Re: using postscreen on port 25

2011-12-17 Thread Wietse Venema
Stan Hoeppner: > >> [iptables] > >> > >> Or simply list the clients in mynetworks. > > > > No, this redirects client from the MTA port (with postscreen) > > to the MUA port (with submission service). > > > > Wietse > > You've confused me now Wietse. Is the iptables redirect to a submission

Re: using postscreen on port 25

2011-12-17 Thread Stan Hoeppner
On 12/16/2011 8:49 AM, Wietse Venema wrote: > Wietse Venema: >> Stan Hoeppner: >>> On 12/15/2011 8:19 AM, /dev/rob0 wrote: >>> The old default of most MUAs to use port 25 was wrong, and it is now coming back to haunt you. That said, you have workarounds: - Use a different IP ad

Re: using postscreen on port 25

2011-12-16 Thread Stan Hoeppner
On 12/16/2011 6:32 AM, Wietse Venema wrote: > Stan Hoeppner: >> On 12/15/2011 8:19 AM, /dev/rob0 wrote: >> >>> The old default of most MUAs to use port 25 was wrong, and it is now >>> coming back to haunt you. That said, you have workarounds: >>> >>> - Use a different IP address for port 25 MX and

Re: using postscreen on port 25

2011-12-16 Thread Wietse Venema
Wietse Venema: > Stan Hoeppner: > > On 12/15/2011 8:19 AM, /dev/rob0 wrote: > > > > > The old default of most MUAs to use port 25 was wrong, and it is now > > > coming back to haunt you. That said, you have workarounds: > > > > > > - Use a different IP address for port 25 MX and submission mail

Re: using postscreen on port 25

2011-12-16 Thread Wietse Venema
Stan Hoeppner: > On 12/15/2011 8:19 AM, /dev/rob0 wrote: > > > The old default of most MUAs to use port 25 was wrong, and it is now > > coming back to haunt you. That said, you have workarounds: > > > > - Use a different IP address for port 25 MX and submission mail > > If *all* your MUAs submi

Re: using postscreen on port 25

2011-12-15 Thread Stan Hoeppner
On 12/15/2011 8:19 AM, /dev/rob0 wrote: > The old default of most MUAs to use port 25 was wrong, and it is now > coming back to haunt you. That said, you have workarounds: > > - Use a different IP address for port 25 MX and submission mail If *all* your MUAs submitting to TCP 25 are on a known

Re: using postscreen on port 25

2011-12-15 Thread Gábor Lénárt
On Thu, Dec 15, 2011 at 09:35:19AM -0600, /dev/rob0 wrote: > > I am thinking to use postscreen with mail submission server as > > well since its rbl check seems to be better in performance than > > using smtpd's one. > > The difference is in how it is done. smtpd checks each DNSBL in > sequence,

Re: using postscreen on port 25

2011-12-15 Thread Wietse Venema
/dev/rob0: > The old default of most MUAs to use port 25 was wrong, and it is now > coming back to haunt you. That said, you have workarounds: > > - Use a different IP address for port 25 MX and submission mail I've added this one to the documentation (a dedicated, non-MX, submission service on

Re: using postscreen on port 25

2011-12-15 Thread /dev/rob0
On Thursday 15 December 2011 08:24:51 Gábor Lénárt wrote: > On Thu, Dec 15, 2011 at 08:19:18AM -0600, /dev/rob0 wrote: > > On Thursday 15 December 2011 07:53:35 Tomas Macek wrote: > > > But we have clients, that send mails on both port 25 and > > > 587. I really cannot use postscreen? I don't under

Re: using postscreen on port 25

2011-12-15 Thread Wietse Venema
G?bor L?n?rt: > On Thu, Dec 15, 2011 at 08:19:18AM -0600, /dev/rob0 wrote: > > On Thursday 15 December 2011 07:53:35 Tomas Macek wrote: > > > I'd like to use postcreen as some kind of spam protection. > > > According to documentation > > > > > > * postscreen(8) should not be used on SMTP ports tha

Re: using postscreen on port 25

2011-12-15 Thread Gábor Lénárt
On Thu, Dec 15, 2011 at 08:19:18AM -0600, /dev/rob0 wrote: > On Thursday 15 December 2011 07:53:35 Tomas Macek wrote: > > I'd like to use postcreen as some kind of spam protection. > > According to documentation > > > > * postscreen(8) should not be used on SMTP ports that receive mail > > from en

Re: using postscreen on port 25

2011-12-15 Thread /dev/rob0
On Thursday 15 December 2011 07:53:35 Tomas Macek wrote: > I'd like to use postcreen as some kind of spam protection. > According to documentation > > * postscreen(8) should not be used on SMTP ports that receive mail > from end-user clients (MUAs). In a typical deployment, > postscreen(8) is used

Re: using postscreen on port 25

2011-12-15 Thread Wietse Venema
Tomas Macek: > I'd like to use postcreen as some kind of spam protection. According to > documentation > > * postscreen(8) should not be used on SMTP ports that receive mail > from end-user clients (MUAs). In a typical deployment, postscreen(8) is > used on the "port 25" service, while MUA clie

using postscreen on port 25

2011-12-15 Thread Tomas Macek
I'd like to use postcreen as some kind of spam protection. According to documentation * postscreen(8) should not be used on SMTP ports that receive mail from end-user clients (MUAs). In a typical deployment, postscreen(8) is used on the "port 25" service, while MUA clients submit mail via the