How to bounce a queued mail

2017-06-14 Thread Dominic Raferd
We occasionally get emails in our postfix queue that can never be delivered but which are held in the queue for a week before postfix bounces them (example: sender has typed gmail.co instead of gmail.com). I realise this delay is the correct behaviour, but how can I - by exception - bounce a queued

Re: MIME header checks matching

2017-06-14 Thread Alex
Hi, On Wed, Jun 14, 2017 at 2:41 PM, Andreas Schamanek wrote: > > On Wed, 14 Jun 2017, at 12:34, Noel Jones wrote: > >> > I have a series of mime patterns to automatically reject file types >> > including com, bat, exe, etc. It appears one pattern is matching >> > incorrectly, ... >> >> Rather th

Re: Inbound TLS Certificate SAN Verification

2017-06-14 Thread Viktor Dukhovni
On Wed, Jun 14, 2017 at 08:47:31PM +, Osama Al-Hassani wrote: > When verifying client certificates we are only able to receive CN data, > and cannot get a hold of the SANs. The request data sent to the policy > server does not contain any SAN attributes. That's correct. The subject alternat

Re: Outbound TLS Certificate Verification

2017-06-14 Thread Viktor Dukhovni
On Wed, Jun 14, 2017 at 09:12:20PM +, Osama Al-Hassani wrote: > When verifying server certificates on outbound connections, it seems we > are unable verify the IP addresses part of the SANs field. We are able to > verify IPs in CNs. Email is sent to addresses of the form , where the "domain-p

Outbound TLS Certificate Verification

2017-06-14 Thread Osama Al-Hassani
Hi all, When verifying server certificates on outbound connections, it seems we are unable verify the IP addresses part of the SANs field. We are able to verify IPs in CNs. What is the reasoning behind this behaviour? Thank you, Osama Osama Al-Hassani Software Engineer [Telephone] +44 118

Inbound TLS Certificate SAN Verification

2017-06-14 Thread Osama Al-Hassani
Hi all, I have an enquiry regarding SAN verification when enforcing TLS on inbound connections. When verifying client certificates we are only able to receive CN data, and cannot get a hold of the SANs. The request data sent to the policy sever does not contain any SAN attributes. Is there a

Re: MIME header checks matching

2017-06-14 Thread Andreas Schamanek
On Wed, 14 Jun 2017, at 12:34, Noel Jones wrote: > > I have a series of mime patterns to automatically reject file types > > including com, bat, exe, etc. It appears one pattern is matching > > incorrectly, ... > > Rather than try to debug your expression, I'll refer you to the nice > example o

Re: PLEASE! httpd and maildrop

2017-06-14 Thread Noel Jones
On 6/14/2017 12:52 PM, Homer Wilson Smith wrote: > >How exactly does httpd drop mail into maildrop hundreds > per minutes and I can't find any process at all that indicates this > is going on even while it is going on. > >Homer > >

Postfix stable release 3.2.2 and legacy releases 3.1.6, 3.0.10 and 2.11.10

2017-06-14 Thread Wietse Venema
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-3.2.2.html] This announcement (June 13, 2017) includes changes that were released with an earlier update (June 10, 2017). The announcement was postponed to avoid confusion due to repeated not

Re: PLEASE! httpd and maildrop

2017-06-14 Thread Wietse Venema
Homer Wilson Smith: > > How exactly does httpd drop mail into maildrop hundreds > per minutes and I can't find any process at all that indicates this > is going on even while it is going on. It invokes /usr/sbin/sendmail. See also: http://www.postfix.org/postconf.5.html#authorized_submit_use

PLEASE! httpd and maildrop

2017-06-14 Thread Homer Wilson Smith
How exactly does httpd drop mail into maildrop hundreds per minutes and I can't find any process at all that indicates this is going on even while it is going on. Homer Homer Wilson Smith Clean Air, Clear Water,

Re: R: Client host rejected: Access denied

2017-06-14 Thread Wietse Venema
Scappatura Rocco: > > smtpd_recipient_restrictions = > > ... > > check_client_access proxy:mysql:/etc/postfix/mysql-check-client-access.cf > > ... > > Hello, > > indeed I can't figure out why the check above can cause the error: > > "Client host rejected: Access denied" > ... > Here complete

