Re: certificate verification failed

2015-05-14 Thread Pol Hallen
>whatever trust failure >your mail was delivered to hotmail, ask them what happened to it >perhaps it went to some Junk folder etc thanks for reply :-) When I see this warning/error email goes lost... I've an hotmail.it account and no email has come (also inside spam/junk). thanks Pol

certificate verification failed

2015-05-14 Thread Pol Hallen
Hi all :-) With all other smtp, postfix runs correctly, only with hotmail.it smtp I've this log file: May 14 09:15:53 www postfix/smtp[23823]: certificate verification failed for mx2.hotmail.com[65.55.37.104]:25: untrusted issuer /C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Root May 14

Re: filter by sender then redirect

2015-02-23 Thread Pol Hallen
> The "OK" case needs to be handled with great care to avoid becoming > an open relay. thanks! > What do you need to do to email with a yahoo.com envelope sender > and why? problems with old customers: some servers (mine) are IDS with my notify email, so I receive IDS notify emails every day. So

filter by sender then redirect

2015-02-23 Thread Pol Hallen
Hi all :-) using: check_sender_access hash:/etc/postfix/local_domains I can put OK or REJECT filtering by sender. I need filter only a domain (i.e. yahoo.com external domain) then redirect that email(s) to external email address. What the best way? thanks! Pol

Re: maildir quota "support"

2014-07-31 Thread Pol Hallen
Hi Leonardo, thanks for your help! If can be useful I've found this perl script: http://www.serveradminblog.com/2010/08/postfix-quota-notification-email-script/ regards Pol

maildir quota "support"

2014-07-31 Thread Pol Hallen
Hi all, I've configured postfix with virtual mailboxes. I looking for a quota support with notify quota to customers. Is there a script or something like it to solve my issue? thanks Pol

Re: mx backup

2014-03-13 Thread Pol Hallen
> There's evidence that some spammers reverse-sort MX records, > intentionally sending to the backup MX first. Consequently, the > backup MX /must/ have anti-spam controls identical to the primary. > > But consider if you truly need a backup MX. Most folks have dropped > them because they're spam

mx backup

2014-03-13 Thread Pol Hallen
Hi all, I need an advice about my mx-backup server main mail server has many antispam system (amavis, spamassassin, etc.), when an email bounced by these antispam, the email goes to mx-backup server. mx-backup server keep email inside own queue. So, do I need install amavis and other antispam sys

defer problem

2014-02-23 Thread Pol Hallen
I'm not sure if anyone use policyd (postfix cluebringer) but I can't solve a noise problem. policyd put limits to a number of emails, so reading this post from policyd: http://lists.policyd.org/pipermail/users_lists.policyd.org/2013-December/004283.html "I think You want postfix to accept all mai

Re: notify by email mail queue

2014-02-23 Thread Pol Hallen
Cheers! Very thanks boy :-) Pol > Am 23.02.2014 19:22, schrieb Pol Hallen: >> Hi all :-) I'm searching for how notify by email the mail queue... (if >> there're emails inside queue). Any idea? > > will not help much if it's too late and you reveive > no

notify by email mail queue

2014-02-23 Thread Pol Hallen
Hi all :-) I'm searching for how notify by email the mail queue... (if there're emails inside queue). Any idea? thanks! Pol

Re: how force sasl from localhost

2014-02-09 Thread Pol Hallen
> however, configure your applications to use port 587 and close 25 > on 127.0.0.1 may be the easier way to achieve the goal which is > no problem with iptables excellent solution! thanks :-) > if it is pickup than disable "mail" and a lot of other dangerous PHP > functions in php.ini I've "only

how force sasl from localhost

2014-02-09 Thread Pol Hallen
Hi folks, I already read about sasl, postfix and other docs. External sasl authentication works, I need force users to authentication from localhost (i.e. CMS joomla and wordpress). inside main.cf: before: mynetworks = 127.0.0.0/8, 192.168.1.0/24 after #mynetworks = 127.0.0.0/8, 192.168.1.0/2

