Error: reject_sender_login_mismatch

2012-09-19 Thread Leon
Hi, I have running a server with postfix-mysql+dovecot+postfixadmin,in main.cf: smtpd_sender_login_maps = mysql:/etc/postfix/mysql_mailbox_maps.cf, mysql:/etc/postfix/mysql_alias_maps.cf smtpd_sender_restrictions = reject_non_fqdn_sender, reject_sender_login_

Re: Apply policy service for inbound mail only.

2012-09-19 Thread Noel Jones
On 9/19/2012 10:05 PM, Brock Henry wrote: > I can't work out the combination of rules that will give me what I want. > > What I want. > 1) non sasl, incoming mail permitted, and seen by checkfull. > 2) non sasl, outgoing mail (from inside) permitted, not seen by > checkfull. > 3) non sasl, outgoin

Re: Apply policy service for inbound mail only.

2012-09-19 Thread Brock Henry
I still can't quite get my head around it. I am fairly new to Postfix. If a user connects via SASL, they get permitted too early, and miss out on the check_policy_service. smtpd_recipient_restrictions = ... permit_sasl_authenticated, reject_unauth_destination, check_policy

Re: Using postscreen_whitelist_interfaces

2012-09-19 Thread Brad Smith
On Wed, Sep 19, 2012 at 09:17:59PM -0500, /dev/rob0 wrote: > "A list", just list them. Then I'll assume whether I have commas or spaces then it'll be fine. > If this did not answer your question, start again with what you are > trying to accomplish. Show postconf -n and the logs showing the > p

Re: Using postscreen_whitelist_interfaces

2012-09-19 Thread /dev/rob0
On Wed, Sep 19, 2012 at 09:34:42PM -0400, Brad Smith wrote: > I'm trying to use the postscreen_whitelist_interfaces feature of > Postfix but it does not appear to work properly with IPv6. I have > put in an address with and without the square brackets around the > address and either way postscre

Using postscreen_whitelist_interfaces

2012-09-19 Thread Brad Smith
Hi, I'm trying to use the postscreen_whitelist_interfaces feature of Postfix but it does not appear to work properly with IPv6. I have put in an address with and without the square brackets around the address and either way postscreen does not behave in the same manner as it does with an IPv4 addr

Re: Feature request: new parameter no_result_format for ldap and sql maps

2012-09-19 Thread Wietse Venema
Michael Storz: > The consistency check requires that a user object is first (correctly) > defined in OpenLDAP. Only then the second check looks for the correct > definition in Active Directory. If it is not then we defer the email (we ... > If a new user is created the user object appears instan

Re: Which server is that?

2012-09-19 Thread Fernando Maior
Hi, May be it is a DirectAdmin host. Have a look at www.directadmin.com... aemsg and smtpb4pop should be customer implementations to the directadmin mail server, they are using exim, which I believe is highly configurable... BUT... I do not know for sure... Best regards, --- Fernando Maciel Sou

Re: BCC submission from specific user

2012-09-19 Thread Rod K
Thanks! On 9/19/2012 12:24 PM, /dev/rob0 wrote: On Wed, Sep 19, 2012 at 11:25:18AM -0400, Rod K wrote: I have a client request that any outbound emails sent by a specific user be BCCd to another email address in the organization. Any ideas on how best to accomplish this? Sounds like you want

Re: Feature request: new parameter no_result_format for ldap and sql maps

2012-09-19 Thread Viktor Dukhovni
On Wed, Sep 19, 2012 at 07:13:49PM +0200, Michael Storz wrote: > Am 2012-09-19 18:50, schrieb Wietse Venema: > >Coming back to the original problem, if you don't want to reject > >mail with "user unknown" when a user might still be in the process > >of being created, how are you going to deal with

Re: Virtual transport local delivery without bounce

2012-09-19 Thread Viktor Dukhovni
On Wed, Sep 19, 2012 at 07:46:06PM +0200, Michal Kurka wrote: > Hello. > > I use virtual_transport and my own script for local delivery: > > main.cf: > virtual_mailbox_maps = hash:/etc/postfix/vmailbox > virtual_transport = locdel > > master.cf: > locdel unix - n n - - pipe > flags=

Virtual transport local delivery without bounce

2012-09-19 Thread Michal Kurka
Hello. I use virtual_transport and my own script for local delivery: main.cf: virtual_mailbox_maps = hash:/etc/postfix/vmailbox virtual_transport = locdel master.cf: locdel unix - n n - - pipe flags=DRXhu user=vmail:vmail argv=/usr/local/bin/MailDelivery.sh ${sender} ${recipient

Re: Feature request: new parameter no_result_format for ldap and sql maps

2012-09-19 Thread Michael Storz
Am 2012-09-19 18:50, schrieb Wietse Venema: Coming back to the original problem, if you don't want to reject mail with "user unknown" when a user might still be in the process of being created, how are you going to deal with really unknown addresses, like a sender who mistyped something?

