Re: Postfix - vacation.pl - dspam

2008-08-19 Thread mouss
Claudio Prono wrote: I resend that question to the mailing list, because i need a solution. Sorry. Anyone have an idea of how to do that? The best way is to run dspam in relay mode (it runs as an LMTP daemon and after filtering, forwards mail back to postfix. same way amavisd-new does, so y

Re: restriction class and mysql lookup

2008-08-19 Thread Zhang Huangbin
Magnus � wrote: On Tuesday, August 19, 2008 at 04:48 CEST, Zhang Huangbin <[EMAIL PROTECTED]> wrote: [...] In my record: cut<< mysql> select username,restriction_class,restricteddomain from restrictions; +--+---+--+ | username | res

Re: Postfix local privilege escalation via hardlinked symlinks

2008-08-19 Thread Matthias Andree
Udo Rader <[EMAIL PROTECTED]> writes: > Wietse Venema wrote: >> Summary: Solaris and Linux file system behavior has changed over >> time, breaking one of the assumptions in Postfix. See below for a >> description of the behavior and how it disagrees with standards. >> >> Postfix is not affected o

Connection refused and duplicate aliases warning

2008-08-19 Thread Rupert Reid
Hello All, I have two questions as follows: 1. I have set up the postfix server as follows: postconf -n command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 inet_interfaces =

Re: Postfix local privilege escalation via hardlinked symlinks

2008-08-19 Thread Wietse Venema
Matthias Andree: > If Postfix (or qmail[1], or whatever application) claims to support a > particular operating system (Linux, Solaris - rather than POSIX), then > it has to make proper assumptions to work in that possibly different > environment that Postfix claims to support, rather than blame th

Postfix and Hylafax faxmail

2008-08-19 Thread Michael
In my master.cf I have the following- fax unix - n n - 1 pipe flags= user=uucp argv=/usr/local/bin/faxmail -d -n ${user} In my main.cf I have the following- smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender

Re: Postfix and Hylafax faxmail

2008-08-19 Thread Robert Schetterer
Michael schrieb: In my master.cf I have the following- fax unix - n n - 1 pipe flags= user=uucp argv=/usr/local/bin/faxmail -d -n ${user} In my main.cf I have the following- smtpd_recipient_restrictions = reject_invalid_hostname, rej

Re: Postfix and Hylafax faxmail

2008-08-19 Thread Michael
Thanks. That has fixed it. My next questions are- 1. Does it matter what order the restrictions appear in? 2. What is the 'permit' at the end for? > > In my main.cf I have the following- > > > > smtpd_recipient_restrictions = > > reject_invalid_hostname, > > reject_non_fqdn_sende

Re: Postfix and Hylafax faxmail

2008-08-19 Thread Ralf Hildebrandt
* Michael <[EMAIL PROTECTED]>: > Thanks. That has fixed it. My next questions are- > > 1. Does it matter what order the restrictions appear in? Of course. First match wins- > 2. What is the 'permit' at the end for? To permit the request :) -- Ralf Hildebrandt ([EMAIL PROTECTED]) [E

Re: Before queue filter vs access policy delegation?

2008-08-19 Thread S P Arif Sahari Wibowo
On Wed, 13 Aug 2008, Bill Anderson wrote: To be fair, if he only want to read the body, he could "shell out" to postcat to *read* it so long as it was done late enough in the process - i.e. end-of-data. I make no guarantees about performance of such acts, however. ;) I have done this *on occas

Re: Postfix and Hylafax faxmail

2008-08-19 Thread Michael
On Wed, 20 Aug 2008 01:13:32 Ralf Hildebrandt wrote: > * Michael <[EMAIL PROTECTED]>: > > Thanks. That has fixed it. My next questions are- > > > > 1. Does it matter what order the restrictions appear in? > > Of course. First match wins- > > > 2. What is the 'permit' at the end for? > > To permit t

Re: Before queue filter vs access policy delegation?

2008-08-19 Thread S P Arif Sahari Wibowo
On Sat, 9 Aug 2008, Noel Jones wrote: Yes, a policy service is always* less resource intensive than a content_filter or proxy. *assuming well written software doing about the same thing. Great! I hope the difference is big enough, since I want to implement greylisting on the top of it. :-)

Re: Postfix and Hylafax faxmail

2008-08-19 Thread Ralf Hildebrandt
* Michael <[EMAIL PROTECTED]>: > On Wed, 20 Aug 2008 01:13:32 Ralf Hildebrandt wrote: > > * Michael <[EMAIL PROTECTED]>: > > > Thanks. That has fixed it. My next questions are- > > > > > > 1. Does it matter what order the restrictions appear in? > > > > Of course. First match wins- > > > > > 2. Wha

Re: Connection refused and duplicate aliases warning

2008-08-19 Thread Brian Evans - Postfix List
Rupert Reid wrote: Hello All, I have two questions as follows: 1. I have set up the postfix server as follows: postconf -n command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 inet_interfaces = all mail_owner = postfix mailq_p

Re: Postfix (virtual) and Mailman, Invalid user specified.

