Re: cannot find your hostname

2009-09-02 Thread Scott Haneda
On Sep 2, 2009, at 4:07 PM, Sahil Tandon wrote: As clearly documented in postconf(5), How exactly does one get to that man page? man postconf That of course works. man postconf(5) -bash: syntax error near unexpected token `(' man postconf5 No manual entry for postconf5 Does t

Re: Email server health check?

2009-08-13 Thread Scott Haneda
On Aug 12, 2009, at 10:33 PM, email builder wrote: I am wondering if anyone has advice on where there are any email health checks online. I used to use dnsstuff.com but they have since gone commercial. You have been given links and other suggestions for this that are sound, I would foll

Re: how to forbid the bounced mail?

2009-08-04 Thread Scott Haneda
On Aug 4, 2009, at 9:00 PM, Chookiex wrote: Hi All, I want to do a test with postfix. For example, I will relay many mails to postfix and postfix delivery maiils to mda. But you know, mda may not be stable enough, so mda would not work occasionally. At this time, the postfix would bounce m

Re: How to setup postfix to have port 25 for receive only

2009-07-27 Thread Scott Haneda
I don't think that's a terribly good idea, but anyway: main.cf: smtpd_client_restrictions = check_client_access pcre:/path/to/file /path/to/file: /(ppp|dialup|adsl)/ REJECT You can move the check_client_access restriction to any other smtpd_xxx_restrictions if you want. You probably

Re: OT: Why are my servers strong passwords compromised

2009-07-18 Thread Scott Haneda
On Jul 18, 2009, at 4:38 AM, Damian Myerscough wrote: Hello, Just out of curiosity how do you let your users change their passwords? Adding to this, do you have a forgot password feature that perhaps gives them passwords to a master control panel of some form? Did you distribute their

Re: Should MX record name be same as hostname?

2009-07-14 Thread Scott Haneda
On Jul 14, 2009, at 12:06 PM, Tim Legg wrote: ;; ANSWER SECTION: timothylegg.com.9220IN MX 10 mail.timothylegg.com. My hostname is genex.timothylegg.com on my machine and my MX record points to mail.timothylegg.com I was wondering if the MX record should point to the

Best practices for port setup

2009-07-14 Thread Scott Haneda
Hello. I am looking for clarification on RFC 5068 3.2 or any related/ updated/replaced RFC's. Outside of those, general best practice ideas for moving forward would be appreciated. In regards to AUTH on ports 25 and 587, I was under the impression we should be trying to migrate all clients

Re: TLS library problems

2009-07-12 Thread Scott Haneda
On Jul 12, 2009, at 1:07 PM, Wietse Venema wrote: Scott Haneda: Thanks for the estimation. Comparing a working transaction with one that does not work, shows no difference. The one part I need even more debug log data, only states "start tls" and then "failure". I someho

Re: TLS library problems

2009-07-12 Thread Scott Haneda
On Jul 11, 2009, at 6:40 PM, Barney Desmond wrote: 2009/7/11 Wietse Venema : system.log:Jul 10 00:07:57 trex postfix/smtpd[45598]: warning: TLS library problem: 45598:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:571: This is openssl's way of saying that the c

Re: TLS library problems

2009-07-12 Thread Scott Haneda
On Jul 10, 2009, at 4:42 PM, Sahil Tandon wrote: On Fri, 10 Jul 2009, Scott Haneda wrote: system.log:Jul 10 00:07:57 trex postfix/smtpd[45598]: warning: TLS library problem: 45598:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:571: Debug the proxy. What is

Re: Allow a group of unauthenticated senders

2009-07-11 Thread Scott Haneda
On Jul 10, 2009, at 10:49 PM, priscilla wrote: In domain x.com i want to authenticate all users who needs to send mail. For some users alone (i will specify them in a seperate text file) i dont want to authenticate the sender. For example a...@x.com should provide password for sending mail.