Re: Feature request: new parameter no_result_format for ldap and sql maps

2012-09-19 Thread Wietse Venema
Coming back to the original problem, if you don't want to reject mail with "user unknown" when a user might still be in the process of being created, how are you going to deal with really unknown addresses, like a sender who mistyped something? Wietse

Re: sasl authentication reject after upgrading postfix from 2.3 to 2.10?

2012-09-19 Thread /dev/rob0
On Wed, Sep 19, 2012 at 08:41:02AM -0700, Naval saini wrote: > I have postfix running with multiple postfix-out instances i > upgrade postfix version from 2.3 to 2.10 before upgrade sasl > authentication was fine after upgradation sasl authentication > rejecting. logs of /var/log/maillog showing

Re: BCC submission from specific user

2012-09-19 Thread /dev/rob0
On Wed, Sep 19, 2012 at 11:25:18AM -0400, Rod K wrote: > I have a client request that any outbound emails sent by a specific > user be BCCd to another email address in the organization. Any > ideas on how best to accomplish this? Sounds like you want sender_bcc_maps: http://www.postfix.org/

Re: Feature request: new parameter no_result_format for ldap and sql maps

2012-09-19 Thread Michael Storz
Am 2012-09-14 17:24, schrieb Wietse Venema: Michael Storz: If a new parameter no_result_format would exist, we could define the ldap procedure with result_format = DUNNO no_result_format = 450 User not yet available in Exchange which is very straightforward and understandable. Except that th

sasl authentication reject after upgrading postfix from 2.3 to 2.10?

2012-09-19 Thread Naval saini
I have postfix running with multiple postfix-out instances i upgrade postfix version from 2.3 to 2.10 before upgrade sasl authentication was fine after upgradation sasl authentication rejecting. logs of /var/log/maillog showing smtpd_sasl_auth_enable is true, but SASL support is not compiled in. h

BCC submission from specific user

2012-09-19 Thread Rod K
I have a client request that any outbound emails sent by a specific user be BCCd to another email address in the organization. Any ideas on how best to accomplish this?

Re: [OT] DNS insights required

2012-09-19 Thread Benny Pedersen
Den 2012-09-19 14:35, Ralf Hildebrandt skrev: ; <<>> DiG 9.7.3 <<>> @ns1.bdm.microsoftonline.com www.pimda.eu ;; WARNING: recursion requested but not available good, atleast not public recursive :)

Re: Apply policy service for inbound mail only.

2012-09-19 Thread Wietse Venema
Wietse Venema: > On Wed, Sep 19, 2012 at 02:24:13PM +1000, Brock Henry wrote: > > I have created a policy service, which checks quota, returning > > 'reject' if the mailbox is full, and 'dunno' otherwise. > > > > smtpd_(data|recipient)_restrictions = > >check_policy_service unix:private/check

Re: Apply policy service for inbound mail only.

2012-09-19 Thread /dev/rob0
On Wed, Sep 19, 2012 at 09:46:58AM -0400, Wietse Venema wrote: > On Wed, Sep 19, 2012 at 02:24:13PM +1000, Brock Henry wrote: > > I have created a policy service, which checks quota, returning > > 'reject' if the mailbox is full, and 'dunno' otherwise. > > > > smtpd_(data|recipient)_restrictions

Re: Apply policy service for inbound mail only.

2012-09-19 Thread Wietse Venema
On Wed, Sep 19, 2012 at 02:24:13PM +1000, Brock Henry wrote: > I have created a policy service, which checks quota, returning > 'reject' if the mailbox is full, and 'dunno' otherwise. > > smtpd_(data|recipient)_restrictions = >check_policy_service unix:private/checkfull > > And it's all work

Re: Apply policy service for inbound mail only.

2012-09-19 Thread /dev/rob0
On Wed, Sep 19, 2012 at 02:24:13PM +1000, Brock Henry wrote: > I have created a policy service, which checks quota, returning > 'reject' if the mailbox is full, and 'dunno' otherwise. > > smtpd_(data|recipient)_restrictions = >check_policy_service unix:private/checkfull > > And it's all work

Re: [OT] DNS insights required

2012-09-19 Thread /dev/rob0
On Wed, Sep 19, 2012 at 08:11:52AM -0500, I wrote: > On Wed, Sep 19, 2012 at 11:58:27AM +0200, Ralf Hildebrandt wrote: > > * Milo : > > > > > % WHOIS pidma > > > Domain: pidma > > > Status: AVAILABLE > > > > Oh, good one! > > My respect to you for spotting this! > > And to me for spotting th

