Re: How to block incoming emails with ZIP attachments containing EXE

2013-04-19 Thread Simon Brereton
On 19 Apr 2013 18:47, "Andreas Freyvogel" wrote: > > Hi All, > > I'm not sure if this is the correct group to ask so apologies if it's not. > > I wanted to ask if anyone has a good way of sending emails that have ZIP > attachments that contain EXE files to QUARANTINE. I am using POSTFIX sending >

Re: need advice

2013-04-01 Thread Simon Brereton
On 1 Apr 2013 18:16, "Patrick Lists" wrote: > > On 04/01/2013 04:59 PM, Muhammad Yousuf Khan wrote: >> >> so what you please have to suggest. >> and obviously no option of third party like google calender etc. >> we are looking for some centralized solution > > > In addition to the previous sugges

Re: TLS Question, untrusted connection

2013-03-26 Thread Simon Brereton
On 26 March 2013 10:53, Marko Weber | ZBF wrote: > > > Am 2013-03-26 10:30, schrieb Reindl Harald: >> >> Am 26.03.2013 09:44, schrieb Marko Weber|ZBF: >>> >>> Mar 25 14:04:35 mail postfix/smtpd[31103]: Untrusted TLS connection >>> established from >>> loninmrp15.uk.db.com[160.83.44.131]: TLSv1 wit

Re: fatal: proxy:mysql:/etc/postfix/mailalias.cf(0,lock|fold_fix): table lookup problem

2013-03-05 Thread Simon Brereton
On 5 Mar 2013 19:07, "Wietse Venema" wrote: > > Simon Brereton: > > Mar 5 08:45:14 mail postfix/proxymap[24831]: warning: mysql query > > failed: MySQL server has gone away > > The mysql server closed the connection (or crashed). > > > Mar 5 10:

Re: fatal: proxy:mysql:/etc/postfix/mailalias.cf(0,lock|fold_fix): table lookup problem

2013-03-05 Thread Simon Brereton
On 5 March 2013 16:47, Wietse Venema wrote: > Simon Brereton: >> Hi >> >> After years of a smoothly running mail server, my logs are starting to >> fill with this error message: >> fatal: proxy:mysql:/etc/postfix/mailalias.cf(0,lock|fold_fix): table >> l

fatal: proxy:mysql:/etc/postfix/mailalias.cf(0,lock|fold_fix): table lookup problem

2013-03-05 Thread Simon Brereton
Hi After years of a smoothly running mail server, my logs are starting to fill with this error message: fatal: proxy:mysql:/etc/postfix/mailalias.cf(0,lock|fold_fix): table lookup problem I haven't updated anything or changed any configs (in either mysql or postfix) so I'd appreciate some hints

Re: Lost connection

2013-02-27 Thread Simon Brereton
On 27 February 2013 13:16, Reindl Harald wrote: > > > Am 27.02.2013 13:14, schrieb Muzaffer Tolga Özses: >> >> On 02/27/2013 02:04 PM, Wietse Venema wrote: >>> egrep '(warning|error|fatal|panic): >> >> Unfortunately, all I get was these and similar, and the most recent one is >> from 2 days ago.

Re: How useful are header & body checks when used along side Amavis?

2012-12-29 Thread Simon Brereton
On Dec 29, 2012 8:58 AM, "John Allen" wrote: > > My setup is Postfix (2.9.3) + Postgrey + Amavis-new + Dovecot(2.1.7) running on Debian(Wheezy)/Ubuntu(12.04) servers. > I have always assumed that header/body checks were worthwhile because they would catch some mal-mail early and thus reduce the ov

Re: postconf expansion

2012-12-21 Thread Simon Brereton
On Dec 21, 2012 6:13 PM, "Viktor Dukhovni" wrote: > > On Fri, Dec 21, 2012 at 03:10:11PM -0500, Wietse Venema wrote: > > > Viktor Dukhovni: > > > I've not looked too closely at what it would take for "postconf" > > > to be able to perform fully recursive parameter expansion. It is > > > apparently

Re: delivering mail to separate users

2012-12-20 Thread Simon Brereton
On 20 December 2012 12:44, Viktor Dukhovni wrote: > On Thu, Dec 20, 2012 at 12:25:03PM -0500, Simon Brereton wrote: > >> >> I did postmap the virtual_alias_maps. Is there something else I should I >> >> do? >> > >> > No, but you've likel

Re: delivering mail to separate users

2012-12-20 Thread Simon Brereton
On 20 December 2012 08:07, Viktor Dukhovni wrote: > On Thu, Dec 20, 2012 at 12:24:30AM -0500, Simon Brereton wrote: > >> >> newu...@example.org direc...@example.org, newu...@example.org >> >> >> >> But it occurs to me that this will create a loop - n

