Re: lost connection after STARTTLS / botnet

2012-12-07 Thread Robert Schetterer
Am 07.12.2012 20:55, schrieb Wietse Venema: > Robert Schetterer: >> ---snip > [bunch of end-user IP addresses] >> Dec 7 19:41:34 mail02 postfix/smtpd[8315]: lost connection after >> STARTTLS from host-111-184-248-207.dynamic.kbtelecom.net[111.184.248.207] >> --snipend >> >> anyone else with this ?

Re: Client access tables based on SASL-authenticated username

2012-12-07 Thread Patrick Ben Koetter
* Nikolaos Milas : > Quick question: > > Is there a way to create some client restrictions based on the > SASL-auth username of the client? Or this is only achievable via a > policy server, like postfwd? > > For example, I would like to have restrictions of the form: "Only > clients authenticated

Re: Status code of multiline responses logged

2012-12-07 Thread Wietse Venema
Florian Pritz: Checking application/pgp-signature: FAILURE -- Start of PGP signed section. [ Charset UTF-8 unsupported, converting... ] > Hi, > > I've just seen the following log entry: > > postfix/smtp[21188]: A494013804C: host eggs.gnu.org[208.118.235.92] said: > > 451-Your sender e-mail addre

Client access tables based on SASL-authenticated username

2012-12-07 Thread Nikolaos Milas
Hi, Quick question: Is there a way to create some client restrictions based on the SASL-auth username of the client? Or this is only achievable via a policy server, like postfwd? For example, I would like to have restrictions of the form: "Only clients authenticated with the SASL-auth usern

Status code of multiline responses logged

2012-12-07 Thread Florian Pritz
Hi, I've just seen the following log entry: > postfix/smtp[21188]: A494013804C: host eggs.gnu.org[208.118.235.92] said: > 451-Your sender e-mail address could not be verified. You're greylisted for > 20 451 minutes. Come back later. (in reply to RCPT TO command) The "20 451 minutes" looked a bi

Re: lost connection after STARTTLS / botnet

2012-12-07 Thread Wietse Venema
Robert Schetterer: > ---snip [bunch of end-user IP addresses] > Dec 7 19:41:34 mail02 postfix/smtpd[8315]: lost connection after > STARTTLS from host-111-184-248-207.dynamic.kbtelecom.net[111.184.248.207] > --snipend > > anyone else with this ? > what might best to do , configure postscreen etc ?

lost connection after STARTTLS / botnet

2012-12-07 Thread Robert Schetterer
Hi , since days i have a lot of lost connection after STARTTLS log entires, ips looks like a botnet i.e ---snip Dec 7 19:36:22 mail01 postfix/smtpd[32324]: lost connection after STARTTLS from ip-77-221-82-102.kava.lt[77.221.82.102] Dec 7 19:36:32 mail01 postfix/smtpd[2243]: lost connection afte

Re: Redirecting queued messages

2012-12-07 Thread Luigi Rosa
Viktor Dukhovni said the following on 07/12/2012 16:46: Postfix does NOT cache transport lookups in the queue file, each time a message is retried new transport lookups are performed for each recipient. Perhaps your active queue contained a backlog of messages awaiting their next attempt to rea

Re: SASL auth and (local) relaying through telnet

2012-12-07 Thread Titanus Eramius
On Thu, 6 Dec 2012 20:32:17 -0600 /dev/rob0 wrote: > On Fri, Dec 07, 2012 at 01:23:21AM +0100, Titanus Eramius wrote: > > My highest concern is to setup an open relay by accident, so > > in the process I've used an online anti-spam tester several > > times: http://www.antispam-ufrj.pads.ufrj.br/t

Re: How to stop smtp servers to send us emails

2012-12-07 Thread Pierre-Gilles RAYNAUD
Hi Wietse, 2012/12/7 Wietse Venema > Pierre-Gilles RAYNAUD: > > Hi Wietse, > > > > On 06/12/12 12:52, Wietse Venema wrote: > > > Pierre-Gilles RAYNAUD: > > >> /etc/postfix$ grep iglobe.be * > > >> client-blacklist:.iglobe.be REJECT 555 Spam not tolerated > > > Why do you have a '.' before the

