Re: Problems with authentication using dovecot

2012-10-17 Thread Patrick Ben Koetter
* Ricardo Barbosa : > but smtp not worked with auth plain. but I also have a mysql server > by my understanding, the sasl uses to authenticate users from smtp dovecot so > the parameter "smtpd_sasl_type = dovecot", correct? funny that the dovecot is > working, as much as pop imap. > I did see the

Re: Any best practices for stacking filters?

2012-10-17 Thread Wietse Venema
Quanah Gibson-Mount: > Right now, we can have up to 4 different processing filters in our > configuration, based on what features are enabled. > > In general, we always have: > > 1) OpenDKIM for signing > > Then we almost always have > > 2) Amavis > > Then we sometimes have > > 3) A Zimbra w

Any best practices for stacking filters?

2012-10-17 Thread Quanah Gibson-Mount
Right now, we can have up to 4 different processing filters in our configuration, based on what features are enabled. In general, we always have: 1) OpenDKIM for signing Then we almost always have 2) Amavis Then we sometimes have 3) A Zimbra written Milter service And rarely 4) A journali

Re: Problems with authentication using dovecot

2012-10-17 Thread Noel Jones
On 10/17/2012 2:41 PM, Ricardo Barbosa wrote: > Hi jones > >>0.0.0.0/0!!! Trying to be an open relay? Bad idea; remove this. > Its test only, because not worked no way Take it out! Not a good placeholder, even for testing. >> Any other warning|error|fatal|panic postfix messages? Any dovecot

Re: Block sending from non-US IPs

2012-10-17 Thread CSS
On Oct 17, 2012, at 4:51 PM, /dev/rob0 wrote: > On Wed, Oct 17, 2012 at 03:41:08PM -0500, Thomas E Lackey wrote: >> I am looking into a system where one of the [virtual] mail accounts >> was compromised. >> >> Apparently the account, once compromised, was used to send spam >> from overseas host

Re: Block sending from non-US IPs

2012-10-17 Thread /dev/rob0
On Wed, Oct 17, 2012 at 03:41:08PM -0500, Thomas E Lackey wrote: > I am looking into a system where one of the [virtual] mail accounts > was compromised. > > Apparently the account, once compromised, was used to send spam > from overseas hosts. Since the company has no overseas users, they > a

Block sending from non-US IPs

2012-10-17 Thread Thomas E Lackey
I am looking into a system where one of the [virtual] mail accounts was compromised. Apparently the account, once compromised, was used to send spam from overseas hosts. Since the company has no overseas users, they asked if it were possible to block outbound/relaying activity from all non-US IP

Re: Problems with authentication using dovecot

2012-10-17 Thread Ricardo Barbosa
Hi jones >0.0.0.0/0!!!  Trying to be an open relay?  Bad idea; remove this. Its test only, because not worked no way > smtpd_sasl_path = /var/run/dovecot/private/auth Typically should be   smtpd_sasl_path = private/auth I trying too, however it did not work with dovecot.conf pointing to /var/s

Re: Problems with authentication using dovecot

2012-10-17 Thread Noel Jones
On 10/17/2012 12:54 PM, Ricardo Barbosa wrote: > hi all, > > I deploy enviroment with postfix and dovecot but not worked. > > look my settings. > "postconf -n" is preferred rather than main.cf snippings. > mynetworks = 127.0.0.0/8, 172.16.1.0/24, 10.0.0.0/24, 0.0.0.0/0 0.0.0.0/0!!! Trying to

Problems with authentication using dovecot

2012-10-17 Thread Ricardo Barbosa
hi all, I deploy enviroment with postfix and dovecot but not worked. look my settings. soft_bounce = no myhostname = mail.domain.com mydomain = domain.com myorigin = $mydomain inet_interfaces = all mydestination = $myhostname, localhost.$mydomain, localhost mynetworks = 127.0.0.0/8, 172.16.1.0/2

Re: smtp auth connection restrictions

2012-10-17 Thread Jeroen Geilman
On 10/17/2012 10:36 AM, /dev/rob0 wrote: On Wed, Oct 17, 2012 at 09:35:33AM +0200, Tom Kinghorn wrote: I was wondering id there is any way to specify a destination_concurrency_limit for clients which have used SMTP_AUTH and whose source is not on the $mynetworks. We currently have a problem whe

Re: local delivery: temporary failure

2012-10-17 Thread /dev/rob0
On Wed, Oct 17, 2012 at 04:06:40PM +0200, Renato wrote: > Hi, I'm new to postfix and MTAs in general; I'd like to set it up > for local delivery only on my Archlinux box. I've followed the > instructions on the archwiki [1] and my configuration files are > exactly as explained there, except that

Re: local delivery: temporary failure

2012-10-17 Thread staticsafe
On 17/10/2012 10:06 AM, Renato wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I'm new to postfix and MTAs in general; I'd like to set it up for local delivery only on my Archlinux box. I've followed the instructions on the archwiki [1] and my configuration files are exactly as explaine

