Re: Stopping backscatter with before-queue

2008-12-10 Thread mouss
Chris Turan a écrit : > Thank you to everyone. I'm getting some great suggestions. I didn't > know about several of the features postfix provides and have been > relying mostly on spamassassin to do the work for me. > >> I don't see the smtpd_*_restrictions. Sensible ones there cut down on >> a

Re: Exempting recipients from header_checks

2008-12-10 Thread mouss
Noel Jones a écrit : > Ben Winslow wrote: >> Hello, >> >> I currently use a small handful of header checks to help drop some mail >> before it reaches SpamAssassin, but I'd like to exempt mail to >> postmaster from these checks. Is there any place in the >> mumble_restrictions processing I can thr

Re: content filter + milter issue

2008-12-10 Thread mouss
Quanah Gibson-Mount a écrit : > Hi, > > I was wondering if anyone had some suggestions on how to deal with an > issue we're seeing when having both a content filter and a before-queue > milter in place with postfix. > > Right now, we run through amavis as our content filter: > > main.cf: > conte

Re: Alias and mailbox under one e-mail address

2008-12-10 Thread Jakub Nadolny
That would be perfect solution, but as I have read it does not work for virtual domains unfortunatelly. On Wed, Dec 10, 2008 at 11:32:36AM +0530, Priscilla wrote: > You can create a .forward file in the home directory of the user > [EMAIL PROTECTED] > Contents of this .forward file should be the

Re: Alias and mailbox under one e-mail address

2008-12-10 Thread Jakub Nadolny
On Wed, Dec 10, 2008 at 11:39:08AM +0100, mouss wrote: > Jakub Nadolny a écrit : > > That would be perfect solution, but as I have read it does not work for > > virtual > > domains unfortunatelly. > > virtual_alias_maps is ok. you just need to find out what cause the dups. The only difference in

Re: Alias and mailbox under one e-mail address

2008-12-10 Thread mouss
Jakub Nadolny a écrit : > That would be perfect solution, but as I have read it does not work for > virtual > domains unfortunatelly. > virtual_alias_maps is ok. you just need to find out what cause the dups. With a content_filter, you need to disable rewrite in all but one smtpd in a chain (wi

Lookup Performance for Postmapped Files

2008-12-10 Thread Fat Bear Mail Services
My virtual_alias_maps file (hash:/etc/postfix/virtual) is many thousands of lines. Does sorting the virtual file before running postmap improve subsequent lookup performance? Just curious. Thanks, Steve Amerige Fat Bear

Re: Lookup Performance for Postmapped Files

2008-12-10 Thread Alessandro Ballestriero
Fat Bear Mail Services ha scritto: My virtual_alias_maps file (hash:/etc/postfix/virtual) is many thousands of lines. Does sorting the virtual file before running postmap improve subsequent lookup performance? Just curious. Thanks, Steve Amerige Fat Bear Hi, use CDB format is most optimize

Re: Lookup Performance for Postmapped Files

2008-12-10 Thread Heiko Wundram
Am Wednesday 10 December 2008 15:52:29 schrieb Fat Bear Mail Services: > My virtual_alias_maps file (hash:/etc/postfix/virtual) is many thousands > of lines. Does sorting the virtual file before running postmap improve > subsequent lookup performance? Just curious. Short answer: no. Long answer

Re: Lookup Performance for Postmapped Files

2008-12-10 Thread Terry Carmen
Fat Bear Mail Services wrote: My virtual_alias_maps file (hash:/etc/postfix/virtual) is many thousands of lines. Does sorting the virtual file before running postmap improve subsequent lookup performance? Just curious. It' a hash table, so the sort order for the inserted data is irrelevant

reject_unverified_recipient and control the route of probe messages

2008-12-10 Thread Dennis // [EMAIL PROTECTED]
Hi all. I manage a few postfix spamfilter gateways for my company. They are doing a really god job of scanning mails and delivering them to customers mailservers. The way we implement this is using a catch-all address to accept all mail for customers domains, then scan the mail and try to delive

Re: Lookup Performance for Postmapped Files

2008-12-10 Thread Victor Duchovni
On Wed, Dec 10, 2008 at 06:52:29AM -0800, Fat Bear Mail Services wrote: > My virtual_alias_maps file (hash:/etc/postfix/virtual) is many thousands > of lines. This is tiny. > Does sorting the virtual file before running postmap improve > subsequent lookup performance? Just curious. No. Perfo

