Re: permit_mynetworks in smtpd_helo_restrictions

2010-08-18 Thread Nataraj
Nataraj wrote: p...@alt-ctrl-del.org wrote: Hello postfix admins, I have always placed all restrictions in smtpd_recipient_restrictions. Over the last few days, I have been experimenting with breaking the restrictions up into client, helo, sender, etc. I ran into something odd (to me), when

Re: permit_mynetworks in smtpd_helo_restrictions

2010-08-18 Thread Nataraj
rks from smtpd_helo_restrictions and then try the hello command that matches an address in mynetworks? What I'm asking, is if the helo restrictions is really where the permit is happening? Nataraj

Re: postscreen questions

2010-05-27 Thread Nataraj
false positives. If you have a large site, check their web pages, since they do charge for high volume query rates and will block your access if you exceed the free limit. Nataraj

Re: I've inherited a botnet target

2010-05-26 Thread Nataraj
el.net[95.134.218.74] for service smtp May 26 15:55:42 aspen postfix/smtpd[17267]: disconnect from 74-218-134-95.pool.ukrtel.net[95.134.218.74] May 26 15:56:17 aspen postfix/smtpd[21694]: connect from 114-26-181-192.dynamic.hinet.net[114.26.181.192] Nataraj

Re: I've inherited a botnet target

2010-05-26 Thread Nataraj
Nataraj wrote: brian wrote: On 10-05-26 03:55 PM, Noel Jones wrote: Some random suggestions... Use a bogus MX record for the old domain if that domain has no valid mail recipients. Of course, some bots will connect to your A record anyway... OK, I like the sound of that. Per your other

Re: I've inherited a botnet target

2010-05-26 Thread Nataraj
T EXCEPTING MAIL" Here's a simple script to build the hash file from smtpd_recipient_access #! /bin/bash /usr/sbin/postmap hash:/etc/postfix/smtpd_sender_access /bin/chgrp postfix smtpd_sender_access* /bin/chmod g=r,o-rwx smtpd_sender_access* Nataraj

Re: Empty 'local_recipient_maps =' and security

2010-05-13 Thread Nataraj
postfix sql interface because it is much faster and causes sooner rejection of bad reciepients in the smtpd session, increasing the performance of my mail server. Nataraj Nataraj

Re: Newsletter server setup questions

2010-05-07 Thread Nataraj
ider borderline spamming, but sometimes it's easier to farm things out than implement everything yourself. If it interests you, I can send you the name of one that one of my clients likes, though I have no personal experience. Nataraj

Re: Allowing only certain From:... to send email to a specific To:... possible?

2010-05-06 Thread Nataraj
can accept, reject, continue. Nataraj

Re: timeout problem on inbound and outbound SMTP

2010-05-05 Thread Nataraj
Nataraj wrote: Hi, I would appreciate any suggestions anyone can offer on the following problem that I'm having with postfix... I'm running postfix+pgsql-2.3.3-2.1.el5_2 on a CentOS 5.4 server. I see what looks likes a server in stress mode as described in http://www.p

Re: Allowing e-mails to be relayed from a dynamic IP

2010-05-05 Thread Nataraj
Noel Jones wrote: On 5/5/2010 1:06 PM, Nataraj wrote: Mike A. Leonetti wrote: Thanks for the reply, Nataraj. I did see that online and the server does have SASL Auth working, but we are having a difficult time getting it to try and provide a username/password on the Exchange server so I

Re: Allowing e-mails to be relayed from a dynamic IP

2010-05-05 Thread Nataraj
Mike A. Leonetti wrote: Thanks for the reply, Nataraj. I did see that online and the server does have SASL Auth working, but we are having a difficult time getting it to try and provide a username/password on the Exchange server so I was wondering if there was a way to get around that

Re: Stopping spammers extreme

2010-05-05 Thread Nataraj
your mailq? Is the spam that you are seeing addressed to local delivery addresses at your site? Are there bounce messages in your mailq? I realize you are forwarding local mail to gmail. So is your mailq filled up with spam getting forwarded to gmail? nataraj

Re: Allowing e-mails to be relayed from a dynamic IP

2010-05-05 Thread Nataraj
ilable for other purposes. Nataraj

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
Wietse Venema wrote: Nataraj: Thank you everyone for your helpful responses. I've narrowed the problem down further, though it is not solved yet. It does not appear to be specific to postfix. I've written a simple program with a select statement that delays 10 seconds when run on

