Re: MX Priority

2011-01-10 Thread ramesh srinivas
Hi Noel, example.com listed in main.conf here is entries, after listing relay_domains, i can see maillog, mailhub starts relaying to  old primary mail server. mydomain = example.com mydestination = $myhostname, localhost.$mydomain, mailhub.example.com relay_domains = $mydomain As you suggested

Re: MX Priority

2011-01-10 Thread Noel Jones
On 1/10/2011 11:13 PM, Ramesh wrote: Hi, I have few queries about changing mail priority level. presently we have taking mail service from mail service provider, we want to bring up our own mail server as primary. mx entries example.com mail is handled by 0 example.com. example.com mail i

MX Priority

2011-01-10 Thread Ramesh
Hi, I have few queries about changing mail priority level. presently we have taking mail service from mail service provider, we want to bring up our own mail server as primary. mx entries example.com mail is handled by 0 example.com. example.com mail is handled by 10 mailhub.example.com. Ye

Re: not to split message across multiple domain?

2011-01-10 Thread Robert Linden
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Yan, Zhou, Yan wrote: > Hi there, > > I am using local transport to process messages from Postfix. When > message arrives, Postfix will call a script, passing in the message, > which we will process. > > If user sends a message with multiple

Network Ideas

2011-01-10 Thread Jonathan Tripathy
Hi Everyone, Not really an issue directly related to postfix, however I'm sure I can get some goods ideas here. I wish to host managed email servers for some customers. Each customer will have their own email server which will be an all-in-one virtual machine running postfix, dovecot and som

Re: not to split message across multiple domain?

2011-01-10 Thread Wietse Venema
Zhou, Yan: > Hi there, > > I am using local transport to process messages from Postfix. When > message arrives, Postfix will call a script, passing in the message, > which we will process. > > If user sends a message with multiple recipients (in two different > domains) to Postfix, I noticed th

Re: not to split message across multiple domain?

2011-01-10 Thread mouss
Le 10/01/2011 22:13, Zhou, Yan a écrit : > Hi there, > > I am using local transport to process messages from Postfix. When > message arrives, Postfix will call a script, passing in the message, > which we will process. > > If user sends a message with multiple recipients (in two different > dom

Re: Order of policies?

2011-01-10 Thread mouss
Le 10/01/2011 10:33, Mark Alan a écrit : > On Sun, 9 Jan 2011 10:17:57 -0500 (EST), Wietse Venema > wrote: > >> Jan Johansson: >>> I have the following config: >>> >>> smtpd_recipient_restrictions = permit_mynetworks >>> reject_unauth_destination check_policy_service inet:127.0.0.1:10031 >>> >> F

Re: TLS Not Available, Bad Syntax

2011-01-10 Thread Ralf Hildebrandt
* Bryan Harrison : > Jan 10 13:00:39 gilded-bat postfix/smtpd[3076]: warning: No server certs > available. TLS won't be enabled > Jan 10 13:03:15 gilded-bat postfix/smtpd[3191]: warning: No server certs > available. TLS won't be enabled > Jan 10 13:05:51 gilded-bat postfix/smtpd[3268]: warning:

Re: TLS Not Available, Bad Syntax

2011-01-10 Thread Jeroen Geilman
On 1/10/11 10:40 PM, Bryan Harrison wrote: Jan 10 13:00:39 gilded-bat postfix/smtpd[3076]: warning: No server certs available. TLS won't be enabled As Victor correctly surmised. -- J.

Re: TLS Not Available, Bad Syntax

2011-01-10 Thread Bryan Harrison
Thanks for the blindingly quick reply. > * Bryan Harrison : >> I've recently migrated services to a new mailserver, which has of course >> promptly started kicking out dire errors that didn't show during testing. > > You are running gilded-bat.laughingboot.net? Yes. > >> If there's more infor

Re: not to split message across multiple domain?

2011-01-10 Thread Jeroen Geilman
On 1/10/11 10:13 PM, Zhou, Yan wrote: Hi there, I am using local transport to process messages from Postfix. When message arrives, Postfix will call a script, passing in the message, which we will process. If user sends a message with multiple recipients (in two different domains) to Postfix, I

Re: TLS Not Available, Bad Syntax

2011-01-10 Thread Victor Duchovni
On Mon, Jan 10, 2011 at 01:04:02PM -0800, Bryan Harrison wrote: > I've recently migrated services to a new mailserver, which has of course > promptly started kicking out dire errors that didn't show during testing. > > Here's an example transcript, postconf -n is below > > Out: 220 gilded-bat.la

not to split message across multiple domain?