Re: reject_unverified_recipient and control the route of probe messages

2008-12-10 Thread Noel Jones
Dennis // [EMAIL PROTECTED] wrote: Hi all. I manage a few postfix spamfilter gateways for my company. They are doing a really god job of scanning mails and delivering them to customers mailservers. The way we implement this is using a catch-all address to accept all mail for customers domains,

Re: reject_unverified_recipient and control the route of probe messages

2008-12-10 Thread Geert Hendrickx
On Wed, Dec 10, 2008 at 04:38:17PM +0100, Dennis // [EMAIL PROTECTED] wrote: > My questions are: > As the spamscanners are the best or primary MX´s > for the customers domains, would postfix then just probe itself, and > always get a positive answer due to my catch-all entry ? > > Or would postfix

Re: reject_unverified_recipient and control the route of probe messages

2008-12-10 Thread Dennis // [EMAIL PROTECTED]
Noel Jones wrote: > Dennis // [EMAIL PROTECTED] wrote: >> Hi all. >> >> I manage a few postfix spamfilter gateways for my company. >> >> They are doing a really god job of scanning mails and delivering them to >> customers mailservers. >> >> The way we implement this is using a catch-all address to

Re: reject_unverified_recipient and control the route of probe messages

2008-12-10 Thread Geert Hendrickx
On Wed, Dec 10, 2008 at 05:36:04PM +0100, Dennis // [EMAIL PROTECTED] wrote: > But how would recipient verification behave when the customers > mailserver is unavailable ? Postfix then sends a temporary failure (4xx) back to the client. > Would one have to rely on the cache or would postfix hol

Re: reject_unverified_recipient and control the route of probe messages

2008-12-10 Thread Noel Jones
Geert Hendrickx wrote: On Wed, Dec 10, 2008 at 05:36:04PM +0100, Dennis // [EMAIL PROTECTED] wrote: But how would recipient verification behave when the customers mailserver is unavailable ? Postfix then sends a temporary failure (4xx) back to the client. * if the result for that address is

Re: content filter + milter issue

2008-12-10 Thread Quanah Gibson-Mount
--On Wednesday, December 10, 2008 9:27 AM +0100 mouss <[EMAIL PROTECTED]> wrote: so let me mount my /dev/crystal/ball: would it be because of the missing 's' in smtpd_milters? Can you send me a clone of your crystal ball? ;) That was exactly it, thank you. --Quanah -- Quanah Gibson-Mount

Reject non-local mail masquerading as local ?

2008-12-10 Thread Rich Winkel
I guess this can be accomplished using check_sender_access in smtpd_recipient_restrictions but it seems like such a common need I thought there might be a more direct way (i.e. lookup IP# of sender and compare with $mynetworks when MAIL FROM: claims to be local) ... Thanks, Rich

Re: Reject non-local mail masquerading as local ?

2008-12-10 Thread mouss
Rich Winkel a écrit : > I guess this can be accomplished using check_sender_access in > smtpd_recipient_restrictions but it seems like such a common need > I thought there might be a more direct way (i.e. lookup IP# of > sender and compare with $mynetworks when MAIL FROM: claims to be > local) ...

Re: Alias and mailbox under one e-mail address

2008-12-10 Thread mouss
Jakub Nadolny a écrit : > On Wed, Dec 10, 2008 at 11:39:08AM +0100, mouss wrote: >> Jakub Nadolny a écrit : >>> That would be perfect solution, but as I have read it does not work for >>> virtual >>> domains unfortunatelly. >> virtual_alias_maps is ok. you just need to find out what cause the dups

mail forward based on user to specific filter then to another address

2008-12-10 Thread J.P. Trosclair
Hi, I've got a user that wants their mail forwarded to their blackberry account. No big deal. The catch is they want attachments stripped first. I've found this tool called renattach that does just that. I set this up in main.cf: renattach unix- n n - -

Weird disconnections after RCPT using TLS

2008-12-10 Thread Jesús Manuel Loaiza Vidal
Hi guys. My system specs: Gentoo Linux Postfix 2.5.5 I have the problem below: When using TLS postfix sometimes (most the times) disconnects the client just after it issues the RCPT command. When I try to re-send the test email just after the error or when not using TLS the problem doe

