Extending Postfix to Amavis for the local clients

2014-11-21 Thread Olivier Nicole
Hello, In main.cf I have: smtpd_client_restrictions = check_client_access cidr:$config_directory/amavis_bypass with the file amavis_bypass being: 203.159.68.0/22 FILTER smtp-amavis:[127.0.0.1]:10026 That is applying a special filter for calling Amavis when a message is issued by my internal

Re: access table problems

2009-11-10 Thread Olivier Nicole
And seeing that the guy is blocking email by country, I really wonder why I took time replying to him.

Re: access table problems

2009-11-10 Thread Olivier Nicole
> When I run these through postmap -q I a get a "REJECT" return. When I > add a fourth octect to the postmap -q input, I get nothing. I've been > beating me head on the desk whilst re-reading man 5 access, and I can't > figure out why real addresses matching these class C subnets aren't > returni

Re: Blacklisted on Verizon

2009-11-10 Thread Olivier Nicole
Hi, > Hello list! We are being blacklisted every few days from verizon. This is > less important right now as I need to find out if/who is sending spam from > the email server or if the server is an open relay. I am less inclined to > think postfix (which is what we use) is an open relay. More inc

A bug somewhere in the management of LDAP tables?

2009-10-04 Thread Olivier Nicole
Hi, I just made a typo writting a filter in an LDAP table: i typed s% instead of %s: query_filter = (&(mail=s%)(csimAccountPermission=mail)(!(uid=vw))) should be: query_filter = (&(mail=%s)(csimAccountPermission=mail)(!(uid=vw))) as a result, postmap would coredump (and eventually mail w

Re: Outlook certificate with postfix

2009-09-04 Thread Olivier Nicole
> Ok but waht certificates load in Outlook > I have 3 certificate > cacert.pem > mydomain-key.pem > mydomain-cert.pem You have one certificate (mydomain-cert.pem), one certificate authority (cacert.pem) and one key (mydomain-cert.pem). What you will want is to add cacert.pem to outlook, so any ne

Re: local_recipient_maps into an ldap

2009-09-03 Thread Olivier Nicole
Nicolas, > server_host = zimbra.pcsol.be Are you sure your server is running on port 389? Would you run TLS? >From your Postfix machine, can you access the LDAP server on zimbra machine (no firewall)? I would try ldapsearch command on the postfix machine to make sure that all the parameters in

Re: Applying Unix quota

2009-09-01 Thread Olivier Nicole
Hi, > > Hence I would like to have a sort of > > smtpd_end_of_data_restrictions = check_policy_service something > > that could accept/reject the mail before it is being handled to the MDA. > > You could write a policy service to do this, or simply use a utility outside > of Postfix to update an

Applying Unix quota

2009-08-29 Thread Olivier Nicole
Hi, Is there a way (policy?) to have POstfix check for the user's Unix quota before delivering a local mail? I am using procmail as MDA, so when procmail finds that the mail cannot be delivered because the user is over quota, it's too late. Hence I would like to have a sort of smtpd_end_of_data_

Problm with transport map

2009-08-29 Thread Olivier Nicole
Hi, My server acts as MX for a few domains and I have problem setting up the transport map properly. Any help is welcome. TIA, Olivier -- postconf -n alias_maps = hash:/etc/aliases, ldap:$config_directory/ldap_user_alias, ldap:$config_directory/ldap_deleted_alias, ldap:

Re: Strange behaviour of Postfix + LDAP

2009-08-28 Thread Olivier Nicole
sage-Id: <200908280249.n7s2niog030...@banyan.cs.ait.ac.th> From: Olivier Nicole To: sanj...@cs.ait.ac.th Subject: test test -- the output of postconf -n alias_maps = hash:/etc/aliases, ldap:$config_directory/ldap_user_alias, ldap:$config_directory/ldap_deleted_alias, ldap:$c

Re: Country IP block list

2009-08-23 Thread Olivier Nicole
Hi, > Could someone provide links to sites where IP addresses are grouped by coun= > try? ASNs would work too but would prefer IP lists that I could put in a f= > ile that my postfix mail gateway could read. Obvious countries like China = > and Brazil I would like to block wholesale. As mention

