RE: postfix + LDAP + TLS man page confusion

2010-08-23 Thread Winston Smith
> On Sun, Aug 22, 2010 at 08:58:35PM +1100, Winston Smith wrote: > > > The ldap_table(5) man page states a parameter 'tls_key' which is confusing. > > This is a client private key. > > > If that's the case, how can I turn this off? > > Leave these empty, which is the default. Don't configure y

Re: Delay deliver to a group of domains

2010-08-23 Thread Wietse Venema
Pablo Garcia Melga: > Hi, I have a group of domains, that can't cope with our delivery rate, > I need to send them mail at most at 1/second, how should I achieve > that ? > I tried to create a new transport in master.cf and reroute these > domains thru this transpor but it doesn't seems to work. >

Delay deliver to a group of domains

2010-08-23 Thread Pablo Garcia Melga
Hi, I have a group of domains, that can't cope with our delivery rate, I need to send them mail at most at 1/second, how should I achieve that ? I tried to create a new transport in master.cf and reroute these domains thru this transpor but it doesn't seems to work. Any Help ? Regards, Pablo

virtual MAILBOX: separate domains, non-UNIX accounts

2010-08-23 Thread Mike
Noip.com manages DNS for my FQDN. Should virtual_mailbox_domains = mail.example.com or only example.com Thanks for your help.

Re: Milter i-macro not set at EOM stage

2010-08-23 Thread Erik Logtenberg
Thank you Wietse, I tested with test-milter per your instructions and confirmed that postfix does indeed include the i-macro. After some more digging I found out that Fedora installed Sendmail::PMilter instead of the apparently obsoleted Sendmail::Milter package. Unfortunately for some reason PMil

Re: blocking brand new domains

2010-08-23 Thread Ralf Hildebrandt
> >http://www.mail-archive.com/us...@spamassassin.apache.org/msg57008.html > >Dunno if Marc is still active > > > > Yes, the "hostkarma" lists are active, IMO best used in SA because > they mix whitelist with blacklist using different return codes. reject_dnsbl_client hostkarma.junkemailfilter.co

Re: relayhost if fail

2010-08-23 Thread Wietse Venema
listadecorreo: > > See: http://www.postfix.org/postconf.5.html#smtp_fallback_relay > > > Thanks a lot i'm using smtp_fallback_relay but show tis error > > Aug 23 19:27:52 jupiter postfix/smtpd[15705]: ECC30EA056: > client=unknown[10.111.100.100] > Aug 23 19:27:55 jupiter postfix/c

Re: relayhost if fail

2010-08-23 Thread listadecorreo
On 08/23/2010 01:11 PM, Wietse Venema wrote: listadecorreo: [ Charset ISO-8859-1 unsupported, converting... ] Hi to all In the configuration of my main.cf, I have all mail sent to an external server (relayhost) I can do to check if the server is operational and if it fails to send all mail

Re: Speed up queue injection

2010-08-23 Thread Jose Ildefonso Camargo Tolosa
Hi! On Mon, Aug 23, 2010 at 12:30 PM, Wietse Venema wrote: > On Tue, Aug 17, 2010 at 01:41:20PM -0500, Stan Hoeppner wrote: >> Anyway, if you had the time and inclination and were able to get >> your hands on a few units, it would be great to see some basic >> queue performance data from you on S

Re: Speed up queue injection

2010-08-23 Thread Jose Ildefonso Camargo Tolosa
Hi! On Mon, Aug 16, 2010 at 9:02 PM, Stan Hoeppner wrote: > Stan Hoeppner put forth on 8/16/2010 6:56 PM: >> Wietse Venema put forth on 8/16/2010 2:36 PM: >>> Stan Hoeppner: Google uses less than 1/10th of 1% "Enterprise grade" hardware, using the typical definition of "Enterprise grade

Re: Speed up queue injection

2010-08-23 Thread Wietse Venema
On Tue, Aug 17, 2010 at 01:41:20PM -0500, Stan Hoeppner wrote: > Anyway, if you had the time and inclination and were able to get > your hands on a few units, it would be great to see some basic > queue performance data from you on SSD vs a disk based test rig > you use. Victor Duchovni: > All ben

Re: blocking brand new domains

2010-08-23 Thread pf
Noel Jones wrote: I've also been playing with these: http://spameatingmonkey.com/lists.html The FRESH lists are what you're looking for. Very nice. I'm now using their geobl.spameatingmonkey.net, right before I accept a delivery. But not for blocking. Just for statistics at this point.

Re: Speed up queue injection

2010-08-23 Thread Victor Duchovni
On Tue, Aug 17, 2010 at 01:41:20PM -0500, Stan Hoeppner wrote: > Anyway, if you had the time and inclination and were able to get your hands on > a few units, it would be great to see some basic queue performance data from > you on SSD vs a disk based test rig you use. All benchmarks are artifici

Re: How common is reverse DNS checking?

