Exim, DH, GnuTLS & interop fix with older mail clients

2013-09-06 Thread Robert Schetterer
Hi, after configure Viktor Dukhovnis workaround like http://marc.info/?l=postfix-users&m=137824308215202&w=2 ... openssl dhparam -out dh2048.pem 2048 # postconf -e 'smtpd_tls_dh1024_param_file = ${config_directory}/dh2048.pem' ... i had some report from one customer with netscape 7 ( very

Re: Port settings

2013-09-06 Thread Noel Jones
On 9/6/2013 11:06 PM, Vishal Agarwal wrote: > Hi, > Kindly advise how I can set my SMTP port to 465 TLS instead of 25 ? Is this what you're looking for? http://www.postfix.org/TLS_README.html#client_smtps If not, please be more specific of your needs. -- Noel Jones

Port settings

2013-09-06 Thread Vishal Agarwal
Hi, Kindly advise how I can set my SMTP port to 465 TLS instead of 25 ? Regards, Vishal Agarwal

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread FliedRice
Just a thought, In order to block more incoming spam you could add more rbl's to your main.cf file. I have spamassassin, but it's turned off in favor of the following smtpd restrictions and domain blocking in the plesk user interface, or filtering in the Cpanel interface. I have 2 servers which bot

Re: Server side filters with non-shell users

2013-09-06 Thread Wietse Venema
LuKreme: > Over the last decade all the mail users (well, all but me) are no > longer willing to use ssh to login to a terminal session and do > things like edit a .procmailrc, but many of them still want server > side filtering. > > I have +addressing setup, so that helps some, though it is still

Server side filters with non-shell users

2013-09-06 Thread LuKreme
Over the last decade all the mail users (well, all but me) are no longer willing to use ssh to login to a terminal session and do things like edit a .procmailrc, but many of them still want server side filtering. I have +addressing setup, so that helps some, though it is still beyond the abilit

configuring postfix to restrict ...

2013-09-06 Thread raespi
Hi, I'm using postfix 2.9.6 on opensuse12.3. I managed to migrate from an older version of Postfix ( Debian 5.0 ) the last couple of days. One thing that I haven't been able to do is restrict outgoing mail to an entire subdomain only, say for delivering mail only inside the country. I'm usin

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Stan Hoeppner
On 9/6/2013 9:05 AM, Wietse Venema wrote: > Wijatmoko U. Prayitno: >> On Fri, 06 Sep 2013 16:43:27 +0300 >> wiseadmin wrote: >> >>> and the same message from postfix logs: >>> >>> /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: >>> uid=1018 from= >> The email came from

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
All emails are reveived through smtp and then they are passed to spamd, inspected and delivered. If I say something stupid, please excuse me, I am experienced with linux and networking in general bun not to postfix and email servers. I sent an email to myself and

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wijatmoko U. Prayitno
On Fri, 6 Sep 2013 10:05:49 -0400 (EDT) wie...@porcupine.org (Wietse Venema) wrote: >>> /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: >>> uid=1018 from= >> The email came from local user uid 1018 (service pickup). > > Good observation. This message did not come via

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
I installed SA last week and I started to reveive these spams 1-2 months ago. # netstat -tupan | grep spam tcp0 0 127.0.0.1:783 0.0.0.0:* LISTEN 27752/spamd.pid What tests should I do next? This is a production server, I'am starting to become afraid. What was t

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Tonu Samuel
On Fri, 2013-09-06 at 21:10 +0700, Wijatmoko U. Prayitno wrote: > On Fri, 6 Sep 2013 10:05:49 -0400 (EDT) > wie...@porcupine.org (Wietse Venema) wrote: > > >>> /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: > >>> A3E8C10BADF: uid=1018 from= > >> The email came from local user uid

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wietse Venema
Wijatmoko U. Prayitno: > On Fri, 06 Sep 2013 16:43:27 +0300 > wiseadmin wrote: > > > and the same message from postfix logs: > > > > /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: > > uid=1018 from= > The email came from local user uid 1018 (service pickup). Good o

Re: Permissions on /etc/postfix files

2013-09-06 Thread Patrick Ben Koetter
* LuKreme : > On 05 Sep 2013, at 23:51 , Patrick Ben Koetter wrote: > > main.cf, master.cf, dynamicmaps.cf > >root:postfix 644 > >Must be world readable for sendmail users > > do you mean actual real sendmail (we don't have that) or postfix's sendmail > compatible interface? I m

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
Ok, this is a solution. I tried to avoid this because it consumes some resources. I have problems ONLY with this specific spam. I try to find out if there is something like this: - reject all emails that come from a different server to my server and have the From: header a local address (on my

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
And what does it mean? uid 1018 is the user under witch spamd runs. #grep 1018 /etc/passwd spamd:x:1018:1019::/home/spamd:/bin/bash I don't know how to interpret the fact that is comes from pickup service. Is my server compromised? Thanks. On 09/06/2013 04:51 PM, Wijatmoko U. Prayitno wrote

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wijatmoko U. Prayitno
On Fri, 06 Sep 2013 16:43:27 +0300 wiseadmin wrote: > and the same message from postfix logs: > > /var/log/mail.log.1:Sep 5 17:10:06 cma postfix/pickup[17510]: A3E8C10BADF: > uid=1018 from= The email came from local user uid 1018 (service pickup). -- WUP

Re: spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread Wietse Venema
wiseadmin: > I have a postfix server for > many years. The anti-spam filters were ok, I got in general just a > couple of spams per day. > > Since a month or so, I start getting > more than 100 spams for every user on a specific account/domain > per >

spam - headers: from ME to ME, but different anvelope sender

2013-09-06 Thread wiseadmin
Hello, I have a postfix server for many years. The anti-spam filters were ok, I got in general just a couple of spams per day. Since a month or so, I start getting more than 100 spams for every user on a specific account/domain per da

Re: Permissions on /etc/postfix files

2013-09-06 Thread LuKreme
On 05 Sep 2013, at 23:51 , Patrick Ben Koetter wrote: > main.cf, master.cf, dynamicmaps.cf >root:postfix 644 >Must be world readable for sendmail users do you mean actual real sendmail (we don't have that) or postfix's sendmail compatible interface? > I use a Makefile to maintai

Re: Permissions on /etc/postfix files

2013-09-06 Thread DTNX Postmaster
On Sep 6, 2013, at 04:39, LuKreme wrote: > All the files in /etc/postfix are 1) owned by root and 2) marked with 644 > permissions. > > I'm not sure this is a good idea (though there are no other users who login > to the shell, there are other users who at least in theory could). > > I did ch