Re: fight spam problem: sender equal to receiver

2008-12-10 Thread Roland Plüss
I tried to find one of the messages in the logs. It's damn hard to find it since it's really weird... and it all makes no sense to me. I think this email source belongs to the logs below ( added to prevent potential damage due to fudged HTML ). email source: > > From - Thu Dec 11 02:09

Re: redirecting remote blacklisted (rbl) messages

2008-12-10 Thread Frederick Reeve
On Mon, 8 Dec 2008 06:49:46 +0100 Magnus Bäck <[EMAIL PROTECTED]> wrote: > On Monday, December 08, 2008 at 06:36 CET, > Frederick Reeve <[EMAIL PROTECTED]> wrote: > > > I have a working Postfix 2.5.5 setup that uses several rbls. I would > > like to collect the mail being blocked by these r

RE: mail forward based on user to specific filter then to another address

2008-12-10 Thread MacShane, Tracy
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of J.P. Trosclair > Sent: Thursday, 11 December 2008 10:32 AM > To: postfix-users@postfix.org > Subject: mail forward based on user to specific filter then > to another address > > Hi, > > I've got a us

Re: Weird disconnections after RCPT using TLS

2008-12-10 Thread Noel Jones
Jesús Manuel Loaiza Vidal wrote: Hi guys. My system specs: Gentoo Linux Postfix 2.5.5 I have the problem below: When using TLS postfix sometimes (most the times) disconnects the client just after it issues the RCPT command. When I try to re-send the test email just after the error or when n

Re: Weird disconnections after RCPT using TLS

2008-12-10 Thread Victor Duchovni
On Wed, Dec 10, 2008 at 06:04:54PM -0700, Jes?s Manuel Loaiza Vidal wrote: >I guess its TLS session related or something related to race conditions. > >I'm using PostgreSQL and LDAP lookup tables to do user mailbox lookup and >various other things and Dovecot SASL for authentication

Tempfail if saslauthd unavailable

2008-12-10 Thread ram
I use postfix 2.3 with cyrus-sasl for smtp-auth cyrus-sasl needs a restart every few hours ( they havent fixed the memory leaks ) The problem is if saslauthd is momentarily unavailable , postfix cant (obviously) authenticate the smtp session. Postfix rejects the mail with a permanent failure.

Entourage authentication in postfix+dovecot+mysql not supported

2008-12-10 Thread jan gestre
Hi Guys, I've recently configured a mail server running postfix+dovecot+mysql+postfixadmin, it is now in production and everything is working fine except for MAC Entourage mail which is a PITA IMO which says it doesn't support authentication, outlook and thunderbird doesn't experience this issue. A

Re: Tempfail if saslauthd unavailable

2008-12-10 Thread Sahil Tandon
ram wrote: > I use postfix 2.3 with cyrus-sasl for smtp-auth > > cyrus-sasl needs a restart every few hours ( they havent fixed the > memory leaks ) > > > The problem is if saslauthd is momentarily unavailable , postfix cant > (obviously) authenticate the smtp session. > Postfix rejects the

Re: Entourage authentication in postfix+dovecot+mysql not supported

2008-12-10 Thread Noel Jones
jan gestre wrote: Hi Guys, I've recently configured a mail server running postfix+dovecot+mysql+postfixadmin, it is now in production and everything is working fine except for MAC Entourage mail which is a PITA IMO which says it doesn't support authentication, outlook and thunderbird doesn't

Re: Tempfail if saslauthd unavailable

2008-12-10 Thread Noel Jones
ram wrote: The problem is if saslauthd is momentarily unavailable , postfix cant (obviously) authenticate the smtp session. Postfix rejects the mail with a permanent failure. How do I change this to a 4xx error code so that the clients server would retry the mail Postfix has no way of knowin

Re: fight spam problem: sender equal to receiver

2008-12-10 Thread DJ Lucas
Roland Plüss wrote: `reject_unauthenticated_sender_login_mismatch' ignored: no SASL support Well, there ya go. There is no restriction that would prevent that message from being delivered, so of course they get through. At a very minimum, please add: 'reject_rbl_client zen.spamhaus.org' to