2010-08-23 Thread donovan jeffrey j
On Aug 23, 2010, at 11:32 AM, LuKreme wrote: > On 19-Aug-2010, at 13:08, D G Teed wrote: >> >> The only place I've seen which publicly talks about >> the reverse DNS requirement is AOL. > > Craigslist requires that the reverse DNS match EXACTLY the mail server name. > So, if your mailserver do

Re: How common is reverse DNS checking?

2010-08-23 Thread LuKreme
On 19-Aug-2010, at 13:08, D G Teed wrote: > > The only place I've seen which publicly talks about > the reverse DNS requirement is AOL. Craigslist requires that the reverse DNS match EXACTLY the mail server name. So, if your mailserver doubles as a dns server and your primary rDNS point to ns1.

DNS Whitelisting

2010-08-23 Thread Wietse Venema
Noel Jones: [ Charset UTF-8 unsupported, converting... ] > On 8/23/2010 8:48 AM, Ralf Hildebrandt wrote: > > * p...@alt-ctrl-del.org: > >> I find that a lot of spam comes from recently registered, throw away > >> domains. The new domain may be used as the sender, hostname, or name > >> server. > >>

Re: blocking brand new domains

2010-08-23 Thread Noel Jones
On 8/23/2010 8:48 AM, Ralf Hildebrandt wrote: * p...@alt-ctrl-del.org: I find that a lot of spam comes from recently registered, throw away domains. The new domain may be used as the sender, hostname, or name server. Are there any rbl type lists that block fresh domains, for the first 10-15 day

Re: Multi-domain certificates and TLS

2010-08-23 Thread Victor Duchovni
On Fri, Aug 20, 2010 at 10:30:48PM -0400, Alex wrote: > I posted a message a few days ago, and still haven't been able to > figure this out. I believe this is a result of the certificate having > multiple DNS names and my TLS configuration not properly supporting > that. Could that be the case? W

Re: blocking brand new domains

2010-08-23 Thread Ralf Hildebrandt
* p...@alt-ctrl-del.org : > I find that a lot of spam comes from recently registered, throw away > domains. The new domain may be used as the sender, hostname, or name > server. > > Are there any rbl type lists that block fresh domains, for the first > 10-15 days of their existence? http://www.ma

Re: blocking brand new domains

2010-08-23 Thread Ralf Hildebrandt
* p...@alt-ctrl-del.org : > I find that a lot of spam comes from recently registered, throw away > domains. The new domain may be used as the sender, hostname, or name > server. > > Are there any rbl type lists that block fresh domains, for the first > 10-15 days of their existence? I'd like to k

blocking brand new domains

2010-08-23 Thread pf
I find that a lot of spam comes from recently registered, throw away domains. The new domain may be used as the sender, hostname, or name server. Are there any rbl type lists that block fresh domains, for the first 10-15 days of their existence?

Re: Rewriting Date header for local senders, or something like that.

2010-08-23 Thread Wietse Venema
Jose Ildefonso Camargo Tolosa: > I have to ask: is there a way of making postfix rewrite Date header to > server's time for authenticated mail? (or at list for a range of IPs), No, but it is possible to delete the Date: header for mail that is received via the submission service. In the master.cf

Re: postfix + LDAP + TLS man page confusion

2010-08-23 Thread Victor Duchovni
On Sun, Aug 22, 2010 at 08:58:35PM +1100, Winston Smith wrote: > The ldap_table(5) man page states a parameter 'tls_key' which is confusing. This is a client private key. > Reading a bit more, there is a parameter 'tls_cert' > which shall point to a 'client certificate'. This is a client cert.

Re: Rewriting Date header for local senders, or something like that.

2010-08-23 Thread Jose Ildefonso Camargo Tolosa
Hi! Thanks for your answer! On Mon, Aug 23, 2010 at 3:34 AM, Ansgar Wiechers wrote: > On 2010-08-22 Jose Ildefonso Camargo Tolosa wrote: >> I got a curiosity, I have noted that the Date header the mail takes >> comes from the client computer, so, if my computer have a wrong date, >> my mail will

Re: relayhost if fail

2010-08-23 Thread Wietse Venema
listadecorreo: [ Charset ISO-8859-1 unsupported, converting... ] > Hi to all > > In the configuration of my main.cf, I have all mail sent to an external > server (relayhost) I can do to check if the server is operational and if > it fails to send all mail to another server > > relayhost=xxx.xxx

Re: relayhost if fail

2010-08-23 Thread Julien Tartarin
Hello, On Mon, Aug 23, 2010 at 01:40, listadecorreo wrote: > In the configuration of my main.cf, I have all mail sent to an external > server (relayhost) I can do to check if the server is operational and if it > fails to send all mail to another server > > relayhost=xxx.xxx.xxx.xxx if fail send

Re: Rewriting Date header for local senders, or something like that.

2010-08-23 Thread Ansgar Wiechers
On 2010-08-22 Jose Ildefonso Camargo Tolosa wrote: > I got a curiosity, I have noted that the Date header the mail takes > comes from the client computer, so, if my computer have a wrong date, > my mail will go out with a wrong date too. > > I know the server will put its own timestamp when it pro