2008-08-19 Thread Brian Evans - Postfix List
Num ber wrote: (Sorry for the last message, it's was not readable !! ) Hello,I'm sorry i know that the question was already asked, but i have try manything, and no one work.. I'm try to have mailman with postfix.. I use Postfix with mysql, and for my domaine everything work perfectly.. Now i h

Postfix and Hylafax faxmail - part 2

2008-08-19 Thread Michael
What I want to achieve now is to ONLY allow authenticated clients (via SASL) to send to the fax email address... How can this be achieved? --- In my master.cf I have the following- fax unix - n n - 1 pipe

Re: Before queue filter vs access policy delegation?

2008-08-19 Thread Noel Jones
S P Arif Sahari Wibowo wrote: On Wed, 13 Aug 2008, Bill Anderson wrote: To be fair, if he only want to read the body, he could "shell out" to postcat to *read* it so long as it was done late enough in the process - i.e. end-of-data. I make no guarantees about performance of such acts, however.

Re: Before queue filter vs access policy delegation?

2008-08-19 Thread Noel Jones
S P Arif Sahari Wibowo wrote: On Sat, 9 Aug 2008, Noel Jones wrote: Yes, a policy service is always* less resource intensive than a content_filter or proxy. *assuming well written software doing about the same thing. Great! I hope the difference is big enough, since I want to implement greyl

Re: Postfix and Hylafax faxmail - part 2

2008-08-19 Thread Noel Jones
Michael wrote: What I want to achieve now is to ONLY allow authenticated clients (via SASL) to send to the fax email address... How can this be achieved? In your recipients table, rather than: faxdomain OK use instead: faxdomain permit_sasl_authenticated If you want to also allow unauthe

Restriction classes with null sender

2008-08-19 Thread Brian Evans - Postfix List
I want a single account to only accept NDRs. Other email should be rejected. Would the following work correctly? smtpd_recipient_restrictions: ... check_recipient_access hash:/etc/postfix/receieve_only ... /etc/postfix/receieve_only: [EMAIL PROTECTED] check_sender_access hash:/etc/postfix/ndr

Re: Restriction classes with null sender

2008-08-19 Thread Noel Jones
Brian Evans - Postfix List wrote: I want a single account to only accept NDRs. Other email should be rejected. Would the following work correctly? smtpd_recipient_restrictions: ... check_recipient_access hash:/etc/postfix/receieve_only ... /etc/postfix/receieve_only: [EMAIL PROTECTED] check

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Jeff
On Tue, Aug 12, 2008 at 3:23 PM, Noel Jones <[EMAIL PROTECTED]> wrote: > Jeff wrote: >> >> We have an email gateway appliance at the network edge for spam/virus >> filtering. It relays mail to multiple postfix+imap servers behind the >> firewall. The back-end servers communicate directly with each

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Noel Jones
Jeff wrote: On Tue, Aug 12, 2008 at 3:23 PM, Noel Jones <[EMAIL PROTECTED]> wrote: Jeff wrote: We have an email gateway appliance at the network edge for spam/virus filtering. It relays mail to multiple postfix+imap servers behind the firewall. The back-end servers communicate directly with eac

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Wietse Venema
Jeff: > It took me a while before I could test this. The recommended solution > succeeds at blocking the specified aliases when relayed through our > gateway, but it does not do so at the SMTP level. It generates bounce > notifications, which in the end will create back-scatter. The bounce > messag

Re: Policy filter applied from command line

2008-08-19 Thread Tony Holmes
> > > > pickupfifo n - n 60 1 pickup > > > > -o content_filter=smtp:[127.0.0.1]:10025 > > > > [127.0.0.1]:10025 > > > > inet n - n - - smtpd > > > > > > > > and remove 127.0.0.1 from mynetworks. Of c

Re: restriction class and mysql lookup

2008-08-19 Thread mouss
Zhang Huangbin wrote: Magnus � wrote: On Tuesday, August 19, 2008 at 04:48 CEST, Zhang Huangbin <[EMAIL PROTECTED]> wrote: [...] In my record: cut<< mysql> select username,restriction_class,restricteddomain from restrictions; +--+---+--

Re: Postfix (virtual) and Mailman, Invalid user specified.

