Re: postfix hangs when SASL enabled

2008-09-08 Thread Wietse Venema
> I narrowed down the problem to this config value: > smtpd_sasl_auth_enable = yes All problems are reported to logfile. http://www.postfix.org/DEBUG_README.html#logging Wietse TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail

Re: rcpt count mismatch errors (not using Mailscanner)

2008-09-08 Thread Wietse Venema
[EMAIL PROTECTED]: > Any ideas what causes these? > > Jul 21 23:14:43 kd1 postfix/qmgr[20699]: warning: F320A29569: rcpt count > mismatch (-2) ... > Version is postfix-2.3.r8,3 (FreeBSD port) This problem was removed by a code reorganization in Postfix 2.4, when I added support for "message body"

Postfix + SPF/SRS advice

2008-09-08 Thread Guy
Hi guys, I'm running a mail gateway (soon to add a second one) and I've just recently started having problems with SPF as many of our users just use us to forward mail. At the moment all I have is an SPF entry in DNS so I'm looking at SPF and SRS patches/plugins for postfix. The last SRS patch I f

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Brian Evans - Postfix List
Guy wrote: > Hi guys, > > I'm running a mail gateway (soon to add a second one) and I've just > recently started having problems with SPF as many of our users just > use us to forward mail. At the moment all I have is an SPF entry in > DNS so I'm looking at SPF and SRS patches/plugins for postfix.

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Guy
Hi Brian, 2008/9/8 Brian Evans - Postfix List <[EMAIL PROTECTED]>: > SPF running in conjunction with Postfix will only do verification. > http://www.openspf.org/Software lists the packages known to work properly. > What makes you think you have a problem? I should have been more specific. I've ha

Re: Postfix + SPF/SRS advice

2008-09-08 Thread mouss
Guy wrote: Hi guys, I'm running a mail gateway (soon to add a second one) and I've just recently started having problems with SPF as many of our users just use us to forward mail. Can you give more details here? do you forward mail for domains that have a "-all"? (if so, can you give an exam

Re: Postfix + SPF/SRS advice

2008-09-08 Thread mouss
Guy wrote: Hi Brian, 2008/9/8 Brian Evans - Postfix List <[EMAIL PROTECTED]>: SPF running in conjunction with Postfix will only do verification. http://www.openspf.org/Software lists the packages known to work properly. What makes you think you have a problem? I should have been more specific

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Wietse Venema
Guy: > Hi guys, > > I'm running a mail gateway (soon to add a second one) and I've just > recently started having problems with SPF as many of our users just > use us to forward mail. At the moment all I have is an SPF entry in > DNS so I'm looking at SPF and SRS patches/plugins for postfix. The >

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Guy
Hi Mouss, 2008/9/8 mouss <[EMAIL PROTECTED]>: > we'd like to see a concrete example: sender domain and the "uncooperative" > remote server. <[EMAIL PROTECTED]>: host ricercare.co.uk[195.216.196.141] said: 550 SPF: x.x.x.x is not allowed to send mail from growse.com (in reply to RCPT TO command)

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Guy
Hi Wietse, 2008/9/8 Wietse Venema <[EMAIL PROTECTED]>: > SRS requires envelope sender munging. This would require an external > content filter. Postfix Milter support to replace the envelope > sender is still on the todo list. Are you aware of one that works well with Postfix? There are a few pac

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Brian Evans - Postfix List
Guy wrote: > Hi Mouss, > > 2008/9/8 mouss <[EMAIL PROTECTED]>: > >> we'd like to see a concrete example: sender domain and the "uncooperative" >> remote server. >> > > <[EMAIL PROTECTED]>: host ricercare.co.uk[195.216.196.141] said: 550 > SPF: x.x.x.x is not allowed to send mail from growse

Postfix not sending to proper servers.

2008-09-08 Thread Marcelo Iturbe
Hello, A client has a domain (sample.com) which resolves to the IP 190.190.168.54 The MX records this domain point to another IP completely different: 64.233.171.27 My postfix server houses the domain someotherdomain.com, the problem is that I am unable to send email to my clients domain. When I

Re: Postfix not sending to proper servers.

