which has email addresses that are only in > the virtual map. There are no real mailboxes over on Dovecot (via > transport) for this one. Attempts to send mail to > postmas...@newdomain.example.com gets "Relay access deni

body_checks only for special recipient domain

Hi all, i'm runing a postfix server as gateway on a local network just for routing between different backends and the DMZ systems. I have to delete some special lines in the mail body (auto-generated by a backend) for a sms gateway. its pretty easy doing this global using the body_checks option

Re: private restriction class is ignored

On Tuesday, July 13, 2010 at 09:11 CEST, Dieter Kluenter wrote: > I have added a private restriction class to main.cf > > smtpd_recipient_restrictions = > check_recipient_access hash:/etc/postfix/distribution_lists.cf, > reject_unauth_destination > # RESTRICTION CLASS > smtpd_restriction_

MAIL FROM problem after upgrade

Hi, I've been running postfix as my MTA for many years. Recently I upgraded my main server and now I cannot send mail anymore. The system is running Fedora 13, with postfix 2.7.0 (postfix-2.7.0-1.fc13.i686). My previous version of postfix was 2.5. I have a LAN with local DNS that is connected via

private restriction class is ignored

hello, I have added a private restriction class to main.cf smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/distribution_lists.cf, reject_unauth_destination # RESTRICTION CLASS smtpd_restriction_classes = distribution_list_01 distribution_list_01 = check_sender_access lda