Re: Modify subject based on recipient

2013-06-28 Thread Noel Jones
On 6/28/2013 5:39 PM, Daniel L. Miller wrote: > Does anyone know of a tool that will let me modify the subject line > of all emails that pass through it? I would call it via a transport > map. > > My application - we just switched to a new email-to-fax service. As > part of their security implem

Re: postfix rejecting valid mail server

2013-06-28 Thread Wietse Venema
T?ssio Fechine: > var/log/mail.log:Jun 28 18:25:43 rt-dq postfix/smtpd[4931]: NOQUEUE: > reject: RCPT from unknown[209.85.219.66]: 450 4.7.1 Client host rejected: > cannot find your hostname, [209.85.219.66]; from= > to= proto=ESMTP helo= Wietse: > > If you don't like that don't use reject_unknown

Modify subject based on recipient

2013-06-28 Thread Daniel L. Miller
Does anyone know of a tool that will let me modify the subject line of all emails that pass through it? I would call it via a transport map. My application - we just switched to a new email-to-fax service. As part of their security implementation (THEIRS, not mine!) they require all emails s

Re: PATCH: Option to log clients that execute invalid commands or disconnect with no email delivery

2013-06-28 Thread John Fawcett
On 28/06/13 23:33, John Fawcett wrote: > On 28/06/13 22:30, Wietse Venema wrote: >> Wietse Venema: >>> John Fawcett: I use fail2ban in order to block some types of apparently malicious connections to postfix when the clients keep retrying. For example the >>> As you agree logging every fa

Re: postfix rejecting valid mail server

2013-06-28 Thread Téssio Fechine
I use reject_unknown_client_hostname at many email servers. Only this one is having a problem. Why DNS is bad if nslookup works fine? 2013/6/28 Wietse Venema > T?ssio Fechine: > > var/log/mail.log:Jun 28 18:25:43 rt-dq postfix/smtpd[4931]: NOQUEUE: > > reject: RCPT from unknown[209.85.219.66]:

Re: postfix rejecting valid mail server

2013-06-28 Thread Wietse Venema
T?ssio Fechine: > var/log/mail.log:Jun 28 18:25:43 rt-dq postfix/smtpd[4931]: NOQUEUE: > reject: RCPT from unknown[209.85.219.66]: 450 4.7.1 Client host rejected: > cannot find your hostname, [209.85.219.66]; from= to=< > nti-ad...@quimica.ufpb.br> proto=ESMTP helo= If you don't like that don't us

postfix rejecting valid mail server

2013-06-28 Thread Téssio Fechine
var/log/mail.log:Jun 28 18:25:43 rt-dq postfix/smtpd[4931]: NOQUEUE: reject: RCPT from unknown[209.85.219.66]: 450 4.7.1 Client host rejected: cannot find your hostname, [209.85.219.66]; from= to=< nti-ad...@quimica.ufpb.br> proto=ESMTP helo= Then, at this exactly mail server machine: # nslooku

Re: PATCH: Option to log clients that execute invalid commands or disconnect with no email delivery

2013-06-28 Thread John Fawcett
On 28/06/13 22:30, Wietse Venema wrote: > Wietse Venema: >> John Fawcett: >>> I use fail2ban in order to block some types of apparently malicious >>> connections to postfix when the clients keep retrying. For example the >> As you agree logging every failed command would not be safe by >> default.

PATCH: Option to log clients that execute invalid commands or disconnect with no email delivery

2013-06-28 Thread Wietse Venema
Wietse Venema: > John Fawcett: > > I use fail2ban in order to block some types of apparently malicious > > connections to postfix when the clients keep retrying. For example the > > As you agree logging every failed command would not be safe by > default. > > On the other hand, logging the comman

Re: Option to log clients that execute invalid commands or disconnect with no email delivery

2013-06-28 Thread Wietse Venema
John Fawcett: > I use fail2ban in order to block some types of apparently malicious > connections to postfix when the clients keep retrying. For example the As you agree logging every failed command would not be safe by default. On the other hand, logging the command name (even without) parameter

Re: header_checks: distinguishing between incoming and outgoing mail?

2013-06-28 Thread Wietse Venema
Julio Talaverano: > Many thanks Wietse, > >does that also mean, it's not possible to distinguish? header_checks matches header lines. No more, no less. It is not a spam filter, therefore it does not need to be aware of direction, sender, recipient and so on. Wietse

Option to log clients that execute invalid commands or disconnect with no email delivery

2013-06-28 Thread John Fawcett
I use fail2ban in order to block some types of apparently malicious connections to postfix when the clients keep retrying. For example the following fail2ban regexes match cases I currently block by parsing the maillog. reject: RCPT from (.*)\[\]: 554 lost connection after AUTH from (.*)\[

Re: STARTTLS only to send ?

2013-06-28 Thread LuKreme
On 28 Jun 2013, at 11:03 , Jeroen Geilman wrote: > Nor is it a good idea to use a random website for instructions. Many of them > are wrong You know, that should be front and center in the readme files and the "welcome to the list" message. -- 'But you ain't part of it, are you?' said Granny

Re: STARTTLS only to send ?

2013-06-28 Thread Jeroen Geilman
On 06/28/2013 01:33 PM, Roel Wagenaar wrote: Frank Bonnet wrote: Hello is it possible to setup one instance of postfix to 1 - use submission to let users send ( with STARTTLS ) 2 - receive emails with normal SMTP thank you A quick

Re: header_checks: distinguishing between incoming and outgoing mail?