2011-01-10 Thread Zhou, Yan
Hi there, I am using local transport to process messages from Postfix. When message arrives, Postfix will call a script, passing in the message, which we will process. If user sends a message with multiple recipients (in two different domains) to Postfix, I noticed that Postfix will create two

Re: TLS Not Available, Bad Syntax

2011-01-10 Thread Jeroen Geilman
On 1/10/11 10:04 PM, Bryan Harrison wrote: I've recently migrated services to a new mailserver, which has of course promptly started kicking out dire errors that didn't show during testing. Here's an example transcript, postconf -n is below Out: 220 gilded-bat.laughingboot.net

Re: TLS Not Available, Bad Syntax

2011-01-10 Thread Ralf Hildebrandt
* Bryan Harrison : > I've recently migrated services to a new mailserver, which has of course > promptly started kicking out dire errors that didn't show during testing. You are running gilded-bat.laughingboot.net? > If there's more information in the logs, I'm not finding it, but I'm > relativ

TLS Not Available, Bad Syntax

2011-01-10 Thread Bryan Harrison
I've recently migrated services to a new mailserver, which has of course promptly started kicking out dire errors that didn't show during testing. Here's an example transcript, postconf -n is below Out: 220 gilded-bat.laughingboot.net ESMTP Postfix In: EHLO [10.2.45.174] Out: 250-gilded-bat.lau

Re: Transport maps with LDAP.

2011-01-10 Thread Victor Duchovni
On Mon, Jan 10, 2011 at 06:35:23PM -0200, Lauro Costa G. Borges wrote: >>> Mail arrives to b...@domain1.org (and b...@domain1.org has an alias to >>> bla...@domain2.org). >> >> What do you mean by "has an alias"? > >I'll try to explain with an example: > > > I have these 2 domains: > >

Re: Transport maps with LDAP.

2011-01-10 Thread Lauro Costa G. Borges
Citando Victor Duchovni : Make sure you have a robust, low-latency LDAP infrastructure. The trivial-rewrite service will query LDAP to determine the address class of each domain, and qmgr(8) uses trivial-rewrite to resolve every recipient, so LDAP becomes performance critical. Suppose I relay

Re: Relay restrictions

2011-01-10 Thread Victor Duchovni
On Mon, Jan 10, 2011 at 01:09:18PM -0600, michael.lar...@wellsfargo.com wrote: > I've been poring over this email for five days now, and just can't wrap > my mind around what Viktor's example configuration is doing. I understand > what he *says* it's doing, but I can't look at the configuration an

RE: Relay restrictions

2011-01-10 Thread Michael.Larsen
I've been poring over this email for five days now, and just can't wrap my mind around what Viktor's example configuration is doing. I understand what he *says* it's doing, but I can't look at the configuration and "see" it. Can someone explain? Specifically, I don't see where the "AND" and "OR

Re: Forward all local delivered mail to specific address

2011-01-10 Thread Jeroen Geilman
On 1/10/11 4:28 PM, Markus Treinen wrote: Hello list, I have a nicely running Postfix installation which uses both virtual and local users. To prevent local mail being delivered to spool files, I have to alias (via /etc/aliases) the relevant users to a virtual user, which is not very elegant.

SV: "Sorting" mail between different servers?

2011-01-10 Thread Jan Johansson
>It is best used that way, especially if per-user lookups involve LDAP, MySQL >or similar. A more complex, but more performant solution is to rewrite each >type of user to a suitable domain that is routed to the >r>ght place. Then, if >absolutely necessary use smtp_generic_maps to rewrite back t

Re: verify db with mysql

2011-01-10 Thread Stefan
On Thursday, 6th Januar 2011, 21:02:17 Victor Duchovni wrote: > On Thu, Jan 06, 2011 at 04:56:48PM +0100, Stefan Jakobs wrote: > > > In this case, it is not as critical to set such a flag, but it is > > > important to allow the existing scan to continue to completion, and > > > ignore or (just note