Re: behavior about black list

2014-01-31 Thread Pol Hallen
>do the best you can, to avoid outbound spam, a minimal ever work >solution maybe use clamav-milter with sanesecurity antispam signatures >of course there are additional never ending other solutions thanks -) >search the list archives and sites around postfix amavis and study best >practises avoi

Re: behavior about black list

2014-01-31 Thread Pol Hallen
Hi Robert and thanks for your reply :-) I found rblcheck script (debian package) that check if an IP has inside blacklist I need information to how prevent this situation, because when my IP is inside black list is too late :-/// thanks! Pol

Re: behavior about black list

2014-01-31 Thread Pol Hallen
> Make sure you avoid anything that's likely to get your IP address(es) > blacklisted: for instance don't send spam or distribute malware. sure! Jim surely I do what I can... but if a malware goes inside and takes an account... this become a problem :-( that account maybe goes inside to black lis

behavior about black list

2014-01-31 Thread Pol Hallen
Hi all, I've a server with one static IP and many virtual hosts. I've fear if a virtual host could go inside a black list, and the result should be all virtual host become black listed... so, what's the better way to escape this situation? buy other IPs? but if I've 100 virtual host with same IP

.forward with virtual host

2014-01-11 Thread Pol Hallen
Hi all, into a normal situation I can use .forward file (to forward the email) i.e.: cat /home/user1/.forward user1 \externalu...@example.com using virtual host how can I automatic forward? thanks for help Pol

Re: virtual domains and aliases

2013-11-21 Thread Pol Hallen
Thanks! Very cool! Pol > On Tue, Nov 19, 2013 at 05:33:30PM -0500, Wietse Venema wrote: > >> --8<-snip-here--8<-- >> #!/bin/sh >> >> case $# in >> 0) echo usage: $0 example.com ... 1>&2; exit 1;; >> esac >> >> VIRTUAL_MAP=/etc/postfix/virtual >> VIRTUAL_DOMAINS=/etc/postfix/virtual_domains >> >>

Re: virtual domains and aliases

2013-11-19 Thread Pol Hallen
> Instead, use a script that generates explicit postmas...@example.com > entries etc. when you host a new domain. thanks for reply. Is there an example of that script? Need I create a virtual domain or only something that redirect (i.e. postmas...@example.org) to virtual domain? Thanks! Pol

virtual domains and aliases

2013-11-19 Thread Pol Hallen
Hi all :-) I've several virtual domains and I looking for how create the aliases for each domains (aliases like postmaster, root, etc.) I found this http://serverfault.com/questions/171616/postfix-how-to-make-aliases-work-for-virtual-domains that says something like this: "putting postmaster, roo

Re: reject_sender_login_mismatch problem

2013-11-16 Thread Pol Hallen
> Perhaps you can use reject_authenticated_sender_login_mismatch instead. > http://www.postfix.org/postconf.5.html#reject_authenticated_sender_login_mismatch Yeah! Thanks Jones :-) Solved! Pol

Re: reject_sender_login_mismatch problem

2013-11-16 Thread Pol Hallen
alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases anvil_rate_time_unit = 10s anvil_status_update_time = 120s append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix delay_warning_time = 10m disable_vrfy_command = yes helpful_warnings = yes h

reject_sender_login_mismatch problem

2013-11-16 Thread Pol Hallen
Hi all :-) I configurated postfix to check if a client is within the smtpd_sender_login_maps = hash:/etc/postfix/smtpd_sender_login_maps with sasl sender authentication, and: smtpd_recipient_restrictions = permit_mynetworks, permit_inet_interfaces, reject_sender_login_mis

sasl by sender

2013-11-15 Thread Pol Hallen
Hi all, I've finished to read sasl authentication and I can send email using it. Now I'd like that postfix send the email using the sasl username (te...@mydomain.com) and not with the sender of email client, because with 1 sasl authentication, every users can send with same sasl account, ie: us..