Re: Redirecting queued messages

2012-12-07 Thread Viktor Dukhovni
On Fri, Dec 07, 2012 at 08:12:34AM +0100, Luigi Rosa wrote: > Hi, > I have a border SMTP server that has some local mailbox and relays other > recipients to an internal Exchange server > > Relay to Exchange is done via transport file with something like this: > > exchange.acme.com relay:[10.

Re: How to stop smtp servers to send us emails

2012-12-07 Thread Wietse Venema
Pierre-Gilles RAYNAUD: > Hi Wietse, > > On 06/12/12 12:52, Wietse Venema wrote: > > Pierre-Gilles RAYNAUD: > >> /etc/postfix$ grep iglobe.be * > >> client-blacklist:.iglobe.be REJECT 555 Spam not tolerated > > Why do you have a '.' before the domain? > > Where is this documented? > > > > Wiet

Re: Bounces back to myself

2012-12-07 Thread Noel Jones
On 12/7/2012 5:26 AM, Muzaffer Tolga Özses wrote: > NOQUEUE: reject: RCPT from mail-ea0-f172.google.com[209.85.215.172]: > 550 5.1.1 : Recipient address rejected: > User unknown in virtual mailbox table; from= > to= proto=ESMTP > helo= <--- This piece of log is from when > I try to mail r...@bilgis

Re: Bounces back to myself

2012-12-07 Thread Reindl Harald
Am 07.12.2012 12:26, schrieb Muzaffer Tolga Özses: > > On 12/07/2012 12:39 PM, Reindl Harald wrote: >> BEFORE any mailserver will be connected to the internet it >> is a basic task to make 100% sure not accept messages which >> can not be finally delivered - either you will get blacklisted >> be

Re: Bounces back to myself

2012-12-07 Thread Muzaffer Tolga Özses
On 12/07/2012 12:39 PM, Reindl Harald wrote: Am 07.12.2012 09:37, schrieb Muzaffer Tolga Özses: do not accept mail unless you deliver it. now, if you have queued mail to remove, you can use # postsuper -d $queueid The domain exists, but not the user. How do I achieve your suggestion? in my

Re: Bounces back to myself

2012-12-07 Thread Reindl Harald
Am 07.12.2012 09:37, schrieb Muzaffer Tolga Özses: >> do not accept mail unless you deliver it. >> >> now, if you have queued mail to remove, you can use >> # postsuper -d $queueid >> > The domain exists, but not the user. How do I achieve your suggestion? in my setup "local_recipient_maps" mus

Re: problem receiving from mx.191.biz

2012-12-07 Thread Giuseppe De Nicolo'
On 12/06/2012 03:03 PM, Jim Wright wrote: On Dec 6, 2012, at 6:08 AM, Giuseppe De Nicolo' wrote: the mx responsible for this domain is mx.191.biz ( Telecom Italia - God save us all ) I checked my server logs for any evidence of this grep mx.191.biz /var/log/maillog* and this is the output :

Re: Redirecting queued messages

2012-12-07 Thread Birta Levente
On 07/12/2012 09:12, Luigi Rosa wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I have a border SMTP server that has some local mailbox and relays other recipients to an internal Exchange server Relay to Exchange is done via transport file with something like this: exchange.acme.com

Re: Bounces back to myself

2012-12-07 Thread Muzaffer Tolga Özses
On 12/06/2012 11:38 PM, mouss wrote: Le 06/12/2012 14:58, Muzaffer Tolga Özses a écrit : On 12/05/2012 03:57 PM, Benny Pedersen wrote: Muzaffer Tolga Özses skrev den 04-12-2012 09:10: mydestination = localhost try using it as default, comment it in main.cf if it still loops then recipient