Re: delivering mail to separate users

2012-12-19 Thread Simon Brereton
On 19 December 2012 22:05, Viktor Dukhovni wrote: > On Wed, Dec 19, 2012 at 05:27:17PM -0500, Simon Brereton wrote: > >> One of the clients I support is getting a consultant to do some >> sensitive work for them and so one of the directors wants to get a >> copy of all th

Re: delivering mail to separate users

2012-12-19 Thread Simon Brereton
On Dec 19, 2012 10:06 PM, "Viktor Dukhovni" wrote: > > On Wed, Dec 19, 2012 at 05:27:17PM -0500, Simon Brereton wrote: > > > One of the clients I support is getting a consultant to do some > > sensitive work for them and so one of the directors wants to get a &g

delivering mail to separate users

2012-12-19 Thread Simon Brereton
Hi One of the clients I support is getting a consultant to do some sensitive work for them and so one of the directors wants to get a copy of all the mails sent to this new mail box. At first, I though I would simply set up the new mailbox (all domains are virtual) and then add an alias to virtua

Re: SSL Certificates

2012-11-23 Thread Simon Brereton
On Nov 23, 2012 9:48 PM, "The Doctor" wrote: > > I was wondering who is the best CA Cert for Postfix? The one YOU trust the most - even if that's someone no one else has heard of. Simon

Re: Helo command rejected, host not found.

2012-08-16 Thread Simon Brereton
On Aug 16, 2012 1:24 PM, "Jim Wright" wrote: > > On Aug 16, 2012, at 11:48 AM, Simon Brereton wrote: > > > mail #554 5.7.1 : Helo command rejected: Host not found ## > > > > > If I added in a check_helo_access before reject_invalid_helo_name that would w

Helo command rejected, host not found.

2012-08-16 Thread Simon Brereton
Hi I have a line like this in my logs: mail #554 5.7.1 : Helo command rejected: Host not found ## This is clearly because I have reject_invalid_helo_name in my main.cf Unfortunately, the fools at steelpartners.com have decided it's quite okay to helo with sp.com (which actually resolves to Scott

Re: Variable Substitutions

2012-07-17 Thread Simon Brereton
On 17 July 2012 15:09, Wietse Venema wrote: > Viktor Dukhovni: >> On Tue, Jul 17, 2012 at 02:49:10PM -0400, Simon Brereton wrote: >> >> > Hi >> > >> > A quick question.. >> > >> > Does Postfix do the variable substitutions after readin

Re: multiple postmaster aliases

2012-06-25 Thread Simon Brereton
On 25 June 2012 09:23, James B. Byrne wrote: > > On Mon, June 25, 2012 11:50, Simon Brereton wrote: >> On 22 June 2012 16:57, Wietse Venema wrote: >>> Simon Brereton: >>>> I would like to use an alias file that routes any of >>>> postmas...@exam

Re: multiple postmaster aliases

2012-06-25 Thread Simon Brereton
On 22 June 2012 16:57, Wietse Venema wrote: > Simon Brereton: >> I would like to use an alias file that routes any of >> postmas...@example.net, postmas...@example.com, >> postmas...@example.info, postmas...@example.org, etc (and also abuse@) >> to postmas...@example

Re: newsreader and subscription

2012-05-29 Thread Simon Brereton
On May 29, 2012 6:03 PM, "mouss" wrote: > > Le 28/05/2012 09:53, Georg Schönweger a écrit : > > Hi, > > > > i'm using a Newsreader to read this list (via news.gname.org). But afaik > > i have to be subscribed to write to this list. And if i'm subscribed i > > will receive every post via email too,

Re: attempt to connect by spam appliance

2012-04-23 Thread Simon Brereton
On 23 April 2012 22:28, snowie wrote: > Hello Postfix-users, > > Just curious. I got these continuous attempt to connect to email server > by my spam appliance. > Any advice ? > > Thank you and best regards. > > Snowie > > Apr 24 10:19:15 email postfix/smtpd[2232]: connect from > firewall.abc.com

Re: Delaying mail delivery

2012-04-22 Thread Simon Brereton
On Apr 22, 2012 10:23 PM, wrote: > > > > vis...@norpknit.com: > >> I feel that all the messages has to be kept in queue as hold and there > >> should be some script that will check the queue receiving time and will > >> create a crontab with postsupre -r [message ID] for defined time to be > > > >

Re: spam to postmaster

2012-02-17 Thread Simon Brereton
On Feb 17, 2012 6:14 PM, "Reindl Harald" wrote: > > > > Am 17.02.2012 21:59, schrieb Peter Blair: > > On Fri, Feb 17, 2012 at 3:54 PM, Reindl Harald wrote: > >> how do other people act with such braindead sh**t? > > > > Look into greylisting it. You'll find that greylisting could very > > well d

