Re: custom reject messages

2010-09-14 Thread Frank Doege
On 09/15/2010 01:47 AM, Jeroen Geilman wrote: On 09/14/2010 12:13 PM, Frank Doege wrote: Hi all, id like to modify the message postfix sends to the server when it rejects an email in one of the checks performed. For example, 450 Helo command rejected: Host not found; http://readhereforemore.i

Re: Problems to understand reject_unlisted_recipients

2010-09-14 Thread Stan Hoeppner
Jeroen Geilman put forth on 9/14/2010 5:56 PM: > On 09/14/2010 04:42 PM, Christian Rößner wrote: >> Sep 11 10:34:36 mx0 postfix/lmtp[29594]: 40FC3520A6: >> to=, relay=127.0.0.1[127.0.0.1]:24, >> delay=0.39, delays=0.19/0.06/0.01/0.13, dsn=5.1.1, status=bounced >> (host 127.0.0.1[127.0.0.1] > > Who

Re: only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Victor Duchovni
On Tue, Sep 14, 2010 at 04:06:34PM +0300, Eero Volotinen wrote: > How to configure postfix only allow tlsv1 connections (no plaintext > allowed) from defined ip ranges? three hosts are needed to communicate > smarthost with tlsv1 only? The Postfix SMTP server has no per-client TLS cipher/protocol

Re: only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Noel Jones
On 9/14/2010 8:06 AM, Eero Volotinen wrote: How to configure postfix only allow tlsv1 connections (no plaintext allowed) from defined ip ranges? three hosts are needed to communicate smarthost with tlsv1 only? br, -- Eero Postfix TLS controls are described here http://www.postfix.org/TLS_READ

Re: only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Eero Volotinen
2010/9/15 Jeroen Geilman : > On 09/14/2010 03:06 PM, Eero Volotinen wrote: >> >> How to configure postfix only allow tlsv1 connections (no plaintext >> allowed) from defined ip ranges? three hosts are needed to communicate >> smarthost with tlsv1 only? >> >> > > If these hosts are using you as thei

Re: Problems to understand reject_unlisted_recipients

2010-09-14 Thread Jeroen Geilman
On 09/14/2010 04:42 PM, Christian Rößner wrote: Sep 11 10:34:36 mx0 postfix/lmtp[29594]: 40FC3520A6: to=, relay=127.0.0.1[127.0.0.1]:24, delay=0.39, delays=0.19/0.06/0.01/0.13, dsn=5.1.1, status=bounced (host 127.0.0.1[127.0.0.1] Who is that ? said: 550 5.1.1 User doesn't exist: ad4f0.5

Re: custom reject messages

2010-09-14 Thread Jeroen Geilman
On 09/14/2010 12:13 PM, Frank Doege wrote: Hi all, id like to modify the message postfix sends to the server when it rejects an email in one of the checks performed. For example, 450 Helo command rejected: Host not found; http://readhereforemore.info Any check_*_access map can return an er

Re: only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Jeroen Geilman
On 09/14/2010 03:06 PM, Eero Volotinen wrote: How to configure postfix only allow tlsv1 connections (no plaintext allowed) from defined ip ranges? three hosts are needed to communicate smarthost with tlsv1 only? If these hosts are using you as their smarthost, simply whitelist their IPs.

Re: force startssl on port 25

2010-09-14 Thread Morten P.D. Stevens
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of fakessh > Sent: Tuesday, September 14, 2010 7:11 PM > To: Postfix users > Subject: force startssl on port 25 > > hi guru of postfix > hi mouss and wieste > > hi all the us

Re: Seeking recommendation for before-queue content filter capable of removing headers

2010-09-14 Thread Ralph Seichter
On 13.09.10 16:15, Mark Martinec wrote: > With the help of custom hooks this can be achieved by amavisd itself Thank you for the sample code and for your detailed explanations regarding the configuration options. > The reason the DKIM document suggests not to sign Received header > fields is for

Re: force startssl on port 25

2010-09-14 Thread fakessh
On Tue, 14 Sep 2010 13:17:56 -0400, Matt Hayes wrote: > On 9/14/2010 1:11 PM, fakessh wrote: >> hi guru of postfix >> hi mouss and wieste >> >> hi all the users of ths list >> >> my question is simply >> >> is there a way to force startssl on port 25 >> or it is not a good method >> >> many return

Re: force startssl on port 25

2010-09-14 Thread Matt Hayes
On 9/14/2010 1:11 PM, fakessh wrote: > hi guru of postfix > hi mouss and wieste > > hi all the users of ths list > > my question is simply > > is there a way to force startssl on port 25 > or it is not a good method > > many returns are welcome > I don't recommend doing that as not all MTA

force startssl on port 25

2010-09-14 Thread fakessh
hi guru of postfix hi mouss and wieste hi all the users of ths list my question is simply is there a way to force startssl on port 25 or it is not a good method many returns are welcome

