attempt to open lmdb:postscreen_cache with both "open" lock and "access" lock

Hello World, I'm running Postfix 3.6.4 in a container on Alpine 3.15 main. After a bit of time, I'm starting to get error messages like that: #v+ Mar 17 13:24:40 servername postfix/postscreen[164]: CONNECT from [167.248.133.120]:52756 to [172.17.13.3]:25 Mar 17 13:24:40 servername postfix/pro

Re: Question about disabling SSLv2 and SSLv3 and Opportunistic TLS

* Dirk Stöcker : On Mon, 28 May 2018, Viktor Dukhovni wrote: It might be useful, but probably not, to have a version of postconf -n that showed the default value along sinde the changed value: join <(postconf -n) <(postconf -d | sed 's/=/(default:/; s/$/)/') Do you maybe also have a comman

Re: difference between /var/spool/postfix/etc/hosts and /etc/hosts

* Paul Martin : on debian , i am running postfix. I changed my IP ldap server in /etc/hosts but /var/spool/postfix/etc/hosts is different. What shoud I do to make postfix using the new IP ldap? This Debian-specific issue can be solved by restarting the Postfix service (e.g. "service postfix re

Re: Code burn-in: postscreen/verify cache cleanup

* Victor Duchovni : > On Wed, Dec 30, 2009 at 08:26:45AM +0100, Stefan F??rster wrote: > > I've noticed a vast deterioration of the databases's performance, > > though. 20091209 only emitted some timing warnings for updates from > > time to time (database rotated every Saturday as per your > > reco

Re: Code burn-in: postscreen/verify cache cleanup

* Ralf Hildebrandt : > * Wietse Venema : > > Dec 29 04:20:17 spike postfix/postscreen[44900]: cache > > /var/lib/postfix/ps_cache.db full cleanup: retained=134 dropped=19 entries > > Dec 29 06:19:33 spike postfix/verify[46072]: cache > > /var/lib/postfix/verify.db full cleanup: retained=1726 drop

Re: Code burn-in: postscreen/verify cache cleanup

* Wietse Venema : > I'm burning in some new code that I wrote over the past week to > periodically remove old entries from postscreen(8) and verify(8) > caches. This is not a sexy topic, but it helps to keep database > sizes in check, it speeds up database access, and it was time. > > If you're co

ps_dict_put: /var/lib/postfix/ps_cache.db update took X ms

While I certainly like the fact that Postfix becomes more and more "admin friendly" in that it now also logs warnings about performance issues, I'd like to know how many milliseconds a single request to update the temporary whitelist may take before a warning is emitted. Is it 100ms? I got exactly

Re: PATCH: smtpd_proxy logging

* Mark Martinec : > On Sunday 06 December 2009 13:11:16 Stefan Foerster wrote: >> 2. The number of SMTP proxy processes busy talking to Postfix went >> down from 16.44 to 8.73 (5s resolution) - that's a completely >> unexpected result, possibly flawed by the small data sample. >> I'll verify this a

Re: whitelisting problem

* Stan Hoeppner : > Two classes before smtpd_helo_restrictions should have triggered > accepting the email. The message should have never made it to the HELO > checks. It should have been accepted in smtpd_client_restrictions or > smtpd_sender_restrictions. Both classes come before > smtpd_helo_

Re: whitelisting problem

* Stefan Förster : > Rejection message: > > | Dec 4 13:39:15 greer postfix/smtpd[7124]: NOQUEUE: reject: RCPT from > | unknown[204.238.179.8]: 450 4.7.1 : Helo command rejected: > | Host not found; from= > | to= proto=ESMTP helo= > > Obviously triggered by the "rej

Re: whitelisting problem

Hallo Stan, * Stan Hoeppner : > Stefan Förster put forth on 12/5/2009 5:46 AM: > > * Stan Hoeppner : > >> smtpd_helo_required = yes > >> smtpd_helo_restrictions = > >> check_recipient_access hash:/etc/postfix/access > > > > Did you mean &qu

