Re: SMTP relay and greylisting

2010-10-25 Thread utahnix
On 10/25/2010 9:05 PM, Michael Orlitzky wrote: On 10/25/2010 10:38 PM, utahnix wrote: Hello all, This question has probably been asked on this list before, but maybe not quite with these circumstances. I'm hoping one of you can give me some direction. I've got a fairly typical Postfix setup...

Re: SMTP relay and greylisting

2010-10-25 Thread Michael Orlitzky
On 10/25/2010 10:38 PM, utahnix wrote: > Hello all, > > This question has probably been asked on this list before, but maybe not > quite with these circumstances. I'm hoping one of you can give me some > direction. > > I've got a fairly typical Postfix setup... Postfix, Cyrus IMAP, ClamAV, > S

SMTP relay and greylisting

2010-10-25 Thread utahnix
Hello all, This question has probably been asked on this list before, but maybe not quite with these circumstances. I'm hoping one of you can give me some direction. I've got a fairly typical Postfix setup... Postfix, Cyrus IMAP, ClamAV, SpamAssassin... all on Linux. Anyway, I've set up gr

Re: NOQUEUE Relay Access denied

2010-10-25 Thread t...@diogunix.com
Noel and others, > In the specific case of "Relay access denied" it will always > be the recipient address, but there are other reasons for mail > to be rejected. > > That section of the log line shows "what" was rejected along > with a brief text description/reason. > > The "what" can be any pa

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Scott Lambert
On Mon, Oct 25, 2010 at 02:20:51PM -0200, Leonardo Rodrigues wrote: > > I have a domain (domain.com.br) with lots of subdomains in the > format nnn.domain.com.br. > > nnn.domain.com.br (about 40 different subdomains) have only 2 > (two) DNS entries: > > nnnINMX10 server.nnn.do

Re: postfix not delivering all by itself

2010-10-25 Thread Wietse Venema
Jay G. Scott: > alias_maps: The alias databases that are used for local(8) delivery You can change the path for mail that is not delivered locally with virtual_alias_maps and with transport_maps. virtual_alias_maps changes the recipient address. Example: search key lookup result

Re: postfix not delivering all by itself

2010-10-25 Thread Jay G. Scott
heh. the subject of my question seems to be wrong. there's something else i don't understand. here's my postconf -n output: - command_directory = /usr/sbin config_directory = /etc/postfix content_filter = pmx:127.0.0.1:10025 daemon_directory =

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 08:30 PM, Victor Duchovni wrote: On Mon, Oct 25, 2010 at 02:25:32PM -0400, Zhou, Yan wrote: Can you elaborate how different smtpd can have different transport settings? I won't want to create my own SMTPD process. The following won't work, because the "transport" cannot dist

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Wietse Venema
To send mail to a script depending on the arriving SMTP port: /etc/postfix/master.cf: 1.2.3.4:smtp inet n - n - - smtpd -o content_filter=script_for_1_2_3_4: script_for_1_2_3_4 unix - n n - - pipe flags=

Re: Set relay_domains LDAP.

2010-10-25 Thread Victor Duchovni
On Mon, Oct 25, 2010 at 04:43:15PM -0200, Lauro Costa G. Borges wrote: > > > I'm using Postfix 2.7.0 and Dovecot 1.2.9. > > I don't understand why this machine (imap) is trying to send warning > emails as if the recipient was local. > > If I set relay_domains to "target.example.org", it works

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Victor Duchovni
On Mon, Oct 25, 2010 at 07:49:14PM +0200, Jeroen Geilman wrote: > On 10/25/2010 07:41 PM, Christoph Anton Mitterer wrote: >> I know SPF is disliked here ;) > > Like doesn't enter into it. > > Discussion of SPF is verboten. simple. The politics and wisdom of SPF are off topic. Simple configuration

Set relay_domains LDAP.

2010-10-25 Thread Lauro Costa G. Borges
I'm using Postfix 2.7.0 and Dovecot 1.2.9. I don't understand why this machine (imap) is trying to send warning emails as if the recipient was local. If I set relay_domains to "target.example.org", it works ok, I can send email to *...@gmail.com (or any other domain), from imap. If I

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Victor Duchovni
On Mon, Oct 25, 2010 at 02:25:32PM -0400, Zhou, Yan wrote: > Can you elaborate how different smtpd can have different transport > settings? I won't want to create my own SMTPD process. > > The following won't work, because the "transport" cannot distinguish IP > address. I tried this but does no

RE: one Postfix instance serving messages in two different directions

2010-10-25 Thread Zhou, Yan
Can you elaborate how different smtpd can have different transport settings? I won't want to create my own SMTPD process. The following won't work, because the "transport" cannot distinguish IP address. I tried this but does not work. I wonder if only smtp process can vary based on different IP.

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Christoph Anton Mitterer
On Mon, 2010-10-25 at 19:49 +0200, Jeroen Geilman wrote: > Like doesn't enter into it. > > Discussion of SPF is verboten. simple. Yeah I know,... but I thought Wietse might excuse me because I hoped one could judge this as only answering a DNS question ;-D Cheers, Chris.

