Re: Strip receipt request

2015-06-01 Thread Noel Jones
On 6/1/2015 8:38 PM, Daniel Miller wrote: > I don't think that's the case - the users in question submit using > Thunderbird. > > -- > Daniel > Yes, that's how Tbird requests a read receipt. You would use something like: /etc/postfix/main.cf: smtpd_command_filter = pcre:/etc/postfix/comman

Re: Strip receipt request

2015-06-01 Thread Daniel Miller
I don't think that's the case - the users in question submit using Thunderbird. -- Daniel June 1 2015 5:46 PM, wie...@porcupine.org wrote: > Daniel Miller: > >> Is there a way of removing return-receipt requests from internal >> senders for a particular external recipient? ?Or does this require

Re: Anyone else seeing an increase in spam? -- Sort of off topic but there is a postfix question

2015-06-01 Thread Steve Jenkins
On Mon, Jun 1, 2015 at 12:58 PM, Elijah Savage wrote: > Again thanks for all the great recommendations, I now have a few ways of > trying to combat this if my plan doesn't work. > > I have a utilized my spam filtering agent combined with a no rDNS rule and > increased the score of that rule. > >

Re: Strip receipt request

2015-06-01 Thread Wietse Venema
Daniel Miller: > Is there a way of removing return-receipt requests from internal > senders for a particular external recipient? ?Or does this require > a separate tool/script to pass sent messages through? If the request is made in SMTP, like this: RCPT TO: NOTIFY=SUCCESS,... Then it is pos

Re: SSL_accept error

2015-06-01 Thread @lbutlr
On Mon Jun 01 2015 15:53:17 njo...@megan.vbhcs.org said: > > On 6/1/2015 4:19 PM, @lbutlr wrote: >> Jun 1 15:09:08 mail submit-tls/smtpd[88479]: SSL_accept error from >> unknown[50.253.97.91]: lost connection > This looks as if the client and the server don't have a common > cipher enabled. I

Strip receipt request

2015-06-01 Thread Daniel Miller
Is there a way of removing return-receipt requests from internal senders for a particular external recipient?  Or does this require a separate tool/script to pass sent messages through? -- Daniel

Re: need input on user .forward file format

2015-06-01 Thread Wietse Venema
Sharon Stahl: > Hi Wietse, > I came back to work and did a lot of testing but adding $mydomain to > the mydestination definition made no difference with the .forward file > only having > a username causing a mail loop. Error in maillog appears to indicate You had a complaint that delivery

RE: spamhaus - reasons of ban IP

2015-06-01 Thread Marius Gologan
100K is a lot, sounds like you are a local TV station which I doubt. For legit email marketing/mass mailing FBL is mandatory. Unsubscribe button must be easy to use and must work. Process and remove bounces. It appears you have none of these features. Never bother a recipient second time, after

Re: SSL_accept error

2015-06-01 Thread Noel Jones
On 6/1/2015 4:19 PM, @lbutlr wrote: > A user at a Starbucks is trying to send mail and getting an error on sending. > This is what I see in the logs: > > Jun 1 15:09:08 mail submit-tls/smtpd[88479]: warning: hostname > 50-253-97-91-static.hfc.comcastbusiness.net does not resolve to address > 5

Re: spamhaus - reasons of ban IP

2015-06-01 Thread DTNX Postmaster
On 01 Jun 2015, at 23:01, Zalezny Niezalezny wrote: > @Michael J Wise, that was question partly about Postfix. Please read more > carefully all posts... Please read this carefully; http://www.postfix.org/DEBUG_README.html Michael is right. This is not a support mechanism for Spamhaus, and you

Re: SSL_accept error

2015-06-01 Thread @lbutlr
On Mon Jun 01 2015 15:19:57 @lbutlr said: > > A user at a Starbucks is trying to send mail and getting an error on sending. > This is what I see in the logs: One other detail I left out, openssl s_client -connect localhost:587 -starttls smtp works as expected. It also works remotely if I put t

SSL_accept error

2015-06-01 Thread @lbutlr
A user at a Starbucks is trying to send mail and getting an error on sending. This is what I see in the logs: Jun 1 15:09:08 mail submit-tls/smtpd[88479]: warning: hostname 50-253-97-91-static.hfc.comcastbusiness.net does not resolve to address 50.253.97.91: hostname nor servname provided, or

Re: need input on user .forward file format

2015-06-01 Thread Sharon Stahl
Hi Wietse, I came back to work and did a lot of testing but adding $mydomain to the mydestination definition made no difference with the .forward file only having a username causing a mail loop. Error in maillog appears to indicate Are there any other suggestions? Again setup is; /etc/al

Re: spamhaus - reasons of ban IP

2015-06-01 Thread Zalezny Niezalezny
Paul, thank You very much for Your support. @Michael J Wise, that was question partly about Postfix. Please read more carefully all posts... > > Maybe Postfix will have some kind of debugging mode etc.etc. > Any how, thanks for Your support! On Mon, Jun 1, 2015 at 9:55 PM, Michael J Wise wr

