Re: Feature request for postscreen: "defer"

2016-09-13 Thread Christian Rößner
> Am 14.09.2016 um 07:50 schrieb Christian Rößner > : > >> Am 13.09.2016 um 19:00 schrieb Wietse Venema : >> >> Christian Ro??ner: Am 13.09.2016 um 18:09 schrieb Wietse Venema : Christian Ro??ner: > Is there some chance that postscreen could be extended to also have > "

Re: Feature request for postscreen: "defer"

2016-09-13 Thread Christian Rößner
> Am 13.09.2016 um 19:00 schrieb Wietse Venema : > > Christian Ro??ner: >>> Am 13.09.2016 um 18:09 schrieb Wietse Venema : >>> >>> Christian Ro??ner: Is there some chance that postscreen could be extended to also have "defer"? >>> >>> That is a good question, but you might want to ask

Re: Message size limit responses

2016-09-13 Thread Bill Cole
On 13 Sep 2016, at 14:10, JosC wrote: In een bericht van 13-9-2016 15:55: Usually the sender will disconnect when they see your SIZE banner, so you never have an opportunity to send them anything. All you'll see in your logs is a connect/disconnect. With Thunderbird I sometimes do see a mes

Re: mysql lookup table and utf8

2016-09-13 Thread Viktor Dukhovni
On Tue, Sep 13, 2016 at 09:52:16PM +0200, Antoine Nguyen wrote: > query = SELECT name FROM admin_domain WHERE name='%s' AND type='domain' AND > enabled=1 What is not clear is how MySQL's quoting behaves given the input UTF-8 string. > postmap: cfg_get_str: /etc/postfix/sql-domains.cf: query = S

Re: Concurrency limit for port 25

2016-09-13 Thread Allen Coates
I am a little guy; one connection an hour and I am *BUSY* Three concurrent connections is more than I will ever need. The limit is set low to fend off D-o-S attacks like the one I described. By-and-large, default values are set to a reasonable value for a wide range of circumstances. However,

Concurrency limit for port 25

2016-09-13 Thread lists
Not wanting to hijack the thread from Alan Coates, but I noticed the concurrency limit of three, which I assume was on port 25. Is there some science behind how to set this limit?‎

Re: postscreen-policy

2016-09-13 Thread Allen Coates
On 13/09/16 20:01, Wietse Venema wrote: > Wietse Venema: >> Unlike DNS lookups, the access map lookup is a blocking operation, >> and if your tcp map takes 80ms to complete (a typical trans-atlantic >> query), then you can handle only 12 connections per second, and >> make postsceen the largest pe

Re: postscreen-policy (was: Feature request for postscreen: "defer")

2016-09-13 Thread Wietse Venema
Patrick Ben Koetter: > * Wietse Venema : > > Wietse Venema: > > > Unlike DNS lookups, the access map lookup is a blocking operation, > > > and if your tcp map takes 80ms to complete (a typical trans-atlantic > > > query), then you can handle only 12 connections per second, and > > > make postsceen

Re: mysql lookup table and utf8

2016-09-13 Thread Antoine Nguyen
On 13/09/2016 18:08, Viktor Dukhovni wrote: Make sure your shell or terminal emulator is not mangling utf-8 input or command-line arguments. * Post your map.cf file content, perhaps that map file restricts which lookup keys are passed on to the underlying database. * Place the lookup key

Re: postscreen-policy (was: Feature request for postscreen: "defer")

2016-09-13 Thread Patrick Ben Koetter
* Wietse Venema : > Wietse Venema: > > Unlike DNS lookups, the access map lookup is a blocking operation, > > and if your tcp map takes 80ms to complete (a typical trans-atlantic > > query), then you can handle only 12 connections per second, and > > make postsceen the largest performance bottlenec

postscreen-policy (was: Feature request for postscreen: "defer")

2016-09-13 Thread Wietse Venema
Wietse Venema: > Unlike DNS lookups, the access map lookup is a blocking operation, > and if your tcp map takes 80ms to complete (a typical trans-atlantic > query), then you can handle only 12 connections per second, and > make postsceen the largest performance bottleneck on the system. After star

Re: Message size limit responses

2016-09-13 Thread JosC
In een bericht van 13-9-2016 15:55: Usually the sender will disconnect when they see your SIZE banner, so you never have an opportunity to send them anything. All you'll see in your logs is a connect/disconnect. With Thunderbird I sometimes do see a message that attachments are oversized. Wh