Re: rbl checks, best place

2009-08-20 Thread Olivier Nicole
> > This is a difficult question. > I disagree. Just that because you disagree makes the question not simple :) > 2. Gmail is not squeaky clean, it's no surprise that they end up in Of course, but then it gets people complaining why they cannot receive mails from gmail. > 5. A reject_rbl_clien

Re: Significant relay delays

2009-08-20 Thread Olivier Nicole
Hi, This is just a wild guess... > I'm also pretty sure it's not a network issue. After passing > billions of packets there isn't a single error. I'm also pretty sure > DNS is configured properly. Have you checked the connection between postfix and the exchange machines? After some years, a cabl

Re: rbl checks, best place

2009-08-20 Thread Olivier Nicole
Hi Dave, > I'm running postfix, amavisd-new and spamassassin. Currently in my > postfix smtpd_recipient_restrictions right at the end last thing i have some > rbl checks. I'm wondering if that's the best place for them or should i > disable that and activate them in spamassassin? Suggestions

Re: Looking for opinions on FreeBSD OS for Postfix

2009-08-17 Thread Olivier Nicole
Hi, > I'm considering FreeBSD as an alternative, but I was wondering what > people think of FreeBSD as a platform for Postfix. It's obviously not > as easy to maintain as Ubuntu, but it does have a reputation for > stability. Any thoughts, recommendations or experiences would be > appreciated. I

Re: filter incoming but not outgoing

2009-07-30 Thread Olivier Nicole
Hi, > 1. Sign outgoing messages with dkim and vbr (currently doing this with > amavis) > > 2. Only allow sending from our networks > > 3. Do NOT filter, virus scan or spam scam outgoing messages > > 4. DO scan and filter incoming messages > > 5. Optimize / Tweak s

Re: Postfix to allow authentication only after STARTLS

2009-07-29 Thread Olivier Nicole
Hi, > I am using dovecot with postfix for authentication. > > Everything (TLS/SSL, authentication) is working fine, except I cannot > find a way to force STARTLS before authentication: > > 20 mail2.cs.ait.ac.th ESMTP Postfix (2.6.2) > EHLO [192.41.170.57] > 250-mail2.cs.ait.ac.th >

Postfix to allow authentication only after STARTLS

2009-07-29 Thread Olivier Nicole
Hi, I am using dovecot with postfix for authentication. Everything (TLS/SSL, authentication) is working fine, except I cannot find a way to force STARTLS before authentication: 20 mail2.cs.ait.ac.th ESMTP Postfix (2.6.2) EHLO [192.41.170.57] 250-mail2.cs.ait.ac.th 250-PIPELINING

Address rewriting to include GECOS

2009-07-27 Thread Olivier Nicole
Hi, I read and re-read the address-rewriting readme and coul dnot find any indication on the way to rewrite addresses to include GECOS information: o...@cs.ait.ac.th => Olivier Nicole Is that possible in Postfix? I beleive yes. Where is that done and how? Best regards, Olivier

Re: spamc being called when using amavis-new

2009-07-27 Thread Olivier Nicole
> I have gone through the postfix configs and amavis configs and could not f= > ind any reference to spamc.. so where could this be coming from? It should not be in amavisd-new: in normal configuration, amavisd-new loads SpamAssassin as a Perl module and does not use spamc/spamd mechanism. You

Canonical forward and reverse

2009-07-23 Thread Olivier Nicole
Hi, I managed to add canoical rewritting, but now I am stuck with postfix trying to deliver the message to the canonical name and not to the proper Unix login name. Using "sendmail -bv o...@cs.ait.ac.th" I get: --463023A3834.1248410743/mail2.cs.ait.ac.th Content-Description: Notification Content

Expected output for local_recipient_maps = ldap:...

2009-07-21 Thread Olivier Nicole
Hi, In my Postfix configuration I have local_recipient_maps = unix:passwd.byname $alias_maps ldap:$config_directory/ldap_local_recipient What is the expected output of the ldap: part? Anything non empty means the user is local? The user ID? Something else? Best regards, Olivier

Complex canonical rewrite with ldap and regexp

2009-07-21 Thread Olivier Nicole
Hi, I want to know if the following canonical rewrite is possible with Postfix, and how? In my LDAP directory, for each user, I have a givenName and a familyName attributes. The canonical name should be givenName.familyName or familyName.givenName, the order is depending on a thrid attribute (c