Re: mailing lists and "unknown mail transport error"

2010-08-09 Thread Dominik Storck
Hello Wietse, I have been looking for these error messages over and over before I started digging deeper. There are none of the error,fatal,warning or panic messages before. The first error log entry to occur is the unknown mail transport error, really. Dominik Am 10.08.2010 00:07, schrieb

Re: How to reject bad hosts

2010-08-09 Thread Dennis Guhl
On Tue, Aug 10, 2010 at 01:10:22AM +0200, Nicolas Michel wrote: > On 08/09/2010 10:43 PM, Martin Schütte wrote: > >On 08/09/10 16:29, Nicolas Michel wrote: > >>I want to know if there is a way to reject connections from host not > >>listed in the MX records of the domain it claims to be. > > > >Try

Re: How to reject bad hosts

2010-08-09 Thread Walter Pinto
I also can vouch for policyd-weight , with a bit of configuration it can be a very useful tool. Combine it with the fail2ban postfix log wrapper and you're on the right track.

Re: How to reject bad hosts

2010-08-09 Thread Nicolas Michel
On 08/09/2010 10:43 PM, Martin Schütte wrote: On 08/09/10 16:29, Nicolas Michel wrote: I want to know if there is a way to reject connections from host not listed in the MX records of the domain it claims to be. Try http://www.policyd-weight.org/ It checks and compares the client IP, its HELO

Re: mailing lists and "unknown mail transport error"

2010-08-09 Thread Wietse Venema
Dominik Storck: > Hello Wietse, > > I have been tracking down to "Automatically tracing a Postfix daemon > process" from the DEBUG_README. This is how I got the log snippet. > > Can't reproduce the error now after deleting unnecessary .forward files. Please do not waste your time with verbose lo

Re: mailing lists and "unknown mail transport error"

2010-08-09 Thread Dominik Storck
Hello Wietse, I have been tracking down to "Automatically tracing a Postfix daemon process" from the DEBUG_README. This is how I got the log snippet. Can't reproduce the error now after deleting unnecessary .forward files. Hope things will stay this way. Thank you Dominik Am 09.08.2010 22:1

Re: How to reject bad hosts

2010-08-09 Thread Martin Schütte
On 08/09/10 16:29, Nicolas Michel wrote: I want to know if there is a way to reject connections from host not listed in the MX records of the domain it claims to be. Try http://www.policyd-weight.org/ It checks and compares the client IP, its HELO, the from address. Among other attributes it a

Re: Postfix on Cloud

2010-08-09 Thread Kay
On 07/08/2010 14:09, Jonathan Tripathy wrote: businesses. Of course, VPS ISPs should always do checks to make sure that a person signing up is who they say they are - A simple credit card name and address would suffice I guess. Unfortunately that's easier said than done. Finding fresh credit c

Re: mailing lists and "unknown mail transport error"

2010-08-09 Thread Wietse Venema
In case you wonder, I wrote Postfix. Perhaps you can follow instructions in http://www.postfix.org/.DEBUG_README.html#logging TURN OFF -v logging before you do this. Wietse

Re: Postfix relay - restrict addresses EXCEPT from specific host

2010-08-09 Thread Stan Hoeppner
michael.lar...@wellsfargo.com put forth on 8/9/2010 12:47 PM: > I have a very simple postfix relay set up with client.access, sender.access > and recipient.access rules. I need to set it up such that it will relay *all > addresses* from a specific host, but keep the default rejection for all othe

Re: mailing lists and "unknown mail transport error"

2010-08-09 Thread Dominik Storck
Hello Andrzej, thanks for your suggestion. However, increasing ulimit -n did not help in the first place . Debugging info by adding -v in master.cf came up with lots of debugging info yet not leading to success. After attaching strace to the local daemon, I observed a kind of a loop when it came

Re: How to reject bad hosts

2010-08-09 Thread Walter Pinto
I stopped using the perl SPF implementation because it would spawn too many instances and not properly terminate the process when complete, after a while it would overload the server with MailScanner running alongside. I haven't tried the python version.

Re: How to reject bad hosts

2010-08-09 Thread Nicolas Michel
On 08/09/2010 06:34 PM, Stan Hoeppner wrote: Nicolas Michel put forth on 8/9/2010 9:29 AM: For example : a host with IP WWW.XXX.YYY.ZZZ try so send a mail to my domain (we'll call it mydomain.be) and claims that the sender is u...@otherdomain.com Example of forging, typical of spammers: Retu

Postfix relay - restrict addresses EXCEPT from specific host

2010-08-09 Thread Michael.Larsen
I have a very simple postfix relay set up with client.access, sender.access and recipient.access rules. I need to set it up such that it will relay *all addresses* from a specific host, but keep the default rejection for all other hosts unless the address is specified in sender.access or recipie

Re: How to reject bad hosts

2010-08-09 Thread Stan Hoeppner
Nicolas Michel put forth on 8/9/2010 9:29 AM: > For example : a host with IP WWW.XXX.YYY.ZZZ try so send a mail to my > domain (we'll call it mydomain.be) and claims that the sender is > u...@otherdomain.com Example of forging, typical of spammers: Return-Path: X-Original-To: Delivered

Re: restrict user from sending / receiving email to / from allowed domains only

2010-08-09 Thread Noel Jones
Stop top posting. On Mon, Aug 9, 2010 at 11:01 PM, Noel Jones mailto:njo...@megan.vbhcs.org>> wrote: On Thu, Aug 5, 2010 at 11:06 PM, Noel Jones mailto:njo...@megan.vbhcs.org> >> wrote: On

Re: restrict user from sending / receiving email to / from allowed domains only

2010-08-09 Thread Joe Wong
there is reason I can't change the message submission via SMTP. In this case, do you have any suggestion? I am thinking of using Milter, does it work with sendmail interface? - Joe On Mon, Aug 9, 2010 at 11:01 PM, Noel Jones wrote: > On Thu, Aug 5, 2010 at 11:06 PM, Noel Jones >> mailto:njo...