Re: MIME header checks matching

2017-06-14 Thread Noel Jones
On 6/14/2017 7:16 AM, Alex wrote: > Hi, > > I have a series of mime patterns to automatically reject file types > including com, bat, exe, etc. It appears one pattern is matching > incorrectly, and I could use some help making it more accurate. I > don't know if it's something yahoo is doing to th

Re: postfix client closing connection (email delivery) if one of multiple recipients failed/filtered

2017-06-14 Thread Noel Jones
On 6/14/2017 3:28 AM, Zalezny Niezalezny wrote: > Hi, > > I have exacly the same problem as described here in that post and I > do not know what to do. > > http://postfix.1071664.n5.nabble.com/Customize-configure-postfix-with-multiple-recipients-td45030.html > > In our network we are relaying me

R: Client host rejected: Access denied

2017-06-14 Thread Scappatura Rocco
> smtpd_recipient_restrictions = > ... > check_client_access proxy:mysql:/etc/postfix/mysql-check-client-access.cf > ... Hello, indeed I can't figure out why the check above can cause the error: "Client host rejected: Access denied" In my mysql 'postfix' database, I have a simple 'access' t

Re: Client host rejected: Access denied

2017-06-14 Thread Wietse Venema
Scappatura Rocco: > smtpd_recipient_restrictions = > ... > check_client_access proxy:mysql:/etc/postfix/mysql-check-client-access.cf > ... Wietse

Re: pickup/maildrop being used to spam through my machine.

2017-06-14 Thread Philip Paeps
On 2017-06-13 04:28:39 (-0400), Homer Wilson Smith wrote: Suddenly I am find adore's mailq queue filled with spam, each having a pickup line in the logs, but no indication where it comes from, probably the web server as the from username is apache, but so far no corellation between web logs a

MIME header checks matching

2017-06-14 Thread Alex
Hi, I have a series of mime patterns to automatically reject file types including com, bat, exe, etc. It appears one pattern is matching incorrectly, and I could use some help making it more accurate. I don't know if it's something yahoo is doing to their outgoing mail or the result of this user's

Client host rejected: Access denied

2017-06-14 Thread Scappatura Rocco
Hello. My MTA (Debian Lenny with postfix+amavisd-new+spamassassin+clamav) rejected an SMTP connection from Yahoo: Jun 13 17:04:01 av7 postfix/smtpd[25250]: NOQUEUE: reject: RCPT from sonic317-25.consmr.mail.ir2.yahoo.com[87.248.110.215]: 554 5.7.1 : Client host rejected: Access denied; from=

Re: Seperate maps for virtual domains?

2017-06-14 Thread Wietse Venema
Julian Kippels: > > You are doing N/2 table lookups to find the table that contains the > > data. That is, you're doing linear search on top of hashing. > > > @Wietse: N/2 is a little pessimistic, but thats only because I know the > makeup of my mailboxes? 90% of it is in one virtual domain and th

Problems with postfix from some ips

2017-06-14 Thread Francesc PeƱalvez
I ve the last postfix server with tls and sasl.I find that from some ips also with postfix servers do not get to connect properly.the syslog only i see this: Jun 14 12:02:10 ns postfix/smtpd[23322]: connect from x.x.x.x.x[x.x.x.x] Jun 14 12:02:11 ns postfix/smtpd[23322]: disconnect from x.x.x.x.

Re: postfix client closing connection (email delivery) if one of multiple recipients failed/filtered

2017-06-14 Thread Bastian Blank
On Wed, Jun 14, 2017 at 10:28:06AM +0200, Zalezny Niezalezny wrote: > I have exacly the same problem as described here in that post and I do not > know what to do. Please show logs and configuration (unaltered, see http://www.postfix.org/DEBUG_README.html#mail for details). Bastian -- Captain's

postfix client closing connection (email delivery) if one of multiple recipients failed/filtered

2017-06-14 Thread Zalezny Niezalezny
Hi, I have exacly the same problem as described here in that post and I do not know what to do. http://postfix.1071664.n5.nabble.com/Customize-configure-postfix-with-multiple-recipients-td45030.html In our network we are relaying messages using Postfix. When our application sending a message wi

Re: Seperate maps for virtual domains?

2017-06-14 Thread Julian Kippels
Am Tue, 13 Jun 2017 10:17:53 -0400 (EDT) schrieb wie...@porcupine.org (Wietse Venema): > Patrick Ben Koetter: > > > > At which message throughput rate will this make a difference? > > > > > > Always. Because you're replacing hashing with linear search. > > > > If you compare hashing to linea