Re: how to direct local mail on secondary back up mx server

2010-11-19 Thread zhong ming wu
On Fri, Nov 19, 2010 at 9:25 PM, zhong ming wu wrote: > Hello > On backup server, postconf -n > > alias_maps = > inet_interfaces = 9.8.7.6 > mynetworks = 127.0.0.0/8 > myorigin = example.com Please igore my post as I've figure it out. Sorry for the noise.

how to direct local mail on secondary back up mx server

2010-11-19 Thread zhong ming wu
Hello Following online documentation I have properly set up a secondary back up mx server (for domain example.com) which relay email properly to primary. But there is a problem with how to have mails generated automatically such as mails from cron delivered to fully qualified example.com addresse

Re: How to replace underscores in hostnames to a valid character?

2010-11-19 Thread mouss
Le 19/11/2010 22:22, Jeroen Geilman a écrit : On 11/18/2010 03:11 PM, Jerry wrote: To a point I would agree with you. I have often wondered what moron came up with certain "standards" that are now in effect. That would be the morons without whom you would not HAVE internet. Get a clue, pleas

Re: How to replace underscores in hostnames to a valid character?

2010-11-19 Thread mouss
Le 18/11/2010 10:15, Ralf Hildebrandt a écrit : * J. Roeleveld: Hi All, I've been having issues where emails are being rejected by Cyrus because the "From" address contains an underscore in the domain name. Envelope or header? Example address: u...@lists_example.org What I am looking for i

Re: smtp_generic_maps problem

2010-11-19 Thread mouss
Le 19/11/2010 19:09, Andrew Hall a écrit : On 19 November 2010 17:40, Victor Duchovni mailto:victor.ducho...@morganstanley.com>> wrote: Probably using "hash:/etc/postfix/generic" in main.cf , when "regexp:" is what you tested. Thanks for the prompt reply Victor. Yo

Re: What happened to postfix 2.7.2???

2010-11-19 Thread Wietse Venema
Adrian P. van Bloois: > THe RC2 is around for ages, is the final release coming up soon??? When I have time. I won't react kindly to attempts to increase pressure. Wietse

Re: smtp_generic_maps problem

2010-11-19 Thread Andrew Hall
On 19 November 2010 19:52, Victor Duchovni < victor.ducho...@morganstanley.com> wrote: > > If the UTF-8 is not mangled: naïveté > It isn't mangled and thankyou for the correction. > >http://www.postfix.org/regexp_table.5.html >http://www.postfix.org/pcre_table.5.html > Thanks for these

Re: ??TLS and reject_plaintext_session?

2010-11-19 Thread Victor Duchovni
On Fri, Nov 19, 2010 at 04:43:24PM -0500, Jerry wrote: > On Fri, 19 Nov 2010 22:03:11 +0100 > Jeroen Geilman articulated: > > > Yes. > > To enforce TLS, use > > > > smtpd_tls_security_options = encrypt > > > > If you were to add reject_plaintext_session to your *client* > > restrictions,

What happened to postfix 2.7.2???

2010-11-19 Thread Adrian P. van Bloois
THe RC2 is around for ages, is the final release coming up soon??? Adrin -- Adrian P. van Bloois Postbus 2575 email: adr...@pa0rda.nl 3500 GN Utrecht voice: +31-30-68-94649 The Netherlands fax: ++31-30-68-94601 The whole point o

Re: ¿TLS and reject_plaintext_session?

2010-11-19 Thread Jerry
On Fri, 19 Nov 2010 22:03:11 +0100 Jeroen Geilman articulated: > Yes. > To enforce TLS, use > > smtpd_tls_security_options = encrypt > > If you were to add reject_plaintext_session to your *client* > restrictions, any attempt at STARTTLS would fail, and you would never > receive mail. N

Re: Hello

2010-11-19 Thread Jeroen Geilman
On 11/18/2010 05:44 AM, George Forman wrote: What's going on postfix-us...@postfix.org? Making money from home is the new thing, you've gotta get on this. I want you to get in on this with me, I've already make $1200 this week. Go to this article and go over it then get the kit on the page, you

Re: How to replace underscores in hostnames to a valid character?