Problems to understand reject_unlisted_recipients

2010-09-14 Thread Christian Rößner
Hi, this is my first post here on that list, so I hope my question(s) are welcome :) I use the current 20100913 snapshot postfix release on a developer server (testing MTA). Nearly all is working flawlessly, except one problem that I found in my daily logs (this is a test, I did) The address

Re: MX question

2010-09-14 Thread CT
Ralf.. > A MX lookup is performed to check if the sender domain exists; it can > be activated using: > > reject_unknown_sender_domain is what I was looking for.. Thank you .. Charles On 09/14/2010 08:18 AM, Ralf Hildebrandt wrote: * CT: It was a question that came up in a discussion.. I hav

Re: MX question

2010-09-14 Thread Ralf Hildebrandt
* CT : > It was a question that came up in a discussion.. > > I have had issues in the past when delivering email and I did not > have PTR in place.. the email was rejected.. That's not an MX problem, but a missing PTR. Postfix can check for this using: reject_unknown_reverse_client_hostname od

Re: MX question

2010-09-14 Thread CT
On 09/14/2010 08:02 AM, Simon Waters wrote: On Tuesday 14 September 2010 13:51:12 CT wrote: Does Postfix do an MX lookup on "inbound mail" as part of "spam" prevention or some other check.. ? Mind has "check_sender_mx_access" so and logs appropriate messages if the MX results are unacceptable

only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Eero Volotinen
How to configure postfix only allow tlsv1 connections (no plaintext allowed) from defined ip ranges? three hosts are needed to communicate smarthost with tlsv1 only? br, -- Eero

Re: MX question

2010-09-14 Thread Simon Waters
On Tuesday 14 September 2010 13:51:12 CT wrote: > > Does Postfix do an MX lookup on "inbound mail" as part of > "spam" prevention or some other check.. ? Mind has "check_sender_mx_access" so and logs appropriate messages if the MX results are unacceptable. What are you trying to achieve, as it

Re: MX question

2010-09-14 Thread Ralf Hildebrandt
* CT : > General postfix question regarding MX lookups.. > > Does Postfix do an MX lookup on "inbound mail" as part of > "spam" prevention or some other check.. ? How would that help? What exactly are you trying to achieve? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charit

MX question

2010-09-14 Thread CT
General postfix question regarding MX lookups.. Does Postfix do an MX lookup on "inbound mail" as part of "spam" prevention or some other check.. ? Thx Charles

Re: Postscreen update

2010-09-14 Thread Wietse Venema
Frank Doege: > On 09/13/2010 10:55 PM, Wietse Venema wrote: > > Postscreen is a single Postfix 2.8 daemon that keeps spambots away > > from Postfix SMTP server processes, so that more Postfix server > > resources remain available for handling mail. It will hopefully > > become part of the next stab

custom reject messages

2010-09-14 Thread Frank Doege
Hi all, id like to modify the message postfix sends to the server when it rejects an email in one of the checks performed. For example, 450 Helo command rejected: Host not found; http://readhereforemore.info that administrators which have no clue about email systems have a bit more informat

Re: Problem not receiving mail with mydestinations not including mydomain

2010-09-14 Thread Jasper Jongmans
On 2010-09-14 07:24, Richard Chapman wrote: >> >> Sep 13 23:18:48 C5 postfix/smtpd[15614]: connect from unknown[192.168.0.166] >> Sep 13 23:18:48 C5 postfix/smtpd[15614]: 2CA8A1D2145A: >> client=unknown[192.168.0.166], sasl_method=PLAIN, sasl_username=richard >> Sep 13 23:18:48 C5 postfix/cleanup[

Re: Postscreen update

2010-09-14 Thread Ralf Hildebrandt
* Matt Hayes : > Thanks for the update. I'm working on implementing this now, > however, I'm a bit confused with the postscreen_dnsbl_reply_map > option. Why? It's just for mapping RBL names. Unless you have a paid subscription with spamhaus.org, you don't need it. -- Ralf Hildebrandt Geschä

Re: Postscreen update

2010-09-14 Thread Frank Doege
On 09/13/2010 10:55 PM, Wietse Venema wrote: Postscreen is a single Postfix 2.8 daemon that keeps spambots away from Postfix SMTP server processes, so that more Postfix server resources remain available for handling mail. It will hopefully become part of the next stable Postfix release. After ad