Re: temporary errors for DNS

2009-07-17 Thread Ben Winslow
On Thu, 16 Jul 2009 12:25:52 -0400 Victor Duchovni wrote: > On Wed, Jul 15, 2009 at 11:07:00PM +0200, mouss wrote: > > > > Well, a DNS NXDOMAIN error seems a good reason for discarding > > > mail. > > > > even NXDOMAIN may be a temporary error that the admin can fix. > > This borders on sophis

Re: temporary errors for DNS

2009-07-16 Thread Victor Duchovni
On Wed, Jul 15, 2009 at 11:07:00PM +0200, mouss wrote: > > Well, a DNS NXDOMAIN error seems a good reason for discarding mail. > > even NXDOMAIN may be a temporary error that the admin can fix. This borders on sophistry. NXDOMAIN is not a transient error that resuls from failure to obtain the ri

Re: temporary errors for DNS

2009-07-15 Thread mouss
Keld Jørn Simonsen a écrit : > On Tue, Jul 14, 2009 at 07:57:27PM -0400, John Peach wrote: >> On Tue, 14 Jul 2009 17:49:13 -0600 >> LuKreme wrote: >> >>> On 13-Jul-2009, at 16:24, Keld J__rn Simonsen wrote: Is there a way to disambiguate between DNS timeouts and DNS errors, and discard t

Re: temporary errors for DNS

2009-07-14 Thread Keld Jørn Simonsen
On Tue, Jul 14, 2009 at 07:57:27PM -0400, John Peach wrote: > On Tue, 14 Jul 2009 17:49:13 -0600 > LuKreme wrote: > > > On 13-Jul-2009, at 16:24, Keld J__rn Simonsen wrote: > > > Is there a way to disambiguate between DNS timeouts and DNS errors, > > > and discard the latter? > > > > > > Why th

Re: temporary errors for DNS

2009-07-14 Thread John Peach
On Tue, 14 Jul 2009 17:49:13 -0600 LuKreme wrote: > On 13-Jul-2009, at 16:24, Keld J__rn Simonsen wrote: > > Is there a way to disambiguate between DNS timeouts and DNS errors, > > and discard the latter? > > > Why the devil would you want to discard mail based on a DNS error? > DNS errors have

Re: temporary errors for DNS

2009-07-14 Thread LuKreme
On 13-Jul-2009, at 16:24, Keld Jørn Simonsen wrote: Is there a way to disambiguate between DNS timeouts and DNS errors, and discard the latter? Why the devil would you want to discard mail based on a DNS error? DNS errors have a habit of being quite transient. -- Lithium will no longer be

Re: temporary errors for DNS

2009-07-14 Thread Keld Jørn Simonsen
On Tue, Jul 14, 2009 at 01:55:39PM -0400, Wietse Venema wrote: > Keld Jørn Simonsen: > > > Jul 14 00:11:58 rap postfix/smtpd[1054]: NOQUEUE: reject: RCPT from > > > rap.rap.dk[127.0.0.1]: 450 4.1.8 : Sender > > > address rejected: Domain not found; from= > > > to= proto=ESMTP helo= Jul 14 00:11:

Re: temporary errors for DNS

2009-07-14 Thread mouss
Keld Jørn Simonsen a écrit : > On Tue, Jul 14, 2009 at 12:24:10AM +0200, Keld Jørn Simonsen wrote: >> Well, still problems, but of the more understandable type. >> >> Jul 14 00:11:58 rap postfix/smtpd[1054]: NOQUEUE: reject: RCPT from >> rap.rap.dk[127.0.0.1]: 450 4.1.8 : Sender >> address reject

Re: temporary errors for DNS

2009-07-14 Thread Wietse Venema
Keld J?rn Simonsen: > > Jul 14 00:11:58 rap postfix/smtpd[1054]: NOQUEUE: reject: RCPT from > > rap.rap.dk[127.0.0.1]: 450 4.1.8 : Sender > > address rejected: Domain not found; from= > > to= proto=ESMTP helo= Jul 14 00:11:58 rap > > postfix/smtpd[1054]: > rap.rap.dk[127.0.0.1]: 450 > > 4.1.8 :