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 07:41 PM, Christoph Anton Mitterer wrote: I know SPF is disliked here ;) Like doesn't enter into it. Discussion of SPF is verboten. simple. -- J.

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Wietse Venema
Zhou, Yan: > Hi there, > > How can I have one single Postfix instance routing messages differently, > depends on which IP address they are arriving at SMTP. > > If an outside connection arrives, Postfix will deliver message to my > customized transport, which calls a script and passes the messa

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 07:43 PM, Zhou, Yan wrote: Hi there, How can I have one single Postfix instance routing messages differently, depends on which IP address they are arriving at SMTP. By making postfix listen with separate smtpd listeners on those IPs. Those instances can then have different tr

one Postfix instance serving messages in two different directions

2010-10-25 Thread Zhou, Yan
Hi there, How can I have one single Postfix instance routing messages differently, depends on which IP address they are arriving at SMTP. If an outside connection arrives, Postfix will deliver message to my customized transport, which calls a script and passes the message. If an internal connec

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Christoph Anton Mitterer
I know SPF is disliked here ;) On Mon, 2010-10-25 at 14:20 -0200, Leonardo Rodrigues wrote: > nnnINTXT"v=spf1 include:domain.com.br -all" But using TXT for it is (IIRC) discouraged by the RFC and "SPF" RR shoudl be used. Cheers, Chris.

Re: Encrypt messages between 2 servers

2010-10-25 Thread Victor Duchovni
On Sun, Oct 24, 2010 at 11:22:24AM +0200, martijn.list wrote: > > Just use opportunistic TLS on both ends and go. > > It depends on the requirements whether TLS is good enough. It's not > always possible to be 100% certain that the complete route is TLS > protected. All intermediate servers shoul

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Wietse Venema
Leonardo Rodrigues: > i really dont know if this setup (MX record but no A record) is > RFC-OK. The only think i know is that it's been working for years and i > receive thousand of emails daily on my several subdomains with no > problem at all. The EMAIL RFC requirement is that a domain n

is this DNS setup RFC-correct ?

2010-10-25 Thread Leonardo Rodrigues
Hi, This question is not postfix-related so its somehow off-topic. But it's related to mail systems, so i cant imagine any other place to get some help on this subject. I have a domain (domain.com.br) with lots of subdomains in the format nnn.domain.com.br. nnn.domain

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Noel Jones
On 10/25/2010 8:24 AM, Len Conrad wrote: -- Original Message -- From: Noel Jones Reply-To: postfix users Date: Mon, 25 Oct 2010 06:16:07 -0500 On 10/25/2010 4:28 AM, Len Conrad wrote: I'm testing a new filter, so I HOLD matching messages, then inspect

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Wietse Venema
Len Conrad: > >Several reasons come to mind... > >Mail can trigger a HOLD rule but be rejected by a later rule. > > Why would a HOLD: continue to be processed by other rules? > > Isn't HOLD a first-match-wins case? HOLD is a non-final action, like FILTER, WARN and IGNORE. REJECT is an example o

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Len Conrad
-- Original Message -- From: Noel Jones Reply-To: postfix users Date: Mon, 25 Oct 2010 06:16:07 -0500 >On 10/25/2010 4:28 AM, Len Conrad wrote: >> >> I'm testing a new filter, so I HOLD matching messages, then inspect them to >> either release or delete

Re: postfix in an IPv6 network

2010-10-25 Thread lst_hoe02
Zitat von Erwan David : On Mon, Oct 25, 2010 at 01:40:46PM CEST, lst_ho...@kwsoft.de said: The address 2002:::1::21 is not within 2002::::/64 as far as i can tell. You should use 2002:::1::/64 instead in mynetworks. The :: means all zero if memory serves me right. I

Re: postfix in an IPv6 network

2010-10-25 Thread Erwan David
On Mon, Oct 25, 2010 at 01:40:46PM CEST, lst_ho...@kwsoft.de said: > > The address 2002:::1::21 is not within 2002::::/64 as > far as i can tell. You should use 2002:::1::/64 instead in > mynetworks. The :: means all zero if memory serves me right. I use [2a01:240:fe0f::

Re: postfix in an IPv6 network

2010-10-25 Thread postfix
Hi Andreas and Christian that has helped, now relaying without authenticatin works: mynetworks = 192.168.97.0/24, aaa.bbb.206.128/27, [2002:::1::]/64 is the clue. thank you both very much. myuser On 2010-10-25 14:03, Christian Roessner wrote: 1. Problem: format of IPv6 address in my

Re: NOQUEUE Relay Access denied

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 01:46 PM, Noel Jones wrote: On 10/25/2010 5:22 AM, Jeroen Geilman wrote: On 10/25/2010 07:14 AM, t...@diogunix.com wrote: Noel, thanks a lot for your help. Just to precise my need for information: > 554 5.7.1 > : Relay access denied; This is the response postfix sent to the r