Re: blocks spam (hacked account)

2013-10-23 Thread Pol Hallen
> Try: postfwd or policyd rate limiting. Sure! Thanks! A last question: real situation: sasl+tls user accounts. supposed situation: someone hack an account and take user+pass. That person do a script like this: i=0 while [ $i != 50 ]; do echo test | /usr/bin/mail -s "test message$i" "vic...@dom

blocks spam (hacked account)

2013-10-23 Thread Pol Hallen
Hi all :-) I read a lot but not enough... I need a something to block the spam when an account email has violated... so the spammer can use that account to relay spam emails to "the world" Are there postfix options to block this (or slowing down) or I need use third parts software? Need I work

saslpasswd2 (and auth)

2013-10-19 Thread Pol Hallen
Hi all :-) I configurated a postfix with sasl authentication. saslpasswd2 -c -u `postconf -h myhostname` test0 testsaslauthd -u test0 -p test0 0: NO "authentication failed" Try with: saslpasswd2 -c test1 testsaslauthd -u test1 -p test1 0: OK "Success." sasldblistusers2 te...@domain1.org:

Re: mxbackup quote

2013-10-18 Thread Pol Hallen
> Which kind of quota? Mailbox volume? Mail volume send quota? ...? for mail volume send quota. I didn't found anything searching online thanks > As a basic principle: Postfix routes and filters message transport, but it > doesn't deal with the details of mailbox management etc. > > p@rick > >

Re: mxbackup quote

2013-10-18 Thread Pol Hallen
> > > Am 18.10.2013 21:27, schrieb Pol Hallen: >> I configurated postfix ad mxbackup. show set a quote forma each domain? > > *what* are you talking about? > that pretty much makes no sense for anybody but you > sorry for mistake (incorrect tablet language). I config

mxbackup quote

2013-10-18 Thread Pol Hallen
howdy I configurated postfix ad mxbackup. show set a quote forma each domain? thanks

real postfix mail server (isp)

2013-10-04 Thread Pol Hallen
Howdy :-) After configurated postfix like isp mail server, do I need other things to do a real mail server (from other ISP)? So, every real isp in the world can send to me same email? Thanks Pol

Re: multiple relay

2013-07-11 Thread Pol Hallen
> http://www.postfix.org/SOHO_README.html#client_sasl_sender Wietse thanks :-) Pol

multiple relay

2013-07-10 Thread Pol Hallen
Hi all :-) I'm not sure which parameters is correct, I've: pc1 - user1 pc2 - user2 pc3 - user3 I need set postifx with multiple relay: if user1 send an email to domain1, postfix should be send using mail.server1.org with sasl. if user2 send an email to domain2, postfix should be send using mail

Re: delivery status notification (DNS)

2013-07-08 Thread Pol Hallen
> Do you have a AV scanner or some other after queue content filter? If > yes postfix is maybe telling you that the message has been transfered > to this next hop. IMHO you should ditch DSN because no one is > using/allowing it anyway, so trying to get it right is a fruitless > effort. Hello and t

delivery status notification (DNS)

2013-07-08 Thread Pol Hallen
Follow official postfix page (http://www.postfix.org/DSN_README.html) I've: smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/esmtp_access cat /etc/postfix/esmtp_access # Allow DSN requests from local subnet only 192.168.1.0/24 silent-discard 0.0.0.0/0 silent-

Re: notify_classes

2013-07-07 Thread Pol Hallen
> Are you running a small personal MTA serving just yourself and perhaps > just a few more people? If so, perhaps this is OK. yes > My recommendation is to set "notify_classes = " (empty) ok > Postfix has a delay_warning_time parameter. This warning is correctly > sent at most once per messag