Re: Monitoring for failed external commands executed through aliases

2015-06-01 Thread Wietse Venema
Andrew Beverley: > On Mon, 2015-06-01 at 15:09 -0400, Wietse Venema wrote: > > Postfix already logs the script's output (stdout and stderr) streams, > > and it already logs and reports a non-zero exit status. > > The problem is monitoring this though: it seems that when the above are > logged they

RE: Anyone else seeing an increase in spam? -- Sort of off topic but there is a postfix question

2015-06-01 Thread Elijah Savage
Again thanks for all the great recommendations, I now have a few ways of trying to combat this if my plan doesn't work. I have a utilized my spam filtering agent combined with a no rDNS rule and increased the score of that rule. If this along with DNSRBL doesn't work then I will give some of th

Re: spamhaus - reasons of ban IP

2015-06-01 Thread Michael J Wise
> Hi All, This is *NOT* the list for questions about spamfighting in general, and certainly not about Spamhaus in particular. They have a site: http://www.spamhaus.org/ > I would like to ask You what could be a reason of ban in Spamhaus. > Today morning we have got message from our client that

Re: spamhaus - reasons of ban IP

2015-06-01 Thread Paul C
If you are listed on spamhaus there will be a page about it normally on their site, they have a few blacklists and some are worse than others, so either check the response codes from postfix to see if that tells you the what was listed. Also, if you know for certain that you are listed by them, you

Re: Monitoring for failed external commands executed through aliases

2015-06-01 Thread Andrew Beverley
On Mon, 2015-06-01 at 15:09 -0400, Wietse Venema wrote: > Postfix already logs the script's output (stdout and stderr) streams, > and it already logs and reports a non-zero exit status. The problem is monitoring this though: it seems that when the above are logged they are logged at a level below

Re: Monitoring for failed external commands executed through aliases

2015-06-01 Thread Wietse Venema
Andrew Beverley: > On Mon, 2015-06-01 at 14:24 -0400, Wietse Venema wrote: > > Andrew Beverley: > > > So, is there a way to either change the return-path for all external > > > commands, or alternatively set a higher log level for any errors? > > > > If the error happens in the external command, t

spamhaus - reasons of ban IP

2015-06-01 Thread Zalezny Niezalezny
Hi All, I would like to ask You what could be a reason of ban in Spamhaus. Today morning we have got message from our client that our system is not able to send E-mails. In did, system IP has been putted to black list. I have reviewed all logs and didnt found any good reason. System with Postfix

Re: Monitoring for failed external commands executed through aliases

2015-06-01 Thread Andrew Beverley
On Mon, 2015-06-01 at 14:24 -0400, Wietse Venema wrote: > Andrew Beverley: > > So, is there a way to either change the return-path for all external > > commands, or alternatively set a higher log level for any errors? > > If the error happens in the external command, then you could configure > the

Re: Anyone else seeing an increase in spam? -- Sort of off topic but there is a postfix question

2015-06-01 Thread Noel Jones
On 6/1/2015 1:28 PM, Rich Wales wrote: > >> The reject_non_fqdn_hostname restriction will not block any of these. > > How about reject_unknown_reverse_client_hostname instead? This one is > supposed to reject clients with no IP-address-to-name mapping. > > Rich Wales > ri...@richw.org > Yes,

Re: Anyone else seeing an increase in spam? -- Sort of off topic but there is a postfix question

2015-06-01 Thread Rich Wales
> The reject_non_fqdn_hostname restriction will not block any of these. How about reject_unknown_reverse_client_hostname instead? This one is supposed to reject clients with no IP-address-to-name mapping. Rich Wales ri...@richw.org

Re: Monitoring for failed external commands executed through aliases

2015-06-01 Thread Wietse Venema
Andrew Beverley: > So, is there a way to either change the return-path for all external > commands, or alternatively set a higher log level for any errors? If the error happens in the external command, then you could configure the pipe(8) daemon to run the command under strace and capture strace o

Re: Anyone else seeing an increase in spam? -- Sort of off topic but there is a postfix question

2015-06-01 Thread Wietse Venema
Elijah Savage: > I am seeing thousands of spam messages beginning on Thursday of last week > from the same subnet. I know it is not best practice to fight spam by > outright blocking ip addresses but I am seeing this across multiple domains > in different parts of the country. The easy and immediat

RE: Anyone else seeing an increase in spam? -- Sort of off topic but there is a postfix question

2015-06-01 Thread Elijah Savage
Thank you for the reply. And apologies to everyone about the borderline post. I believe these have been recently added to DNSBL list because I am starting to see this in my log as of about an hour ago and inbound traffic have definitely returned to normal levels. Jun 1 12:46:53 vader2 postfix/s

Re: Anyone else seeing an increase in spam? -- Sort of off topic but there is a postfix question

2015-06-01 Thread Noel Jones
On 6/1/2015 11:09 AM, Elijah Savage wrote: > I am seeing thousands of spam messages beginning on Thursday of last > week from the same subnet. I know it is not best practice to fight > spam by outright blocking ip addresses but I am seeing this across > multiple domains in different parts of the co

Monitoring for failed external commands executed through aliases

2015-06-01 Thread Andrew Beverley
Dear all, I have some external scripts that are executed through a variety of aliases[1]. I just discovered recently that one of the external commands was dying prematurely, so I wondered: what is the best way for monitoring this happening? I tried setting alerts on my mail.log for messages with