Re: High Number Of Connection Attempts

2012-02-04 Thread Simon Brereton
On Feb 4, 2012 1:03 PM, "Pete" wrote: > > On 04/02/2012 17:58, Nick Bright wrote: >> >> On 2/4/2012 11:47 AM, Pete wrote: >>> >>> Hello, >>> >>> Can someone confirm that the log excerpt below is most likely a bot of >>> some kind attempting to authenticate to my Postfix server please ? >>> >> >> T

Re: Postfix stable release 2.9.0

2012-02-01 Thread Simon Brereton
On Feb 1, 2012 11:20 PM, "ml" wrote: > > > Le mercredi 01 février 2012 à 19:30 -0800, Ori Bani a écrit : > > 2012/2/1 ml : > > > > > > Le jeudi 02 février 2012 à 03:13 +0100, ml a écrit : > > >> Le mercredi 01 février 2012 à 23:01 +0100, Reindl Harald a écrit : > > >> > > > >> > Am 01.02.2012 22:5

Re: Queue directories on faster media?

2012-01-30 Thread Simon Brereton
On 30 January 2012 12:49, /dev/rob0 wrote: > On Mon, Jan 30, 2012 at 01:09:29AM -0800, Ori Bani wrote: >> On Mon, Jan 30, 2012 at 12:42 AM, Ralf Hildebrandt >> wrote: >> > * Ori Bani : >> >> I'm curious to get feedback on the idea of mounting all the >> >> postfix queue directories on a faster me

Re: Stats on smtp method used by clients (with pflogsumm or not)

2012-01-20 Thread Simon Brereton
On 20 January 2012 09:47, James Seymour wrote: > On Fri, 20 Jan 2012 08:15:35 -0500 (EST) > Wietse Venema wrote: > > [snip] >> >> In the logging you will see postfix/smtps/smtpd, >> postfix/submission/smtpd and postfix/smtpd. > [snip] > > Two things (addressed to the OP and other readers): > >  

Re: Spamcop listed gmail?

2012-01-19 Thread Simon Brereton
On Jan 19, 2012 7:13 PM, "Steve Fatula" wrote: >> >> From: Robert Fitzpatrick >> To: Postfix >> Sent: Monday, January 16, 2012 1:12 PM >> Subject: Spamcop listed gmail? >> >> Perhaps this is not the place for this, I didn't find a mailing list on >> the spamcop site and just looking to see if th

Re: Postfix Mac Aministration

2012-01-05 Thread Simon Brereton
On 5 January 2012 11:24, Eric Lemings wrote: > > On Jan 4, 2012, at 11:46 PM, Eric Lemings wrote: > >> >> On Jan 4, 2012, at 9:54 PM, /dev/rob0 wrote: >> >>> On Wednesday 04 January 2012 20:45:23 Eric Lemings wrote: I just noticed that two of my Postfix configuration variables were set

Re: Postfix-Amavisd quarantined mail inspection

2011-12-29 Thread Simon Brereton
Ask, not all.. On Dec 29, 2011 9:28 AM, "Simon Brereton" wrote: > > On Dec 29, 2011 9:15 AM, "Nikolaos Milas" wrote: > > > > Hello, > > > > I am using postfix, amavisd-new, spam assassin, clamav on a gateway > system. > > > > A s

Re: Postfix-Amavisd quarantined mail inspection

2011-12-29 Thread Simon Brereton
On Dec 29, 2011 9:15 AM, "Nikolaos Milas" wrote: > > Hello, > > I am using postfix, amavisd-new, spam assassin, clamav on a gateway system. > > A short question (I know it's a bit off-topic but I know that people here run similar systems): > > I've read how to release and/or forward quarantined ma

Re: Postfix Hold queue

2011-12-01 Thread Simon Brereton
On 1 December 2011 04:56, Roland de Lepper wrote: > Hi, > > Where're planning to migrate postfix from Suse to Ubuntu 10.04 LTS. The > Postfix version on Suse has an higher version number than in Ubuntu 10.04LTS > (2.7.2 - 2.7.0). > > Because of the migration we have to shutdown the MySQL server to

Re: ssh client for new mac laptop

2011-11-24 Thread Simon Brereton
On 24 November 2011 22:16, Keith Steensma wrote: > Anyone have a recommendation for a 'free' client for a mac os x that works > when communicating to a unix/linux server?  I haven't found anything when > 'googling' for an answer. Mac OS X is unix - will the built in terminal not do? http://www.