Re: How to reject bad hosts

2010-08-09 Thread Noel Jones
On 8/9/2010 10:20 AM, Nicolas Michel wrote: On 08/09/2010 05:15 PM, Noel Jones wrote: On 8/9/2010 9:29 AM, Nicolas Michel wrote: Hello, I want to know if there is a way to reject connections from host not listed in the MX records of the domain it claims to be. For example : a host with IP WWW

Re: How to reject bad hosts

2010-08-09 Thread Egberto Monteiro
Easy to configure, but have not to be used to DROP mails. Em 08/09/2010 12:20 PM, Nicolas Michel escreveu: On 08/09/2010 05:15 PM, Noel Jones wrote: On 8/9/2010 9:29 AM, Nicolas Michel wrote: Hello, I want to know if there is a way to reject connections from host not listed in the MX records

Re: How to reject bad hosts

2010-08-09 Thread Nicolas Michel
On 08/09/2010 05:15 PM, Noel Jones wrote: On 8/9/2010 9:29 AM, Nicolas Michel wrote: Hello, I want to know if there is a way to reject connections from host not listed in the MX records of the domain it claims to be. For example : a host with IP WWW.XXX.YYY.ZZZ try so send a mail to my domain

Re: How to reject bad hosts

2010-08-09 Thread Noel Jones
On 8/9/2010 9:29 AM, Nicolas Michel wrote: Hello, I want to know if there is a way to reject connections from host not listed in the MX records of the domain it claims to be. For example : a host with IP WWW.XXX.YYY.ZZZ try so send a mail to my domain (we'll call it mydomain.be) and claims that

Re: How to reject bad hosts

2010-08-09 Thread Erwan David
On Mon, Aug 09, 2010 at 04:29:21PM CEST, Nicolas Michel said: > Hello, > > I want to know if there is a way to reject connections from host not > listed in the MX records of the domain it claims to be. > > For example : a host with IP WWW.XXX.YYY.ZZZ try so send a mail to my > domain (we'll cal

Re: restrict user from sending / receiving email to / from allowed domains only

2010-08-09 Thread Noel Jones
On Thu, Aug 5, 2010 at 11:06 PM, Noel Jones mailto:njo...@megan.vbhcs.org>> wrote: On 8/5/2010 5:10 AM, Joe Wong wrote: I am looking to into configure postfix with the captioned feature, does anyone has a pointer for me to follow? many thanks, - joe He

Re: How to reject bad hosts

2010-08-09 Thread Martijn de Munnik (Postfix)
On Mon, 09 Aug 2010 16:29:21 +0200, Nicolas Michel wrote: > Hello, > > I want to know if there is a way to reject connections from host not > listed in the MX records of the domain it claims to be. > > For example : a host with IP WWW.XXX.YYY.ZZZ try so send a mail to my > domain (we'll call i

Re: restrict user from sending / receiving email to / from allowed domains only

2010-08-09 Thread Joe Wong
Hi Noel, Thanks for the info. According to the doc, it only works if the mail is submitted via SMTP, does it have similar option if the mail is injected to the queue by sendmail interface? - Joe On Thu, Aug 5, 2010 at 11:06 PM, Noel Jones wrote: > On 8/5/2010 5:10 AM, Joe Wong wrote: > >> I

How to reject bad hosts

2010-08-09 Thread Nicolas Michel
Hello, I want to know if there is a way to reject connections from host not listed in the MX records of the domain it claims to be. For example : a host with IP WWW.XXX.YYY.ZZZ try so send a mail to my domain (we'll call it mydomain.be) and claims that the sender is u...@otherdomain.com If

Re: Account Migration with postfix

2010-08-09 Thread Luis Daniel Lucio Quiroz
Le lundi 9 août 2010 07:16:28, HARDING Pascal a écrit : > I want to keep a copy of each message on the front postfix > server having virtual mailboxes-domains and to continue to > forward each messages to the final destinations where > three lanlocal servers (2 postfix and 1 exchange) manage > thei

Re: Re: check if incoming server is SMTP or ESMTP

2010-08-09 Thread mmelyp
On Aug 8, 2010 8:08pm, Wietse Venema wrote: /etc/postfix.master.cf: # = # service type private unpriv chroot wakeup maxproc command # (yes) (yes) (yes) (never) (100) # ==

Account Migration with postfix

2010-08-09 Thread HARDING Pascal
I want to keep a copy of each message on the front postfix server having virtual mailboxes-domains and to continue to forward each messages to the final destinations where three lanlocal servers (2 postfix and 1 exchange) manage their respective domains. it will be a kind of migration of the ac

Re: need help with forged To and From

2010-08-09 Thread Xavier Gillard
Le Sun, 8 Aug 2010 13:48:04 -0400, donovan jeffrey j a écrit : > greetings > > this weekend I have been hit with a ton of forged spam messages. > here is a sample header > > > From:realu...@beth.k12.pa.us > Subject: realu...@beth.k12.pa.us 62% OFF on Pfizer! > Date: Augus