Re: Trying to resolve Client host rejected: Access denied errors

2019-06-12 Thread Bill Cole
On 12 Jun 2019, at 20:28, David Drum wrote: Matus UHLAR wrote: out from your postfix server? This looks like you have problems sending out to your postfix server Yes, that is a better way to phrase it. and this looks like your client IP is rejected. Why would it be, when I am coming fro

Re: Trying to resolve Client host rejected: Access denied errors

2019-06-12 Thread David Drum
Matus UHLAR wrote: > out from your postfix server? This looks like you have problems sending out > to your postfix server Yes, that is a better way to phrase it. > and this looks like your client IP is rejected. Why would it be, when I am coming from mynetworks? In any case, given that > and

Re: ODMR/ATRN ?

2019-06-12 Thread Mel Pilgrim
On 2019-06-09 13:42, Ronald F. Guilmette wrote: I'd very much like to move my (Postfix) mail server, which currently resides on a (static IP) end-luser broadband line, to some VM in the cloud someplace, and then use something like fetchmail to poll that periodically to pull down all mail for my s

Re: Postfix audit

2019-06-12 Thread Viktor Dukhovni
> On Jun 12, 2019, at 3:40 PM, Stephen Satchell wrote: > > As has been suggested before, this is a perfect application for TCPDUMP > with appropriate parameters on your edge server, and a script to > interpret the data. Many MTAs nowadays support STARTTLS, and a large fraction of MTA-to-MTA SMTP

Re: Postfix audit

2019-06-12 Thread Stephen Satchell
On 6/12/19 11:52 AM, Rafael Azevedo wrote: > Its not the same result between the final client and the server. > > Its the communication between the servers. > > [client] >>> [server] >>> [final destination's server] > > So this is the part they want me to store: > > [server] > EHLO > MAIL FROM

Re: Postfix audit

2019-06-12 Thread Viktor Dukhovni
> On Jun 12, 2019, at 3:20 PM, Rafael Azevedo wrote: > > We already have that log, but they're asking for additional confirmation. Tell them that the "additional" confirmation is neither necessary nor available. This is a waste of everyone's time. The standard logs are quite sufficient. --

Re: Postfix audit

2019-06-12 Thread Rafael Azevedo
Thank you Viktor, We already have that log, but they're asking for additional confirmation. Thanks in advance. Em qua, 12 de jun de 2019 às 16:11, Viktor Dukhovni escreveu: > > On Wed, Jun 12, 2019 at 03:52:10PM -0300, Rafael Azevedo wrote: > > > Its the communication between the servers. > > >

Re: Postfix audit

2019-06-12 Thread Viktor Dukhovni
On Wed, Jun 12, 2019 at 03:52:10PM -0300, Rafael Azevedo wrote: > Its the communication between the servers. > > [client] >>> [server] >>> [final destination's server] > > So this is the part they want me to store: > > [server] > EHLO > MAIL FROM > RCPT TO > DATA > RESULT (ACCEPTED OR > REJECTE

Re: Postfix audit

2019-06-12 Thread Rafael Azevedo
Hi guys, Its not the same result between the final client and the server. Its the communication between the servers. [client] >>> [server] >>> [final destination's server] So this is the part they want me to store: [server] > EHLO > MAIL FROM > RCPT TO > DATA > RESULT (ACCEPTED OR REJECTED)

Re: Postfix audit

2019-06-12 Thread Viktor Dukhovni
On Wed, Jun 12, 2019 at 09:51:45AM -0300, Rafael Azevedo wrote: > We're being requested to give the detailed messages between the > servers to validate the message delivery. One can usually push back on what appear to be misguided requests from auditors. I fail to see the point of this request.

Re: Virtual users and local users in the same domain?

2019-06-12 Thread @lbutlr
On 12 Jun2019, at 11:17, @lbutlr wrote: > There thread is about moving ONE of the local accounts into MySQL virtual > maps. I decided to punt and just move all the accounts at once. My annoyance overrode my paranoia for once! -- I've never seen religious faith move mountains, but I've seen

Re: Virtual users and local users in the same domain?

2019-06-12 Thread @lbutlr
On 12 Jun2019, at 08:39, Benny Pedersen wrote: > @lbutlr skrev den 2019-06-12 15:20: > >> Now I am getting postfix/trivial-rewrite: warning: do not list domain >> example.com in BOTH mydestination and virtual_mailbox_domains > > +1 > >> Can I have mydestination be blank? And rely on virtual fo

Re: Virtual users and local users in the same domain?

2019-06-12 Thread Lefteris Tsintjelis
On 12/6/2019 16:20, @lbutlr wrote: Can I have mydestination be blank? And rely on virtual for the local users until I move everyone? Yes of course and you should have mydestination blank otherwise you will get a domain warning listed in virtual and local. If you list local users in virtual,

Re: Virtual users and local users in the same domain?

2019-06-12 Thread Benny Pedersen
@lbutlr skrev den 2019-06-12 15:20: Now I am getting postfix/trivial-rewrite: warning: do not list domain example.com in BOTH mydestination and virtual_mailbox_domains +1 Can I have mydestination be blank? And rely on virtual for the local users until I move everyone? I though my destinatio

Re: Postfix audit

2019-06-12 Thread Wietse Venema
Rafael Azevedo: > What we need is a complete conversation between the servers. > > We're being requested to give the detailed messages between the > servers to validate the message delivery. > > This would be an example of the log needs: > > 2019-06-12 12:44:47 SERVER -> CLIENT: 220 indus.server

Re: Trying to resolve Client host rejected: Access denied errors

2019-06-12 Thread Matus UHLAR - fantomas
On 12.06.19 08:36, David Drum wrote: I am recently no longer able to send mail out from my postfix server. Receiving email works fine. Connecting via IMAPS from Mail.app and sending either to a local recipient or to an external recipient is rejected with: out from your postfix server? This l

Re: Postfix audit

2019-06-12 Thread Jon Radel
On 6/12/19 8:51 AM, Rafael Azevedo wrote: > We're being requested to give the detailed messages between the > servers to validate the message delivery. And it's allowable to have the MTA on one side do the data collection? If I were your auditor, I'd know that it would be almost impossible for you

Trying to resolve Client host rejected: Access denied errors

2019-06-12 Thread David Drum
Hello everyone, I am recently no longer able to send mail out from my postfix server. Receiving email works fine. Connecting via IMAPS from Mail.app and sending either to a local recipient or to an external recipient is rejected with: Jun 11 20:35:05 grover postfix/submission/smtpd[11782]: NO

Re: Virtual users and local users in the same domain?

2019-06-12 Thread @lbutlr
On Jun 11, 2019, at 5:51 AM, @lbutlr wrote: > Is the answer different if the goal is to move ALL local users* to virtual > maps in the near future? My plan is to start with one, see that it all works, > then move the rest of the users (only a dozen or so, in total). At that > point, those users

Re: Postfix audit

2019-06-12 Thread Rafael Azevedo
What we need is a complete conversation between the servers. We're being requested to give the detailed messages between the servers to validate the message delivery. This would be an example of the log needs: 2019-06-12 12:44:47 SERVER -> CLIENT: 220 indus.server.net ESMTP Postfix 2019-06-12 12