2008-09-08 Thread mouss
Marcelo Iturbe wrote: Hello, A client has a domain (sample.com) which resolves to the IP 190.190.168.54 The MX records this domain point to another IP completely different: 64.233.171.27 I don't see the same IPs here. $ host sample.com sample.com has address 208.87.33.150 sample.com mail is h

Postfix crashing under load

2008-09-08 Thread Devdas Bhagat
The last error messages I get are these: Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem talking to service private/scache: Connection timed out Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning: problem talking to service private/scache: Connection timed out S

trusted access and authenticated access

2008-09-08 Thread Charles Account
Hi, I am trying to configure my postfix server to allow two types of users: trusted and authenticated The trusted users are sending from a set of IP addresses and I don't require them to authenticate since this has occurred up stream. The authenticated users are using thirdparty clients like t

Re: Postfix crashing under load

2008-09-08 Thread Brian Evans - Postfix List
Devdas Bhagat wrote: > The last error messages I get are these: > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem > talking to service private/scache: Connection timed out > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning: problem > talking to service private

Re: trusted access and authenticated access

2008-09-08 Thread mouss
Charles Account wrote: Hi, I am trying to configure my postfix server to allow two types of users: trusted and authenticated The trusted users are sending from a set of IP addresses and I don't require them to authenticate since this has occurred up stream. for these you need permit_mynetwor

Re: processing order lookup tables

2008-09-08 Thread gerrit
mouss schreef: gerrit wrote: Hi All, Recently i implemented the sender check. First i made a split for the processing and put some restrictions under smtpd_sender_restrictions and some under stmpd_recipient_restrictions. This resulted in too many rejections, so i left the sender restrictio

PHP and sendmail : reject users with no From: header address

2008-09-08 Thread gerrit
Hi everyone. In my main.cf i got this line : authorized_submit_users = !apache, static:anyone This line restrict apache from sending mail via the sendmail way. Since most users use the mail() statement in php, which uses sendmail to sent mails, its the preffered way. My goal is, to restrict

postfix/dovecot lda assistance

2008-09-08 Thread Scott Sharkey
Hi All, I'm trying to set postfix up to deliver using dovecot's LDA delivery agent. I'm using postfixadmin, with mysql virtual user tables. Those tables include a "transport" field, which is set to "virtual:". But I thought that the main.cf virtual_transport setting would redirect these throug

Re: postfix/dovecot lda assistance

2008-09-08 Thread Brian Evans - Postfix List
Scott Sharkey wrote: > Hi All, > > I'm trying to set postfix up to deliver using dovecot's LDA delivery > agent. I'm using postfixadmin, with mysql virtual user tables. Those > tables include a "transport" field, which is set to "virtual:". But I > thought that the main.cf virtual_transport sett

Re: PHP and sendmail : reject users with no From: header address

2008-09-08 Thread Noel Jones
gerrit wrote: Hi everyone. In my main.cf i got this line : authorized_submit_users = !apache, static:anyone The above prevents the apache USER from using the sendmail command. This has nothing to do with the envelope sender address or From: header. Specifically, this prevents the apache

Re: processing order lookup tables

2008-09-08 Thread mouss
gerrit wrote: check_sender_access hash:/etc/postfix/sender_whitelist check_recipient_access hash:/etc/postfix/recipient_whitelist reject_unauth_destination reject_unverified_sender sender verification callbacks are not very appreci

Re: postfix/dovecot lda assistance

2008-09-08 Thread Noel Jones
Scott Sharkey wrote: Hi All, I'm trying to set postfix up to deliver using dovecot's LDA delivery agent. I'm using postfixadmin, with mysql virtual user tables. Those tables include a "transport" field, which is set to "virtual:". But I thought that the main.cf virtual_transport setting would

Re: Postfix crashing under load

2008-09-08 Thread Victor Duchovni
On Mon, Sep 08, 2008 at 10:35:40PM +0530, Devdas Bhagat wrote: > The last error messages I get are these: > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem > talking to service private/scache: Connection timed out > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: war