Re: multiple content filters, a sanity check

2011-11-22 Thread Simon Brereton
On 22 November 2011 11:52, David Mehler wrote: > On 11/22/11, Simon Brereton wrote: >> On 21 November 2011 19:33, David Mehler wrote: >>> Hello, >>> >>> I'm running Postfix 2.8 and virtual mailbox domains with a mysql >>> database. I&#x

Re: multiple content filters, a sanity check

2011-11-22 Thread Simon Brereton
On 21 November 2011 19:33, David Mehler wrote: > Hello, > > I'm running Postfix 2.8 and virtual mailbox domains with a mysql > database. I've also got spf and dkim signatures going as well as > clamsmtp as an smtp proxy for virus checking. I'd now like to add in > dspam antispam capability so that

sanitizing mysql queries

2011-11-21 Thread Simon Brereton
Hi When I set postfix many moons ago, I wasn't at all sure of what I was doing and I followed a number of different howtos. The result is that I inherited other peoples ideas of how things should be done and lately I've seen advice and bells and whistles that make me think I should go back and st

Re: Migration from one server to another - best practices?

2011-11-17 Thread Simon Brereton
On 17 November 2011 14:02, Dennis Carr wrote: > I'm about to do a migration from one server to another - old server runs > Debian Lenny, new one runs Squeeze, both with respective current versions of > postfix. > > Long and short is that I'm basically preparing to migrate everything, > including u

Re: mail defered on local network

2011-11-17 Thread Simon Brereton
On 17 November 2011 17:14, Tim Dunphy wrote: > Hello list, > >  I am attempting to build a basic postfix setup that is able to send mail to > the internet. Receiving email is not a priority. > >  I've verified that this basic setup DOES work on an Amazon EC2 instance and > can be used to send em

Re: spamcop abusing mail systems worldwide

2011-11-17 Thread Simon Brereton
On 17 November 2011 09:28, wrote: > Zitat von Dan The Man : > >> >> >> Today I had an unhappy unix student try to submit an assignment to me and >> could not. Spamcop has decided to go off blacklisting all yahoo/shaw etc >> servers worldwide. > > The subject is wrong. Spamcop simply list mailserv

Re: Recipent restrictions

2011-11-17 Thread Simon Brereton
On 17 November 2011 01:13, Dilip Mishra // Viva wrote: > Hello Group, > I want to implement some restrictions on postfix by which it would reject > domains without mx records, as well as those specified in access table. > These are some domains to I do not want to send mails at all. My problem is

Re: openspf.org

2011-11-16 Thread Simon Brereton
On 16 November 2011 13:01, David Mehler wrote: > Hello, > > I'm trying to get spf going on my arch postfix server. I'm wanting to > get perl-policyd-spf going and am atempting to download the needed > source. The issue is openspf.org appears down, anyone know why or if > there's an alternative dow

Re: reject_non_fqdn_helo_hostname usefulness, safety

2011-11-10 Thread Simon Brereton
On 10 November 2011 18:45, Steve Fatula wrote: > This check says that the RFC requires a fully qualified hostname for HELO. > Most internet searches show this to be a "safe" check that shouldn't really > kill any real mail. Lately, noticed no ebay mail was coming through, looked > through the logs

Re: bad From: field

2011-11-10 Thread Simon Brereton
On 10 November 2011 07:21, privat wrote: > After moving to a new host running Ubuntu 10.10 I get in outgoing mails > sent from account "privat" a From:-field > >        From: privat > > it used  to be before > >        From: ulrich.laut...@t-online.de > > In sender_canonical I have > privat@local

Re: Signing injected mail

2011-11-09 Thread Simon Brereton
On 9 November 2011 00:48, Noel Jones wrote: > On 11/8/2011 10:35 PM, Simon Brereton wrote: >> On 8 November 2011 15:30, Wietse Venema >> wrote: >>> Simon Brereton: >>>> On 4 November 2011 15:49, Simon Brereton >>>> wrote: >>>>&g

Re: Signing injected mail

2011-11-08 Thread Simon Brereton
On 8 November 2011 15:30, Wietse Venema wrote: > Simon Brereton: >> On 4 November 2011 15:49, Simon Brereton >> wrote: >> > Hi >> > >> > Amavis checks both incoming and outgoing mail. ?DKIMPROXY signs >> > outgoing mail (sadly, before Amavis, s

Re: Signing injected mail

2011-11-08 Thread Simon Brereton
On 4 November 2011 15:49, Simon Brereton wrote: > Hi > > Amavis checks both incoming and outgoing mail.  DKIMPROXY signs > outgoing mail (sadly, before Amavis, so amavis verifies the signature > - but I'm okay with that for now) on the submission port. > > Mail that i