Forward all local delivered mail to specific address

2011-01-10 Thread Markus Treinen
Hello list, I have a nicely running Postfix installation which uses both virtual and local users. To prevent local mail being delivered to spool files, I have to alias (via /etc/aliases) the relevant users to a virtual user, which is not very elegant. What I want to do is forward all mail, that

Re: Another "certificate verification failed ... untrusted issuer" question

2011-01-10 Thread Jerry
On Mon, 10 Jan 2011 09:20:08 -0500 Victor Duchovni articulated: > I'll see whether there is interest in adopting the "fine-grained" TLS > logging code in 2.9. Just my 2¢; however, I think it would be worth while. -- Jerry ✌ postfix-u...@seibercom.net ___

Re: "Sorting" mail between different servers?

2011-01-10 Thread Victor Duchovni
On Sat, Jan 08, 2011 at 07:53:58PM +, Jan Johansson wrote: > >/etc/postfix/transport: > >someu...@example.com smtp:[172.31.254.160] > >otheru...@example.comsmtp:[172.31.254.150] > > > ># postmap /etc/postfix/transports > ># postfix reload > > > Thanks. I got the answer a bit

Re: Question about Postfix Installation

2011-01-10 Thread Bastian Blank
On Mon, Jan 10, 2011 at 11:33:28AM +0100, Buzai Andras wrote: > I use Ubuntu 10.04 and the package repository does not contain the > latest Postfix release. Ubuntu 10.04 contains 2.7.0[1], Ubuntu 10.10 contains 2.7.1[2]. You n > Also I prefer installing packages from source. This way I think I ca

Re: Question about Postfix Installation

2011-01-10 Thread John Adams
I use Slackware. And he is using Ubuntu the basics still apply. with other words: a system from the 1990's ... which is very up-to-date with it's software, much more than centos or debian. And because I like KISS :) you are not packaging because you do not want, you can not :-) Non

Re: Another "certificate verification failed ... untrusted issuer" question

2011-01-10 Thread Victor Duchovni
On Sun, Jan 09, 2011 at 10:39:49PM +, IT geek 31 wrote: > My understanding is to prevent these errors, you obtain the root > certificate for each server mail certificate your Postfix server > connects to, append it to a pem file and reference it with > smtp_tls_CAfile in main.conf. Not worth

Re: Question about Postfix Installation

2011-01-10 Thread Reindl Harald
Am 10.01.2011 14:43, schrieb John Adams: >> On RHEL/Fedora you take the srpm, install it as builduser, put >> the newer tarball under SOURCES, edit the SPECFILE and do >> a "rpmbuild -bb postfix.spec", i do this since a long time >> necause i rebuild all our core-services with optimized >> gcc-fla

Re: Question about Postfix Installation

2011-01-10 Thread John Adams
Am 10.01.2011 14:23, schrieb Reindl Harald: Am 10.01.2011 14:11, schrieb John Adams: As it may take some time to build up software packaging facility where is the problem to take the source-package and try to replace the programsource for a rebuild? On RHEL/Fedora you take the srpm, instal

Re: Question about Postfix Installation

2011-01-10 Thread Reindl Harald
Am 10.01.2011 14:11, schrieb John Adams: > As it may take some time to build up software packaging facility where is the problem to take the source-package and try to replace the programsource for a rebuild? On RHEL/Fedora you take the srpm, install it as builduser, put the newer tarball under

Re: Question about Postfix Installation

2011-01-10 Thread Wietse Venema
Reindl Harald: > To your querstion about superuser: > NERVER EVER build sources as superuser necause > if there are bugs in the build-process you can > damage you system which is impossible with > restricted permissions. As per the Postfix INSTALL instructions, compile as unprivileged (but trusted

Re: Question about Postfix Installation

2011-01-10 Thread John Adams
Am 10.01.2011 13:37, schrieb Reindl Harald: Am 10.01.2011 11:33, schrieb Buzai Andras: Hi, I use Ubuntu 10.04 and the package repository does not contain the latest Postfix release. Also I prefer installing packages from source. This way I think I can always learn something new. nobody said

Re: "Standard" options when compiling Postfix from source?

