Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Sean Greenslade
On Tue, Oct 04, 2016 at 05:37:33PM +1300, Peter wrote: > The main problem with this is that one of the primary advantages to > using a DNSRBL is that it sits in front of SpamAssassin. DNSRBL > blockign does not require deep inspection of message content so it can > be checked first and clients blo

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Peter
On 04/10/16 07:02, Sean Greenslade wrote: > On Mon, Oct 03, 2016 at 01:47:28PM -0400, Fongaboo wrote: > I personally don't use RBLs as hard blocks. Instead, I have them set up > in my spam filter (SpamAssassin) with different weights. That way, if > one particular RBL is acting up, I can de-weight

Re: Blocking nobody - sometimes

2016-10-03 Thread D'Arcy J.M. Cain
On Sat, 1 Oct 2016 15:31:28 +0200 John Fawcett wrote: > I can't speak from hosting experience, but forcing authenticated smtp > connections and rate limiting them with a policy service (like policyd > or postfwd) would be my solution if I had to do this. That would have > the advantages of being a

Re: Relaying issues with Mailman

2016-10-03 Thread Geert Stappers
On Mon, Oct 03, 2016 at 05:25:15PM -0400, Fongaboo wrote: > > Running Postfix 2.11.7 on FreeBSD 10.2-RELEASE. I am migrating a > listserv on an older box to this one, running newly-installed > Mailman 2.1.20. > > I found a one-pager that showed me what to tar up and move over to The tarball, doe

Relaying issues with Mailman

2016-10-03 Thread Fongaboo
Running Postfix 2.11.7 on FreeBSD 10.2-RELEASE. I am migrating a listserv on an older box to this one, running newly-installed Mailman 2.1.20. I found a one-pager that showed me what to tar up and move over to migrate my lists to the new instance of Mailman. Hostname is not changing, so that

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Sean Greenslade
On Mon, Oct 03, 2016 at 02:59:08PM -0400, Fongaboo wrote: > > On Mon, 3 Oct 2016, Sean Greenslade wrote: > > > I personally don't use RBLs as hard blocks. Instead, I have them set up > > in my spam filter (SpamAssassin) with different weights. That way, if > > one particular RBL is acting up, I c

Re: Trying to wrap my head around reject_sender_login_mismatch

2016-10-03 Thread Jeremy Hansen
> On Oct 3, 2016, at 11:57 AM, Viktor Dukhovni > wrote: > > >> On Oct 3, 2016, at 2:55 PM, Viktor Dukhovni >> wrote: >> >> It should not be surprising that the correct key/value pair is: >> >> joeu...@foo.com joeu...@foo.com > > Oops, the RHS should have been "joeuser" without a domain.

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Fongaboo
On Mon, 3 Oct 2016, Sean Greenslade wrote: I personally don't use RBLs as hard blocks. Instead, I have them set up in my spam filter (SpamAssassin) with different weights. That way, if one particular RBL is acting up, I can de-weight it and keep an eye on it without it affecting delivery. The

Re: Trying to wrap my head around reject_sender_login_mismatch

2016-10-03 Thread Viktor Dukhovni
> On Oct 3, 2016, at 2:55 PM, Viktor Dukhovni > wrote: > > It should not be surprising that the correct key/value pair is: > > joeu...@foo.com joeu...@foo.com Oops, the RHS should have been "joeuser" without a domain. # LHS = sender address RHS = list of logins u...@exampl

Re: Trying to wrap my head around reject_sender_login_mismatch

2016-10-03 Thread Viktor Dukhovni
> On Oct 3, 2016, at 2:38 PM, Jeremy Hansen wrote: > >> The table lookup key is a sender address, and the RHS is a list of >> logins, so this example is backwards. > > So if my smtp authenticated username is just say “joeuser” which is a local > unix account on the server and the email address