Re: whitelisting problem

* Stan Hoeppner : > smtpd_helo_required = yes > smtpd_helo_restrictions = > check_recipient_access hash:/etc/postfix/access Did you mean "check_helo_access"? Stefan > reject_non_fqdn_helo_hostname > reject_invalid_helo_hostname > reject_unknown_helo_hostname > >

Re: Snapshot 20091109, queue disk partition sizing

* Wietse Venema : > Stefan Förster: > > (number of smtpd processes) * message_size_limit > > > > bytes of queue space allocated in temporary files. > > By default, the Postfix requires 1.5*message_size_limit of free > space before it accepts mail. > > Right

Snapshot 20091109, queue disk partition sizing

If I understood the release notes correctly, with "smtpd_proxy_options = speed_adjust", each smtpd process will keep the message it's currently receiving in a temporary file. That seems to imply that there could be (number of smtpd processes) * message_size_limit bytes of queue space allocated in

Re: Configuring Two Postfix mail servers behind HA Proxy load balancer.

ur mails - you'll basically need to repeat the above steps for your IMAP/POP3 server. Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 Tapferkeit ist ein Anfall, der bei den meisten Menschen schnell vorübergeht.

Re: rbl_reply_maps - specify OK/ACCEPT/220?

Hallo postfix-users, * Stefan Förster : > * Stefan Förster : >> rbl_reply_maps overrides default_rbl_reply for blacklist/response code >> pairs listed in the referenced lookup tables. >> >> Is it possible to specify a numeric code which is NOT a reject code, >>

Re: rbl_reply_maps - specify OK/ACCEPT/220?

* Stefan Förster : > rbl_reply_maps overrides default_rbl_reply for blacklist/response code > pairs listed in the referenced lookup tables. > > Is it possible to specify a numeric code which is NOT a reject code, > thereby realizing a DNS whitelist? Clarifying: I know I cannot

rbl_reply_maps - specify OK/ACCEPT/220?

rbl_reply_maps overrides default_rbl_reply for blacklist/response code pairs listed in the referenced lookup tables. Is it possible to specify a numeric code which is NOT a reject code, thereby realizing a DNS whitelist? Stefan

Are queue IDs unique within a sinlge instance?

Given no external interference, are queue IDs unique within a single instance for the whole span a message stays within qmgr's control, or can a mail in e.g. the deferred queue, share an ID with a message in the active queue? Cheers Stefan

Re: warning: SASL authentication failure: No worthy mechs found

* Dan Winchester <2...@dan.co.uk>: > > I don't see any SASl modules for AUTH PLAIN or AUTH LOGIN > > here. You should use "yum" to search for packages like > > "cyrus-sasl", "sasl-modules" and similar. > > I have a number of cyrus-sasl packages installed: > > # yum list installed | grep sasl > cy

Re: warning: SASL authentication failure: No worthy mechs found

* Dan Winchester <2...@dan.co.uk>: > I am new to Postfix. > > I am trying to get Postfix to relay via mail.authsmtp.com. > > I have added the following lines to main.cf > > relayhost = [mail.authsmtp.com] > smtp_sasl_auth_enable = yes > smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd > s

Re: Reverse DNS fails with "cannot find your hostname" when forward IP is wrong

* Michael Monnerie : > I've just had a very strange bug which cost me an hour to find. > > mailserver: postfix-2.5.1-28.5 > > On the mailserver, I should receive mail from 212.69.162.205. > > # dig -x 212.69.162.205 > showed me a correct, existing PTR: > 205.192-28.162.69.212.in-addr.arpa. 3600

Re: rbl checks, best place

* /dev/rob0 : > On Friday 21 August 2009 00:23:07 Olivier Nicole wrote: > > > > This is a difficult question. > > > > > > I disagree. > > > > Just that because you disagree makes the question not simple :) > > Perhaps you didn't understand. I tried to explain why the choice of > pre-DATA reject_rb

Re: openldap-2.3.39 crash

Hello 承磊, * 承磊 wrote: > I have been using postfix since a few weeks. The setup is currently: Redhat > As4.4 (Linux 2.6.9-42 SMP), Postfix 2.3.39, openldap-2.3.39, BerkeleyDB 4.5. > 20 , courier-authlib-0.56. > Now, the ldap service crashes frequently once the ldap connection raises > about 300(th

Re: Postfix queue problem?