Re: [OT] DNS insights required

2012-09-19 Thread /dev/rob0
On Wed, Sep 19, 2012 at 11:58:27AM +0200, Ralf Hildebrandt wrote: > * Milo : > > > % WHOIS pidma > > Domain: pidma > > Status: AVAILABLE > > Oh, good one! > My respect to you for spotting this! And to me for spotting the typo, "pidma" != "pimda" :) > > To conclude: this domain was isn't

Re: [OT] DNS insights required

2012-09-19 Thread Milo
Dear Jim. On 09/19/2012 02:47 PM, Jim Reid wrote: > There's clearly no point continuing this thread. You clearly don't > understand or choose not to understand what's being discussed. Really sorry to read this. So let's > just shut up and agree to disagree. Agree. > I wish you the very best o

Re: [OT] DNS insights required

2012-09-19 Thread Jim Reid
There's clearly no point continuing this thread. You clearly don't understand or choose not to understand what's being discussed. So let's just shut up and agree to disagree. I wish you the very best of luck in using whois to troubleshoot DNS problems.

Re: [OT] DNS insights required

2012-09-19 Thread Milo
On 09/19/2012 02:16 PM, Jim Reid wrote: > On 19 Sep 2012, at 12:49, Milo wrote: > >> On 09/19/2012 01:41 PM, Jim Reid wrote: >>> If you want to know what domains are actually in the DNS or >>> what data are there, consult the DNS - not whois. >> >> This is incorrect. > > Well one of us is wrong.

Re: [OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
* Jim Reid : > The above is a NOHOST (or NODATA) response. There was no error > (NOERROR) and the Answer Section of the reply was empty. The name > being looked up exists but not as the QTYPE (or QCLASS) that was > asked for. ns1.bdm.microsoftonline.com is saying there are RRs for > www.pimda.eu,

Re: [OT] DNS insights required

2012-09-19 Thread Jim Reid
On 19 Sep 2012, at 12:49, Milo wrote: On 09/19/2012 01:41 PM, Jim Reid wrote: If you want to know what domains are actually in the DNS or what data are there, consult the DNS - not whois. This is incorrect. Well one of us is wrong. And it's not me. :-) I will repeat what I said above. If y

Re: [OT] DNS insights required

2012-09-19 Thread Milo
On 09/19/2012 01:41 PM, Jim Reid wrote: > On 19 Sep 2012, at 11:37, Milo wrote: > >>> Why do you think whois can tell you what the DNS is doing? > >> whois can tell if domain exists. > > No it can't. If you want to know what domains are actually in the DNS or > what data are there, consult the D

Re: [OT] DNS insights required

2012-09-19 Thread Jim Reid
On 19 Sep 2012, at 11:37, Milo wrote: Why do you think whois can tell you what the DNS is doing? whois can tell if domain exists. No it can't. If you want to know what domains are actually in the DNS or what data are there, consult the DNS - not whois. There will be no whois entry anywh

Re: how to set domain alias in postfix+postfixadmin

2012-09-19 Thread Benny Pedersen
Den 2012-09-18 20:54, Leon skrev: Hi, I have running a postfix+mysql+dovecot+postfixadmin+roundcube server and it working well.Now in postfixadmin i set a domain1.com alias to domain2.com and create u...@domain2.com.I think that if someone send a mail to u...@domain1.com,i can receive the mail

Re: [OT] DNS insights required

2012-09-19 Thread Jim Reid
On 19 Sep 2012, at 11:40, Ralf Hildebrandt wrote: The broken name server at ns1.bdm.microsoftonline.com. The other one is rightly returning NOHOST responses when asked for or MX records for www.pimda.eu. How can I see that? I performed a query using dig and gut: # dig @ns1.bdm.microsofto

Re: [OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
* Jim Reid : > The DNS admin for pimda.eu has screwed up. He/she has created a > delegation for www.pimda.eu and failed to configure the name servers > that allegedly serve this new zone. > > gromit% dig www.pimda.eu any > > ; <<>> DiG 9.9.1-vjs197.15-P2 <<>> www.pimda.eu any > ;; global options

Re: [OT] DNS insights required

2012-09-19 Thread Milo
On 09/19/2012 12:33 PM, Jim Reid wrote: > On 19 Sep 2012, at 10:53, Milo wrote: > >> % WHOIS pidma >> Domain:pidma >> Status:AVAILABLE > > Why do you think whois can tell you what the DNS is doing? It might also whois can tell if domain exists. If domain don't exist, lack of proper recor