Re: 4xx too many errors question

2012-10-17 Thread Wietse Venema
Tomas Macek: > The part of the log is here: > > Oct 11 12:26:44 mail postfix/smtpd[4546]: < my.pc.host.name[x.x.x.x]: RSET > Oct 11 12:26:44 mail postfix/smtpd[4546]: > my.pc.host.name[x.x.x.]: 250 > 2.0.0 Ok > Oct 11 12:26:44 mail postfix/smtpd[4546]: > my.pc.host.name[x.x.x.x]: 421 > 4.7.0 our

local delivery: temporary failure

2012-10-17 Thread Renato
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I'm new to postfix and MTAs in general; I'd like to set it up for local delivery only on my Archlinux box. I've followed the instructions on the archwiki [1] and my configuration files are exactly as explained there, except that I have *not* set ne

Re: 4xx too many errors question

2012-10-17 Thread Tomas Macek
On Wed, 17 Oct 2012, Wietse Venema wrote: Tomas Macek: So my question is how can I get this error message on my own computer, when I did not sent any email to the server in last hour? According to this experience, this seems to be per server settings. Or am I missing something? The error coun

Re: MX vs A records

2012-10-17 Thread Noel Jones
On 10/17/2012 3:31 AM, Tom Kinghorn wrote: > On 17/10/2012 10:14, Tom Hendrikx wrote: >> On 10/17/12 10:05 AM, Tom Kinghorn wrote: >>> >> You're testing NS records for the recipient address here, not the sender. >> >>> i tested using ad...@cpf.co.za >>> >>> cpf.co.za is hosted at sedoparking.com >>

Re: 4xx too many errors question

2012-10-17 Thread Wietse Venema
Tomas Macek: > So my question is how can I get this error message on my own computer, > when I did not sent any email to the server in last hour? According to > this experience, this seems to be per server settings. Or am I missing > something? The error counter is a PER SESSION property. It st

Re: smtp auth connection restrictions

2012-10-17 Thread Wietse Venema
Tom Kinghorn: > Morning List. > > I was wondering id there is any way to specify a > destination_concurrency_limit for clients which have used SMTP_AUTH and > whose source is > not on the $mynetworks. mumble_destination_concurrency_limit is an output property. You should be rate-limiting the i

4xx too many errors question

2012-10-17 Thread Tomas Macek
I have Postfix 2.8.1 installation and I sometimes get the "4xx too many errors" message. I understand, that this comes when the server is overloaded and the server uses this for it's defence, when some clients or even process (http://tech.groups.yahoo.com/group/postfix-users/message/259308) cre

Re: Unable to execute a java program from postfix

2012-10-17 Thread /dev/rob0
On Tue, Oct 16, 2012 at 09:33:38PM -0500, Stan Hoeppner wrote: > On 10/16/2012 9:17 PM, Neil Aggarwal wrote: > > > I am trying to execute a java program from postfix using > > a pipe alias. > > > > When I send an email to the alias, I get this back from postfix: > > > > Command died with status

Re: smtp auth connection restrictions

2012-10-17 Thread /dev/rob0
On Wed, Oct 17, 2012 at 09:35:33AM +0200, Tom Kinghorn wrote: > I was wondering id there is any way to specify a > destination_concurrency_limit for clients which have used > SMTP_AUTH and whose source is not on the $mynetworks. > > We currently have a problem where the accounts of clients > (who

Re: MX vs A records

2012-10-17 Thread Tom Kinghorn
On 17/10/2012 10:14, Tom Hendrikx wrote: On 10/17/12 10:05 AM, Tom Kinghorn wrote: You're testing NS records for the recipient address here, not the sender. i tested using ad...@cpf.co.za cpf.co.za is hosted at sedoparking.com in the recipient_ns_host file I have sedoparking.comREJECT

Re: MX vs A records

2012-10-17 Thread Tom Hendrikx
On 10/17/12 10:05 AM, Tom Kinghorn wrote: > On 11/10/2012 14:48, Wietse Venema wrote: >> Tom Kinghorn: >>> check_sender_ns_access type:table >>> Search the specified access(5) database for the DNS servers for >>> the MAIL FROM address, and execute the corresponding action. >>> Note: a r

Re: MX vs A records

2012-10-17 Thread Tom Kinghorn
On 11/10/2012 14:48, Wietse Venema wrote: Tom Kinghorn: check_sender_ns_access type:table Search the specified access(5) database for the DNS servers for the MAIL FROM address, and execute the corresponding action. Note: a result of "OK" is not allowed for safety reasons. Ins

smtp auth connection restrictions

2012-10-17 Thread Tom Kinghorn
Morning List. I was wondering id there is any way to specify a destination_concurrency_limit for clients which have used SMTP_AUTH and whose source is not on the $mynetworks. We currently have a problem where the accounts of clients (who have used weak passwords), are being used to spam. I