Re: Postfix + Courier or Dovecot?

2015-06-17 Thread zoli
I have some experiece both (Courier,Dovecot) with postfix. First off all: postfix works perfectly Courier and Dovecot. As I see: Courier: relatively easy to configure and maintenance, gives an average performance at mailbox access. Dovecot: more complex configuriation (compared to Courier), g

Re: Postfix + Courier or Dovecot?

2015-06-17 Thread Eric Broch
On 6/17/2015 5:03 PM, Michael Munger wrote: > Having Googled this extensively, and searched the postfix users > archives, I have yet to come to a conclusion on which to use: courier or > dovecot. > > I am leaning towards Dovecot because of it's large community, security > focus, and a few off colo

Re: Mail to nowhere

2015-06-17 Thread Viktor Dukhovni
On Wed, Jun 17, 2015 at 10:35:33PM -0400, Steve Matzura wrote: > Here's a set of maillog entries showing attempted delivery of a > message from me to an address in /etc/virtual: > > Jun 18 01:48:26 postfix/smtpd[30639]: connect from > p3plsmtpa07-03.prod.phx3.secureserver.net[173.201.192.232] >

Re: Mail to nowhere

2015-06-17 Thread Steve Matzura
On Wed, 17 Jun 2015 19:54:59 +, you wrote: >Noel points out your server was configured to listen only on the >loopback interface, if the mail in question was sent from outside, >then of course it never got to your server and eventually bounced. That's been fixed. Here's a set of maillog entr

Re: WIth postscreen working so well, still using fail2ban?

2015-06-17 Thread PGNd
> postscreen is one layer in a multi-layer defense. It does not have > to stop all unwanted email. That is what the other layers are for. Certainly. That does not warrant blindly stacking layers upon one another simply because one can. There are certainly layers that postscreen clearly renders

Re: Postfix + Courier or Dovecot?

2015-06-17 Thread Noel Jones
On 6/17/2015 6:03 PM, Michael Munger wrote: > Having Googled this extensively, and searched the postfix users > archives, I have yet to come to a conclusion on which to use: courier or > dovecot. > > I am leaning towards Dovecot because of it's large community, security > focus, and a few off colo

Re: WIth postscreen working so well, still using fail2ban?

2015-06-17 Thread Wietse Venema
PGNd: > The introduction of Postfix's postscreen into edge mail-defense, > particularly with a well thought out set of DNSBLs has fairly > dramatically cut down on my spam rates. postscreen is one layer in a multi-layer defense. It does not have to stop all unwanted email. That is what the other l

Re: WIth postscreen working so well, still using fail2ban?

2015-06-17 Thread Noel Jones
On 6/17/2015 5:50 PM, PGNd wrote: > The introduction of Postfix's postscreen into edge mail-defense, particularly > with a well thought out set of DNSBLs has fairly dramatically cut down on my > spam rates. > > Additional pre- & post-queue filtering downstream of postscreen is down to a > easil

Postfix + Courier or Dovecot?

2015-06-17 Thread Michael Munger
Having Googled this extensively, and searched the postfix users archives, I have yet to come to a conclusion on which to use: courier or dovecot. I am leaning towards Dovecot because of it's large community, security focus, and a few off color emails in the archives (http://is.gd/fs49di). So the

Rejecting spoofed emails

2015-06-17 Thread Alex Regan
Hi, I'm struggling with trying to determine for sure if my domain is protected from spoofing (and backscatter) attacks. I'm also working on building an SPF record, but would like to do what I can with postfix first. It is my understanding that SPF will block based on invalid envelope-sender,

WIth postscreen working so well, still using fail2ban?

2015-06-17 Thread PGNd
The introduction of Postfix's postscreen into edge mail-defense, particularly with a well thought out set of DNSBLs has fairly dramatically cut down on my spam rates. Additional pre- & post-queue filtering downstream of postscreen is down to a easily manageable trickle. Prior to postscreen, fa

Re: Mail to nowhere

2015-06-17 Thread Viktor Dukhovni
On Wed, Jun 17, 2015 at 03:39:49PM -0400, Steve Matzura wrote: > On Wed, 17 Jun 2015 18:04:01 +, you wrote: > > >* LOGS! LOGS! LOGS! > > > >Nobody knows what your problem is until you POST LOGS! > > I have. Not much in them. I've not seen any logs posted in this thread. If you're recei

Re: Mail to nowhere

2015-06-17 Thread Steve Matzura
On Wed, 17 Jun 2015 18:04:01 +, you wrote: >* LOGS! LOGS! LOGS! > >Nobody knows what your problem is until you POST LOGS! I have. Not much in them.

Re: Mail to nowhere

2015-06-17 Thread Viktor Dukhovni
On Wed, Jun 17, 2015 at 11:27:18AM -0400, Steve Matzura wrote: > virtual_mailbox_base = /var/mail/vhosts > virtual_mailbox_domains = > virtual_transport = lmtp:unix:private/dovecot-lmtp If you're having problems with LMTP mail to virtual users. Then at least: * Configure a valid user table

Re: Mail to nowhere

2015-06-17 Thread Noel Jones
On 6/17/2015 10:27 AM, Steve Matzura wrote: > On Wed, 17 Jun 2015 09:10:26 -0400, you wrote: > >> Please send the output of postconf -n to the mailing list. > > Paul: I purposefully obfuscated my FQDN and domain, but they both have > real and good data in them. > > alias_database = hash:/etc/ali