Re: understanding the logs

2011-11-08 Thread Simon Brereton
On 8 November 2011 02:53, Stan Hoeppner wrote: > On 11/8/2011 1:13 AM, Geert Mak wrote: > >> We had a user account hacked (weak password) and our SMTP server was used >> for sending spam. We discovered it after our mail server IP began to show up >> in RBLs. We improved the passwords, however th

Re: executive parser (was: Re: spf configuration woes)

2011-11-06 Thread Simon Brereton
On 6 November 2011 04:22, David Southwell wrote: > On Saturday 05 November 2011 22:40:03 Murray S. Kucherawy wrote: >> > -Original Message- >> > From: owner-postfix-us...@postfix.org >> > [mailto:owner-postfix-us...@postfix.org] On Behalf Of David Southwell >> > Sent: Saturday, November 05

Re: spf configuration woes

2011-11-05 Thread Simon Brereton
On 5 November 2011 08:21, David Southwell wrote: > On Saturday 05 November 2011 05:13:22 Wietse Venema wrote: >> David Southwell: >> > Did you read the original posting and the reply from Kamil. He spotted >> > the primary cause. It was he who spotted the extra  " " before >> > policyd-spf in mast

Signing injected mail

2011-11-04 Thread Simon Brereton
Hi Amavis checks both incoming and outgoing mail. DKIMPROXY signs outgoing mail (sadly, before Amavis, so amavis verifies the signature - but I'm okay with that for now) on the submission port. Mail that is injected (i.e. from CRON, applications, etc), still passes through amavis (obviously) but

Re: reject_authenticated_sender_login_mismatch vs reject_sender_login_mismatch

2011-11-03 Thread Simon Brereton
On 2 November 2011 18:23, Noel Jones wrote: > On 11/2/2011 2:33 PM, Simon Brereton wrote: > >>> The checks "above" permit_mynetworks and permit_sasl_authenticated >>> are checks you want applied to your networks and authenticated >>> users.  G

Re: reject_authenticated_sender_login_mismatch vs reject_sender_login_mismatch

2011-11-02 Thread Simon Brereton
On 2 November 2011 16:26, James Seymour wrote: > On Wed, 2 Nov 2011 16:12:07 -0400 > Simon Brereton wrote: > > [snip] >> ... but if I put reject_unknown_recipient_domain there >> postconf.5 says it will >> >> Reject the request when Postfix is not final des

Re: reject_authenticated_sender_login_mismatch vs reject_sender_login_mismatch

2011-11-02 Thread Simon Brereton
On 2 November 2011 15:53, James Seymour wrote: > On Tue, 1 Nov 2011 14:31:14 -0400 > Simon Brereton wrote: > > [snip] >> >> ## SPAM STUFF and REJECT CODES ## >> smtpd_recipient_restrictions = >>         reject_non_fqdn_sender,

Re: MIME Parser Error - Can't Send Email

2011-11-02 Thread Simon Brereton
On 2 November 2011 15:53, Carlos Mennens wrote: > On Wed, Nov 2, 2011 at 3:38 PM, Ralf Hildebrandt > wrote: >> That's probably amavis, not postfix >> Look at the amavis messages in your mail.log > > I think you're right. Postfix appears to be working fine. I'll view > the logs and hit up the Amav

Re: reject_authenticated_sender_login_mismatch vs reject_sender_login_mismatch

2011-11-02 Thread Simon Brereton
On 1 November 2011 18:53, Noel Jones wrote: > On 11/1/2011 1:31 PM, Simon Brereton wrote: >> On 31 October 2011 15:16, Noel Jones wrote: >>> On 10/31/2011 12:31 PM, Simon Brereton wrote: >>>> Googling led me to this thread: >>>> http://comment

Re: reject_authenticated_sender_login_mismatch vs reject_sender_login_mismatch

2011-11-01 Thread Simon Brereton
On 31 October 2011 15:16, Noel Jones wrote: > On 10/31/2011 12:31 PM, Simon Brereton wrote: >> Googling led me to this thread: >> http://comments.gmane.org/gmane.mail.postfix.user/210413 >> >> But I don't understand how myu...@example.com is not owned by >>

Re: reject_authenticated_sender_login_mismatch vs reject_sender_login_mismatch

2011-10-31 Thread Simon Brereton
On 31 October 2011 15:16, Noel Jones wrote: > On 10/31/2011 12:31 PM, Simon Brereton wrote: >> Hi >> >> I was evaluating my smptd_recipient_restrictions last week and decided that >> it made no sense to have reject_sender_login_mismatch after >> permit_sasl_aut

reject_authenticated_sender_login_mismatch vs reject_sender_login_mismatch

2011-10-31 Thread Simon Brereton
Hi I was evaluating my smptd_recipient_restrictions last week and decided that it made no sense to have reject_sender_login_mismatch after permit_sasl_authenticated. So I changed it. At the time I was reviewing the documentation I wasn't able to figure out the difference between reject_authe