2013-06-28 Thread Julio Talaverano
Many thanks Wietse, does that also mean, it's not possible to distinguish? Julio --- On Fri, 6/28/13, Wietse Venema wrote: > From: Wietse Venema > Subject: Re: header_checks: distinguishing between incoming and outgoing mail? > To: "Postfix users" > Date: Friday, June 28, 2013, 11:50 AM > Ju

Re: amavisd+postfix lmtp

2013-06-28 Thread Dejan Doder
/dev/rob0 thank you you are right! I did not type space before -o On Fri, Jun 28, 2013 at 3:40 PM, Dejan Doder wrote: > "_timeout"? it my fault in typing > I edited this in vi editor.. > > > > On Fri, Jun 28, 2013 at 3:31 PM, /dev/rob0 wrote: > >> On Fri, Jun 28, 2013 at 03:22:58PM +0200, Mic

Re: amavisd+postfix lmtp

2013-06-28 Thread Dejan Doder
"_timeout"? it my fault in typing I edited this in vi editor.. On Fri, Jun 28, 2013 at 3:31 PM, /dev/rob0 wrote: > On Fri, Jun 28, 2013 at 03:22:58PM +0200, Michael P. Demelbauer wrote: > > On Fri, Jun 28, 2013 at 03:04:29PM +0200, Dejan Doder wrote: > > > i have this message in tail -f /var/l

Re: amavisd+postfix lmtp

2013-06-28 Thread /dev/rob0
On Fri, Jun 28, 2013 at 03:22:58PM +0200, Michael P. Demelbauer wrote: > On Fri, Jun 28, 2013 at 03:04:29PM +0200, Dejan Doder wrote: > > i have this message in tail -f /var/log/maillog > > > > bad transport type : lmtp_data_done_tiemeout=1200 Correct spelling DOES count here, "_timeout"? > > I

Re: amavisd+postfix lmtp

2013-06-28 Thread Dejan Doder
No it is not that i tryed , something with lmtp is On Fri, Jun 28, 2013 at 3:22 PM, Michael P. Demelbauer < michael.demelba...@wsr.ac.at> wrote: > On Fri, Jun 28, 2013 at 03:04:29PM +0200, Dejan Doder wrote: > > Hi group > > i have this message in tail -f /var/log/maillog > > > > bad transpo

Re: amavisd+postfix lmtp

2013-06-28 Thread Michael P. Demelbauer
On Fri, Jun 28, 2013 at 03:04:29PM +0200, Dejan Doder wrote: > Hi group > i have this message in tail -f /var/log/maillog > > bad transport type : lmtp_data_done_tiemeout=1200 > > I dont know where is problem > > /etc/postfix.master.cf > > # =

amavisd+postfix lmtp

2013-06-28 Thread Dejan Doder
Hi group i have this message in tail -f /var/log/maillog bad transport type : lmtp_data_done_tiemeout=1200 I dont know where is problem /etc/postfix.master.cf # == # service type private unpriv chroot wakeup maxproc com

Re: header_checks: distinguishing between incoming and outgoing mail?

2013-06-28 Thread Wietse Venema
Julio Talaverano: > So I attached a new regexp line in the existing header_cheks file in warning > mode. > But the result is that everything (in- and outbound mails)containing my > domain in the From:-Header would be rejected. > How can I apply this check to only incoming mails? First, you would

Re: STARTTLS only to send ?

2013-06-28 Thread Frank Bonnet
On 06/28/2013 01:33 PM, Roel Wagenaar wrote: Frank Bonnet wrote: Hello is it possible to setup one instance of postfix to 1 - use submission to let users send ( with STARTTLS ) 2 - receive emails with normal SMTP thank you A quick

Re: STARTTLS only to send ?

2013-06-28 Thread Roel Wagenaar
Frank Bonnet wrote: > Hello > > is it possible to setup one instance of postfix to > > 1 - use submission to let users send ( with STARTTLS ) > 2 - receive emails with normal SMTP > > thank you > > > A quick searche for "Postfix multiple instabce

header_checks: distinguishing between incoming and outgoing mail?

2013-06-28 Thread Julio Talaverano
Hi, I'm already using header_checks (regexp) to reject outgoing mails containing a specific string in the subject. (OK, usually incoming mails don't include this string in the subject). Now I wanted to reject incoming emails with forged From:-Header containing my own domain. So I attached a new

Re: STARTTLS only to send ?

2013-06-28 Thread Felix Rubio Dalmau
You have to setup two different services, on the port 25 without AUTH nor TLS and on submission port (587) with both AUTH and TLS. On Friday 28 June 2013 14:43:16 li...@kurawa.fidonet.or.id wrote: > On Fri, 28 Jun 2013 09:40:05 +0200 > > Frank Bonnet wrote: > > is it possible to setup one inst

Re: STARTTLS only to send ?

2013-06-28 Thread lists
On Fri, 28 Jun 2013 09:40:05 +0200 Frank Bonnet wrote: > is it possible to setup one instance of postfix to > > 1 - use submission to let users send ( with STARTTLS ) > 2 - receive emails with normal SMTP > Yes, that possible. I'm using it on production server.

STARTTLS only to send ?

2013-06-28 Thread Frank Bonnet
Hello is it possible to setup one instance of postfix to 1 - use submission to let users send ( with STARTTLS ) 2 - receive emails with normal SMTP thank you