RE: Change Temporary failure in name resolution response code

2016-02-05 Thread Inteq Solution - Dep. Tehnic
s the offender by inserting an iptables DROP entry. > > I block a lot of spammers this way. I wouldn't think of running a > mail server without it. > > Bill > > > On 2/4/2016 4:10 PM, Inteq Solution - Dep. Tehnic wrote: > > Thank you Wietse, > > > >

RE: Change Temporary failure in name resolution response code

2016-02-04 Thread Inteq Solution - Dep. Tehnic
name resolution response code Inteq Solution - Dep. Tehnic: > "The unknown_client_reject_code parameter specifies the response code > for rejected requests (default: 450). The reply is always 450 in case > the > address->name or name->address lookup failed due to a temporar

Change Temporary failure in name resolution response code

2016-02-04 Thread Inteq Solution - Dep. Tehnic
Hello, I am having some problems with a host hammering my logs all day long because the connection is rejected with 450, even after I have spoken with the person responsible for the domain, explaining why this is happening and what he should do to fix it. hostname ip92.llpdynamics.com does

RE: Reject domain but allow inbound for a local user

2015-03-18 Thread Inteq Solution - Dep. Tehnic
Small error: score USER_IN_WHITELIST 200 should have a negative score so make it score USER_IN_WHITELIST -200 Razvan Constantin +40.755.096.096 t...@inteq.ro -Original Message- From: Inteq Solution - Dep. Tehnic [mailto:t...@inteq.ro] Sent: Thursday, March 19, 2015 6:42 AM

RE: Reject domain but allow inbound for a local user

2015-03-18 Thread Inteq Solution - Dep. Tehnic
will do the job for me. It might be an easy fix, but I just thought of it now. Hope someone finds this useful. Razvan Constantin -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Inteq Solution - Dep. Tehnic Sent: Friday, F

This user doesn't have a yahoo.com account

2015-03-16 Thread Inteq Solution - Dep. Tehnic
Hello, For some time now, on and off, I see this problem. Users sending or replying to yahoo.com users receive the error: "This user doesn't have a yahoo.com account" Of course, my first reaction was to blame the user not writing the email address correctly. But checking the logs I see, many

RE: Reject domain but allow inbound for a local user

2015-02-05 Thread Inteq Solution - Dep. Tehnic
: Reject domain but allow inbound for a local user On 2/5/2015 8:00 AM, li...@rhsoft.net wrote: > > Am 05.02.2015 um 14:54 schrieb Inteq Solution - Dep. Tehnic: >> Thank you for taking your time to reply Wietse, >> >> I might have been a bit ambiguous about my problem. >> I

RE: Reject domain but allow inbound for a local user

2015-02-05 Thread Inteq Solution - Dep. Tehnic
domain but allow inbound for a local user Inteq Solution - Dep. Tehnic: > somedomain.com REJECT > Is there any way to REJECT a domain but allow inbound messages to a > specific local user from the rejected domain? u...@example.comDUNNO example.com REJECT If

Reject domain but allow inbound for a local user

2015-02-05 Thread Inteq Solution - Dep. Tehnic
Hello, Using check_sender_access to REJECT a list of domains Using the format: somedomain.com REJECT My searching skills seem to be subpar today, so I request your help. Is there any way to REJECT a domain but allow inbound messages to a specific local user from the rejecte

RE: opendkim and opendmarc failure for yahoo.com

2014-10-05 Thread Inteq Solution - Dep. tehnic
ge- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Wietse Venema Sent: Sunday, October 05, 2014 7:48 PM To: Postfix users Subject: Re: opendkim and opendmarc failure for yahoo.com Inteq Solution - Dep. tehnic: > No security appliance in front