Re: temporary errors for DNS

2009-07-14 Thread Noel Jones
Keld Jørn Simonsen wrote: Is there a way to disambiguate between DNS timeouts and DNS errors, and discard the latter? Not inside postfix. You could use a sufficiently flexible policy server for this absurd action. I did have in main.cf: unknown_address_reject_code = 550 ... which will a

Re: temporary errors for DNS

2009-07-14 Thread Keld Jørn Simonsen
On Tue, Jul 14, 2009 at 12:24:10AM +0200, Keld Jørn Simonsen wrote: > Well, still problems, but of the more understandable type. > > Jul 14 00:11:58 rap postfix/smtpd[1054]: NOQUEUE: reject: RCPT from > rap.rap.dk[127.0.0.1]: 450 4.1.8 : Sender > address rejected: Domain not found; from= > to=

Re: temporary errors for DNS

2009-07-14 Thread Robert Schetterer
Keld Jørn Simonsen schrieb: > On Tue, Jul 14, 2009 at 09:04:15AM -0400, Wietse Venema wrote: >> Wietse Venema: >>> Keld J_rn Simonsen: > OK, here goes: > > 1) The server replies with "good news". Postfix replies with good news. > > 2) The server replies with "bad news". Postfix

Re: temporary errors for DNS

2009-07-14 Thread Keld Jørn Simonsen
On Tue, Jul 14, 2009 at 09:04:15AM -0400, Wietse Venema wrote: > Wietse Venema: > > Keld J_rn Simonsen: > > > > OK, here goes: > > > > > > > > 1) The server replies with "good news". Postfix replies with good news. > > > > > > > > 2) The server replies with "bad news". Postfix replies with 5xx. >

Re: temporary errors for DNS

2009-07-14 Thread Wietse Venema
Wietse Venema: > Keld J_rn Simonsen: > > > OK, here goes: > > > > > > 1) The server replies with "good news". Postfix replies with good news. > > > > > > 2) The server replies with "bad news". Postfix replies with 5xx. > > > > > > 3) No server reply. Postfix replies with 4xx. > > > > > > Is thi

Re: temporary errors for DNS

2009-07-14 Thread Wietse Venema
Keld J?rn Simonsen: > > OK, here goes: > > > > 1) The server replies with "good news". Postfix replies with good news. > > > > 2) The server replies with "bad news". Postfix replies with 5xx. > > > > 3) No server reply. Postfix replies with 4xx. > > > > Is this finally clear? > > Yes, thanks.

Re: temporary errors for DNS

2009-07-14 Thread Robert Schetterer
Keld Jørn Simonsen schrieb: > On Tue, Jul 14, 2009 at 06:37:30AM -0400, Wietse Venema wrote: >> Keld Jørn Simonsen: >>> On Mon, Jul 13, 2009 at 06:58:28PM -0400, Wietse Venema wrote: Keld J?rn Simonsen: > Is there a way to disambiguate between DNS timeouts and DNS errors, > and discard

Re: temporary errors for DNS

2009-07-14 Thread Mark Blackman
On 14/7/09 12:10, Keld Jørn Simonsen wrote: OK, here goes: 1) The server replies with "good news". Postfix replies with good news. 2) The server replies with "bad news". Postfix replies with 5xx. 3) No server reply. Postfix replies with 4xx. Is this finally clear? Yes, thanks. But it seems

Re: temporary errors for DNS

2009-07-14 Thread Keld Jørn Simonsen
On Tue, Jul 14, 2009 at 06:37:30AM -0400, Wietse Venema wrote: > Keld Jørn Simonsen: > > On Mon, Jul 13, 2009 at 06:58:28PM -0400, Wietse Venema wrote: > > > Keld J?rn Simonsen: > > > > Is there a way to disambiguate between DNS timeouts and DNS errors, > > > > and discard the latter? > > > > > >