2008-08-19 Thread mouss
Num ber wrote: (Sorry for the last message, it's was not readable !! ) Hello,I'm sorry i know that the question was already asked, but i have try manything, and no one work.. I'm try to have mailman with postfix.. I use Postfix with mysql, and for my domaine everything work perfectly.. Now i h

Re: Connection refused and duplicate aliases warning

2008-08-19 Thread mouss
Rupert Reid wrote: Hello All, I have two questions as follows: 1.I have set up the postfix server as follows: postconf -n command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 inet_interfaces = all

How Can I Tell How Postfix Was Installed?

2008-08-19 Thread Blake Carver
I'm trying to help someone with Postfix, and it looks like this one is a few versions behind. They say that they're not sure if it was isntalled Via RPM or a source tarball. This is a RHEL5 server. It's set up to use Dovecot and MySQL. There are RPMs listed as installed (rpm -qa) but I don't know h

Re: How Can I Tell How Postfix Was Installed?

2008-08-19 Thread Wietse Venema
Blake Carver: > I'm trying to help someone with Postfix, and it looks like this one is > a few versions behind. They say that they're not sure if it was > isntalled Via RPM or a source tarball. This is a RHEL5 server. It's > set up to use Dovecot and MySQL. There are RPMs listed as installed > (rpm

Sending mail to an external receiver fails

2008-08-19 Thread Jan Röhrich
Hello List, I have a strange problem an spent the whole day on looking for a solution: I configured postfix to use virtual_mailbox_maps and maildrop like this: virtual_mailbox_base = /mailboxes virtual_minimum_uid = 1 virtual_mailbox_domains = mysql:/etc/postfix/my/domains.conf virtual_mailb

Re: Sending mail to an external receiver fails

2008-08-19 Thread Wietse Venema
Jan =?ISO-8859-1?Q?R=F6hrich?=: > virtual_mailbox_domains = mysql:/etc/postfix/my/domains.conf > virtual_mailbox_maps = mysql:/etc/postfix/my/vmailbox.conf ... > Aug 19 19:31:37 mail2 postfix/smtpd[12877]: NOQUEUE: reject: RCPT from > unknown[10.221.0.250]: 550 5.1.1 <[EMAIL PROTECTED]>: R > ecipie

Re: Sending mail to an external receiver fails

2008-08-19 Thread mouss
Jan Röhrich wrote: Hello List, I have a strange problem an spent the whole day on looking for a solution: I configured postfix to use virtual_mailbox_maps and maildrop like this: virtual_mailbox_base = /mailboxes virtual_minimum_uid = 1 virtual_mailbox_domains = mysql:/etc/postfix/my/domai

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Jeff
On Tue, Aug 19, 2008 at 11:38 AM, Wietse Venema <[EMAIL PROTECTED]> wrote: > Jeff: >> It took me a while before I could test this. The recommended solution >> succeeds at blocking the specified aliases when relayed through our >> gateway, but it does not do so at the SMTP level. It generates bounce

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Wietse Venema
Jeff: > On Tue, Aug 19, 2008 at 11:38 AM, Wietse Venema <[EMAIL PROTECTED]> wrote: > > Jeff: > >> It took me a while before I could test this. The recommended solution > >> succeeds at blocking the specified aliases when relayed through our > >> gateway, but it does not do so at the SMTP level. It

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Jeff
On Tue, Aug 19, 2008 at 1:43 PM, Wietse Venema <[EMAIL PROTECTED]> wrote: > Jeff: >> On Tue, Aug 19, 2008 at 11:38 AM, Wietse Venema <[EMAIL PROTECTED]> wrote: >> > Jeff: >> >> It took me a while before I could test this. The recommended solution >> >> succeeds at blocking the specified aliases whe

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Wietse Venema
Jeff: > I want the back-end to tell the front-end gateway 550 for > [EMAIL PROTECTED], but I want it to tell my other internal MTAs OK, > whilst not breaking regular recipient verification. Reject [EMAIL PROTECTED] on the FRONT_END host. smtpd_recipient_restrictions = check_recipient_access h

Re: How Can I Tell How Postfix Was Installed?

2008-08-19 Thread Barney Desmond
2008/8/20 Wietse Venema <[EMAIL PROTECTED]>: > You can "verify" if the installed software matches the RPM package. > > # rpm -qa 'postfix*' > # rpm --verify name-of-package... If you're still stuck, you might also want to check if the files actually belong to any package (I don't believe they will

RE: Postfix (virtual) and Mailman, Invalid user specified.