Re: smtpd_recipient_restrictions

2011-10-27 Thread Simon Brereton
On 27 October 2011 12:07, /dev/rob0 wrote: > On Thursday 27 October 2011 10:32:54 Simon Brereton wrote: >> I know this gets beaten to death on a regular basis, but sometimes > > Indeed it does, such as ... today! Read the "Config check" thread. It's tricky enoug

smtpd_recipient_restrictions

2011-10-27 Thread Simon Brereton
Hi I know this gets beaten to death on a regular basis, but sometimes I get in a muddle and I'd appreciate a sanity check. Currently my main.cf looks like: ## SPAM STUFF and REJECT CODES ## smtpd_recipient_restrictions = reject_non_fqdn_sender, reject_non_fqdn_recipient, permit_

Re: Send periodic announcement to our customers

2011-10-27 Thread Simon Brereton
On 27 October 2011 07:42, nima chavooshi wrote: > Hi > In our company we want to send periodic announcement or newsletter mail to > our customers (approximate 5 e-mail). because most of our customers have > email account on yahoo and google and AOL mail services, I concern about > that these m

Re: Using Postfix to check and verify SPF

2011-10-26 Thread Simon Brereton
On 26 October 2011 10:27, Scott Kitterman wrote: > On 10/26/2011 10:17 AM, Simon Brereton wrote: > ... >> >> So my obvious question to the list is - Can I get amavis to explicity >> add a header with the SPF validity, and if not, can I do this with >> policyd?  

Using Postfix to check and verify SPF

2011-10-26 Thread Simon Brereton
Hi I finally got around to implementing SPF for my mail server and domains. A lot easier than I thought it would be, certainly much easier than DKIM and I'm ashamed I didn't do it earlier. In the course of doing that, I noticed that gmail/yahoo both add X-Headers about the validity of the SPF

Re: A Problem No One Has Solved According To Googling

2011-10-25 Thread Simon Brereton
On 25 October 2011 15:06, Jack Fredrikson wrote: > Here is a problem that many postfix users have had that has apparently never > been resolved! I appeal to you for your help. I have been googling this for > a very long time now. Here is my problem > > Oct 25 10:49:18 myserver postfix/pipe[3712]:

Re: I've Got To Be Close...

2011-10-24 Thread Simon Brereton
On 24 October 2011 11:20, Jack Fredrikson wrote: > Hi; > I'm still getting this (and *only* this) error: > Oct 24 08:18:01 myserver postfix/pipe[21761]: 5CC9F5790195: > to=, relay=dovecot, delay=0.66, delays=0.64/0/0/0.02, > dsn=4.3.0, status=deferred (temporary failure) Sounds like your file per

Re: Down To One Problem?

2011-10-23 Thread Simon Brereton
On 23 October 2011 13:13, Jack Fredrikson wrote: > I may be dreaming, but this could be my last problem with my installation. > After following all your good advice, I still have this one problem and it > is pervasive in all emails: > Oct 23 09:50:58 myserver postfix/pipe[30578]: BB2BB5790262: > t

Re: First Insallation, Bouncing Emails

2011-10-21 Thread Simon Brereton
2011/10/21 Leslie León Sinclair : > Something like: > > > user = user_for_db > password = password_for_db > hosts = localhost > dbname = database_name > query = SELECT goto FROM alias WHERE address='%s' AND active = '1' > Thanks. But I think we should see what the OP has in his. As someone al

Re: First Insallation, Bouncing Emails

2011-10-21 Thread Simon Brereton
On 21 October 2011 10:52, Jack Fredrikson wrote: > > From: Reindl Harald > To: postfix-users@postfix.org > Sent: Friday, October 21, 2011 10:39 AM > Subject: Re: First Insallation, Bouncing Emails > > > I'm on CentOS, not Debian > > Ralf Hildebrandt writes: > >>>

Re: Content filter after DKIM proxy

2011-10-19 Thread Simon Brereton
On 18 October 2011 14:27, Noel Jones wrote: > On 10/18/2011 1:20 PM, Simon Brereton wrote: > >> I already use amavis to do the dkim checking on incoming mails.  I'm >> using dkimproxy to sign outgoing mails (and I confess I only found out >> about opendkim after I&#x

Re: Content filter after DKIM proxy

2011-10-19 Thread Simon Brereton
On 19 October 2011 14:04, Steve Jenkins wrote: > On Wed, Oct 19, 2011 at 12:03 PM, Steve Jenkins > wrote: >>> >>> The following isn't one of my normal walkthrough HowTo blog posts, but it >>> does contain some notes I wrote to myself about things to consider when >>> deploying OpenDKIM with Amavi