Re: Complaints due to helo restrictions

2016-09-13 Thread Wietse Venema
Nikolaos Milas: > Sep 8 09:35:37 mailgw1 postfix/smtpd[18791]: NOQUEUE: reject: RCPT from > mail.ipta.demokritos.gr[143.233.230.2]: 450 4.7.1 : Helo > command rejected: Host not found; > from= to= proto=ESMTP > helo= I don't recommend using reject_unknown_helo_hostname, because there are many

Re: Complaints due to helo restrictions

2016-09-13 Thread Jeremy T. Bouse
On 9/13/2016 1:16 PM, Nikolaos Milas wrote: > Hello, > > We are running postfix v2.11.0 on CentOS 6.8 as a gateway server and > we have recently imposed helo restrictions. > > Few servers have problems sending us mail due to the helo restrictions: > > Sep 8 09:35:37 mailgw1 postfix/smtpd[18791]: N

Re: Complaints due to helo restrictions

2016-09-13 Thread Bastian Blank
On Tue, Sep 13, 2016 at 08:16:30PM +0300, Nikolaos Milas wrote: > We have notified them that their helo answer is different than their > mail server name / FQDN (so as to change it) and they say that we > should not be restricting access due to this: > > "The HELO receiver MAY verify that the HELO

Complaints due to helo restrictions

2016-09-13 Thread Nikolaos Milas
Hello, We are running postfix v2.11.0 on CentOS 6.8 as a gateway server and we have recently imposed helo restrictions. Few servers have problems sending us mail due to the helo restrictions: Sep 8 09:35:37 mailgw1 postfix/smtpd[18791]: NOQUEUE: reject: RCPT from mail.ipta.demokritos.gr[143

Re: Feature request for postscreen: "defer"

2016-09-13 Thread Wietse Venema
Christian Ro??ner: > > Am 13.09.2016 um 18:09 schrieb Wietse Venema : > > > > Christian Ro??ner: > >> Is there some chance that postscreen could be extended to also have > >> "defer"? > > > > That is a good question, but you might want to ask that in a thread > > that isn't about socketmaps. >

Feature request for postscreen: "defer"

2016-09-13 Thread Christian Rößner
> Am 13.09.2016 um 18:09 schrieb Wietse Venema : > > Christian Ro??ner: >> Is there some chance that postscreen could be extended to also have "defer"? > > That is a good question, but you might want to ask that in a thread > that isn't about socketmaps. You are totally right. I created a new th

Re: Question for socketmap_table

2016-09-13 Thread Wietse Venema
Christian Ro??ner: > Is there some chance that postscreen could be extended to also have "defer"? That is a good question, but you might want to ask that in a thread that isn't about socketmaps. Wietse

Re: mysql lookup table and utf8

2016-09-13 Thread Viktor Dukhovni
On Tue, Sep 13, 2016 at 05:30:40PM +0200, Antoine Nguyen wrote: > Thank you for this link but, since it is a new setup, I have no data. I've > already checked mysql configuration : default character set is utf8, default > collation is utf8_general_ci and database and tables are using those values.

Re: Question for socketmap_table

2016-09-13 Thread Viktor Dukhovni
On Tue, Sep 13, 2016 at 05:40:09PM +0200, Christian Rößner wrote: > > Don't confuse the socketmap layer protocol which can find, not find or > > tempfail a lookup, with the Postfix syntax for the lookup result, which, > > depending on context access(5), header_checks(5), ... > > may begin with va

Re: Question for socketmap_table

2016-09-13 Thread Christian Rößner
> Am 13.09.2016 um 17:11 schrieb Viktor Dukhovni : > > On Tue, Sep 13, 2016 at 05:00:01PM +0200, Christian Rößner wrote: > >>> They are. You just need to combine the postcreen_access_list >>> documentation with the socketmap encapsulation. >>> OK permit (or dunno) NOTFOUND TEMP

Re: mysql lookup table and utf8

2016-09-13 Thread Antoine Nguyen
On 13/09/2016 16:10, Admin Beckspaced wrote: hello ;) not sure if this will help? but had a similar issue with mysql queries a while back. it actually had nothing to do with postfix and sql lookup tables ... but ran into trouble with different mysql character sets ... causing queries to also

Re: Question for socketmap_table

2016-09-13 Thread Viktor Dukhovni
On Tue, Sep 13, 2016 at 05:00:01PM +0200, Christian Rößner wrote: > > They are. You just need to combine the postcreen_access_list > > documentation with the socketmap encapsulation. > > > >> OK permit (or dunno) > >> NOTFOUND > >> TEMP What is done with this reason? > > > > It is up to the

