Re: Blank EHLO/HELO commands

2015-12-21 Thread Noel Jones
On 12/21/2015 6:44 PM, Jeffrey 'jf' Lim wrote: > On Tue, Dec 22, 2015 at 7:26 AM, Noel Jones > I quit using reject_unknown_helo_hostname a couple years ago when it > quickly became clear that a significant percentage of the clients > rejected were legit. Of course, YMMV. > > > wer

Re: Blank EHLO/HELO commands

2015-12-21 Thread Jeffrey 'jf' Lim
On Tue, Dec 22, 2015 at 7:26 AM, Noel Jones wrote: > On 12/21/2015 4:54 PM, Wolfe, Robert wrote: > > Hi all. This is not a postfix-specific question, but rather a > > generic one, but I hope I can get the answer I am searching for here. > > > > > > I run a third part SMTP filtering program in wh

Re: forward mail for a domain with its own certificate

2015-12-21 Thread Viktor Dukhovni
On Mon, Nov 30, 2015 at 11:27:36AM +0100, Evreh Choneh wrote: > I've a domain A for all my users. For some users I have a domain B and I > would like to do this : > > a) A user from domain B can send a mail only for another user of B A policy service can impose that restriction on the message en

Re: Define a per-user whitelist of allowed envelope senders with Postfix's sendmail

2015-12-21 Thread Viktor Dukhovni
On Tue, Dec 22, 2015 at 12:37:16AM +0100, Aleš Krajník wrote: > Is there any solution that would define or whitelist as which sender can > each of local system accounts send e-mail when using Postfix's sendmail > binary? > > I have a hosting server with PHP-FPM FastCGI server, each site on the ser

Define a per-user whitelist of allowed envelope senders with Postfix's sendmail

2015-12-21 Thread Aleš Krajník
Hi, Is there any solution that would define or whitelist as which sender can each of local system accounts send e-mail when using Postfix's sendmail binary? I have a hosting server with PHP-FPM FastCGI server, each site on the server runs as one PHP-FPM process, each site has its own local user o

Re: Blank EHLO/HELO commands

2015-12-21 Thread Noel Jones
On 12/21/2015 4:54 PM, Wolfe, Robert wrote: > Hi all. This is not a postfix-specific question, but rather a > generic one, but I hope I can get the answer I am searching for here. > > > I run a third part SMTP filtering program in which I have "EHLO/HELO > Must Resolve" turned on. I am amazed a

Blank EHLO/HELO commands

2015-12-21 Thread Wolfe, Robert
Hi all. This is not a postfix-specific question, but rather a generic one, but I hope I can get the answer I am searching for here. I run a third part SMTP filtering program in which I have "EHLO/HELO Must Resolve" turned on. I am amazed at the number of exceptions I have to put into my conf

Re: Stop outgoing mail (for testing)

2015-12-21 Thread k...@rice.edu
On Mon, Dec 21, 2015 at 09:46:37PM +, Rosenbaum, Larry M. wrote: > We want to test some new software that sends out notifications. We would like > to (temporarily) set up a Postfix box so that it accepts the mail and > validates the recipients but does not deliver the mail. How do I turn off

Stop outgoing mail (for testing)

2015-12-21 Thread Rosenbaum, Larry M.
We want to test some new software that sends out notifications. We would like to (temporarily) set up a Postfix box so that it accepts the mail and validates the recipients but does not deliver the mail. How do I turn off the delivery part? Thanks, Larry M. Rosenbaum Oak Ridge National Laborat

Re: check_sender_access and pattern matching

2015-12-21 Thread Alex
Hi, On Mon, Dec 21, 2015 at 2:18 PM, Noel Jones wrote: > On 12/21/2015 12:13 PM, Alex wrote: >>> For hash: access tables, the correct line is (assuming the default >>> value of parent_domain_matches_subdomains): >>> >>> invalid.example.com OK >>> >>> See the access table documentation, pattern s

Re: check_sender_access and pattern matching

2015-12-21 Thread Noel Jones
On 12/21/2015 12:13 PM, Alex wrote: >> For hash: access tables, the correct line is (assuming the default >> value of parent_domain_matches_subdomains): >> >> invalid.example.com OK >> >> See the access table documentation, pattern search order section for >> details. >> http://www.postfix.org/acc

Re: cleanup service and removing headers

2015-12-21 Thread Noel Jones
On 12/21/2015 12:08 PM, Alex wrote: >> >> Your expression looks OK. You can test it with >> postmap -hq - pcre:auth_header_checks.pcre < testfile >> >> where testfile is a saved message including the headers you want to >> replace. > > Is it possible that it only replaces the first pattern that

Re: check_sender_access and pattern matching

2015-12-21 Thread Alex
Hi, On Mon, Dec 21, 2015 at 12:48 PM, Noel Jones wrote: > On 12/21/2015 11:38 AM, Alex wrote: >> Hi, >> I have a postfix-2.10 fedora22 system and having trouble with my >> sender checks. I have a domain that is sending mail with an invalid >> hostname. The temporary solution is to add a check_sen

Re: cleanup service and removing headers

2015-12-21 Thread Alex
Hi, I posted a message some time ago about stripping internal headers from outbound mail, and I didn't receive any response. I thought I would follow up. Is there more information I can provide? Should I be approaching this a different way? Any ideas greatly appreciat

Re: check_sender_access and pattern matching

2015-12-21 Thread Noel Jones
On 12/21/2015 11:38 AM, Alex wrote: > Hi, > I have a postfix-2.10 fedora22 system and having trouble with my > sender checks. I have a domain that is sending mail with an invalid > hostname. The temporary solution is to add a check_sender_access > entry, but I must be doing something wrong. > > De

check_sender_access and pattern matching

2015-12-21 Thread Alex
Hi, I have a postfix-2.10 fedora22 system and having trouble with my sender checks. I have a domain that is sending mail with an invalid hostname. The temporary solution is to add a check_sender_access entry, but I must be doing something wrong. Dec 21 12:30:16 mail02 postfix/smtpd[1560]: NOQUEUE:

Re: cleanup service and removing headers

2015-12-21 Thread Noel Jones
On 12/21/2015 7:49 AM, Alex wrote: > Hi, > > On Sun, Dec 20, 2015 at 3:36 PM, Robert Schetterer wrote: >> Am 20.12.2015 um 19:58 schrieb Alex: >>> Hi all, >>> >>> I posted a message some time ago about stripping internal headers from >>> outbound mail, and I didn't receive any response. I thought

Re: cleanup service and removing headers

2015-12-21 Thread Alex
Hi, On Sun, Dec 20, 2015 at 3:36 PM, Robert Schetterer wrote: > Am 20.12.2015 um 19:58 schrieb Alex: >> Hi all, >> >> I posted a message some time ago about stripping internal headers from >> outbound mail, and I didn't receive any response. I thought I would >> follow up. Is there more informati