Re: Mail to nowhere

2015-06-17 Thread Steve Matzura
On Wed, 17 Jun 2015 09:10:26 -0400, you wrote: >Please send the output of postconf -n to the mailing list. Paul: I purposefully obfuscated my FQDN and domain, but they both have real and good data in them. alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/d

Re: Mail to nowhere

2015-06-17 Thread Steve Matzura
On Wed, 17 Jun 2015 13:27:43 +, you wrote: >Sadly, you have a steep learning curve, as email infrastructure >has continued to evolve (get more complex) over the last 4 decades. Don't I know it! >> Using LMTP for both components. > >Instead of telling a story, be the remote eyes of the person

Re: Receiving email from Everbridge alert systems

2015-06-17 Thread Noel Jones
On 6/17/2015 9:45 AM, francis picabia wrote: > On Wed, Jun 3, 2015 at 3:29 PM, francis picabia wrote: >> On Wed, Jun 3, 2015 at 3:18 PM, Noel Jones wrote: >>> On 6/3/2015 11:18 AM, francis picabia wrote: On Wed, Jun 3, 2015 at 11:42 AM, Wietse Venema wrote: > francis picabia:

Re: Receiving email from Everbridge alert systems

2015-06-17 Thread francis picabia
On Wed, Jun 3, 2015 at 3:29 PM, francis picabia wrote: > On Wed, Jun 3, 2015 at 3:18 PM, Noel Jones wrote: >> On 6/3/2015 11:18 AM, francis picabia wrote: >>> On Wed, Jun 3, 2015 at 11:42 AM, Wietse Venema wrote: francis picabia: >> /etc/postfix/main.cf: >> smtpd_client_restrict

Re: Attack on my mailsystem

2015-06-17 Thread Viktor Dukhovni
On Wed, Jun 17, 2015 at 06:25:10AM -0700, Jithesh AP wrote: > >>Received: from 54.183.212.207 (ip-172-31-5-33.us-west-1.compute.internal > >>[172.31.5.33]) > >>by ml.w8timez.com (Postfix) with SMTP id 24B0841557; > >>Tue, 16 Jun 2015 21:22:33 -0700 (PDT) > >>Message-ID: > > > >Su

Re: Mail to nowhere

2015-06-17 Thread Viktor Dukhovni
On Tue, Jun 16, 2015 at 10:01:52PM -0400, Steve Matzura wrote: > I'm the de facto email administrator for a small Fedora 20 system, > going to uprade to 22 shortly, with Postfix and Dovecot supposedly > configured to work together. Sadly, you have a steep learning curve, as email infrastructure h

Re: Attack on my mailsystem

2015-06-17 Thread Jithesh AP
On Wed, 17 Jun 2015 06:05:17 -0700, Viktor Dukhovni wrote: On Tue, Jun 16, 2015 at 09:37:24PM -0700, Jithesh AP wrote: >> mynetworks was fully commented, now i have added as you indicated, but >> fully commenting it will also have a similar effect right? > > No, that makes "mynetworks_sty

Re: Question about postfix logfile

2015-06-17 Thread Viktor Dukhovni
On Wed, Jun 17, 2015 at 09:48:46AM +0300, Michael Peter wrote: > > There is no requirement that the addresses are the same. Look at > > this mail for an example. > > How come sender email address mentioned in the postfix log file is > different than the sender email address mentioned in the emai

Re: Mail to nowhere

2015-06-17 Thread Paul Hoffman
On Tue, Jun 16, 2015 at 10:01:52PM -0400, Steve Matzura wrote: > Apologies if I've sent this before, but I lost a few mail messages due > to a slip of the finger, so in case I did post this before, here's a > very brief version. Please send the output of postconf -n to the mailing list. Paul. --

Re: Attack on my mailsystem

2015-06-17 Thread Viktor Dukhovni
On Tue, Jun 16, 2015 at 09:37:24PM -0700, Jithesh AP wrote: > >> mynetworks was fully commented, now i have added as you indicated, but > >> fully commenting it will also have a similar effect right? > > > > No, that makes "mynetworks_style" take effect instead, which > > may configure mynetworks

Re: Empty sender question

2015-06-17 Thread Viktor Dukhovni
On Wed, Jun 17, 2015 at 10:00:29AM +0300, Michael Peter wrote: > The reason i am asking for that in order to block some spam attacks on our > email mail server that using empty email senders For some sites it is safe to use: http://www.postfix.org/postconf.5.html#reject_multi_recipient_bounc

Re: How to configure Postfix routing to two different Gmail accounts?

2015-06-17 Thread Wietse Venema
Daniel Baker: > We have Postfix set up so that any mail goes out through one Gmail account. > > I would like it so that when email gets sent from a particular user a > 2nd Gmail account is used. > > Is there a non complicated way to do that ? > > Thanks for your help ! > > http://www.postfix.

Re: Empty sender question

2015-06-17 Thread Tomas Habarta
On 06/17/2015 09:00 AM, Michael Peter wrote: > Hi, > > I understand that postfix send bounces or failed delivered notifications > using empty sender. > > But does postfix accept empty sender emails during the MAIL FROM command > during the SMTP conversation? because i think that postfix needs a v

Empty sender question

2015-06-17 Thread Michael Peter
Hi, I understand that postfix send bounces or failed delivered notifications using empty sender. But does postfix accept empty sender emails during the MAIL FROM command during the SMTP conversation? because i think that postfix needs a valid email address ? if postfix reject empty sender emails