Re: Content filter after DKIM proxy

2011-10-18 Thread Simon Brereton
On 18 October 2011 15:01, Simon Deziel wrote: > On 10/18/2011 01:41 PM, Simon Brereton wrote: >> On 18 October 2011 13:27, Simon Deziel wrote: >>> On 10/18/2011 01:12 PM, Simon Brereton wrote: >>>> Hi >>>> >>>> I expect that this is not rec

Re: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-18 Thread Simon Brereton
On 18 October 2011 14:17, Noel Jones wrote: > On 10/18/2011 12:04 PM, Simon Brereton wrote: >> On 13 October 2011 20:11, Noel Jones wrote: >>> The only place you should really care about encryption is if your >>> own clients submit SASL authenticated mail -- t

Re: Content filter after DKIM proxy

2011-10-18 Thread Simon Brereton
On 18 October 2011 13:52, Noel Jones wrote: > On 10/18/2011 12:12 PM, Simon Brereton wrote: >> Hi >> >> I expect that this is not recommended practice, but before I implemented >> DKIM signing, Amavis used to scan ALL mail - incoming and outgoing - and I >> was

Re: Content filter after DKIM proxy

2011-10-18 Thread Simon Brereton
On 18 October 2011 13:27, Simon Deziel wrote: > On 10/18/2011 01:12 PM, Simon Brereton wrote: >> Hi >> >> I expect that this is not recommended practice, but before I implemented >> DKIM signing, Amavis used to scan ALL mail - incoming and outgoing - and I >>

Content filter after DKIM proxy

2011-10-18 Thread Simon Brereton
Hi I expect that this is not recommended practice, but before I implemented DKIM signing, Amavis used to scan ALL mail - incoming and outgoing - and I was happy with that. If I want Amavis to scan and rate the mail after dkim proxy has signed it, is that as simple as adding the content filter

Re: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-18 Thread Simon Brereton
On 13 October 2011 20:11, Noel Jones wrote: > The only place you should really care about encryption is if your > own clients submit SASL authenticated mail -- the far most common > auth mechanisms are PLAIN and LOGIN which really should be protected > inside a TLS connection.  This is commonly co

Re: Spammers attempting SASL auth.

2011-10-18 Thread Simon Brereton
On 17 October 2011 19:43, Stan Hoeppner wrote: > On 10/17/2011 10:50 AM, Simon Brereton wrote: > >> Does your approach for sending to abuse work for Roadrunner?  I have >> 1000 pings a day from a host on RR cable and when I tried to email >> abb...@rr.com, the connectio

Re: Spammers attempting SASL auth.

2011-10-17 Thread Simon Brereton
On 17 October 2011 11:38, John Hinton wrote: > On 10/17/2011 11:13 AM, Simon Brereton wrote: >> >> Hi >> >> This is a new one on me - I've never seen spammers attempt to use to SASL >> Auth to inject spam. Has anyone else seen this? >> >> Oct 1

Spammers attempting SASL auth.

2011-10-17 Thread Simon Brereton
Hi This is a new one on me - I've never seen spammers attempt to use to SASL Auth to inject spam. Has anyone else seen this? Oct 17 15:07:16 mail postfix/smtpd[14422]: connect from unknown[208.86.147.92] Oct 17 15:07:16 mail dovecot: auth(default): passdb(newslet...@mydomain.net,208.86.147.92)

Re: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-14 Thread Simon Brereton
On 13 October 2011 20:11, Noel Jones wrote: > On 10/13/2011 6:39 PM, Simon Brereton wrote: >> smtp_tls_CAfile = ? >> smtp_tls_cert_file = ? >> smtp_tls_key_file = ? > > Typcially these would be set to the same cert & keys as used by smtpd. Since these are self-s

Re: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-13 Thread Simon Brereton
On 13 October 2011 19:16, Noel Jones wrote: > On 10/13/2011 5:41 PM, Mark Homoky wrote: >> On 11 Oct 2011, at 15:54, "Simon Brereton" >> wrote: >> >>>>> >>>>> this is obseleted (I'm running 2.7.1) and to use >>>>&

RE: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-11 Thread Simon Brereton
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Viktor Dukhovni > On Fri, Oct 07, 2011 at 05:15:20PM -0400, Simon Brereton wrote: > > > postfix/smtpd[25614]: warning: TLS library problem: >

TLS Issues. certificate unknown: SSL alert number 46:

2011-10-07 Thread Simon Brereton
Hi My log files has a moderate amount of TLS warnings: postfix/smtpd[25614]: warning: TLS library problem: 25614:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1102:SSL alert number 46: I'm aware that this could be (according to an older thread on this lis