RE: opendkim and opendmarc failure for yahoo.com

2014-10-05 Thread Inteq Solution - Dep. tehnic
problem. -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Wietse Venema Sent: Sunday, October 05, 2014 6:53 PM To: Postfix users Subject: Re: opendkim and opendmarc failure for yahoo.com Inteq Solution - Dep. tehnic: > Oct 5 17

opendkim and opendmarc failure for yahoo.com

2014-10-05 Thread Inteq Solution - Dep. tehnic
Hello, Having some issues with messages from yahoo.com They seem to fail dkim and dmarc verification. Dmarc from gmail.com (for example) works just fine. Any clue if Yahoo is having some problems? Can't seem to find any on my side. Oct 5 17:55:35 ns4 postfix/smtpd[5789]: connect from n

RE: Error I'm not familiar with

2014-06-03 Thread Inteq Solution - Dep. Tehnic
Your domain seems to be on URIBL blacklist (black) "Contains an URL listed in the URIBL blacklist [URIs: d u s t y p e x.com]" jfyi Razvan -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Wietse Venema Sent: Tuesday, June

RE: Blocking executables. What did I miss?

2014-06-02 Thread Inteq Solution - Dep. Tehnic
Thank you Wietse, Viktor, Learned something new today. Even though I read the documentation regarding content filtering, it seems I missed that part. Will look for a complementary solution. All the best Razvan -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-po

RE: Blocking executables. What did I miss?

2014-06-01 Thread Inteq Solution - Dep. Tehnic
Hello Viktor, I admit, I am not a guru in Postfix but I am trying. I do not understand where the confusion is? Using both my examples (mime_header_checks and header_checks), my executable (.bat) is blocked when I send a test email from Outlook with the correct REJECT text. But, when testing from

Blocking executables. What did I miss?

2014-05-31 Thread Inteq Solution - Dep. Tehnic
Hello Tonight, while checking Postfix config, I have stumbled upon something weird. I am blocking executables and potentially dangerous extensions with header_checks = pcre:/etc/postfix/header_checks.pcre Inside header_checks.pcre I have: /^Content-(Disposition|Type).*name\s*=\s*"?(.*(\.|

Re: Strange spoof problem

2013-11-08 Thread inteq
One more problem I spotted while having this situation is that SPF checking is not done automagically for subdomains. I learn something new everyday. You have domain.tld and SPF setup with -all If your FQDN is mail.domain.tld, there will be no SPF check for it in case of spoofing. To counter this

Re: Strange spoof problem

2013-11-08 Thread inteq
Found the problem I am using check_recipient_access and for some reason I had a line with bad code. Fixed it and now it works Inside the hash file I have: domain.tld REJECT Reason for reject -- View this message in context: http://postfix.1071664.n5.nabble.com/Strange-spoof-problem-tp62

Strange spoof problem

2013-11-08 Thread inteq
Hello Today while checking security I stumbled upon a weird spoof problem. I have enabled SPF checking and and reject_sender_login_mismatch and everything works. But, If I try to send email from an external SMTP server and try to spoof as shown below, all my SPF and stuff checks will fail. Inform

Re: Postfix+pflogsumm+clamav = email blocked

2013-11-04 Thread inteq
Decided to tar my log and send it. Tested with the yesterday log containing malware links and it works.(so far) Thank you for your input My approach: #!/bin/bash # Use apt-get install sendemail (this is NOT sendmail) if you do not have it /usr/sbin/pflogsumm -d today --problems_first --smtpd-sta

Re: Postfix+pflogsumm+clamav = email blocked

2013-11-04 Thread inteq
Thank you for your replies. The message is from localhost, not from another postfix machine, but the machine has multiple virtual servers/aliases. The reason behind a log file containing no malware but still being flagged as virus, is because the scanner is configured to check links also (links t

Postfix+pflogsumm+clamav = email blocked

2013-11-04 Thread inteq
Hello For some time now I was wondering why some of my pflogsumm emails were not received. Digging deeper into the problem today, I can see the emails are being blocked by Postfix because it "contains" a virus. Nov 4 21:36:52 ns4 postfix/smtp[9383]: 338E14303B: to=, relay=127.0.0.1[127.0.0.1]:10