Re: Tracking down www-data email sender

2015-03-11 Thread Viktor Dukhovni
On Wed, Mar 11, 2015 at 09:13:45PM -0700, Robin Rowe wrote: > Wondering how to track down some emails being sent from WordPress. Freeze them in the queue, and examine with "postcat -q ". > Looking at the mail.log of the last www-data send, it says gmail has > shut the recipient's email address o

Tracking down www-data email sender

2015-03-11 Thread Robin Rowe
Wondering how to track down some emails being sent from WordPress. I have mail.log entries that show www-data, that is, WordPress, is trying to send emails from an invalid subdomain. The machine did have this subdomain at some point, by the way. I turned on phpmail.log, but it doesn't give any

Re: postscreen vs. fail2ban

2015-03-11 Thread Noel Jones
On 3/11/2015 7:43 PM, Michael Fox wrote: > I haven’t implemented postscreen yet, but plan to. So this question > is for the postscreen experts here. > > > > As I understand it from the documentation, postscreen protects > postfix from having to deal with most attack vectors, including > higher

Re: postscreen vs. fail2ban

2015-03-11 Thread Wietse Venema
Michael Fox: > I haven't implemented postscreen yet, but plan to. So this question is for > the postscreen experts here. > > As I understand it from the documentation, postscreen protects postfix from > having to deal with most attack vectors, including higher volume attacks. > So, does it make s

postscreen vs. fail2ban

2015-03-11 Thread Michael Fox
I haven't implemented postscreen yet, but plan to. So this question is for the postscreen experts here. As I understand it from the documentation, postscreen protects postfix from having to deal with most attack vectors, including higher volume attacks. So, does it make sense to also use somet

Re: postscreen feature request

2015-03-11 Thread Wietse Venema
Kov?cs Albert: > On Tuesday, March 10, 2015 1:42 PM, Wietse Venema > wrote: > >> I'm not sure how one (type of) dns query is a performance concern,>> and > >> another is not, see below. > > > You see no performance difference between querying a small number > > of well-operated DNS servers that

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Viktor Dukhovni
On Thu, Mar 12, 2015 at 12:07:49AM +0800, Zhang Huangbin wrote: > > An SQL server may well optimize that query away when the key contains > > a "+" and not do any disk I/O. > > In this case, SQL is flexible. but any solution for LDAP table? we cannot do > this in ldap query filter. No. --

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
On Thu, Mar 12, 2015 at 12:03 AM, Viktor Dukhovni wrote: > > You may well be able to do something with advanced SQL string > manipulation to short-circuit queries that contain "+". > > SELECT result > FROM table > WHERE key = '%u@%d' > AND key NOT LIKE '%%+%%' > > A

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
On Wed, Mar 11, 2015 at 11:46 PM, Viktor Dukhovni wrote: > > Not at present. You can only suppress lookups for bare keys which > can happen when the domain is $myorigin or matches $mydestination > by interpolating the lookup key into the query via '%u@%d' instead > of '%s'. That will filter out

Re: SMTP AUTH issue

2015-03-11 Thread Viktor Dukhovni
On Wed, Mar 11, 2015 at 01:41:00PM +0100, Emmanuel Fust? wrote: > Hello, > > On a heavy i/o loaded Postfix (2.11.0) server, i've got this behavior: > > 535 5.7.8 Error: authentication failed: Connection lost to authentication > server > Mar 10 16:37:08 x postfix/smtpd[20613]: warning:

About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
Dear all, According to Postfix document, virtual(8), 'user+extens...@domain.ltd' is looked up first, then 'u...@domain.ltd'. Is it possible to skip/ignore the address extension and just query 'u...@domain.ltd'? (by the way, i want to ignore the extension in SQL/LDAP lookup.) Thanks for your time

SMTP AUTH issue

2015-03-11 Thread Emmanuel Fusté
Hello, On a heavy i/o loaded Postfix (2.11.0) server, i've got this behavior: === Connected to x.x.x.x. <- 220 xx.xx.xx ESMTP Postfix -> EHLO localhost <- 250-xx.xx.xx <- 250-PIPELINING <- 250-SIZE 1024 <- 250-VRFY <- 250-ETRN <- 250-STARTTLS <- 250-AUTH CRAM-MD5 DIGEST-MD5 <- 250

Email gateway configuration

2015-03-11 Thread John Bees
Hi, everyone! I need to build an email gateway that will forward emails to users in our internal Exchange. But some need to be forwarded to our old Linux-based external server instead. Reading the Postfix documentation and examples I was able to find on the web, I was still left a bit confused and

email from banks

2015-03-11 Thread Jim Reid
On 11 Mar 2015, at 11:07, John wrote: > Your bank sends you an email that actually CONTAINS information about your > account This discussion is not relevant to postfix. Could you please take it elsewhere? Thanks.

Re: Discussion about SPF signatures / Email security.

2015-03-11 Thread John
Subject: Citizens Bank - Account Balance Threshold Notification You requested to be notified when your balance for Account xx is above $.00. Logon to Online Banking at http://www.citizensbank.com to view your balance information, transfer funds or pay bills. Your bank sends you