Re: Block certain remote hosts on submission port

2013-08-24 Thread Noel Jones
On 8/24/2013 3:52 PM, Stan Hoeppner wrote: > On 8/24/2013 1:18 PM, LuKreme wrote: >> >> On 22 Aug 2013, at 21:28 , Stan Hoeppner wrote: >> >>> ~$ wget http://ipdeny.com/ipblocks/data/countries/us.zone >>> ~$ sed 's/$/ OK/g' us.zone > us.cidr >>> ~$ cp us.cidr /etc/postfix >>> ~$ postfix reload >

Re: Postfix queues mails rejected with 5xx errors

2013-08-24 Thread Wietse Venema
Sz?ts ?kos: > Dear list members, > > I have the following problem: > > A 3rd party e-mail provider refuses the HELO/EHLO command if it doesn't > contain a valid FQDN address (which is acceptable from their point of view). > > They refuse it with a 501 (permanent) error And then they hang up, i

Re: Block certain remote hosts on submission port

2013-08-24 Thread Stan Hoeppner
On 8/24/2013 1:18 PM, LuKreme wrote: > > On 22 Aug 2013, at 21:28 , Stan Hoeppner wrote: > >> ~$ wget http://ipdeny.com/ipblocks/data/countries/us.zone >> ~$ sed 's/$/ OK/g' us.zone > us.cidr >> ~$ cp us.cidr /etc/postfix >> ~$ postfix reload >> >> and you're off to the races. > > Interesting

Re: Postfix queues mails rejected with 5xx errors

2013-08-24 Thread Jeroen Geilman
On 08/24/2013 08:16 PM, Szőts Ákos wrote: Dear list members, I have the following problem: A 3rd party e-mail provider refuses the HELO/EHLO command if it doesn't contain a valid FQDN address (which is acceptable from their point of view). They refuse it with a 501 (permanent) error, which mea

Re: Block certain remote hosts on submission port

2013-08-24 Thread LuKreme
On 22 Aug 2013, at 21:28 , Stan Hoeppner wrote: > ~$ wget http://ipdeny.com/ipblocks/data/countries/us.zone > ~$ sed 's/$/ OK/g' us.zone > us.cidr > ~$ cp us.cidr /etc/postfix > ~$ postfix reload > > and you're off to the races. Interesting idea. I'm in much the same boat. Although I do have

Postfix queues mails rejected with 5xx errors

2013-08-24 Thread Szőts Ákos
Dear list members, I have the following problem: A 3rd party e-mail provider refuses the HELO/EHLO command if it doesn't contain a valid FQDN address (which is acceptable from their point of view). They refuse it with a 501 (permanent) error, which means according to [1]: "[...] In this case, t

Re: Postfix group lookup against Samba4 AD

2013-08-24 Thread Viktor Dukhovni
On Sat, Aug 24, 2013 at 12:13:46PM +0100, Rowland Penny wrote: > >The search was looking up a group with a particular address. It > >is a mistake to impute any other meaning to the domain part of the > >group email address. > > Why is it a mistake? Your mistake is to use objects with multiple e

Re: Regarding Delivery Restriction from Internal to External

2013-08-24 Thread Noel Jones
On 8/24/2013 3:34 AM, Joy wrote: > Hi Experts, > > I am using Postfix with LDAP backend and willing to implement per > user delivery restriction while sending mail to outside domain. Like:- > > User1 can send mail to all domain. > User2 can send mail only to a...@example.com

Re: FW: Authentication issues

2013-08-24 Thread /dev/rob0
On Sat, Aug 24, 2013 at 10:01:08AM -0400, David Hulsebus wrote: Noel: > > Probably better is to only offer AUTH on submission port 587 > > with required encryption, and not offer AUTH at all on port 25. > > That is exactly what I want to do. If I uncomment this in the > master.cf does it force T

Re: FW: Authentication issues

2013-08-24 Thread Wietse Venema
David Hulsebus: > > Probably better is to only offer AUTH on submission port 587 with > > required encryption, and not offer AUTH at all on port 25. > > That is exactly what I want to do. If I uncomment this in the master.cf does > it force TLS encryption on port 587 before authentication? If not

RE: FW: Authentication issues

2013-08-24 Thread David Hulsebus
> Probably better is to only offer AUTH on submission port 587 with > required encryption, and not offer AUTH at all on port 25. That is exactly what I want to do. If I uncomment this in the master.cf does it force TLS encryption on port 587 before authentication? If not, how would I do that? su

Re: Postfix group lookup against Samba4 AD

2013-08-24 Thread Rowland Penny
On 24/08/13 03:42, Viktor Dukhovni wrote: On Fri, Aug 23, 2013 at 03:01:52PM +0100, Rowland Penny wrote: dn: CN=albert,CN=Users,DC=example,DC=com otherMailbox: alb...@example.com otherMailbox: alb...@domain1.com otherMailbox: alb...@domain2.com The only problem that I have found is, any LDAP s

Regarding Delivery Restriction from Internal to External

2013-08-24 Thread Joy
Hi Experts, I am using Postfix with LDAP backend and willing to implement per user delivery restriction while sending mail to outside domain. Like:- User1 can send mail to all domain. User2 can send mail only to a...@example.com User3 can send mail to 1...@example.com and yahoo.com Is there any