Re: exclude 127.0.0.1 from smtpd_tls_auth_only = yes

2013-07-07 Thread Pol Hallen
> As it is now, no user, not even root, can override their own wildcard > bind with a more specific bind. And that is a bug. thanks all for help! :-) I uncannily solved put "may" rather than "encrypted" Pol

notify_classes

2013-07-07 Thread Pol Hallen
Hi all :-) I using notify classes: notify_classes = bounce, 2bounce, data, delay, policy, protocol, resource, software postmaster receives correct "alert" emails I'd like have also a notify when a local user send an email and there's an error (something like remote smtp does not run - for purpos

Re: exclude 127.0.0.1 from smtpd_tls_auth_only = yes

2013-07-06 Thread Pol Hallen
Thanks all for replies :-) I use linux. So, what should be do? I'm confused :-/ How clone submission service? thanks for help Pol

Re: exclude 127.0.0.1 from smtpd_tls_auth_only = yes

2013-07-05 Thread Pol Hallen
Thanks for your reply :-) I added 127.0.0.1:submission inet n - - - - smtpd -o smtpd_tls_auth_only=no to master.cf but I've same problem... thanks Pol

exclude 127.0.0.1 from smtpd_tls_auth_only = yes

2013-07-05 Thread Pol Hallen
Hi all! I forced postfix to uses smtpd_tls_auth_only = yes but I need exclude TLS from 127.0.0.1 I known there's a change to do in master.cf but I don't know how resolve any idea? thanks! Pol

Re: virtual user (unknown user)

2013-05-16 Thread Pol Hallen
> - Is this the right domain name but the wrong delivery agent? myhostname = server1.fuckaround.org mydomain = fuckaround.org

Re: virtual user (unknown user)

2013-05-16 Thread Pol Hallen
> Why are you giving mail for "fred" to the local(8) delivery agent? Sorry :-) Tell me how does not give to "fred". Also commenting the line with mailbox_command, I don't understand how delivery mail to virtual host users. thanks

Re: virtual user (unknown user)

2013-05-16 Thread Pol Hallen
> You use local(8). As documented "fred" MUST exist as a UNIX system > account name, or as an alias in the LOCAL (NOT virtual) aliases(5) > file (typically named /etc/aliases or similar). HI and thanks for your reply :-) I've this line: mailbox_command = /usr/bin/procmail -a "$EXTENSION" DEFAULT

Re: block spam mail from lan]

2013-05-11 Thread Pol Hallen
> How about how offensive and rude it is to post to a public mailing list from a domain named "fuckaround.org"? Don't bother replying, you've already been blacklisted. offensive? offensive for who? It'a a name like another. It's a "nice" name to test my server. My ip is not blacklisted and thank

Re: block spam mail from lan

2013-05-11 Thread Pol Hallen
> And the most effective countermeasure to spam originating from devices > on the LAN has nothing to do with Postfix. As most spamware in the wild > today still attempts to send direct-to-MX, simply creating a TCP 25 > egress filter at your edge router/firewall will give the best bang for > the bu

block spam mail from lan

2013-05-10 Thread Pol Hallen
Hi folks! I'm newbie and I study postfix What I should be use to (check) and block attempt spam from my lan to internet?

How bounce mail with error

2013-04-17 Thread Pol Hallen
Hi all! Almost configured postfix on my lan, I can't discover how bounce mail when the size attachments is too big to destination server. i.e. I send an email with attachments 30Mb to @yahoo.it, @tiscali.it by mailq I see the error: destination server can't accept that mail because the attachmen

How bounce mail with error

2013-04-17 Thread Pol Hallen
Hi all! Almost configured postfix on my lan, I can't discover how bounce mail when the size attachments is too big to destination server. i.e. I send an email with attachments 30Mb to @yahoo.it, @tiscali.it by mailq I see the error: destination server can't accept that mail because the attachmen

Keep backup of mails

2011-07-15 Thread Pol Hallen
Hi folks :-) This it my first post.. reading howto of postfix I understand how keep a copy of all email that forward my postfix. I've only one production server, I'd like keep copy (on this server) of all emails. carbon copy :-) How can configure postfix to keep emails? thanks! Pol PS: I use