2011-01-10 Thread Wietse Venema
Steve Jenkins: > Thanks, Wietse. The "vanilla" install of Postfix 2.3.3 on CentOS 5 via yum > does indeed include an /etc/postfix/makedefs.out file. > > For the benefit of anyone else looking for this info in the archives, the > AUXLIBS and CCARGS for that CentOS version are: > > AUXLIBS=' -L/usr

Re: delisting from spamcannibal.org

2011-01-10 Thread Larry Stone
On 1/10/11 12:51 AM, Samuel Sappa at cihuy...@gmail.com wrote: > My problem with postfix now solved, it's seem (IMHO) my ISP where I > register my DNS have problem, since both yahoo, gmail and others > required that recipient FQDN hostname must be resolve/reverse, from > hostname and to IP and IP

Re: Question about Postfix Installation

2011-01-10 Thread Reindl Harald
Am 10.01.2011 11:33, schrieb Buzai Andras: > Hi, > > I use Ubuntu 10.04 and the package repository does not contain the > latest Postfix release. > Also I prefer installing packages from source. This way I think I can > always learn something new. nobody said anything against "software packagi

Re: Question about Postfix Installation

2011-01-10 Thread Buzai Andras
>>Is there any security risk if I configure/compile all the sources >> as the superuser? (I am referring only to the build/installation >> process) > Unlikely but possible. Could you please elaborate this a little? Maybe with an example? Thank you, Buzai On Mon, Jan 10, 2011 at 10:38 A

Re: Question about Postfix Installation

2011-01-10 Thread Buzai Andras
Hi, I use Ubuntu 10.04 and the package repository does not contain the latest Postfix release. Also I prefer installing packages from source. This way I think I can always learn something new. On Mon, Jan 10, 2011 at 10:43 AM, John Adams wrote: > Am 10.01.2011 10:06, schrieb Buzai Andras: >> >>

Re: Question about Postfix Installation

2011-01-10 Thread John Adams
Am 10.01.2011 10:06, schrieb Buzai Andras: Hi, I want to install Postfix 2.7.2 by compiling it from sources. In the INSTALL file I saw the following statement: "In the instructions below, a command written as "# command" should be executed as the superuser. A command

Re: Question about Postfix Installation

2011-01-10 Thread edacval
On 01/10/2011 11:06 AM, Buzai Andras wrote: > Hi, Hi > I want to install Postfix 2.7.2 by compiling it from sources. > In the INSTALL file I saw the following statement: > > "In the instructions below, a command written as "# > command" should be executed as the superuser. >

Re: Order of policies?

2011-01-10 Thread Mark Alan
On Sun, 9 Jan 2011 10:17:57 -0500 (EST), Wietse Venema wrote: > Jan Johansson: > > I have the following config: > > > > smtpd_recipient_restrictions = permit_mynetworks > > reject_unauth_destination check_policy_service inet:127.0.0.1:10031 > > > For that, specify reject_unlisted_recipient befor

Re: another stupid question about exporting valid users from windows 2008 domain to postfix valid users map

2011-01-10 Thread Ansgar Wiechers
On 2011-01-08 Patrick Ben Koetter wrote: > * Eero Volotinen : >> Does this still works for windows 2008 ad? : >> http://postfix.state-of-mind.de/patrick.koetter/mailrelay/#d0e149 >> >> or is there better way to do it? > > The script is old. You are probably better off, if you use ldifde.exe > to

Re: another stupid question about exporting valid users from windows 2008 domain to postfix valid users map

2011-01-10 Thread lst_hoe02
Zitat von Ansgar Wiechers : On 2011-01-09 lst_ho...@kwsoft.de wrote: Zitat von Eero Volotinen : Does this still works for windows 2008 ad? : http://postfix.state-of-mind.de/patrick.koetter/mailrelay/#d0e149 or is there better way to do it? In most cases it would be best to query Windows AD

Question about Postfix Installation

2011-01-10 Thread Buzai Andras
Hi, I want to install Postfix 2.7.2 by compiling it from sources. In the INSTALL file I saw the following statement: "In the instructions below, a command written as "# command" should be executed as the superuser. A command written as "% command" should be executed as an

Re: delisting from spamcannibal.org

2011-01-10 Thread Robert Schetterer
Am 10.01.2011 07:51, schrieb Samuel Sappa: >> IIRC, Samuel stated in his original email mouss that he can successfully >> send to gmail, yahoo, and others, but he can't receive from them. >> >> This sounds like he has misconfigured his Postfix server, and that his >> problem probably has nothing to