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
Wietse Venema wrote: Nataraj: I am extensively familiar with my main.cf file and am aware of exactly what changes have been made. This mail server has been running stably for years and I am not yet aware of changes to the mail configuration files surrounding the time when this problem

Re: server stops responding / smtpd client count

2010-05-04 Thread Nataraj
P.A wrote: Nataraj, thanks for the reply, below is the postconf -n output. As far as your explanation as to why the other services are slow, pop/imap, it may be that the TCP stack is under heavy load and might slow down these connections but the server CPU/MEM are fine and the connections are

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
Charles Gregory wrote: On Tue, 4 May 2010, Nataraj wrote: I do not have a front end on my mailserver. All incoming mail comes directly into postfix. I am running a vpostmaster install which is not a front end, I'm not an expert on this, but your machine ID's with 'vpost

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
N. Yaakov Ziskind wrote: Noel Jones wrote (on Tue, May 04, 2010 at 02:33:48PM -0500): On 5/4/2010 2:16 PM, Charles Gregory wrote: On Tue, 4 May 2010, Nataraj wrote: Enclosed is a tcpdump of a telnet connection where nothing was typed, i.e. I telnetted to the smtp server and 5

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
guration issues. I guess one option at this point is to try to fire up the debugger on an SMTPD process and see what's really going on (or add some debugging code which logs the details). Nataraj

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
173-16-199-243.client.mchsi.com[173.16.199.243] May 4 12:56:11 aspen postfix/smtpd[1277]: timeout after CONNECT from 173-16-199-243.client.mchsi.com[173.16.199.243] May 4 12:56:11 aspen postfix/smtpd[1277]: disconnect from 173-16-199-243.client.mchsi.com[173.16.199.243] Nataraj

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
Charles Gregory wrote: On Tue, 4 May 2010, Nataraj wrote: Enclosed is a tcpdump of a telnet connection where nothing was typed, i.e. I telnetted to the smtp server and 5 seconds later the server closed the connection. THIS IS NORMAL. As I said previously, type the MAIL FROM, RCPT TO, and

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
Nataraj wrote: Noel Jones wrote: Please show the contents of your master.cf See the enclosed attachment. Thank You, Nataraj Enclosed is a tcpdump of a telnet connection where nothing was typed, i.e. I telnetted to the smtp server and 5 seconds later the server closed the

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
Noel Jones wrote: Please show the contents of your master.cf See the enclosed attachment. Thank You, Nataraj # # Postfix master process configuration file. For details on the format # of the file, see the master(5) manual page (command: "man 5 m

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
Here is the complete output of postconf -n. Thanks... alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 disable_vrfy_command =

Re: server stops responding / smtpd client count

2010-05-04 Thread Nataraj
ng for the final tcp handshake which closes the connection and for the kernel tcp stack to clear them out. Nataraj

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
lst_ho...@kwsoft.de wrote: Zitat von Nataraj : lst_ho...@kwsoft.de wrote: Zitat von Nataraj : lst_ho...@kwsoft.de wrote: Zitat von Nataraj : Hi, I would appreciate any suggestions anyone can offer on the following problem that I'm having with postfix... I'm running pos

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
lst_ho...@kwsoft.de wrote: Zitat von Nataraj : lst_ho...@kwsoft.de wrote: Zitat von Nataraj : Hi, I would appreciate any suggestions anyone can offer on the following problem that I'm having with postfix... I'm running postfix+pgsql-2.3.3-2.1.el5_2 on a CentOS 5.4 server.

Re: timeout problem on inbound and outbound SMTP

2010-05-04 Thread Nataraj
lst_ho...@kwsoft.de wrote: Zitat von Nataraj : Hi, I would appreciate any suggestions anyone can offer on the following problem that I'm having with postfix... I'm running postfix+pgsql-2.3.3-2.1.el5_2 on a CentOS 5.4 server. I see what looks likes a server in stress mode as de

timeout problem on inbound and outbound SMTP

2010-05-03 Thread Nataraj
mmand_limit = 100 smtpd_recipient_limit = 1000 smtpd_recipient_overshoot_limit = 1000 smtpd_soft_error_limit = 10 THank you, Nataraj