Re: server migration question

2019-03-08 Thread lists
On Sat, March 9, 2019 4:53 am, Bill Cole wrote: > On 8 Mar 2019, at 7:33, li...@sbt.net.au wrote: >> is that an OK idea ? > > That's how I always do it, and it works well. Make sure you reduce the > TTL value of the A record to a short value for at least twice the normal > TTL before doing the swi

Re: Question on Relay Host conf

2019-03-08 Thread Viktor Dukhovni
On Fri, Mar 08, 2019 at 08:00:47PM +0300, sse450 wrote: > Hoping to solve this problem, I wanted to block all the sender emails > not defined in sender_relay table. I will do what you advised here. But, > I know that this will also block apache sender eventually. In this case, > I will have ano

Re: Question on Relay Host conf

2019-03-08 Thread LuKreme
On Mar 8, 2019, at 10:00, sse450 wrote: > This mails originates from Apache through (I think) php mail. Obviously, my > server is compromised. Not obvious at all, no. But the php script to sent mail to users may not be properly configured for your new settings. It should be setup to use submiss

Re: server migration question

2019-03-08 Thread Bill Cole
On 8 Mar 2019, at 7:33, li...@sbt.net.au wrote: I have Postfix/Dovecot/Mysql on Centos 7 with mail_version = 3.2.4 setup new server same hostname as old server with mail_version = 3.3.3 using same hostname as old server the thought was to change A records to point mailserver hostname to new

Re: 'Linux 5' support in Postfix Stable Release 3.4.1 ?

2019-03-08 Thread Ralph Seichter
* Wietse Venema: > Which distro ships with Linux 5.x kernels? I use Gentoo Linux with a 5.0.0 kernel and the mail-mta/postfix-3.4.0 ebuild on several servers. If you want to try it, you'd need to use the ~amd64 (un-stable) keyword for sys-kernel/gentoo-sources and the aforementioned mail-mta/post

Re: Question on Relay Host conf

2019-03-08 Thread Ralph Seichter
* sse: > Obviously, my server is compromised. Are you really certain of that? If you are, I suggest you do a full wipe of your server. Meddling with the Postfix configuration to prevent email being sent does nothing to address a compromised server. -Ralph

Re: Question on Relay Host conf

2019-03-08 Thread sse450
On 8.03.2019 19:15, Viktor Dukhovni wrote: On Mar 8, 2019, at 11:02 AM, Wietse Venema wrote: Perhaps sender_dependent_default_transport_maps uses the same null-sender lookup mechanism as other mappings. For example the transport map has this note: Note 1: the null recipient address is looked u

Re: Question on Relay Host conf

2019-03-08 Thread Viktor Dukhovni
> On Mar 8, 2019, at 11:02 AM, Wietse Venema wrote: > > Perhaps sender_dependent_default_transport_maps uses the same > null-sender lookup mechanism as other mappings. For example the > transport map has this note: > > Note 1: the null recipient address is looked up as > $empty_address_recipient

Re: Question on Relay Host conf

2019-03-08 Thread Wietse Venema
Viktor Dukhovni: > > > That's easy enough, use sender_dependent_default_transport_maps, > > and a default transport that returns mail as undeliverable. > > > > /etc/postfix/main.cf: > > sender_dependent_default_transport_maps = hash:/etc/postfix/sender_relay > > default_transport = error:

Re: Question on Relay Host conf

2019-03-08 Thread Viktor Dukhovni
> That's easy enough, use sender_dependent_default_transport_maps, > and a default transport that returns mail as undeliverable. > > /etc/postfix/main.cf: > sender_dependent_default_transport_maps = hash:/etc/postfix/sender_relay > default_transport = error:5.7.1 sender is not authorized

Re: Question on Relay Host conf

2019-03-08 Thread sse450
On 8.03.2019 18:01, Wietse Venema wrote: Ozy Mate: Dear Friends, I have signed up with a 3rd party smtp server as relay host. This server needs the following lines in the main.cf of our server instead of relayhost direction: smtp_sender_dependent_authentication = yes sender_dependent_relayhost

Re: consolidate virtual and relay_recipients files

2019-03-08 Thread Viktor Dukhovni
On Wed, Mar 06, 2019 at 05:34:03PM +, Samuel Torton wrote: > virtual_alias_maps = hash:/etc/postfix/virtual > relay_recipient_maps = hash:/etc/postfix/relay_recipients > transport_maps = hash:/etc/postfix/transport > ... > > > Here is my /etc/postfix/virtual: > > ... > @domain2.com