Re: Trying to wrap my head around reject_sender_login_mismatch

2016-10-03 Thread Jeremy Hansen
Thanks for the response. > On Oct 3, 2016, at 9:44 AM, Viktor Dukhovni > wrote: > > On Mon, Oct 03, 2016 at 11:35:54AM +0200, Niklaas Baudet von Gersdorff wrote: > >> For example, if I want to send email from n...@niklaas.eu from my >> account m...@niklaas.eu, I'd need the following entry in >

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Wietse Venema
Fongaboo: > > I'm running Postfix 2.11.7 on FreeBSD 10.2-RELEASE. > > Just wanted to get folks' opinions/rationale/thoughts on behavior of some > of the RBL's. > > Specifically SORBS.NET... I first set up my server using a popular FreeBSD > tutorial. SORBS.NET was included in a list of recomme

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Steve Atkins
> On Oct 3, 2016, at 10:47 AM, Fongaboo wrote: > > > I'm running Postfix 2.11.7 on FreeBSD 10.2-RELEASE. > > Just wanted to get folks' opinions/rationale/thoughts on behavior of some of > the RBL's. > > Specifically SORBS.NET... I first set up my server using a popular FreeBSD > tutorial. S

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Sean Greenslade
On Mon, Oct 03, 2016 at 01:47:28PM -0400, Fongaboo wrote: > > I'm running Postfix 2.11.7 on FreeBSD 10.2-RELEASE. > > Just wanted to get folks' opinions/rationale/thoughts on behavior of some of > the RBL's. > > Specifically SORBS.NET... I first set up my server using a popular FreeBSD > tutoria

sorbs.net blacklist too aggressive?

2016-10-03 Thread Fongaboo
I'm running Postfix 2.11.7 on FreeBSD 10.2-RELEASE. Just wanted to get folks' opinions/rationale/thoughts on behavior of some of the RBL's. Specifically SORBS.NET... I first set up my server using a popular FreeBSD tutorial. SORBS.NET was included in a list of recommended RBL's in the lates

Re: Trying to wrap my head around reject_sender_login_mismatch

2016-10-03 Thread Viktor Dukhovni
On Mon, Oct 03, 2016 at 11:35:54AM +0200, Niklaas Baudet von Gersdorff wrote: > For example, if I want to send email from n...@niklaas.eu from my > account m...@niklaas.eu, I'd need the following entry in > smtpd_sender_login_maps: > > m...@niklaas.eu n...@niklaas.eu The table lookup key is

Re: Many failed messages: Bail out, DATA accepted...

2016-10-03 Thread Viktor Dukhovni
On Mon, Oct 03, 2016 at 10:50:33AM -0500, Allison Jones wrote: > mailing list manager. I believe I have a configuration problem with > Postfix, but I'm not sure. I have tried to search google, as well as the > listserv archives. The only messages I see with similar warnings come from > foreign-

Many failed messages: Bail out, DATA accepted...

2016-10-03 Thread Allison Jones
I am running Postfix+amavis in combination with spamassassin, and Sympa, the mailing list manager. I believe I have a configuration problem with Postfix, but I'm not sure. I have tried to search google, as well as the listserv archives. The only messages I see with similar warnings come from

Re: Trying to wrap my head around reject_sender_login_mismatch

2016-10-03 Thread Niklaas Baudet von Gersdorff
Jeremy Hansen [2016-10-03 01:24 -0700] : > I’m trying to wrap my head around what the issue is. I realize > there’s a mismatch but I’m having trouble understanding exactly > what the mismatch is or where to fix it. > > My smtpd_sender_login_maps=hash:/etc/postfix/valiases contains: > > @foo.com

Trying to wrap my head around reject_sender_login_mismatch

2016-10-03 Thread Jeremy Hansen
I’m new to postfix. I’ve been using qmail for many years and decided it was time to move on. I’m running in to one issue: 553 5.7.1 : Sender address rejected: not owned by user user; from= to= In master.cf I had: -o smtpd_sender_restrictions=reject_sender_login_mismatch I’m trying to wrap m