Re: Question for socketmap_table

2016-09-13 Thread Christian Rößner
> Am 13.09.2016 um 16:51 schrieb Wietse Venema : > > Christian Ro??ner: >> Hi, >> >> I just looked into the socketmap_table man page. I try to understand several >> things: >> >> First: Is it correct that request and response are not terminated by newline? > > I think that is the least of your

Re: Question for socketmap_table

2016-09-13 Thread Wietse Venema
Christian Ro??ner: > Hi, > > I just looked into the socketmap_table man page. I try to understand several > things: > > First: Is it correct that request and response are not terminated by newline? I think that is the least of your problems. This is not a text-based protocol where messages are

Re: mysql lookup table and utf8

2016-09-13 Thread Admin Beckspaced
Am 13.09.2016 um 14:22 schrieb Antoine Nguyen: On 13/09/2016 12:43, Wietse Venema wrote: Antoine Nguyen: On 12/09/2016 17:04, Wietse Venema wrote: Just for test, what happens when you do: (this is what Postfix daemons use by default) LC_ALL=C postmap -q rat?.com mysql:/etc/postfix/sql

Re: Message size limit responses

2016-09-13 Thread Noel Jones
On 9/13/2016 8:39 AM, JosC wrote: > Is it possible to return a message to someone who wants to attach > files that pass my message_size_limit? > > Thanks, > Jos Chrispijn > Usually the sender will disconnect when they see your SIZE banner, so you never have an opportunity to send them anything.

Message size limit responses

2016-09-13 Thread JosC
Is it possible to return a message to someone who wants to attach files that pass my message_size_limit? Thanks, Jos Chrispijn

Question for socketmap_table

2016-09-13 Thread Christian Rößner
Hi, I just looked into the socketmap_table man page. I try to understand several things: First: Is it correct that request and response are not terminated by newline? Second the respone: OK data The requested data was found. NOTFOUND The requested d

Re: mysql lookup table and utf8

2016-09-13 Thread Antoine Nguyen
On 13/09/2016 12:43, Wietse Venema wrote: Antoine Nguyen: On 12/09/2016 17:04, Wietse Venema wrote: Just for test, what happens when you do: (this is what Postfix daemons use by default) LC_ALL=C postmap -q rat?.com mysql:/etc/postfix/sql-domains.cf (this is to test what happens with an

Re: (ot) beware libressl on Freebsd

2016-09-13 Thread Alice Wonder
On 09/12/2016 03:13 PM, li...@lazygranch.com wrote: Freebsd 10.3 I ran freebsd "pkg" ‎and didn't see any of the mail suite or openssl in the list of files to update, so I figured it was safe to run. (I've been burnt by pkg messing up dovecot or postfix, so I always use the ports). Some progra

Re: mysql lookup table and utf8

2016-09-13 Thread Wietse Venema
Antoine Nguyen: > On 12/09/2016 17:04, Wietse Venema wrote: > > > > Just for test, what happens when you do: > > > > (this is what Postfix daemons use by default) > > LC_ALL=C postmap -q rat?.com mysql:/etc/postfix/sql-domains.cf > > > > (this is to test what happens with an UTF-8 locale) > >

Re: mysql lookup table and utf8

2016-09-13 Thread Antoine Nguyen
On 12/09/2016 17:04, Wietse Venema wrote: Just for test, what happens when you do: (this is what Postfix daemons use by default) LC_ALL=C postmap -q rat?.com mysql:/etc/postfix/sql-domains.cf (this is to test what happens with an UTF-8 locale) LC_ALL=en_US.UTF-8 postmap -q rat?.com m

Re: Is there actual postfix 3.1 + cyrus-sasl + gssapi howto ?

2016-09-13 Thread Viktor Dukhovni
On Tue, Sep 13, 2016 at 01:47:52PM +0500, Вадим Бажов wrote: > Anyone ? Wietse, Viktor ? http://postfix.1071664.n5.nabble.com/Is-there-actual-postfix-3-1-cyrus-sasl-gssapi-howto-tt86083.html#a86089 -- Viktor.

Re: (ot) beware libressl on Freebsd

2016-09-13 Thread Cristiano Deana
On Tue, Sep 13, 2016 at 12:13 AM, wrote: > Openssl and libressl have a conflict, so I had uninstalled libressl prior to > reinstalling openssl. You should have in your /etc/make.conf DEFAULT_VERSIONS+= ssl=base or ssl=openssl (openssl from ports) or ssl=libressl -- Cris, member of G.U.F.I I