On second thought, * Junior Tux : > qmgr_clog_warn_time = 0 you might want to leave that at the default value to get helpful information. > smtpd_milters = inet:localhost:10026 This milter could be a problem if it is slow. > soft_bounce = yes On a prodcution machine, this will increase the l

Re: Postfix queue problem?

Hallo Junior, * Junior Tux : > Dear all , i have a big problem with postfx queue. I'm using postfix > amavis spamassain. But queue has 5 mails. it's sending very slow. > What Can i do ? Thanks. There are various ways to debug this problem and improve performance. A first stop should be http:/

Re: Looking for opinions on FreeBSD OS for Postfix

* Guy : > I'm considering FreeBSD as an alternative, but I was wondering what > people think of FreeBSD as a platform for Postfix. It's obviously not > as easy to maintain as Ubuntu, but it does have a reputation for > stability. Any thoughts, recommendations or experiences would be > appreciated.

Re: Improper command pipelining after QUIT

* Wietse Venema : > Stefan Förster: > > Dear members of postfix-users, > > > > can anyone of you please explain to me what the following log entry > > means: > > > > postfix/smtpd[8558]: improper command pipelining after QUIT from > > unknown[64.

Improper command pipelining after QUIT

Dear members of postfix-users, can anyone of you please explain to me what the following log entry means: postfix/smtpd[8558]: improper command pipelining after QUIT from unknown[64.8.20.35] I do know what command PIPELINING is, that it is offered in response to an EHLO and that Postfix 2.6 kee

Re: Understanding rate limiting with anvil.

* Jaroslaw Grzabel : > I had a problem with rate limiting in postfix in last week, and I had to > disable it. I don't know why but I set up rate limiting per IP and it > looks like it didn't count rates correctly. Let me shed a lit a bit for > my problem. > > My company decided to limit a number o

Re: Delivery failure for one recipient results in re-delivery for all

ording to this thread: http://archives.neohapsis.com/archives/postfix/2009-06/0396.html I could be terribly wrong, though. Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #147: Fortran - Makrosprache für ein I/O-Verhinderungssystem (Arno Eigenwillig)

Re: "Received:" headers and mail forwarding loops

* Wietse Venema wrote: > Stefan Förster: > > This is working as expected. If I create a new mail and forcibly > > insert the above header before I submit it, I get a NDR saying that > > there is a mail forwarding loop for c...@example.net - which is > > As documented

"Received:" headers and mail forwarding loops

When I submit a mail to my Postfix server (using SASL auth over a TLS connection), Postfix adds the following received header: Received: from aletheia.cite.lan (33.33.33.333.dynamic.cablesurf.de [33.33.33.333]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client cer

Re: postfix strip æø å (highbit chars)

y allowed in email headers? Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 I'm not evil, I'm ... differently motivated!

Re: sieve instead procmail?

* Michael Monnerie wrote: > On Mittwoch 22 Juli 2009 Stefan Förster wrote: > > What excatly are you trying to do with Sieve filtering? > > Yes, zarafa-dagent delivers, but you can tell it where: > See http://forums.zarafa.com/viewtopic.php?f=11&t=2759 > Exam

Re: sieve instead procmail?

* Michael Monnerie wrote: > I currently have postfix -> procmail -> zarafa, and would like to have > postfix -> sieve -> zarafa. Is that possible via a milter maybe? The > sieve implementation would need to be able to call an external program > to deliver mail, but the rest is standard. Since you

Re: How do I deliver to a program using a wild card

* Stefan Förster wrote: > /(.*)@fax.send/ local...@my.domain,${1}final.mailserver /(.*)@fax.send/ local...@my.domain,$...@final.mailserver The "@" was missing.

Re: How do I deliver to a program using a wild card

* Rob Tanner wrote: > I get email forwarded to me from a FAX server that I need to process and > then forward to a different server. The ³to² email address is always in the > form of @send.fax. The FAX number could be the phone number for > any FAX machine in the country and only the �...@send.f

Re: Virtual accounts.

