Re: CONNECT from localhost[::1]: 454 4.7.1 : Client host rejected: Access denied

2013-10-30 Thread Benny Pedersen
Andy Howell skrev den 2013-10-30 22:42: I'm using openSuSE 13.1 system, http://www.opensuse.org/ its still first released in now 19 days, so how did you get it ? :)

Re: CONNECT from localhost[::1]: 454 4.7.1 : Client host rejected: Access denied

2013-10-30 Thread Wietse Venema
Andy Howell: > I should probably just disable ipv6 on the interfaces, as its not needed. > > In main.cf, I have inet_interfaces = all. The only place I see a ipv6 address > in in > mydestination. I added that while troubleshooting. > > mydestination = $myhostname, localhost.$mydomain, localhost,

Re: CONNECT from localhost[::1]: 454 4.7.1 : Client host rejected: Access denied

2013-10-30 Thread li...@rhsoft.net
Am 30.10.2013 22:42, schrieb Andy Howell: > I'm using openSuSE 13.1 system, running as a virtual machine. I'm not married > to that > disto. I started with CentOS 6.4, but the postfix there is 3+ years old. I > wanted an RPM > based disto with more recent versions. SuSE 13.1 seemed reasonable. I

Re: CONNECT from localhost[::1]: 454 4.7.1 : Client host rejected: Access denied

2013-10-30 Thread Andy Howell
On 10/30/2013 02:42 PM, Wietse Venema wrote: > Andy Howell: >> I was using telnet on the host to test it out, ie >> >> telnet localhost 10025 >> >> That is resolving localhost to ::1. Doing: >> >> telnet 127.0.0.1 10025 >> >> works fine. > > Not to criticize you in particular, but why was IPv6 ena

Re: 'PASS NEW' too slow?

2013-10-30 Thread /dev/rob0
On Wed, Oct 30, 2013 at 04:48:44PM -0400, Wietse Venema wrote: > How would postscreen know that the client makes no mistakes > over the duration of the entire SMTP session? Oh, of course. I guess a zombie still might proceed with DATA, or any other number of errors. Seems to be a bug with the cli

Re: problems with forwarding mail / throttling mail from mynetworks

2013-10-30 Thread Wietse Venema
Erik Gr?tnes: > If I understand correct, I need to let all servers that should be > able to send mail out be part of mynetworks. Is that correct? The > problem is that when the servers are part of mynetworks, all the > throttling and antispam check stops - it is just trusted... > > I would like to

Re: problems with forwarding mail / throttling mail from mynetworks

2013-10-30 Thread Erik Grøtnes
Hi. I work together with Rune, and will try to describe what we want to achieve: We want the throttling and spamhaus lookup to be forced for all email except a few servers. Our environment consists of several mailservers. We have a postfix server that is used for relaying email and doing an initi

Re: 'PASS NEW' too slow?

2013-10-30 Thread Wietse Venema
/dev/rob0: > A non-whitelisted client which hit both primary MX (.211) and > secondary (.214) in proper sequence is getting deferred by > postscreen, both times. > > Oct 30 20:30:16 harrier postfix/postscreen[551]: CONNECT from > [216.150.190.51]:35507 to [207.223.116.211]:25 > Oct 30 20:30:22

'PASS NEW' too slow?

2013-10-30 Thread /dev/rob0
A non-whitelisted client which hit both primary MX (.211) and secondary (.214) in proper sequence is getting deferred by postscreen, both times. Oct 30 20:30:16 harrier postfix/postscreen[551]: CONNECT from [216.150.190.51]:35507 to [207.223.116.211]:25 Oct 30 20:30:22 harrier postfix/tlsproxy[

Re: CONNECT from localhost[::1]: 454 4.7.1 : Client host rejected: Access denied

2013-10-30 Thread Wietse Venema
Andy Howell: > I was using telnet on the host to test it out, ie > > telnet localhost 10025 > > That is resolving localhost to ::1. Doing: > > telnet 127.0.0.1 10025 > > works fine. Not to criticize you in particular, but why was IPv6 enabled in main.cf? Is this a mis-feature of your Linux dis

Re: CONNECT from localhost[::1]: 454 4.7.1 : Client host rejected: Access denied

2013-10-30 Thread Andy Howell
On 10/29/2013 11:29 PM, /dev/rob0 wrote: > On Tue, Oct 29, 2013 at 10:21:06PM -0500, Andy Howell wrote: >> I'm trying to setup amavis. I can't connect from postfix on port >> 10025, configured as: >> >> localhost:10025 inet n-n--smtpd -vv > > Make that 127.0.0.1:10025, and d