Re: postfix/dovecot lda assistance

2008-09-08 Thread mouss
Scott Sharkey wrote: Hi All, I'm trying to set postfix up to deliver using dovecot's LDA delivery agent. I'm using postfixadmin, with mysql virtual user tables. Those tables include a "transport" field, which is set to "virtual:". But I thought that the main.cf virtual_transport setting would

Re: postfix/dovecot lda assistance

2008-09-08 Thread Scott Sharkey
Brian Evans - Postfix List wrote: Scott Sharkey wrote: transport_maps setting is global. Each entry in the lookup refers directly to a transport in master.cf. Having 'virtual:' means always use the virtual listing in master.cf and ignore what is in main.cf. I did not realize that... that is

Re: Postfix crashing under load

2008-09-08 Thread Wietse Venema
Devdas Bhagat: > The last error messages I get are these: > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem > talking to service private/scache: Connection timed out > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning: problem > talking to service private/scach

Re: Postfix crashing under load

2008-09-08 Thread Wietse Venema
Wietse Venema: > Devdas Bhagat: > > The last error messages I get are these: > > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem > > talking to service private/scache: Connection timed out > > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning: problem > > talki

Re: Postfix crashing under load

2008-09-08 Thread Victor Duchovni
On Mon, Sep 08, 2008 at 03:31:29PM -0400, Wietse Venema wrote: > > The master daemon triggers qmgr and pickup regularly. That "trigger" > > write is non-blocking with a timeout of 1, so it cannot block the > > master daemon. Except of course when the kernel is messed up. > > Hmm, except that writ

Re: Postfix crashing under load

2008-09-08 Thread Wietse Venema
Wietse Venema: > Wietse Venema: > > Devdas Bhagat: > > > The last error messages I get are these: > > > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem > > > talking to service private/scache: Connection timed out > > > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]:

Re: Postfix crashing under load

2008-09-08 Thread Wietse Venema
Victor Duchovni: > On Mon, Sep 08, 2008 at 03:31:29PM -0400, Wietse Venema wrote: > > > > The master daemon triggers qmgr and pickup regularly. That "trigger" > > > write is non-blocking with a timeout of 1, so it cannot block the > > > master daemon. Except of course when the kernel is messed up.

Re: postfix/dovecot lda assistance

2008-09-08 Thread Brian Evans - Postfix List
Scott Sharkey wrote: > Brian Evans - Postfix List wrote: >> Scott Sharkey wrote: > >> transport_maps setting is global. Each entry in the lookup refers >> directly to a transport in master.cf. >> Having 'virtual:' means always use the virtual listing in master.cf and >> ignore what is in main.cf.

Re: postfix hangs when SASL enabled

2008-09-08 Thread Travis
On Mon, Sep 08, 2008 at 08:15:24AM +0200, mouss wrote: > Travis wrote: > >I also notice that even though the SSL keys have passwords on them, > >postfix never prompts for them. > > > > daemons do not prompt. Perhaps they should not, but apache does. Dovecot has a config file entry with the passw

Re: postfix hangs when SASL enabled

2008-09-08 Thread Wietse Venema
Travis: > It turns out that my software (tinyca2) as well as the normal > openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 > (suggested here: https://help.ubuntu.com/community/Postfix) > both prompt for passwords with which to encrypt the key. See instructions at the end of http://www.po

Re: postfix hangs when SASL enabled

2008-09-08 Thread Barney Desmond
2008/9/9 Travis <[EMAIL PROTECTED]>: > Perhaps they should not, but apache does. Dovecot has a config file > entry with the password to the key to allow use of keys with > passwords, which is helpful because: Apache's default behaviour to prompt is less than ideal, but can be configured to do oth

Re: rcpt count mismatch errors (not using Mailscanner)