Re: postfix in an IPv6 network

2010-10-25 Thread Christian Roessner
>>> 1. Problem: format of IPv6 address in mynetworks >>> >>> After many trials, I have found out that the ipv6 Address in the >>> mynetworks attribute must have a double semicolon at the end, >>> otherwise the smtpd server throttles: >>> >>> Oct 25 12:40:10 mailhost postfix/smtpd[5019]: connect f

Re: postfix in an IPv6 network

2010-10-25 Thread lst_hoe02
Zitat von postfix : Hi Andreas I have tried 2002:::1::/48, but then, I got the following error message from the server: Oct 25 12:51:17 mailhost postfix/smtpd[5229]: fatal: non-null host address bits in "2002:::1::/48", perhaps you should use "2002::::/48" instea

Re: postfix in an IPv6 network

2010-10-25 Thread postfix
Hi Andreas I have tried 2002:::1::/48, but then, I got the following error message from the server: Oct 25 12:51:17 mailhost postfix/smtpd[5229]: fatal: non-null host address bits in "2002:::1::/48", perhaps you should use "2002::::/48" instead And again, smtpd went

Re: NOQUEUE Relay Access denied

2010-10-25 Thread Noel Jones
On 10/25/2010 5:22 AM, Jeroen Geilman wrote: On 10/25/2010 07:14 AM, t...@diogunix.com wrote: Noel, thanks a lot for your help. Just to precise my need for information: > 554 5.7.1 > : Relay access denied; This is the response postfix sent to the remote client. The SMTP response is 554 (a p

Re: postfix in an IPv6 network

2010-10-25 Thread lst_hoe02
Zitat von postfix : Hi listers [r...@mailhost ~]# rpm -q postfix postfix-2.5.6-3.fc11.i586 [r...@mailhost ~]# [r...@mailhost ~]# postconf -n alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases anvil_rate_time_unit = 60s command_directory = /usr/sbin config_directo

Re: NOQUEUE Relay Access denied

2010-10-25 Thread Noel Jones
On 10/25/2010 12:14 AM, t...@diogunix.com wrote: Noel, thanks a lot for your help. Just to precise my need for information: > 554 5.7.1 > : Relay access denied; This is the response postfix sent to the remote client. The SMTP response is 554 (a permanent error) with an extended code o

postfix in an IPv6 network

2010-10-25 Thread postfix
Hi listers [r...@mailhost ~]# rpm -q postfix postfix-2.5.6-3.fc11.i586 [r...@mailhost ~]# [r...@mailhost ~]# postconf -n alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases anvil_rate_time_unit = 60s command_directory = /usr/sbin config_directory = /etc/postfix cont

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Wietse Venema
Len Conrad: > > I'm testing a new filter, so I HOLD matching messages, then inspect them to > either release or delete them. > > egrep -ic "hold: " /var/log/maillog > 298 You have multiple logfile records per queue file? grep ' hold:' /var/log/maillog | awk '{print $6}' | sort -u | wc -l (t

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Noel Jones
On 10/25/2010 4:28 AM, Len Conrad wrote: I'm testing a new filter, so I HOLD matching messages, then inspect them to either release or delete them. egrep -ic "hold: " /var/log/maillog 298 but in mailq: mailq | mailq-oneline.pl | egrep -ic "! " 35 cross checking: find /var/spool/postfix/hol

Re: NOQUEUE Relay Access denied

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 07:14 AM, t...@diogunix.com wrote: Noel, thanks a lot for your help. Just to precise my need for information: > 554 5.7.1 > : Relay access denied; This is the response postfix sent to the remote client. The SMTP response is 554 (a permanent error) with an extended co

qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Len Conrad
I'm testing a new filter, so I HOLD matching messages, then inspect them to either release or delete them. egrep -ic "hold: " /var/log/maillog 298 but in mailq: mailq | mailq-oneline.pl | egrep -ic "! " 35 cross checking: find /var/spool/postfix/hold -type f | wc -l 35 In case I for

Re: Fwd: Problem with relaying denied error

2010-10-25 Thread Mikael Bak
Rich wrote: > > Hi, > > Instead of "permit_mynetworks" I'd suggest "permit_sasl_authenticated" > on the above line. The submission service is not very often used without > authentication. > > Mike are you saying remove "permit_mynetworks"? > Yes, I do not see any reason to hav

Re: Fwd: Problem with relaying denied error

2010-10-25 Thread Stan Hoeppner
Rich put forth on 10/25/2010 1:23 AM: >> 587 inet n - n - - smtpd >>-o smtpd_enforce_tls=yes >>-o smtpd_sasl_auth_enable=yes >>-o content_filter= >>-o header_checks= >>-o smtpd_recipient_restrictions=permit_sasl_authentica

Re: Problem with relaying denied error

2010-10-25 Thread Stan Hoeppner
Mikael Bak put forth on 10/25/2010 1:18 AM: > Stan Hoeppner wrote: > [snip] >> Yes. I would suggest configuring a new smtpd listener for this. Most >> people use the master.cf default TCP 587 listener daemon to accept >> submitted mail. MUA clients will need to be configured accordingly. >> Appa