Re: Question on Relay Host conf

2019-03-08 Thread sse450
I haven't taken any step to prevent this as I don't know what to do. Hence, I am asking about it. I would appreciate if you direct me in the right direction to prevent all the others not listed in sender_dependent_relayhost_maps. On 8.03.2019 15:41, @lbutlr wrote: On 7 Mar 2019, at 20:52,

Re: Question on Relay Host conf

2019-03-08 Thread Wietse Venema
Ozy Mate: > Dear Friends, > > I have signed up with a 3rd party smtp server as relay host. This server > needs the following lines in the main.cf of our server instead of relayhost > direction: > > smtp_sender_dependent_authentication = yes > sender_dependent_relayhost_maps = hash:/etc/postfix/se

Re: 'Linux 5' support in Postfix Stable Release 3.4.1 ?

2019-03-08 Thread Phil Stracchino
On 3/8/19 7:26 AM, Wietse Venema wrote: > Which distro ships with Linux 5.x kernels? I want to install that > distribution in a VM for tests. I am not interested in a FrankenLinux > where I have to assemble different parts from different providers. > Last time I asked I did not get a good answer.

Re: 'Linux 5' support in Postfix Stable Release 3.4.1 ?

2019-03-08 Thread Patrick Ben Koetter
* Wietse Venema : > Which distro ships with Linux 5.x kernels? I want to install that > distribution in a VM for tests. I am not interested in a FrankenLinux > where I have to assemble different parts from different providers. > Last time I asked I did not get a good answer. Linux x1.sys4.de 5.0.0

Re: consolidate virtual and relay_recipients files

2019-03-08 Thread Curtis Maurand
I would think about using the transport file for this.  It's pretty flexible.  Check the docs, but I found this: *"TABLE SEARCH ORDER* With lookups from indexed files such as DB or DBM, or from networked tables such as NIS, LDAP or SQL, patterns are tried in the order as

Re: 'Linux 5' support in Postfix Stable Release 3.4.1 ?

2019-03-08 Thread Sonic
On Fri, Mar 8, 2019 at 7:27 AM Wietse Venema wrote: > Which distro ships with Linux 5.x kernels? $ uname -r 5.0.0-gentoo

Re: Question on Relay Host conf

2019-03-08 Thread @lbutlr
> On 7 Mar 2019, at 20:52, Ozy Mate wrote: > > Dear Friends, > > I have signed up with a 3rd party smtp server as relay host. This server > needs the following lines in the main.cf of our server instead of relayhost > direction: > > smtp_sender_dependent_authentication = yes > sender_depen

Re: 'Linux 5' support in Postfix Stable Release 3.4.1 ?

2019-03-08 Thread Marek Kozlowski
:-) Or instead of downloading and installing download a qemu image of ArchLinux: http://pages.mini.pw.edu.pl/~kozlowskim/archv.qcow2 It' s an up-to-date qemu image prepared for my students. Best regards, Marek On 3/8/19 1:32 PM, Marek Kozlowski wrote: :-) ArchLinux? It's a rolling release o

Re: 'Linux 5' support in Postfix Stable Release 3.4.1 ?

2019-03-08 Thread Christian Rößner
> Am 08.03.2019 um 13:26 schrieb Wietse Venema : > > Which distro ships with Linux 5.x kernels? I want to install that > distribution in a VM for tests. I am not interested in a FrankenLinux > where I have to assemble different parts from different providers. > Last time I asked I did not get a g

Re: 'Linux 5' support in Postfix Stable Release 3.4.1 ?

2019-03-08 Thread Marek Kozlowski
:-) ArchLinux? It's a rolling release one. Install any version then run `pacman -Suy' for upgrade to the most recent packages in repos. Quick and simple (but it is a systemd Linux :-( ) Best regards, Marek On 3/8/19 1:26 PM, Wietse Venema wrote: Which distro ships with Linux 5.x kernels? I

server migration question

2019-03-08 Thread lists
I have Postfix/Dovecot/Mysql on Centos 7 with mail_version = 3.2.4 setup new server same hostname as old server with mail_version = 3.3.3 using same hostname as old server the thought was to change A records to point mailserver hostname to new server IP at switch over time is that an OK idea ?

Re: 'Linux 5' support in Postfix Stable Release 3.4.1 ?

2019-03-08 Thread Wietse Venema
Which distro ships with Linux 5.x kernels? I want to install that distribution in a VM for tests. I am not interested in a FrankenLinux where I have to assemble different parts from different providers. Last time I asked I did not get a good answer. Wietse