TLS library problems

2009-07-10 Thread Scott Haneda
Hello, I am seeing a lot of these in my syslog logs. I am not sure what they mean, google did not yield a lot other than people calling out an incorrctly named cert/key system.log:Jul 10 00:07:57 trex postfix/smtpd[45598]: warning: TLS library problem: 45598:error:140760FC:SSL routines:S

Postfix and AUTH

2009-07-09 Thread Scott Haneda
Hello, I have been looking into this for the better part of today. I am using a proxy in front of postfix. In order to be able to AUTH a user through the proxy, the proxy needs the 250-AUTH credentials to show up. I discovered that mynetworks disables this for those hosts listed in myne

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Scott Haneda
On Jul 8, 2009, at 10:00 PM, ram wrote: On Wed, 2009-07-08 at 19:10 +0200, Ignacio Garcia wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk- email fr

Re: Version 2.5.5

2009-05-23 Thread Scott Haneda
On May 23, 2009, at 5:10 PM, Wietse Venema wrote: Scott Haneda: I have a test server about ready to become a live server, version 2.5.5. Is it correct that prior to the 2.6 release, that 2.5.7 would be the latest I want to run? Unlike other products, you are not expected to stop using

Version 2.5.5

2009-05-23 Thread Scott Haneda
I have a test server about ready to become a live server, version 2.5.5. Is it correct that prior to the 2.6 release, that 2.5.7 would be the latest I want to run? I see http://www.postfix.org/announcements/postfix-2.5.7.html shows what I would call minor issues for the 2.5.7 release set.

Re: Compromised SMTP account

2009-05-22 Thread Scott Haneda
On May 22, 2009, at 5:28 PM, Sahil Tandon wrote: On Fri, 22 May 2009, Scott Haneda wrote: After inspection, I would want to re-queue the good ones, and leave the bad ones behind. Any pointers would be appreciated. http://www.postfix.org/QSHAPE_README.html http://www.postfix.org/postcat.1

Compromised SMTP account

2009-05-22 Thread Scott Haneda
I have been reading up on how SMTP works in postfix, especially the queue. As I am just about to toggle the switch over from a different SMTP/POP/IMAP server to Postfix/Dovecot, I want to make sure I know how to deal with problems that come up. Yesterday, a user's account was phsished on m

Re: Sent Mail Shows FQDN in Email Address

2009-05-18 Thread Scott Haneda
On May 18, 2009, at 9:15 PM, LuKreme wrote: On 18-May-2009, at 21:47, Scott Haneda wrote: Glad you brought this up, often times I am using example.com and then ns.example.com and imap.example.com and want to refer to something else outside of example.com. At least example.net and

Re: Sent Mail Shows FQDN in Email Address

2009-05-18 Thread Scott Haneda
On May 18, 2009, at 8:08 PM, LuKreme wrote: On 17-May-2009, at 19:44, Carlos Williams wrote: u...@mail.myserver.com myserver.com is a real domain name. Is it YOUR domain name? Somehow I doubt it. Thank you for pointing this out. I feel bad for anyone at domain, company, foo, bar, foob

Re: Options for immediate email address activation in postfix.

2009-05-14 Thread Scott Haneda
On May 14, 2009, at 6:07 PM, Barney Desmond wrote: If this turns into a high volume site, would file based aliases fall apart after a certain amount? I also see maintaining a alias mapping via a file managed by a web service to be prone to error. If anything I wold store the mappings in a

Options for immediate email address activation in postfix.

2009-05-14 Thread Scott Haneda
A client of mine has a web service where a simple web page can be made via a browser to crete an identity for them online. Build a page with web tools, toggle a setting to add DNS records, update the registrar to point to the NS's, and they have a live webpage in short order. They want to b

Re: Relocated Users

2009-05-14 Thread Scott Haneda
On May 14, 2009, at 3:18 AM, Barney Desmond wrote: 2009/5/14 Scott Haneda : So If I am getting this correct, auto-reply is not something native to postfix other than in a very basic form, and I should look to 3rd party solutions that have matured? Correct, it is an invention on top of

Re: Relocated Users

2009-05-13 Thread Scott Haneda
On May 13, 2009, at 2:14 PM, mouss wrote: Thank for any info or links to other docs I am missing. There are problems with auto-responders: - first, there is the backscatter problem (sending the reply to a forged address...). - second, most auto-responders are broken, in so many ways. so at

Re: Relocated Users

2009-05-13 Thread Scott Haneda
On May 13, 2009, at 1:08 PM, Randy wrote: You can still do an auto-reply using scripts. Hand off the user's message, then send it to the new location. I used smtpd_recipient_restrictions and created a list. I then passed this on to the autoresponder once a user/input validation script made