2008-08-19 Thread Num ber
Thanks for your reply...Finaly, what was the best way to have maildrop working with virtual user in postfix ?How do you do that ? ( a dedicated service in master)Thanks to all !!> First, understand that you need rewrite the destination in > /etc/mailman/virtual-mailman to a domain listed in myd

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Jeff
On Tue, Aug 19, 2008 at 2:16 PM, Wietse Venema <[EMAIL PROTECTED]> wrote: > Jeff: >> I want the back-end to tell the front-end gateway 550 for >> [EMAIL PROTECTED], but I want it to tell my other internal MTAs OK, >> whilst not breaking regular recipient verification. > > Reject [EMAIL PROTECTED] o

Re: Sending mail to an external receiver fails

2008-08-19 Thread Jan Röhrich
> Do not list googlemail.com in virtual_mailbox_domains. > > To verify: > > $ postmap -q googlemail.com mysql:/etc/postfix/my/domains.conf > > This command should produce no output, no error message, and it > should terminate with a non-zero exit status. Thanks a lot for this fast answer!

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Wietse Venema
Jeff: > On Tue, Aug 19, 2008 at 2:16 PM, Wietse Venema <[EMAIL PROTECTED]> wrote: > > Jeff: > >> I want the back-end to tell the front-end gateway 550 for > >> [EMAIL PROTECTED], but I want it to tell my other internal MTAs OK, > >> whilst not breaking regular recipient verification. > > > > Reject

Re: recipient verification depending on relay (internal vs. external source)

2008-08-19 Thread Noel Jones
Jeff wrote: On Tue, Aug 19, 2008 at 2:16 PM, Wietse Venema <[EMAIL PROTECTED]> wrote: Jeff: I want the back-end to tell the front-end gateway 550 for [EMAIL PROTECTED], but I want it to tell my other internal MTAs OK, whilst not breaking regular recipient verification. Reject [EMAIL PROTECTED]

Re: Postfix and Hylafax faxmail - part 2

2008-08-19 Thread Michael
On Wed, 20 Aug 2008 02:20:23 Noel Jones wrote: > Michael wrote: > > What I want to achieve now is to ONLY allow authenticated clients (via > > SASL) to send to the fax email address... > > > > How can this be achieved? > > In your recipients table, rather than: > faxdomain OK > > use instead: > fa

*Slightly OT* DNSBL Opinions.

2008-08-19 Thread Adam C. Mathews
Presenting using the following blacklists... dul.dnsbl.sorbs.net psbl.surriel.com zen.spamhaus.org These do a good job for me, but I wanted to look for opinions on a couple additional ones. Specifically look for false-positive opinions, adding additional DNS lookups isn't much concern to me. T

Transport Based on Destination MX record and not Destination Domain?

2008-08-19 Thread Rodre Ghorashi-Zadeh
Hello List, This is my first post to this list so please excuse any indiscretions. I have a problem where my carrier's/ISP entire CIDR/Subnet is blacklisted by some email carriers. My ISP does provide a relay/smarthost for outbound SMTP but it doesn't use TLS, so I don't want to route all of o

RE: Postfix and Hylafax faxmail - part 2

2008-08-19 Thread Noel Jones
-Original Message- From: Michael <[EMAIL PROTECTED]> Sent: Tuesday, August 19, 2008 6:19 PM To: postfix users list Subject: Re: Postfix and Hylafax faxmail - part 2 On Wed, 20 Aug 2008 02:20:23 Noel Jones wrote: > Michael wrote: > > What I want to achieve now is to ONLY allow authenticate

Re: *Slightly OT* DNSBL Opinions.

2008-08-19 Thread Duane Hill
On Tue, 19 Aug 2008, Adam C. Mathews wrote: Presenting using the following blacklists... dul.dnsbl.sorbs.net psbl.surriel.com zen.spamhaus.org These do a good job for me, but I wanted to look for opinions on a couple additional ones. Specifically look for false-positive opinions, adding addi

Re: Transport Based on Destination MX record and not Destination Domain?

2008-08-19 Thread Noel Jones
Rodre Ghorashi-Zadeh wrote: Hello List, This is my first post to this list so please excuse any indiscretions. I have a problem where my carrier's/ISP entire CIDR/Subnet is blacklisted by some email carriers. My ISP does provide a relay/smarthost for outbound SMTP but it doesn't use TLS, so I

Log Message Headers

2008-08-19 Thread James Robertson
Apologies if this has been asked before. I would like to log the message headers of email passing through postfix so I can review them. What is the recommended way to do this and will it have an effect on performance? our mail server does not process a very high volume of mail. Thanks. Ja

Re: *Slightly OT* DNSBL Opinions.

2008-08-19 Thread Stan Hoeppner
I highly recommend you sub to spam-l and post your question there also. http://www.claws-and-paws.com/spam-l/spam-l.html FWIW, here's my dnsbl config: reject_rbl_client zen.spamhaus.org, reject_rbl_client dul.dnsbl.sorbs.net, reject_rbl_client dsn.rfc-ignorant.org,