' for that. You can do this with fetchmail. "user foo there with password bar is baz here". > virtual_alias_domains = hotmail.com yahoo.com Don't do that. It basically tells your Postfix to lookup all mails for hotmail/yahoo in this table, and if the receiver is not found, the m

Re: LDAP Email Recipients Query Script - Feedback Appreciated

on't know, but I know for sure that there is a LDAP protocol settings dialogue in the Exchange server administration GUI. Perhaps someone else can shed some light on this one. Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #54: Jetzt mit neuem, umfa

Re: Impossible to send mail using SSL for SMTP connection.

sion smtp_always_send_ehlo = yes mail_version = 2.5.5 I think an initial greeting of 220 fully.qualified.hostname is pretty common this days - especially with so called "anti spam, anti malware" appliances. Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 "UNIX *is* user-friendly; it's just picky about its friends."

Re: TLS Logging

y, it is not a null cipher, so there is a certificate to verify, and verification fails. Cheers Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #266: Allradantrieb - Allradantrieb bedeutet, dass man dort stecken bleibt, wo der Abschleppwagen nicht hinkommt.

Re: [OT] postmaster@ for customers' domains?

* "Daniel V. Reinhardt": > Stefan Förster: >> I think that most of the poeple out there sending UBE/UCE want to >> make money, but the folks reading postmaster@ and abuse@ are in >> general not the ones who buy anything from spammers or get easily >> fooled b

Re: [OT] postmaster@ for customers' domains?

* Neil <[EMAIL PROTECTED]> wrote: > On 8 Nov 2008, at 03:46, Stefan Förster wrote: >> This has never been a problem for me because the amount of junk email >> sent to postmaster and abuse is absolutely negligible. I don't want to >> know what happens, though, if

Re: [OT] postmaster@ for customers' domains?

, though, if that address was used every day... Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #181: Internet - Das Internet ist durch die preußische Landordnung vorhergesagt worden. (BMJ-Mitarbeiter Dr. Matthias Korte interpretiert Bundesverwaltungsrichter Prof. Dr. Dr. Jörg Berkemann)

Re: How to run patch file making correction

tall postfix You might want to include more packages in the command line above, like for example postfix-pcre, postfix-mysql or postfix-cdb, depending on your need. Make sure you carefully read (and understand) http://www.backports.org/dokuwiki/doku.php?id=instructions Ciao Stefan -- Stefan F

Re: Backscatter issues with non-delivery notifications

Recommended documentation: http://www.postfix.org/ADDRESS_VERIFICATION_README.html#recipient http://www.postfix.org/STANDARD_CONFIGURATION_README.html#backup http://www.postfix.org/postconf.5.html#relay_recipient_maps Cheers Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9

Re: authentication failed

. > Then I ask why the connection with the client is lost? Go ask the client's programmers ;-) Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #132: Plug and Play - Kondome. (Rolf Siebrecht)

Re: Remote delivery concurrency

quot;? At this point, I'm almost about to ask you for output of "postconf -n" and the content of any relevant maps involved in the relay attempt and the relevant log entries, because I suspect a mis-use of the different Postfix address classes (see: http://www.postfix.org/ADDRESS_CLASS_REA

Re: Remote delivery concurrency

will try to deliver "at least once", not "exactly one". If you do not receive a server response on a hanging connection and smtp_data_done_timeout kicks in, the mail might be delivered multiple times. Cheers Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9

Re: Which FileSystem do you use on your postfix server?

e differences betweens Cyrus, Courier, uw-imapd and Dovecot, so perhaps you might want to search for a benchmark on those programs. Conclusion: Don't put valuable data on ReiserFS. Don't do premature optimization. You can always change filesystems if your tests show performance gains an

Re: System stressed

* Joey <[EMAIL PROTECTED]> wrote: > I see several of these when watching top. > > smtpd -n smtp -t inet -u -o stress If Postfix was operating in stress mode, you would see "-o stress=yes". Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBB