Re: ot: policyd advise

2017-12-16 Thread Zhang Huangbin
iRedAPD, with extra features and improvements, i suggest you check what features/plugins it offers first before making the final decision. Plugin directory is /opt/iredapd/plugins/. For iRedMail / iRedAPD related questions/issues, it’s better move to iRedMail online support forum: http://www.iredmail

Re: ot: policyd advise

2017-12-14 Thread Zhang Huangbin
ell with Postfix, but if you use iRedMail + iRedAdmin-Pro, it’s better move to iRedAPD to get the best integration, and get support from iRedMail online support forum: https://forum.iredmail.org/ Zhang Huangbin, founder of iRedMail project: http://www.iredmail.org/ Time zone: GMT+8 (Chin

Re: Do you know an FOSS email system for kids?

2017-04-16 Thread Zhang Huangbin
or program) is not that hard to develop. “not that hard”? No matter hard or easy, it takes time. Zhang Huangbin, founder of iRedMail project: http://www.iredmail.org/ Time zone: GMT+8 (China/Beijing). Available on Telegram: https://t.me/iredmail

Re: Policy server problem: connection timed out or connection reset by peer

2016-08-19 Thread Zhang Huangbin
> On Aug 19, 2016, at 11:56 AM, Bill Cole > wrote: > > So, is this policy server listening on port 1234 or port ? > I'll assume this is just inconsistent (and pointless) obfuscation... Just a pointless obfuscation. Sorry about this. > As Wietse noted more tersely, the only way to handle c

Re: Policy server problem: connection timed out or connection reset by peer

2016-08-19 Thread Zhang Huangbin
> On Aug 19, 2016, at 10:10 AM, Richard James Salts > wrote: > > It sounds like similar behaviour to what postfix is logging, so at least you > have a way to replicate it now. Try checking netstat -antp | grep : and > see what state all the tcp sockets are in. If you're seeing a lot in SY

Re: Policy server problem: connection timed out or connection reset by peer

2016-08-18 Thread Zhang Huangbin
Dear Bill, Thanks very much for helping. > On Aug 19, 2016, at 4:17 AM, Bill Cole > wrote: > >> What do you mean "run" the policy service? It's a python program. > > Which must be running in order for it to be listening for connections. > Likely mechanisms would be via a SysV init script in /

Re: Policy server problem: connection timed out or connection reset by peer

2016-08-18 Thread Zhang Huangbin
> On Aug 18, 2016, at 10:02 PM, Wietse Venema wrote: > > What are you using to "run" the policy service? Try using "telnet > 127.0.0.1 9998" or "nc 127.0.0.1 9998" to test it. Thanks Wietse. :) What do you mean "run" the policy service? It's a python program. > In particular, what happens whe

Re: Policy server problem: connection timed out or connection reset by peer

2016-08-17 Thread Zhang Huangbin
> On Aug 18, 2016, at 8:46 AM, Noel Jones wrote: > > There was an example on the link I sent earlier. > > # main.cf > 127.0.0.1:1234_time_limit = 3600 Seems this setting is not ok for me: The example in Postfix doc does have a transport (127.0.0.1:9998) defined in master.cf, but i don't have

Re: Policy server problem: connection timed out or connection reset by peer

2016-08-17 Thread Zhang Huangbin
> On Aug 18, 2016, at 8:46 AM, Noel Jones wrote: > > # main.cf > 127.0.0.1:1234_time_limit = 3600 "postfix check" reported "unused parameter: 127.0.0.0:1234_time_limit=3600s", i thought it was illegal parameter. I added this one and restarted Postfix, let's see whether or not it fixes my issu

Re: Policy server problem: connection timed out or connection reset by peer

2016-08-17 Thread Zhang Huangbin
> On Aug 18, 2016, at 12:17 AM, Noel Jones wrote: > > Have you defined a time limit as described in > http://www.postfix.org/SMTPD_POLICY_README.html#client_config > The default time limit of 1000s may be too short. My policy server is a inet server (check_policy_service inet:127.0.0.1:1234),

Policy server problem: connection timed out or connection reset by peer

2016-08-17 Thread Zhang Huangbin
Dear all, I got a problem with my own Postfix policy server (written in Python). Postfix usually works fine with it, but sometimes it raised error like this: Aug 17 08:32:52 mail1 postfix/smtpd[24298]: warning: problem talking to server 127.0.0.1:1234: Connection reset by peer Aug 17 08:34:05 m

Re: No From: address in policy delegation protocol?

2016-06-28 Thread Zhang Huangbin
> On Jun 28, 2016, at 11:15 PM, Wietse Venema wrote: > > To examine SMTP-level events AND message content, use one of the > methods described in MILTER_README, SMTPD_PROXY_README, or FILTER_README. Dear Wietse, Thanks very much for showing me the direction. :) Zhang Huangbin

Re: No From: address in policy delegation protocol?

2016-06-28 Thread Zhang Huangbin
gt; The From: is a header instead of a smtp protocol field. > It may be only available within a header check. This makes sense. But with header check, you get one header each time, we cannot compare two headers. A content filter should work in this case, but it's not my purpose. Zhang Huan

Re: No From: address in policy delegation protocol?

2016-06-27 Thread Zhang Huangbin
> On Jun 28, 2016, at 1:46 PM, Zhang Huangbin wrote: > > I can reproduce this issue with a simple Python program: > > *) construct mail message with forge sender address. e.g. 'From: > ' > *) send email as normal/legal user "auth_u...@my-domain.com"

No From: address in policy delegation protocol?

2016-06-27 Thread Zhang Huangbin
Dear all, I have a simple Postfix policy server, and got a problem to reject sender login mismatch (sender != sasl_username) with Outlook 2016: user is able to specify a From: address, it would be any address you want, and the From: address is not passed to policy server. I can reproduce this

Re: Feature request: able to search sql/ldap without extension (user+extens...@domain.com)

2015-04-03 Thread Zhang Huangbin
Dear Wietse, Thanks for your reply, and congratulations to your new job. :) > On Apr 4, 2015, at 12:19 AM, Wietse Venema wrote: > > Postfix will automatically query with > 1) the full email address, > 2) the address without extension, > 3) the domain. > ... > The 1/2/3 query order is currentl

Feature request: able to search sql/ldap without extension (user+extens...@domain.com)

2015-04-03 Thread Zhang Huangbin
Dear Postfix developers, I posted a question about how to construct a sql/ldap query to query accounts without extension part in email address last month: http://marc.info/?t=14260881834&r=1&w=2 For example, query recipient 'user+extens...@domain.com' with LDAP filter: query_filter= (mai

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-12 Thread Zhang Huangbin
On Thu, Mar 12, 2015 at 12:10 AM, Viktor Dukhovni wrote: >> In this case, SQL is flexible. but any solution for LDAP table? we cannot do >> this in ldap query filter. > > No. OK, thanks. BTW, any plan to support this (ignore '+extension' in table lookup)?

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
On Thu, Mar 12, 2015 at 12:03 AM, Viktor Dukhovni wrote: > > You may well be able to do something with advanced SQL string > manipulation to short-circuit queries that contain "+". > > SELECT result > FROM table > WHERE key = '%u@%d' > AND key NOT LIKE '%%+%%' > > A

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
On Wed, Mar 11, 2015 at 11:46 PM, Viktor Dukhovni wrote: > > Not at present. You can only suppress lookups for bare keys which > can happen when the domain is $myorigin or matches $mydestination > by interpolating the lookup key into the query via '%u@%d' instead > of '%s'. That will filter out

About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
Dear all, According to Postfix document, virtual(8), 'user+extens...@domain.ltd' is looked up first, then 'u...@domain.ltd'. Is it possible to skip/ignore the address extension and just query 'u...@domain.ltd'? (by the way, i want to ignore the extension in SQL/LDAP lookup.) Thanks for your time

Typo error in web site: /postconf.5.html

2014-04-22 Thread Zhang Huangbin
Dear developers, There's a typo error in www.postfix.org/postconf.5.html: # Handle both Postfix and qmail extensions (Postfix 2.11 and later). recipient_delimiters = +- Looks like it should be 'recipient_delimiter', not 'recipient_delimiters' (ends with 's'). recipient_delimiters doesn't work

Re: Why Postfix always complain "unexpected EOF" with my own tcp_table program?

2013-07-28 Thread Zhang Huangbin
On Sunday, July 28, 2013 at 8:24 PM, Wietse Venema wrote: > > 1) Use a network sniffer to see what Python actually sends. You may > assume that your program sends \n, but Postfix does not receive \n. Thanks Wietse, and John. I think this is the root cause, will try a network sniffer later. >

Why Postfix always complain "unexpected EOF" with my own tcp_table program?

2013-07-27 Thread Zhang Huangbin
Dear all, I wrote a simple daemon service in Python, it's used in Postfix transport_maps like this: transport_maps = tcp:127.0.0.1:1234 It always returns '200 my_transport\n' as described in Postfix manual page tcp_table(5), but Postfix always complains "unexpected EOF" like below: Jul 27 22:

Re: Show username for "SASL LOGIN authentication failed:"?

2013-06-09 Thread Zhang Huangbin
t it won't appear in Postfix/Dovecot log files for SMTP service. Zhang Huangbin iRedMail: free, open source mail server solution for Red Hat Enterprise Linux, CentOS, Scientific Linux, Debian, Ubuntu, openSUSE, FreeBSD, OpenBSD. http://www.iredmail.org/

Re: Latest package for RHEL6

2012-10-24 Thread Zhang Huangbin
On Monday, October 22, 2012 at 10:56 PM, Morten Stevens wrote: > I have backported Postfix 2.9.x for my company and I am also package > maintainer for Fedora. > > Here are my latest builds for el6: > http://mstevens.fedorapeople.org/el6/postfix/ Do you enable PostgreSQL support in this packag

Re: Problem with eMail on Cloud Servers

2012-08-15 Thread Zhang Huangbin
set home_mailbox=Maildir/ in Postfix main.cf. In Dovecot, set "mail_location = maildir:/%Lh/:INDEX=/%Lh/". If you need a quick mail server solution, take a look at www.iredmail.org instead of setup all components manually. Zhang Huangbin iRedMail: Open Source Mail Server Solution fo

Re: Minimal permissions on /etc/postfix

2012-07-24 Thread Zhang Huangbin
s, clients, etc. Works for me with owner 'root', group 'postfix', permission 0640. Zhang Huangbin iRedMail: Open Source Mail Server Solution for Red Hat Enterprise Linux, CentOS, Scientific Linux, Debian, Ubuntu, Gentoo, openSUSE, FreeBSD, OpenBSD: http://www.iredmail.org/

Re: Postfix, POP/IMAP server, virtual users, web administration - what do you use?

2010-09-29 Thread Zhang Huangbin
On Sep 27, 2010, at 6:58 PM, Tomasz Chmielewski wrote: > What do you use with Postfix, if you have virtual users (i.e. in a SQL > database)? > > I know web-cyradm, which works pretty well with Cyrus (IMAP/POP) and Postfix > - all users, domains, aliases etc. are stored in a SQL database. Howev

Re: Integration with Active Directory

2010-03-12 Thread Zhang Huangbin
rectory 2003 + Roundcube webmail. I deployed one for customer based on iRedMail, works like a charm. Postfix and Dovecot can auth user against AD directly, include normal user, mail list, and Roundcube can use AD as global LDAP address book too. :) -- Best Regards. Zhang Huangbin - Open Sourc

Re: how to build a (enterprise) postfix system

2010-02-03 Thread Zhang Huangbin
On Jan 29, 2010, at 6:13 AM, David Touzeau wrote: > Take a look here : > > http://www.artica.fr > > 2010/1/28 ml ml >: > > Hello List, > > > > we are planing to set up a new E-Mail (Cluster) system with postfix. > > Our goal is that this is all ldap based and that our customers can > > manage

Re: smtpd_sender_login_maps is missing in proxy_read_maps

2009-10-13 Thread Zhang Huangbin
right? -- Best Regards. Zhang Huangbin - Open Source Mail Server Solution for Red Hat(R) Enterprise Linux, CentOS, Debian, Ubuntu: http://www.iredmail.org/

smtpd_sender_login_maps is missing in proxy_read_maps

2009-10-13 Thread Zhang Huangbin
Hi, all. smtpd_sender_login_maps is missing in proxy_read_maps, is it a good idea to add it by default? so that we can use proxymap(8) in smtpd_sender_login_maps (with default proxy_read_maps). -- Best Regards. Zhang Huangbin - Open Source Mail Server Solution for Red Hat(R) Enterprise

Re: postfix 2.3.x vs postfix 2.6 stable

2009-10-12 Thread Zhang Huangbin
RHEL/CentOS doesn't support 'receive_override_options=no_address_mappings'. You have to update to 2.3.14 or newer version. -- Best Regards. Zhang Huangbin - Open Source Mail Server Solution for Red Hat(R) Enterprise Linux, CentOS, Debian, Ubuntu: http://www.iredmail.org/

Re: Any way to avoid message duplication after mailing list expansion?

2009-09-28 Thread Zhang Huangbin
something like 'receive_override_options = no_address_mappings' in postfix: Search 'no_address_mappings' here: http://www.postfix.org/postconf.5.html -- Best Regards. Zhang Huangbin - Open Source Mail Server Solution for Red Hat(R) Enterprise Linux, CentOS,

Re: SMTP Authentication for users from LDAP?

2009-09-28 Thread Zhang Huangbin
less than 2 minutes. -- Best Regards. Zhang Huangbin - Open Source Mail Server Solution for Red Hat(R) Enterprise Linux, CentOS, Debian, Ubuntu: http://www.iredmail.org/

Re: python framework for a policy daemon?

2009-09-10 Thread Zhang Huangbin
On Sep 9, 2009, at 5:50 PM, Ralf Hildebrandt wrote: Is there a ready to use python framework for a policy daemon? I have a nice idea for a policy daemon :) Reference: http://www.apolicy.org/cgi-bin/moin.cgi -- Best Regards. Zhang Huangbin - Open Source Mail Server Solution for Red Hat(R

Re: Testing/verifying a DKIM setup

2009-07-04 Thread Zhang Huangbin
On Jul 3, 2009, at 12:08 PM, KLaM Postmaster wrote: Does anybody know how I can test whether my DKIM setup, keys etc, is correct. Is there a public/open testbed. TIA JLA Send a mail to your gmail account, and find out the DKIM verifing result in the mail header. -- Best Regards. Zhang

Re: DKIM

2009-06-29 Thread Zhang Huangbin
which one i can choose for this purpose do i've to add anything to dns zone infos of all these subdomains guidance appreciated Another program you can use: amavisd-new-2.6.x. Amavisd-new can sign all outgoing mails and verify incoming mails. -- Best Regards. Zhang Huangbin - Mail Serve

Re: Disabling a domain

2009-05-28 Thread Zhang Huangbin
ECT domain FROM domain WHERE domain='%s' AND backupmx='0' AND active='1' -- Best regards. Zhang Huangbin - Open Source Mail Server Solution for RHEL, CentOS, Debian, Ubuntu: http://code.google.com/p/iredmail/ http://www.iredmail.org/forum/

Re: Performance issue about maildir path.

2008-12-14 Thread Zhang Huangbin
Wietse Venema wrote: Zhang Huangbin: Hi, all. Normally, i use 'domain.ltd/username/Maildir' as users' maildir path, if i change them to hash style, e.g. 'A0/B0/domain.ltd/C0/D0/username/Maildir', will it speed up the index operation for MDA? If we have 1 users,

Performance issue about maildir path.

2008-12-14 Thread Zhang Huangbin
performance? Thanks very much. :) -- Best regards. Zhang Huangbin - Open Source Mail Server Solution for RHEL/CentOS 5.x: http://code.google.com/p/iredmail/

Re: autoresponder for virtual users

2008-11-06 Thread Zhang Huangbin
Martin Strand wrote: Hi all. I'm looking to implement an auto-response mechanism which: - only sends responses to senders who pass SPF checks - responds from certain virtual aliases as well as certain virtual users - doesn't respond to mailing lists - finds the response message/subject thro

Re: [ANN] iRedMail-0.3: Open Source Mail Server Solution

2008-09-25 Thread Zhang Huangbin
Rod Dorman wrote: On Wednesday, September 24, 2008, 23:36:44, Zhang Huangbin wrote: > Joe Sloan wrote: >> ... >> It's kind of strange that you call it "mutl-platform" when it's redhat only. > ... > iRedMail was ported from OpenBSD, but it is inc

Re: Duplicating messages

2008-09-24 Thread Zhang Huangbin
Jie Wang wrote: Hello, everyone, I need to duplicate all the email messages for one destination server and send the copies to another destination. More specifically, I need to send all the original emails to destination1.com and send all the copies to destination2.com. Both destination1.com

Re: [ANN] iRedMail-0.3: Open Source Mail Server Solution

2008-09-24 Thread Zhang Huangbin
Joe Sloan wrote: Zhang Huangbin wrote: Hi, all. I'd like to introduce this open source email server solution here, hope it can help people who need mail server solution. * Multi-platform Support * OS: RHEL/CentOS It's kind of strange that you call it "mutl-plat

[ANN] iRedMail-0.3: Open Source Mail Server Solution

2008-09-24 Thread Zhang Huangbin
Hi, all. I'd like to introduce this open source email server solution here, hope it can help people who need mail server solution. Project: http://code.google.com/p/iredmail/ Installation Guide: http://code.google.com/p/iredmail/wiki/Installation iRedMail is: * Mail server solution for Red H

Re: restriction class and mysql lookup

2008-08-20 Thread Zhang Huangbin
Thanks mouss. :) Use hash file as replacement now.

Re: restriction class and mysql lookup

2008-08-19 Thread Zhang Huangbin
Magnus � wrote: On Tuesday, August 19, 2008 at 04:48 CEST, Zhang Huangbin <[EMAIL PROTECTED]> wrote: [...] In my record: cut<< mysql> select username,restriction_class,restricteddomain from restrictions; +--+---+---

Re: restriction class and mysql lookup

2008-08-18 Thread Zhang Huangbin
mysql lookup by hash file, it works: cut<< b.cn OK cut<< So, what SQL query should i use in mysql lookup file? Thanks very much. :) -- Best Regards. Zhang Huangbin - iRedMail: Mail Server Solution for Red Hat(R) Enterprise Linux & CentOS 5.x: http://iRedMail.googlecode.com/

restriction class and mysql lookup

2008-08-18 Thread Zhang Huangbin
Hi, all. I'm confused about restriction class and the mysql lookup file format. What i should use in 'query'? Thanks very much. :) MySQL table structure: cut<< +---+--+--+-+-+---+ | Field | Type | Null | K