2010-11-19 Thread Jeroen Geilman
On 11/18/2010 03:11 PM, Jerry wrote: To a point I would agree with you. I have often wondered what moron came up with certain "standards" that are now in effect. That would be the morons without whom you would not HAVE internet. Get a clue, please. -- J.

Re: ¿TLS and reject_plaintext_session?

2010-11-19 Thread Noel Jones
On 11/19/2010 3:03 PM, Jeroen Geilman wrote: On 11/19/2010 09:59 PM, Jerry wrote: If I were to place this in my main.cf file: smtpd_client_restrictions = ... reject_plaintext_session Wouldn't that effectively enforce TLS or am I failing to understand the directive? Yes. Yes, non-encrypted

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Victor Duchovni
On Fri, Nov 19, 2010 at 09:55:28PM +0100, Jeroen Geilman wrote: > On 11/19/2010 05:56 PM, Len Conrad wrote: >> I did say "fixed by running postfix-install", wasn't clear that >> postfix-install fixed postfix fail-to-run problem. >> >> fsck or whatever Linux RH does to fix filesystems apparently c

Re: ¿TLS and reject_plaintext_session?

2010-11-19 Thread Jeroen Geilman
On 11/19/2010 09:59 PM, Jerry wrote: If I were to place this in my main.cf file: smtpd_client_restrictions = ... reject_plaintext_session Wouldn't that effectively enforce TLS or am I failing to understand the directive? Yes. To enforce TLS, use smtpd_tls_security_options = encry

¿TLS and reject_plaintext_session?

2010-11-19 Thread Jerry
If I were to place this in my main.cf file: smtpd_client_restrictions = ... reject_plaintext_session Wouldn't that effectively enforce TLS or am I failing to understand the directive? -- Jerry ✌ postfix-u...@seibercom.net _ T

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Jeroen Geilman
On 11/19/2010 05:56 PM, Len Conrad wrote: I did say "fixed by running postfix-install", wasn't clear that postfix-install fixed postfix fail-to-run problem. fsck or whatever Linux RH does to fix filesystems apparently converted "private/scan=" socket to "private/scan" dir, into which we got 21

Re: Mail to root user on gateway behind security appliance

2010-11-19 Thread Stan Hoeppner
Please keep messages on list. ;) Cameron Smith put forth on 11/19/2010 1:37 PM: > The public IP of the NAT appliance is the only public IP and all web traffic > and outbound mail traffic rout through this point so the DNS A record for > the Postfix Mail gateway has been made to match that IP for

Re: Postfix Optimization

2010-11-19 Thread Randy Ramsdell
Victor Duchovni wrote: On Fri, Nov 19, 2010 at 06:05:12PM +0530, Avinash Pawar // Viva wrote: I also noticed the number of TCP connections by *ss -s *command Whenever it goes beyond 900 then mail sending speed is 5-6 mails per second. When the connections are below 900 then the mail sending s

Re: Postfix Optimization

2010-11-19 Thread Victor Duchovni
On Fri, Nov 19, 2010 at 06:05:12PM +0530, Avinash Pawar // Viva wrote: > I also noticed the number of TCP connections by *ss -s *command > > Whenever it goes beyond 900 then mail sending speed is 5-6 mails per second. > > When the connections are below 900 then the mail sending speed is 100-200.

Re: smtp_generic_maps problem

2010-11-19 Thread Victor Duchovni
On Fri, Nov 19, 2010 at 06:09:02PM +, Andrew Hall wrote: > On 19 November 2010 17:40, Victor Duchovni < > victor.ducho...@morganstanley.com> wrote: > > > > > Probably using "hash:/etc/postfix/generic" in main.cf, when "regexp:" > > is what you tested. > > > > Thanks for the prompt reply Vict

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Randy Ramsdell
Len Conrad wrote: Len Conrad: At 09:12 AM 11/19/2010, you wrote: Len Conrad: The scan dir ownership was fixed by running postfix-install. not sure how another guy detected that scan was bad ownership, since that finding was not logged after I moved the scan/* msgs out. I've moved the 2176 ms

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Wietse Venema
Len Conrad: > I did say "fixed by running postfix-install", wasn't clear that > postfix-install fixed postfix fail-to-run problem. For the record, I take no responsibility for what happens when Postfix is run on a corrupted file system. Just like I take no responsibility for what happens when Post

Re: smtp_generic_maps problem

2010-11-19 Thread Andrew Hall
On 19 November 2010 17:40, Victor Duchovni < victor.ducho...@morganstanley.com> wrote: > > Probably using "hash:/etc/postfix/generic" in main.cf, when "regexp:" > is what you tested. > Thanks for the prompt reply Victor. You raise perfectly valid points and I do apologise for my naivety in parts

Re: smtp_generic_maps problem

2010-11-19 Thread Victor Duchovni
On Fri, Nov 19, 2010 at 05:30:20PM +, Andrew Hall wrote: > we wish to deliver the output of root's cron jobs to our noc team. we have > therefore set an entry in /etc/aliases which sends root's mail to > n...@domain.com Presumably you are posting to this list because the systems running the c

Re: Mail to root user on gateway behind security appliance

2010-11-19 Thread Stan Hoeppner
Cameron Smith put forth on 11/19/2010 11:13 AM: > I have a Postfix mail gateway behind a security appliance. > The mail gateway has a published public IP of the security appliance. > > On all my Postfix servers I am routing mail for root to an off network email > address using an entry in /etc/ali

smtp_generic_maps problem

2010-11-19 Thread Andrew Hall
hi there ! I have an issue with the generic maps table and wonder if anyone can help ? we wish to deliver the output of root's cron jobs to our noc team. we have therefore set an entry in /etc/aliases which sends root's mail to n...@domain.com unfortunately the hosts sending the mail announce the

Re: CVE-2010-3864

2010-11-19 Thread Victor Duchovni
On Fri, Nov 19, 2010 at 03:44:15PM +0100, Ralf Hildebrandt wrote: > I assume postfix is not affected since smtpd is not multi-threaded? > http://www.openssl.org/news/secadv_20101116.txt Correct. We also don't have an in-memory SSL session cache in the Postfix SMTP client. We do have a 1-element i

RE: Invalid response code: 503 5.7.0 Error: access denied

2010-11-19 Thread George Forman
> Date: Fri, 19 Nov 2010 12:12:43 -0500 > From: victor.ducho...@morganstanley.com > To: postfix-users@postfix.org > Subject: Re: Invalid response code: 503 5.7.0 Error: access denied > > On Fri, Nov 19, 2010 at 10:08:19AM -0500, Wietse Venema wrote: > > > Wietse: > > > I had a similar patch th

Mail to root user on gateway behind security appliance

2010-11-19 Thread Cameron Smith
I have a Postfix mail gateway behind a security appliance. The mail gateway has a published public IP of the security appliance. On all my Postfix servers I am routing mail for root to an off network email address using an entry in /etc/aliases They all work fine except for the root account on th

Re: Invalid response code: 503 5.7.0 Error: access denied

2010-11-19 Thread Victor Duchovni
On Fri, Nov 19, 2010 at 10:08:19AM -0500, Wietse Venema wrote: > Wietse: > > I had a similar patch that I was going to post 30 mins ago when > > someone walked into my room: > > Victor: > > OK, we are on the same page then. > > George Forman: > > I've made the change to my local code base. Will

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Len Conrad
>Len Conrad: >> At 09:12 AM 11/19/2010, you wrote: >> >Len Conrad: >> >> The scan dir ownership was fixed by running postfix-install. not >> >> sure how another guy detected that scan was bad ownership, since >> >> that finding was not logged after I moved the scan/* msgs out. >> >> >> >> I've mo

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Wietse Venema
Len Conrad: > At 09:12 AM 11/19/2010, you wrote: > >Len Conrad: > >> The scan dir ownership was fixed by running postfix-install. not > >> sure how another guy detected that scan was bad ownership, since > >> that finding was not logged after I moved the scan/* msgs out. > >> > >> I've moved the 2

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Len Conrad
At 09:12 AM 11/19/2010, you wrote: >Len Conrad: >> The scan dir ownership was fixed by running postfix-install. not >> sure how another guy detected that scan was bad ownership, since >> that finding was not logged after I moved the scan/* msgs out. >> >> I've moved the 2176 msgs back to scan and

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Wietse Venema
Len Conrad: > The scan dir ownership was fixed by running postfix-install. not > sure how another guy detected that scan was bad ownership, since > that finding was not logged after I moved the scan/* msgs out. > > I've moved the 2176 msgs back to scan and set them to postfix:wheel, > but there th

Re: Invalid response code: 503 5.7.0 Error: access denied

2010-11-19 Thread Wietse Venema
Wietse: > I had a similar patch that I was going to post 30 mins ago when > someone walked into my room: Victor: > OK, we are on the same page then. George Forman: > I've made the change to my local code base. Will this change make > it into a 2.7.x release or 2.8? It is in Postfix 2.8. I haven

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Len Conrad
At 06:09 AM 11/19/2010, you wrote: >Len Conrad: >> >> Had a power failure on a linux RHEL and postfix. disk got messed up a >> little bit but linux seemed to fix it up. all apps and services are running >> except postfix. >> >> I've had this problem before on another machine, and it was permi

RE: Invalid response code: 503 5.7.0 Error: access denied

2010-11-19 Thread George Forman
> Date: Thu, 18 Nov 2010 00:55:44 -0500 > From: victor.ducho...@morganstanley.com > To: postfix-users@postfix.org > Subject: Re: Invalid response code: 503 5.7.0 Error: access denied > > On Wed, Nov 17, 2010 at 03:27:20PM -0500, Wietse Venema wrote: > > > I had a similar patch that I was going

white list a user for smtp auth

2010-11-19 Thread K bharathan
hi all how can i whitelist a particular user (infact it's a user account which send virusalerts from the relays to the pop server) from smtp authentication. i've attached the postconf output ty help appreciated -bharathan inet_protocols = all myhostname = mail.exmaple.com myorigin = mail.examp

CVE-2010-3864

2010-11-19 Thread Ralf Hildebrandt
I assume postfix is not affected since smtpd is not multi-threaded? http://www.openssl.org/news/secadv_20101116.txt -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 4

Re: Block A Sender in Postfix

2010-11-19 Thread Carlos Mennens
On Fri, Nov 19, 2010 at 9:27 AM, Jacqui Caren-home wrote: >> (smtp.burketown.bluehornet.com [67.216.225.254]) >>      by mail.iamghost.com (Postfix) with ESMTP id 5CDF81405D7 > > Is the important line. > > They are "snowshoing" across the 67.216.224.0/23 range - nasty! What is "snowshoing" and ca

Block A Sender in Postfix

2010-11-19 Thread Carlos Mennens
So I have a company that I've regretfully registered my email address with and they wont stop sending me messages. I've tried over and over and they tell me they don't recognize my email address but clearly they're sending me promotional messages daily. I'm running Postfix 2.7.1 and would like to k

Re: Postfix Optimization

2010-11-19 Thread Wietse Venema
Avinash Pawar // Viva: > Hi, > > I also noticed the number of TCP connections by *ss -s *command Postfix uses one process per TCP connection - one SMTP client or one SMTP server, depending on the direction. > Whenever it goes beyond 900 then mail sending speed is 5-6 mails per second. > > When

Re: Postfix Optimization

2010-11-19 Thread Avinash Pawar // Viva
Hi, I also noticed the number of TCP connections by *ss -s *command Whenever it goes beyond 900 then mail sending speed is 5-6 mails per second. When the connections are below 900 then the mail sending speed is 100-200. On Fri, Nov 19, 2010 at 5:50 PM, Wietse Venema wrote: > Avinash Pawar //

Re: Postfix Optimization

2010-11-19 Thread Wietse Venema
Avinash Pawar // Viva: > Hi, > > I have developed PHP and MySQL web application which sending mails to > postfix by using fsockopen command. > > Whenever there is no mailq then mail sending is very fast almost 1000 in > 6-10 seconds. (i.e. it sends almost 100-200 mails per second). > > But whene

Re: Duplicate incoming emails on a backup server ?

2010-11-19 Thread Wietse Venema
Frank Bonnet: > Hello > > Would it be possible to duplicate all incoming email > for a domain to two mailhubs ? > > |> prod mailhub > ncoming emails --> MX ---| > |> bkup mailhub >

Re: Duplicate incoming emails on a backup server ?

2010-11-19 Thread Wietse Venema
Ravindra Gupta // Viva: > Dear Team, > > How to improve postfix performance to sending the email. DO NOT REPLY TO OLD MAIL WHEN ASKING A NEW QUESTION

Re: postfix won't start, no messages anywhere

2010-11-19 Thread Wietse Venema
Len Conrad: > > Had a power failure on a linux RHEL and postfix. disk got messed up a little > bit but linux seemed to fix it up. all apps and services are running except > postfix. > > I've had this problem before on another machine, and it was permissions. > > postfix set-permissions >

Re: connection_cache_reuse for yahoo

2010-11-19 Thread Noel Jones
On 11/19/2010 3:06 AM, Ramprasad wrote: One of our servers is seeing deferrals for yahoo mails. According to yahoo's recommendation , they dont like more than 20 mails in one connection How do I configure postfix ( version 2.7 ) to do this. http://www.postfix.org/postconf.5.html#smtp_connectio

Postfix Optimization

2010-11-19 Thread Avinash Pawar // Viva
Hi, I have developed PHP and MySQL web application which sending mails to postfix by using fsockopen command. Whenever there is no mailq then mail sending is very fast almost 1000 in 6-10 seconds. (i.e. it sends almost 100-200 mails per second). But whenever I send bulk mails then most of the ma

connection_cache_reuse for yahoo

2010-11-19 Thread Ramprasad
One of our servers is seeing deferrals for yahoo mails. According to yahoo's recommendation , they dont like more than 20 mails in one connection How do I configure postfix ( version 2.7 ) to do this. http://www.postfix.org/postconf.5.html#smtp_connection_reuse_time_limit Specifies only reus

Re: Duplicate incoming emails on a backup server ?

2010-11-19 Thread Ravindra Gupta // Viva
Dear Team, How to improve postfix performance to sending the email. Please guide ? Thanks & Regards, Ravindra Gupta On Fri, Nov 19, 2010 at 2:07 PM, Frank Bonnet wrote: > Hello > > Would it be possible to duplicate all incoming email > for a domain to two mailhubs ? > >

Re: multiple hosts for single domain

2010-11-19 Thread Matteo Cazzador
hello, excuse but my english is terrible i know, what do you mean that if one of the host is down mail is accessible anyway from every user?, with configuration of more host and more mx records? but every mx record have a different priority ? or it's not important. If one of the hosts is down ma

Re: multiple hosts for single domain

2010-11-19 Thread Matteo Cazzador
hello, excuse but my english is terrible i know, what do you mean that if one of the host is down mail is accessible anyway from every user?, with configuration of more host and more mx records? but every mx record have a different priority ? or it's not important. If one of the hosts is down ma

Duplicate incoming emails on a backup server ?

2010-11-19 Thread Frank Bonnet
Hello Would it be possible to duplicate all incoming email for a domain to two mailhubs ? |> prod mailhub ncoming emails --> MX ---| |> bkup mailhub I imagine the best would be to u