RE: Changing SASL Auth from Cyrus to Dovecot

2011-05-04 Thread Simon Brereton
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Sahil Tandon > On Tue, 2011-05-03 at 23:58:47 +0200, Simon Brereton wrote: > > > I'm trying to change my SASL auth from Cyrus to Dovecot. > &g

RE: Changing SASL Auth from Cyrus to Dovecot

2011-05-03 Thread Simon Brereton
> -Original Message- > From: Wietse Venema [mailto: > Simon Brereton: > > Hi > > > > I'm trying to change my SASL auth from Cyrus to Dovecot. > > You have not shown any evidence that your Postfix version actually > comes with Dovecot support. Act

Changing SASL Auth from Cyrus to Dovecot

2011-05-03 Thread Simon Brereton
Hi I'm trying to change my SASL auth from Cyrus to Dovecot. I have Dovecot all set up - it's authenticating IMAP users and postfix is using dovecot-lda to deliver mail, but when I changes main.cf to use Dovecot SMTP Auth wasn't working. After a few hours of fruitless searching I finally though

RE: SASL Authentication and debugging..

2011-04-13 Thread Simon Brereton
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Simon Brereton > I turned up mysql logging and did another test - and no query > appeared in the mysql log! In an effort to prove to myself, I did

RE: SASL Authentication and debugging..

2011-04-13 Thread Simon Brereton
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Patrick Ben Koetter > * Simon Brereton : > > > > Saslfinger -s says: > > > > > > saslfinger also reports much other, useful information which we > need > &g

RE: SASL Authentication and debugging..

2011-04-12 Thread Simon Brereton
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Patrick Ben Koetter > * Simon Brereton : > > Probably not the best place for this, but hopefully someone will > tell > > me what I'm doing wrong anyway.. > > >

RE: SASL Authentication and debugging..

2011-04-12 Thread Simon Brereton
> From: Simon Brereton > Probably not the best place for this, but hopefully someone will tell > me what I'm doing wrong anyway.. > > I've gotten the TLS up and working. And SASL auth seemed to be > working. I installed saslfinger and everything was fine there.

SASL Authentication and debugging..

2011-04-11 Thread Simon Brereton
Hi Probably not the best place for this, but hopefully someone will tell me what I'm doing wrong anyway.. I've gotten the TLS up and working. And SASL auth seemed to be working. I installed saslfinger and everything was fine there. But when trying to locally inject mail on the submission po

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

2011-04-08 Thread Simon Brereton
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of jeremy.als...@imap-mail.com > Hi Victor. > > On Fri, 08 Apr 2011 00:59 -0400, "Victor Duchovni" > wrote: > > Start simple, and add features gradually. There is a steep learning > > curve for a novice

RE: SASL Error on Submission port

2011-04-07 Thread Simon Brereton
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Victor Duchovni > On Thu, Apr 07, 2011 at 07:37:50PM +0200, Simon Brereton wrote: > > > > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > > > us...@postfix

RE: SASL Error on Submission port

2011-04-07 Thread Simon Brereton
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Patrick Ben Koetter > * Simon Brereton > > Hi > > > > Running 2.3.8 Debian package (I'll be upgrading shortly), I was > already supporting TLS and SASL auth. One

RE: Re: SASL Error on Submission port

2011-04-07 Thread Simon Brereton
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Victor Duchovni > On Thu, Apr 07, 2011 at 04:53:59PM +0200, Simon Brereton wrote: > > > However, when I test I get a SASL auth error. If I switch my > client back to port 25, t

SASL Error on Submission port

2011-04-07 Thread Simon Brereton
Hi Running 2.3.8 Debian package (I'll be upgrading shortly), I was already supporting TLS and SASL auth. One of my users recently moved to RCN and they block port 25 so I'm trying to open 587. I added this to my master.cf submission inet n - - - - smtpd -

RE: Increase the mail spped in postfix

2011-04-06 Thread Simon Brereton
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Johan Pappu > > How do I Increase my mail sending speed in postfix to all the > destinations? > > Do i need to make changes in main.cf? > > Please suggest me http://lmgtfy.com/?q=postfix+increase+th

RE: Making my own pipe..

2011-03-28 Thread Simon Brereton
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Jeroen Geilman > Sent: Saturday, March 26, 2011 2:34 PM > To: postfix-users@postfix.org > Subject: Re: Making my own pipe.. > > On 03/25/2011 12:02 AM, Simon Brereton wrote: >

Making my own pipe..

2011-03-24 Thread Simon Brereton
Hi I'm still trying to get Postfix to use deliverquota to deliver the mails to my Maildirs. The only thing I could find on the net was a comment from Magnus http://www.irbs.net/internet/postfix/0412/1673.html that I had to make my own pipe. So this is my attempt: deliverquota unix -

  1   2   >