Re: Relocated Users

2009-05-13 Thread Scott Haneda
On May 13, 2009, at 10:40 AM, Fabio Viero wrote: I need to do something like this: Someone sends an e-mail to u...@domain.com Someone gets a reply from postfix saying "User has moved to newu...@newdomain.com" I need postfix to STILL deliver the message to u...@domain.com (which doesn't happens)

Re: Newb question about too many sent mail

2009-05-06 Thread Scott Haneda
On May 6, 2009, at 12:10 AM, Philippe Le Gal wrote: I'm a newbie to Postfix. My Postfix server is functionnal but the stats (mailgraph) show lot of sent messages : example for yesterday : Received messages : 2818 Sent messages : 2766 I don't think that the users of the mail server sent so ma

Re: Postfix Setup

2009-05-06 Thread Scott Haneda
On May 6, 2009, at 12:29 AM, Rik wrote: On Wed, 2009-05-06 at 03:18 -0400, Aaron Wolfe wrote: SNIP As it stands, this list gets poorly posed or lazy questions from time to time, usually from new users. The trend in these cases is that the new user ends up feeling insulted. This may well

Re: Postfix Setup

2009-05-05 Thread Scott Haneda
On May 5, 2009, at 12:58 PM, Aaron Wolfe wrote: I fully believe that the experts on this list have good intentions and I appreciate the time they spend helping us. However, this scenario has happened quite a few times.. A new user asks questions that are vague or easily answered by the docs, e

Re: question on permit_sasl_authenticated and check_sender_access

2009-05-05 Thread Scott Haneda
On May 5, 2009, at 12:57 AM, Gaƫl Lams wrote: What seems to happen is that some providers transparently send emails through their own smtp server instead of allowing our users to use the configured smtp server. The check_sender_access check is after permit_sasl_authenticated with the idea that

Re: Suggestions on submission port config

2009-05-01 Thread Scott Haneda
On May 1, 2009, at 7:19 AM, Jorey Bump wrote: Scott Haneda wrote, at 04/30/2009 10:11 PM: What happens is, under heavy MTA load on port 25, I will run out of connection slots on port 25. Have you investigated the nature of this problem? Thoroughly. My current email server lacks control, it

Re: Suggestions on submission port config

2009-05-01 Thread Scott Haneda
On May 1, 2009, at 6:30 AM, Jorey Bump wrote: Scott Haneda wrote, at 04/30/2009 10:31 PM:> On Apr 24, 2009, at 9:43 PM, Jorey Bump wrote: Since one of the purposes of the submission port is to support road warriors, I feel it should be as secure as possible and the entire communication sho

Re: Suggestions on submission port config

2009-04-30 Thread Scott Haneda
Jorey, thanks for your email also. Sorry for the delay, but you and Barney have been hugely instrumental in getting me on track with this. On Apr 24, 2009, at 9:43 PM, Jorey Bump wrote: Scott Haneda wrote, at 04/24/2009 07:41 PM: Thanks for this, this is getting me on track, comments

Re: Suggestions on submission port config

2009-04-30 Thread Scott Haneda
more clarifications thought if you do not mind. On Apr 24, 2009, at 9:35 PM, Barney Desmond wrote: 2009/4/25 Scott Haneda : If you do not like a lack of TLS enforcement on the submission port what do [snip... on SSL/TLS methods] think most are on 587 as a result of most ISP's filteri

Re: delivery temporarily suspended !

2009-04-29 Thread Scott Haneda
On Apr 29, 2009, at 1:31 AM, Nasser Heidari wrote: Hi, This is Nasser. I'm running postfix-2.5.5,1 on FreeBSD 7.1-STABLE . Today I take a look at my graphs and see there are about 1500 Email in Queue. Then I run mailq on the server and see lots of messages like this: (delivery temporarily suspe

Re: how to detect spam attacks

2009-04-26 Thread Scott Haneda
I'm not sure if you can on your hardware, but some of my most effective countermeasures are ehlo/helo checking for hostname does not contain a ".". This can cause a very small amount of false positives so please do check your logs first. Second is greylisting. Third is checking if the ehlo

Working with the postfix log files

2009-04-24 Thread Scott Haneda
As a test, I have disabled authenticated SMTP on port 25. I just fired up thunderbird, set the SMTP port to 25, and enabled SSL. Sending a test email, and I get an error back from the Thunderbird. Thunderbird chewed on this for a long time. My concern is what was in the logs. If a custo

Re: Suggestions on submission port config

2009-04-24 Thread Scott Haneda
On Apr 24, 2009, at 4:50 PM, Larry Stone wrote: On 4/24/09 6:41 PM, Scott Haneda at talkli...@newgeo.com wrote: If you do not like a lack of TLS enforcement on the submission port what do you suggest for users who just do not care enough to use any TLS? You let them work on port 25? I could

Re: Suggestions on submission port config

2009-04-24 Thread Scott Haneda
Thanks for this, this is getting me on track, comments interspersed below... On Apr 24, 2009, at 6:51 AM, Jorey Bump wrote: Scott Haneda wrote, at 04/24/2009 07:58 AM: I am a little confused about main.cf and master.cf. Is there overlap in some of the settings? Do some settings exist in

Re: private/anvil errors

2009-04-24 Thread Scott Haneda
On Apr 24, 2009, at 6:15 AM, Wietse Venema wrote: Scott Haneda: Those seem to be the bulk of the log lines. What is this error in regards to, and any ideas on how to solve it? Don't turn on VERBOSE LOGGING. Ahh, thanks. In the log, how does one tell the difference between n

Re: private/anvil errors

2009-04-24 Thread Scott Haneda
On Apr 24, 2009, at 5:07 AM, Wietse Venema wrote: Scott Haneda: On Apr 24, 2009, at 4:50 AM, Wietse Venema wrote: Still working on getting postfix and dovecot playing nice, current issue I am trying to understand and solve is this error: Apr 24 02:14:58 catalyst postfix/smtpd[358]: private

Re: Postfix get_service_attr, dovecot, mysql, OS X

2009-04-24 Thread Scott Haneda
On Apr 23, 2009, at 4:41 PM, Scott Haneda wrote: Looking at the log, I hit an error: Apr 23 16:28:02 postfix/qmgr[49216]: 0B073225D0D: from=>, size=410, nrcpt=1 (queue active) Apr 23 16:28:02 postfix/qmgr[49216]: 11803227FEE: from=>, size=419, nrcpt=1 (queue active) Apr 23 16:28:02 p

Re: private/anvil errors

2009-04-24 Thread Scott Haneda
On Apr 24, 2009, at 4:50 AM, Wietse Venema wrote: Still working on getting postfix and dovecot playing nice, current issue I am trying to understand and solve is this error: Apr 24 02:14:58 catalyst postfix/smtpd[358]: private/anvil: wanted attribute: status I have 123 log lines of that, they

Suggestions on submission port config

2009-04-24 Thread Scott Haneda
Hello, mail_version = 2.5.5, Dovecot for pop and imap, myqsl as the auth backend. I am a little confused about main.cf and master.cf. Is there overlap in some of the settings? Do some settings exist in both files, or at least are interchangable? If this is the case, under what conditions

private/anvil errors

2009-04-24 Thread Scott Haneda
Still working on getting postfix and dovecot playing nice, current issue I am trying to understand and solve is this error: Apr 24 02:14:58 catalyst postfix/smtpd[358]: private/anvil: wanted attribute: status I have 123 log lines of that, they vary somewhat: wanted attribute: count wanted a

Re: How to change the log location

2009-04-24 Thread Scott Haneda
On Apr 23, 2009, at 7:21 PM, MacShane, Tracy wrote: -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Scott Haneda Sent: Friday, 24 April 2009 11:54 AM To: postfix-users@postfix.org Subject: How to change the log location I

How to change the log location

2009-04-23 Thread Scott Haneda
I think I have traveled from one end of the internet to the other on this one :) How do you change the log location for postfix? Currently, the log is sent to /var/log/mail.log on Mac OS X. I would like to move it to /opt/local/var/log/postfix/mail.log since that is where postfix is. OS

Postfix get_service_attr, dovecot, mysql, OS X

2009-04-23 Thread Scott Haneda
Hello, this is a new install of postfix with dovecot and mysql as an auth db for me. I have built everything in /opt/local/. Currently, I have pop, smtp, imap working, auth'ing against mysql. I can pop login, smtp login, and imap login. When I make a telnet conenction to port 25, I am all