Re: temporary errors for DNS

2009-07-14 Thread Wietse Venema
Keld J?rn Simonsen: > On Mon, Jul 13, 2009 at 06:58:28PM -0400, Wietse Venema wrote: > > Keld J?rn Simonsen: > > > Is there a way to disambiguate between DNS timeouts and DNS errors, > > > and discard the latter? > > > > Postfix is only the messenger of the bad news. When the server > > responds,

Re: temporary errors for DNS

2009-07-14 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 06:58:28PM -0400, Wietse Venema wrote: > Keld Jørn Simonsen: > > Is there a way to disambiguate between DNS timeouts and DNS errors, > > and discard the latter? > > Postfix is only the messenger of the bad news. When the server > responds, Postfix acts accordingly. When the

Re: temporary errors for DNS

2009-07-13 Thread Noel Jones
Keld Jørn Simonsen wrote: Jul 14 00:11:58 rap postfix/smtpd[1054]: NOQUEUE: reject: RCPT from rap.rap.dk[127.0.0.1]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jul 14 00:11:58 rap postfix/smtpd[1054]: > rap.rap.dk[127.0.0.1]: 450 4.1.8 : Sender address r

Re: temporary errors for DNS

2009-07-13 Thread Wietse Venema
Keld J?rn Simonsen: > Is there a way to disambiguate between DNS timeouts and DNS errors, > and discard the latter? Postfix is only the messenger of the bad news. When the server responds, Postfix acts accordingly. When the server does not reply, Postfix assumes that this is a temporary error, bec

Re: temporary errors for DNS

2009-07-13 Thread Joe
Keld Jørn Simonsen wrote: On Mon, Jul 13, 2009 at 06:19:40PM -0400, Rod Dorman wrote: On Monday, July 13, 2009, 17:49:10, Keld Jørn Simonsen wrote: ... Are there distros that are known to have a postfix package that is set up correctly wrt chroot? OpenBSD Well, I confin

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 06:19:40PM -0400, Rod Dorman wrote: > On Monday, July 13, 2009, 17:49:10, Keld Jørn Simonsen wrote: > > ... > > Are there distros that are known to have a postfix package that is set > > up correctly wrt chroot? > > OpenBSD Well, I confine myself to Linux, as I am doing

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 11:49:10PM +0200, Keld Jørn Simonsen wrote: > On Mon, Jul 13, 2009 at 03:39:57PM +0200, Keld Jørn Simonsen wrote: > > > > > > It is chrooted. > > > > Thanks for spelling it out. I was just building on the defalt configuration > > of my distro. There were many other chroot

Re: temporary errors for DNS

2009-07-13 Thread Rod Dorman
On Monday, July 13, 2009, 17:49:10, Keld Jørn Simonsen wrote: > ... > Are there distros that are known to have a postfix package that is set > up correctly wrt chroot? OpenBSD -- r...@polylogics.com "The avalanche has already started, it is too Rod Dorman late for the pebbles

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 03:39:57PM +0200, Keld Jørn Simonsen wrote: > On Mon, Jul 13, 2009 at 09:26:44AM -0400, John Peach wrote: > > On Mon, 13 Jul 2009 15:24:04 +0200 > > Keld J__rn Simonsen wrote: > > > > [snip] > > > # > > >

Re: temporary errors for DNS

2009-07-13 Thread Wietse Venema
> # == > # service type private unpriv chroot wakeup maxproc command + args > # (yes) (yes) (yes) (never) (100) > # == > smtpin

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 09:26:44AM -0400, John Peach wrote: > On Mon, 13 Jul 2009 15:24:04 +0200 > Keld J__rn Simonsen wrote: > > [snip] > > # > > == > > # service type private unpriv chroot wakeup maxproc command + > > a

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 08:29:28AM -0400, John Peach wrote: > > > > On Mon, 13 Jul 2009 14:25:01 +0200 > Keld J__rn Simonsen wrote: > > > On Mon, Jul 13, 2009 at 07:07:01AM -0400, Charles Marcus wrote: > > > On 7/13/2009, Keld J__rn Simonsen (k...@dkuug.dk) wrote: > > > > I am getting it via f