Re: [OT] DNS insights required

2012-09-19 Thread Len Conrad
At 04:36 AM 9/19/2012, you wrote: >I'm trying to debug a DNS issue: > ># host www.pimda.eu >www.pimda.eu has address 88.208.252.197 >Host www.pimda.eu not found: 3(NXDOMAIN) >Host www.pimda.eu not found: 3(NXDOMAIN) > >Where does the NXDOMAIN come from? > ># host -t a www.pimda.eu >www.pimda.eu ha

Re: [OT] DNS insights required

2012-09-19 Thread Jim Reid
On 19 Sep 2012, at 10:53, Milo wrote: % WHOIS pidma Domain: pidma Status: AVAILABLE Why do you think whois can tell you what the DNS is doing? It might also help if you queried the DNS for pimda.eu, not pidma.

Re: [OT] DNS insights required

2012-09-19 Thread Jim Reid
On 19 Sep 2012, at 10:36, Ralf Hildebrandt wrote: I'm trying to debug a DNS issue: # host www.pimda.eu You'll get better results if you use The One True DNS tool: dig. The DNS admin for pimda.eu has screwed up. He/she has created a delegation for www.pimda.eu and failed to configure the na

Re: [OT] DNS insights required

2012-09-19 Thread Markus Schönhaber
19.09.2012 11:53, Milo: > On 09/19/2012 11:36 AM, Ralf Hildebrandt wrote: >> I'm trying to debug a DNS issue: >> >> # host www.pimda.eu > % WHOIS pidma pidma != pimda $ whois pimda.eu [...] % WHOIS pimda Domain: pimda Registrant: NOT DISCLOSED! Visit www.eurid.eu for webbased w

Re: [OT] DNS insights required

2012-09-19 Thread Milo
On 09/19/2012 11:58 AM, Ralf Hildebrandt wrote: > * Milo : > >> % WHOIS pidma >> Domain: pidma >> Status: AVAILABLE > > Oh, good one! > My respect to you for spotting this! > >> To conclude: this domain was isn't registered yet but was probably >> preconfigured on some authoritative DN

Re: [OT] DNS insights required

2012-09-19 Thread Tom Kinghorn
On 19/09/2012 11:58, Ralf Hildebrandt wrote: To conclude: this domain was isn't registered yet but was probably preconfigured on some authoritative DNS server(s). I wonder why dnstrace and dig + trace found me the entries. I would think more that the domain was registered and has now been de

Re: [OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
* Milo : > % WHOIS pidma > Domain: pidma > Status: AVAILABLE Oh, good one! My respect to you for spotting this! > To conclude: this domain was isn't registered yet but was probably > preconfigured on some authoritative DNS server(s). I wonder why dnstrace and dig + trace found me th

Re: [OT] DNS insights required

2012-09-19 Thread Milo
On 09/19/2012 11:36 AM, Ralf Hildebrandt wrote: > I'm trying to debug a DNS issue: > > # host www.pimda.eu > www.pimda.eu has address 88.208.252.197 > Host www.pimda.eu not found: 3(NXDOMAIN) > Host www.pimda.eu not found: 3(NXDOMAIN) > > Where does the NXDOMAIN come from? > > # host -t a www.pi

Re: [OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
* Bernhard Schmidt : > Not exactly sure why you are getting NXDOMAIN, I'm getting SERVFAIL > because they are sending a broken horizontal referral on anything != > A. Yes, seeing the same here > Problem is, when you are asking for A you get a legitimate answer Exactly. So I wonder what host is

Re: [OT] DNS insights required

2012-09-19 Thread Bernhard Schmidt
On 19.09.2012 11:36, Ralf Hildebrandt wrote: Hi, I'm trying to debug a DNS issue: # host www.pimda.eu www.pimda.eu has address 88.208.252.197 Host www.pimda.eu not found: 3(NXDOMAIN) Host www.pimda.eu not found: 3(NXDOMAIN) Where does the NXDOMAIN come from? # host -t a www.pimda.eu www.pimd

[OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
I'm trying to debug a DNS issue: # host www.pimda.eu www.pimda.eu has address 88.208.252.197 Host www.pimda.eu not found: 3(NXDOMAIN) Host www.pimda.eu not found: 3(NXDOMAIN) Where does the NXDOMAIN come from? # host -t a www.pimda.eu www.pimda.eu has address 88.208.252.197 # host -t www.p

Which server is that?

2012-09-19 Thread Ralf Hildebrandt
When asked after a EHLO, I'm getting this list of verbs: H E L P 250 +OK entry follows, ends in . ehlo tls smtpb4pop h e l p sendfrom starttls cqsmsg data aemsg somlfrom auth exip quit samlfrom rcptto rset mailfrom noop helo type wlist. smtpb4pop? aemsg? Never heard of those, Google doesn't know