Re: Postfix with AD and Exchange

2010-09-04 Thread Aaron C. de Bruyn
On 2010-09-04 at 21:35:44 -0700, Aaron C. de Bruyn wrote: > We use an Ubuntu box along with the likewise-open package to join the Ubuntu > machine to the domain. Bad form to reply to my own message--but I forgot to include: We do spamassassin filtering on the Linux box too which has benefits for E

Re: Postfix with AD and Exchange

2010-09-04 Thread Aaron C. de Bruyn
On 2010-09-04 at 19:19:34 -0500, Jamrock wrote: > 1. Mail Entering Postfix machien using Port 25 > 2. Authentication from AD if user exists and mailbox location > 3 Results from AD > 4. If user on Mailbox on exchange then deliver to echange > 5. Else Deliver to postfix That's almost ex

Re: Postfix with AD and Exchange

2010-09-04 Thread Jamrock
"Ashwin Muni" wrote in message news:aanlktimqqpcmm6f89ioamsjtavtmsn3p+gxs0db0i...@mail.gmail.com... I am using exchange and want to migrate to postfix, The issue is users should be authenticated from Active Directory and other thing is i have got 1000 users from which 150 users will remain

Re: processing time metrics for rejected connections

2010-09-04 Thread Stan Hoeppner
Victor Duchovni put forth on 9/4/2010 7:33 AM: > What do you mean by "filters"? Spam filters in the form of table lookups and dnsbl queries. I'm currently processing 12,581 CIDRs 1,568 regular expressions (PCRE) 5 dnsbl lookups per each inbound connection (assuming no hits). Obvious

Re: postscreen bug ?

2010-09-04 Thread Victor Duchovni
On Sat, Sep 04, 2010 at 04:45:08PM +0200, Ralf Hildebrandt wrote: > > if (DICT_DB_CLOSE(dict_db->db) < 0) > > msg_info("close database %s: %m", dict_db->dict.name); > > > > Not reporting the anomaly at all may mask real problems in the future. > > Hm, so isn't that a bug in BerkeleyD

Re: postscreen bug ?

2010-09-04 Thread Ralf Hildebrandt
> As expected. Notice that this message is informational, not a warning > or an error: > > /* > * With some Berkeley DB implementations, close fails with a bogus ENOENT > * error, while it reports no errors with put+sync, no errors with > * del+sync, and no errors with the sync

Re: postscreen bug ?

2010-09-04 Thread Ralf Hildebrandt
* Wietse Venema : > > Sep 1 05:14:38 mail postfix/postscreen[17745]: close database > > /var/lib/postfix/ps_cache.db: No such file or directory > > Perhaps you notice that this is NOT LOGGED AS A WARNING. Oh, well - Minor detail :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwe

Re: postscreen bug ?

2010-09-04 Thread Victor Duchovni
On Sat, Sep 04, 2010 at 03:28:28PM +0200, Ralf Hildebrandt wrote: > * Wietse Venema : > > > That is a Berkeley DB mis-feature. > > Newer Postfix snapshots ignore that error. > > I'm still seeing it with postfix-2.8-20100830: > > Sep 1 05:14:38 mail postfix/postscreen[17745]: close database >

Re: postscreen bug ?

2010-09-04 Thread Wietse Venema
Ralf Hildebrandt: [ Charset UTF-8 unsupported, converting... ] > * Wietse Venema : > > > That is a Berkeley DB mis-feature. > > Newer Postfix snapshots ignore that error. > > I'm still seeing it with postfix-2.8-20100830: > > Sep 1 05:14:38 mail postfix/postscreen[17745]: close database > /var

Re: postscreen bug ?

2010-09-04 Thread Ralf Hildebrandt
* Wietse Venema : > That is a Berkeley DB mis-feature. > Newer Postfix snapshots ignore that error. I'm still seeing it with postfix-2.8-20100830: Sep 1 05:14:38 mail postfix/postscreen[17745]: close database /var/lib/postfix/ps_cache.db: No such file or directory Sep 1 09:49:00 mail postfix/

Re: postscreen bug ?

2010-09-04 Thread Ralf Hildebrandt
* fdo...@network-steps.com : > close database /var/lib/postfix/ps_cache.db: No such file or directory I'm also seeing this, but only very sporadically: Aug 20 08:49:23 mail-ausfall postfix/postscreen[15615]: close database /var/lib/postfix/ps_cache.db: No such file or directory Aug 20 16:05:43

Re: processing time metrics for rejected connections

2010-09-04 Thread Victor Duchovni
On Sat, Sep 04, 2010 at 03:02:00AM -0500, Stan Hoeppner wrote: > If we're using delays=a/b/c/d for troubleshooting that's fine. But if > we're expecting to be tuning a server for performance based on log > metric data we need time data for our rejected messages as well. The purpose of the a/b/c/

Re: postscreen bug ?

2010-09-04 Thread Wietse Venema
fdo...@network-steps.com: > postfix keeps complaining > > close database /var/lib/postfix/ps_cache.db: No such file or directory That is a Berkeley DB mis-feature. Newer Postfix snapshots ignore that error. Wietse

Re: Customized transport with multiple recipients

2010-09-04 Thread Jeroen Geilman
On 09/02/2010 03:26 PM, Zhou, Yan wrote: Hi there, If Postfix server gets a mail message with multiple TO: address (i.e., multiple recipients), does Postfix send one message to each address? These decisions are not made when postfix receives mail. The message in the incoming queue includes al

postscreen bug ?

2010-09-04 Thread fdoege
Hi, i have recently set up the current postfix version 2.8 from the trunk, so far everything works fine. First some feedback to Wietse about postscreen in production environment: I have configured postscreen and its doing a great job in production environment, combined with grey listing th

Re: Postfix with AD and Exchange

2010-09-04 Thread Ashwin Muni
Thanks Ram But all my 1000 users are in AD and only few of them need to have mailboxes on exchange, how shall i bifurcate 250 users in exchange and rest 750 users in postfix. Again the idea of fetching valid users is great from AD will script it. Ashwin On Sat, Sep 4, 2010 at 1:38 PM, Ram wrot

Re: Postfix with AD and Exchange

2010-09-04 Thread Ram
On Sat, 2010-09-04 at 12:11 +0530, Ashwin Muni wrote: > I am using exchange and want to migrate to postfix, The issue is > users should be authenticated from Active Directory and other thing is > i have got 1000 users from which 150 users will remain on exchange and > the rest mailboxes will be

processing time metrics for rejected connections

2010-09-04 Thread Stan Hoeppner
Considering that spam accounts for the bulk of all client connections to an MX these days, it might be beneficial if we had log data showing total time per session, not just for queued mail, so an OP can see how long it's taking to reject at the smtpd stage, as well as time elapsed when rejecting m