Re: temporary errors for DNS

2009-07-13 Thread John Peach
On Mon, 13 Jul 2009 15:24:04 +0200 Keld J__rn Simonsen wrote: [snip] > # > == > # service type private unpriv chroot wakeup maxproc command + > args # (yes) (yes) (yes) (never) (100) # > ==

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 08:28:16AM -0400, Wietse Venema wrote: > Keld Jørn Simonsen: > [ Charset ISO-8859-1 unsupported, converting... ] > > On Mon, Jul 13, 2009 at 07:18:03AM -0400, Wietse Venema wrote: > > > Keld J?rn Simonsen: > > > > 450 indicates a temporary dns error, and I have set > > > > u

Re: temporary errors for DNS

2009-07-13 Thread John Peach
On Mon, 13 Jul 2009 14:25:01 +0200 Keld J__rn Simonsen wrote: > On Mon, Jul 13, 2009 at 07:07:01AM -0400, Charles Marcus wrote: > > On 7/13/2009, Keld J__rn Simonsen (k...@dkuug.dk) wrote: > > > I am getting it via fetchmail > > > > > > > > If you are getting it through fetchmail, then the

Re: temporary errors for DNS

2009-07-13 Thread Wietse Venema
Keld J?rn Simonsen: [ Charset ISO-8859-1 unsupported, converting... ] > On Mon, Jul 13, 2009 at 07:18:03AM -0400, Wietse Venema wrote: > > Keld J?rn Simonsen: > > > 450 indicates a temporary dns error, and I have set > > > unknown_address_reject_code = 550 > > > > unknown_address_reject_code is fo

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 07:07:01AM -0400, Charles Marcus wrote: > On 7/13/2009, Keld Jørn Simonsen (k...@dkuug.dk) wrote: > > I am getting it via fetchmail > > > > If you are getting it through fetchmail, then the message has already > been delivered... so you MUST NOT reject it later, *especial

Re: temporary errors for DNS

2009-07-13 Thread Wietse Venema
Wietse Venema: [ Charset UNKNOWN-8BIT unsupported, converting... ] > Keld J_rn Simonsen: > > 450 indicates a temporary dns error, and I have set > > unknown_address_reject_code = 550 > > unknown_address_reject_code is for permanent errors. > > In your case, the system library getnameinfo() return

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 07:18:03AM -0400, Wietse Venema wrote: > Keld Jørn Simonsen: > > 450 indicates a temporary dns error, and I have set > > unknown_address_reject_code = 550 > > unknown_address_reject_code is for permanent errors. > > In your case, the system library getnameinfo() returns a

Re: temporary errors for DNS

2009-07-13 Thread Wietse Venema
Keld J?rn Simonsen: > 450 indicates a temporary dns error, and I have set > unknown_address_reject_code = 550 unknown_address_reject_code is for permanent errors. In your case, the system library getnameinfo() returns a temporary error, therefore Postfix will reply with 450. Since you also can't

Re: temporary errors for DNS

2009-07-13 Thread Charles Marcus
On 7/13/2009, Keld Jørn Simonsen (k...@dkuug.dk) wrote: > I am getting it via fetchmail If you are getting it through fetchmail, then the message has already been delivered... so you MUST NOT reject it later, *especially* if it is spam - unless of course you really *want* to end up blacklisted..

Re: temporary errors for DNS

2009-07-13 Thread Keld Jørn Simonsen
On Mon, Jul 13, 2009 at 11:10:18AM +0200, Benny Pedersen wrote: > > On Mon, July 13, 2009 10:30, Keld Jørn Simonsen wrote: > > Hi > > > > I have a few problems with my changed postfix configuration, maybe > > somebody could help me? > > > > I am using fetchmail in cooperation with postfix, and I r

Re: temporary errors for DNS

2009-07-13 Thread Benny Pedersen
On Mon, July 13, 2009 10:30, Keld Jørn Simonsen wrote: > Hi > > I have a few problems with my changed postfix configuration, maybe > somebody could help me? > > I am using fetchmail in cooperation with postfix, and I repededly get > the following error: > > fetchmail: SMTP error: 450 4.1.8 : Sende