Re: ISP relay - Before queue filtering, per-domain

2014-01-30 Thread Duncan B.
On Thu, 30 Jan 2014, Patrick Ben Koetter wrote: I suggest you do not use the envelope-sender address, because it can be forged easily. Instead I'd use valid DKIM signatures as trigger to bypass certain checks: @author_to_policy_bank_maps = ( { 'sys4.de' => 'WHITELIST,NOBA

Re: ISP relay - Before queue filtering, per-domain

2014-01-30 Thread Duncan B.
On Wed, 29 Jan 2014, Noel Jones wrote: I couldn't find a way to make Amavisd scan only for certain domains, rather than whitelist. (Although I understand this is beyond the scope of this list :)) Any kind of pre-queue per-domain filtering will need to be done within the filter -- once the m

ISP relay - Before queue filtering, per-domain

2014-01-29 Thread Duncan B.
Hi all, I'd appreciate some guidance on how best to achieve a scenario: I admin a Postfix mail relay for an ISP's DSL users, which has recently become subject to being frequently blocked by Mimecast/Commtouch. As usual they are not being too forthcoming with information as to why the block h

Re: "no route to host" error message

2012-07-13 Thread Duncan B.
On Fri, 13 Jul 2012, Reindl Harald wrote: -- 679D8120710 611 Fri Jul 13 12:34:05 some_sender@some_domain.tld (connect to mx2.hotmail.com[65.55.92.184]:25: No route to host) some_receip...@hotmail.com -- thi

Re: Virtual domain aliases

2011-07-20 Thread Duncan B.
What about using relay_domains and relay_recipient_maps. I am using this to forward mail do an IMAP-server, but this doesn't matter. Example modified from my config: relay_domains = ${ldap}/relay_domains.cf relay_recipient_maps = pcre:${map}/roleaccount.pcre, ${ldap}/relay_recipient_

Virtual domain aliases

2011-07-20 Thread Duncan B.
Hi all, I have a Postfix/MailScanner front-end set up which works well, however I'm not sure I've configured it correctly (or in the best way)... The box uses header_checks to place all incoming messages in the hold queue (standard stuff) and transport_maps define which mail server the mail

Re: Checking for NDRs

2009-10-08 Thread Duncan B.
On Thu, 8 Oct 2009, Brian Evans - Postfix List wrote: I will have to use the header_checks regexp directive, but how do I ONLY perform this check for a bounce (ie, MAIL FROM: <>) ? You need a suitable content_filter or milter. No built-in Postfix feature checks for the absence of a header, let

Re: Checking for NDRs

2009-10-08 Thread Duncan B.
On Thu, 8 Oct 2009, Victor Duchovni wrote: I am setting up an SMTP backup MX server for a customer, and one of their specifications is that we check incoming mail for NDR/bounce mails without a valid "watermark". Surfcontrol adds a header similar to 'X-SEF' with a UUID on outbound mail, so any

Checking for NDRs

2009-10-08 Thread Duncan B.
Hi all, I am setting up an SMTP backup MX server for a customer, and one of their specifications is that we check incoming mail for NDR/bounce mails without a valid "watermark". Surfcontrol adds a header similar to 'X-SEF' with a UUID on outbound mail, so any mail that's a bounce without this

Re: Configuration question

2009-09-11 Thread Duncan B.
On Fri, 11 Sep 2009, Noel Jones wrote: smtpd_recipient_restricions = reject_unauth_destination, reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks Am I doing something wrong? It seems to me that the restrictions aren't processed in the order that you specify them o

Re: Configuration question

2009-09-11 Thread Duncan B.
On Fri, 11 Sep 2009, Sahil Tandon wrote: Why don't you reject_unknown_recipient_domain BEFORE permitting your networks (and/or SASL authenticated clients) in smtpd_recipient_restrictions? So, how do I make mynetworks exempt from the smtpd_recipient_restrictions, yet make mynetworks able to re

Re: Configuration question

2009-09-11 Thread Duncan B.
On Fri, 11 Sep 2009, Sahil Tandon wrote: The list of CIDR IP ranges to relay for is in the mynetworks variable, so I can't do the recipient domain verification in "smtpd_recipient_restrictions" because I need "permit_mynetworks", so that my networks can relay through the box! permit_mynetworks

Configuration question

2009-09-10 Thread Duncan B.
Hi, Just a quick config question, which I'm not too sure how to achieve. I'd like to enable recipient domain validation, which I've partly done (at the data stage), however if you then enter another "rcpt to" after the data command failed, it'll allow it through. E.g. 220 relay4.post.newnet

Re: Listing IP addresses in mail queue

2009-09-08 Thread Duncan B.
On Tue, 8 Sep 2009, Wietse Venema wrote: Are you able to recommend any methods / tools to extract this information from the log files, Wietse, or is it just a case of writing a script to do so? I understand that you are actually doing from-to analysis: for example, who sends mail to Yahoo that

Re: Listing IP addresses in mail queue

2009-09-08 Thread Duncan B.
On Tue, 8 Sep 2009, Wietse Venema wrote: Indeed, qshape targets outflow. Inflow analysis is easily done based on logfile records. Are you able to recommend any methods / tools to extract this information from the log files, Wietse, or is it just a case of writing a script to do so? I underst

Re: Listing IP addresses in mail queue

2009-09-08 Thread Duncan B.
On Tue, 8 Sep 2009, Wietse Venema wrote: Postfix doesn't store IPs in the queue file, so there is no such tool for postfix. Client information records were added late in the Postfix life cycle, and they are used mainly by for xforward and milters. However, the 'qshape' tool will list the qu

Re: Listing IP addresses in mail queue

2009-09-08 Thread Duncan B.
I'm a new user to Postfix (ex Qmail user) and love it. However, there is one feature of "qmqtool" that was very useful: qmqtool -i, to list queue entries by IP address. Is there any way to see which IP addresses in the postfix queues are the most dominant? Postfix doesn't store IPs in the queu

Listing IP addresses in mail queue

2009-09-08 Thread Duncan B.
Hi, Firstly this is my first post to the list, so apologies if I've not correctly followed any procedures. I'm a new user to Postfix (ex Qmail user) and love it. However, there is one feature of "qmqtool" that was very useful: qmqtool -i, to list queue entries by IP address. Is there any wa