2008-09-08 Thread Wietse Venema
Wietse Venema: > [EMAIL PROTECTED]: > > Any ideas what causes these? > > > > Jul 21 23:14:43 kd1 postfix/qmgr[20699]: warning: F320A29569: rcpt count > > mismatch (-2) > ... > > Version is postfix-2.3.r8,3 (FreeBSD port) > > This problem was removed by a code reorganization in Postfix 2.4, > when

can send mail, but cannot receive (through ISP smtp)

2008-09-08 Thread Alex Bernea
Hi all, I have set up Postfix 2.5.4 with TLS, Cyrus SASL and LDAP lookups for users. I tested it with openssl s_client command on ports 25, 465 and 587 and everything works (authentication and test emails). I use self signed CA certificates. I also tested sending mail on gmail, yahoo and other p

my networks exclusions not working?

2008-09-08 Thread Chris St Denis
I have the following mynetworks defined Dispite having "69.31.160.0/20" defined and "!69.31.174.220" defined, I can still relay mail from 69.31.174.220 without smtp authentication. Why is this? Does order matter or is there another problem with my syntax? mynetworks = 69.31.160.0/20,

Re: postfix/dovecot lda assistance

2008-09-08 Thread Scott Sharkey
Hi Brian, I'm editing this to make it a bit shorter. Brian Evans - Postfix List wrote: Scott Sharkey wrote: Brian Evans - Postfix List wrote: Scott Sharkey wrote: We need your 'postconf -n' to give more hints about a correct setup. (with virtual_ maps explained too) see below: alias_data

Re: Spam from hotmail servers - how to kill?

2008-09-08 Thread James Robertson
James Robertson wrote: Recently we noticed an increase in junk and discovered that it's coming from Hotmail (and to a lesser extent Yahoo). The problem is that these spammers are smarter that the average spammer. The don't spam flatout all the time (not to us anyway) and since the mail comes

RE: my networks exclusions not working?

2008-09-08 Thread MacShane, Tracy
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Chris St Denis > Sent: Tuesday, 9 September 2008 10:41 AM > To: postfix-users@postfix.org > Subject: my networks exclusions not working? > > I have the following mynetworks defined > > Dispite havin

Re: can send mail, but cannot receive (through ISP smtp)

2008-09-08 Thread Victor Duchovni
On Tue, Sep 09, 2008 at 03:20:32AM +0300, Alex Bernea wrote: > Hi all, > > I have set up Postfix 2.5.4 with TLS, Cyrus SASL and LDAP lookups for users. > > I tested it with openssl s_client command on ports 25, 465 and 587 and > everything works (authentication and test emails). I use self signe

Re: my networks exclusions not working?

2008-09-08 Thread Noel Jones
Chris St Denis wrote: I have the following mynetworks defined Dispite having "69.31.160.0/20" defined and "!69.31.174.220" defined, I can still relay mail from 69.31.174.220 without smtp authentication. Why is this? Does order matter or is there another problem with my syntax? Yes, order m

Re: can send mail, but cannot receive (through ISP smtp)

2008-09-08 Thread Alex Bernea
On Tue, Sep 9, 2008 at 4:18 AM, Victor Duchovni < [EMAIL PROTECTED]> wrote: > On Tue, Sep 09, 2008 at 03:20:32AM +0300, Alex Bernea wrote: > > > Hi all, > > > > I have set up Postfix 2.5.4 with TLS, Cyrus SASL and LDAP lookups for > users. > > > > I tested it with openssl s_client command on ports

Re: Postfix crashing under load

2008-09-08 Thread Devdas Bhagat
On Mon, Sep 08, 2008 at 01:23:53PM -0400, Brian Evans - Postfix List wrote: > > relay_recipient_maps = regexp:/etc/postfix/relay > > > > This looks potentially bad to me, but without knowing what is in that > /etc/postfix/relay map, it's hard to judge. > > relayhost = [redacted-trap] > > >

Re: Postfix crashing under load

2008-09-08 Thread Devdas Bhagat
On Mon, Sep 08, 2008 at 03:27:31PM -0400, Wietse Venema wrote: > Devdas Bhagat: > > The last error messages I get are these: > > Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem > > talking to service private/scache: Connection timed out > > Sep 8 13:54:37 jaundiced-outlook