Re: Header rewrite

2013-10-30 Thread Wietse Venema
David Schraeder: > Hi, > > I was wanting to know if anybody has done any header rewrite for a > content type. I am looking to work around and exchange bug where people > on exchange are sending calendar invites and they are set as > multipart/alternative. They do not show up in our clients(thund

any book for all in one "postfix, roundcube ldap dovecot mysql"

2013-10-30 Thread Muhammad Yousuf Khan
is there any book which contains all the postfix features and third party components like roundcube, ldap,dovecot mysql, spamfilter etc" Thanks, Myk

Re: PATCH: access map for sasl authenticated users

2013-10-30 Thread Wietse Venema
Rudy Gevaert: > On 10/29/2013 01:11 AM, Wietse Venema wrote: > > I have a patch that should also work with other Postfix releases at > > ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/feature-patches/20131028-check-sasl-access-patch > > I saw there was a newer one > ftp://ftp.porcu

Re: PATCH: access map for sasl authenticated users

2013-10-30 Thread Rudy Gevaert
On 10/29/2013 01:11 AM, Wietse Venema wrote: . I have a patch that should also work with other Postfix releases at ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/feature-patches/20131028-check-sasl-access-patch I saw there was a newer one ftp://ftp.porcupine.org/mirrors/postfix

Header rewrite

2013-10-30 Thread David Schraeder
Hi, I was wanting to know if anybody has done any header rewrite for a content type. I am looking to work around and exchange bug where people on exchange are sending calendar invites and they are set as multipart/alternative. They do not show up in our clients(thunderbird, roundcube, outlook ex

Re: Network Delay

2013-10-30 Thread Wietse Venema
Roman Gelfand: > Looking at the tcp stream, below, of a smtp conversation, it appears > there is 5 second delay before the actual smtp conversation begins. > Is this normal behavior. If not, any ideas what/where specifically, > in networking, I should be troubleshooting? No change was done to the

Re: problems with forwarding mail / throttling mail from mynetworks

2013-10-30 Thread Noel Jones
On 10/30/2013 3:11 AM, Rune Elvemo wrote: > Hi. > > We are implementing postfix as “front mail servers”. Their job will > be to relay email to our inside servers, and be the “smart host” for > all internal servers. > > I thought that as long a domain was registered as a relay-domain, > postfix wo

Network Delay

2013-10-30 Thread Roman Gelfand
Looking at the tcp stream, below, of a smtp conversation, it appears there is 5 second delay before the actual smtp conversation begins. Is this normal behavior. If not, any ideas what/where specifically, in networking, I should be troubleshooting? No change was done to the server or any other ma

Re: CONNECT from localhost[::1]: 454 4.7.1 : Client host rejected: Access denied

2013-10-30 Thread Benny Pedersen
Andy Howell skrev den 2013-10-30 04:21: -o mynetworks=127.0.0.0/8 Any idea why localhost is not matching? smtp is trying connect from ipv6, but your networks is just ipv4 restricted multiple ways of solving :)

Re: How to specify configuration file for pickup

2013-10-30 Thread Wietse Venema
Christophe Denuzi?re - Sutunam: > Hi, > > I would like to have all mail sent via pickup (php, command line, ...) to > be send throught another postfix instance. > This instance act as a relay to the first instance. The idea is to apply > policies on these mails. > > I've setuped multipostfix inst

Re: Disallow starttls from certain IPs

2013-10-30 Thread Dominik George
Hi, On Wed, Oct 30, 2013 at 10:16:41AM +, Ed W wrote: > Hi, I would like to experiment with disallowing smtp connections > from setting up tls from certain IP addresses, whilst allowing all > other connections to do as they please. Any thoughts on how I could > configure this please? http://w

Disallow starttls from certain IPs

2013-10-30 Thread Ed W
Hi, I would like to experiment with disallowing smtp connections from setting up tls from certain IP addresses, whilst allowing all other connections to do as they please. Any thoughts on how I could configure this please? Someone will likely ask why, so for completeness: Sure, right now ever

How to specify configuration file for pickup

2013-10-30 Thread Christophe Denuzière - Sutunam
Hi, I would like to have all mail sent via pickup (php, command line, ...) to be send throught another postfix instance. This instance act as a relay to the first instance. The idea is to apply policies on these mails. I've setuped multipostfix instance and both work like a charm. Now I try witho

problems with forwarding mail / throttling mail from mynetworks

2013-10-30 Thread Rune Elvemo
Hi. We are implementing postfix as “front mail servers”. Their job will be to relay email to our inside servers, and be the “smart host” for all internal servers. I thought that as long a domain was registered as a relay-domain, postfix would send emails both ways for this domain. But I disc