Re: Backup MX for multiple domains

2008-12-19 Thread DJ Lucas
Noel Jones wrote: DJ Lucas wrote: Hi guys, I believe that I already have the answer to this pretty basic setup, but I just wanted to do a quick sanity check. I'm setting up a backup MX, and for one of the domains that it will relay to, it should do no filtering whatsoever as there is a Symant

Re: Backup MX for multiple domains

2008-12-19 Thread mouss
DJ Lucas a écrit : > mouss wrote: >> the question is: does the symantec device reject spam or does it "tag >> and deliver" or "quarantine". it should not reject mail since you have >> accepted it. > Honestly, I'm not even sure what device he has, in fact, I'm not > familiar with any Symantec hardwa

Re: Additional smtpd_*_restrictions safe?

2008-12-19 Thread mouss
Darren Pilgrim a écrit : > King Spook wrote: >> I'm getting hit pretty hard with spam, and was hoping to reduce it a >> bit by adding the following smtpd restrictions: >> >> smtpd_helo_restrictions = reject_invalid_helo_hostname, >> reject_non_fqdn_helo_hostname >> smtpd_sender_restrictions = rejec

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Sahil Tandon
Asif Iqbal wrote: > You are right I cannot talk to any domain's MX. My ISP is cox and I cannot > even talk to their two MXs on port 25. I guess I could do a nmap to find > what port they are using for MX. They might require some authentication. > I have no idea what my login is to my cox account.

Re: Backup MX for multiple domains

2008-12-19 Thread Noel Jones
DJ Lucas wrote: In light of that note, I'll be gracious with the comments, and since it is the expected configuration, I'll go ahead and add the relay_recipient_maps (though IIUC, it'll never be used). I'm not really concerned for myself. I will have it documented locally. But, should I get

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 6:05 AM, Sahil Tandon wrote: > Asif Iqbal wrote: > >> You are right I cannot talk to any domain's MX. My ISP is cox and I cannot >> even talk to their two MXs on port 25. I guess I could do a nmap to find >> what port they are using for MX. They might require some authentic

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Wietse Venema
Asif Iqbal: > I could skip the signing part and just a .pem file. But seems like I > will also need a Thawte certificate. You need no certificate to SEND mail. Wietse

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Sahil Tandon
On Dec 19, 2008, at 10:59 AM, "Asif Iqbal" wrote: On Fri, Dec 19, 2008 at 6:05 AM, Sahil Tandon wrote: Asif Iqbal wrote: You are right I cannot talk to any domain's MX. My ISP is cox and I cannot even talk to their two MXs on port 25. I guess I could do a nmap to find what port they are

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote: > Asif Iqbal: >> I could skip the signing part and just a .pem file. But seems like I >> will also need a Thawte certificate. > > You need no certificate to SEND mail. I am trying to use gmail as my relayhost. I cannot just send mail to gmai

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 12:54 PM, Sahil Tandon wrote: > On Dec 19, 2008, at 10:59 AM, "Asif Iqbal" wrote: > >> On Fri, Dec 19, 2008 at 6:05 AM, Sahil Tandon wrote: >>> >>> Asif Iqbal wrote: >>> You are right I cannot talk to any domain's MX. My ISP is cox and I cannot even talk to

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Victor Duchovni
On Fri, Dec 19, 2008 at 01:06:21PM -0500, Asif Iqbal wrote: > On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote: > > Asif Iqbal: > >> I could skip the signing part and just a .pem file. But seems like I > >> will also need a Thawte certificate. > > > > You need no certificate to SEND mail. >

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Wietse Venema
Asif Iqbal: > On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote: > > Asif Iqbal: > >> I could skip the signing part and just a .pem file. But seems like I > >> will also need a Thawte certificate. > > > > You need no certificate to SEND mail. > > I am trying to use gmail as my relayhost. I c

Special routing for mail from localhost

2008-12-19 Thread Terry Carmen
Is there any way to have special routing for mail that's created on the postfix server(localhost), destined for mydomain? The transport map allows for routing based on destination, but I don't see any way to route based on source. Currently inbound mail goes from the internet to postfix to a c

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 1:15 PM, Victor Duchovni wrote: > On Fri, Dec 19, 2008 at 01:06:21PM -0500, Asif Iqbal wrote: > >> On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote: >> > Asif Iqbal: >> >> I could skip the signing part and just a .pem file. But seems like I >> >> will also need a Thaw

Re: Special routing for mail from localhost

2008-12-19 Thread Wietse Venema
Terry Carmen: > Is there any way to have special routing for mail that's created on the > postfix server(localhost), destined for mydomain? As far as I recall, internally generated messages are not subject to the content_filter setting. Thus, you can use the content_filter parameter to send "regu

Re: Special routing for mail from localhost

2008-12-19 Thread Victor Duchovni
On Fri, Dec 19, 2008 at 01:54:05PM -0500, Wietse Venema wrote: > > Is there any way to have special routing for mail that's created on the > > postfix server(localhost), destined for mydomain? > > As far as I recall, internally generated messages are not subject > to the content_filter setting.

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Victor Duchovni
On Fri, Dec 19, 2008 at 01:52:11PM -0500, Asif Iqbal wrote: > > Useless advise really. The pointer to SOHO_README.html was provided upstream. This contains references to all the information you need to configure a home MTA if that is indeed the right answer to your question. I'd also look for a

Re: Special routing for mail from localhost

2008-12-19 Thread Terry Carmen
Victor Duchovni wrote: On Fri, Dec 19, 2008 at 01:54:05PM -0500, Wietse Venema wrote: Is there any way to have special routing for mail that's created on the postfix server(localhost), destined for mydomain? As far as I recall, internally generated messages are not subject to the con

Re: Special routing for mail from localhost

2008-12-19 Thread Victor Duchovni
On Fri, Dec 19, 2008 at 02:11:39PM -0500, Terry Carmen wrote: > content_filter=amavisfeed:[127.0.0.1]:10024 > to > content_filter=cidr:/special_routing.cidr No. You set it empty. content_filter = > then, > > special_routing.cidr: > 127.0.0.1/32 smtp:exchange server ip > 0.0.0.0/0 amavi

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 2:08 PM, Victor Duchovni wrote: > On Fri, Dec 19, 2008 at 01:52:11PM -0500, Asif Iqbal wrote: > >> >> Useless advise really. > > The pointer to SOHO_README.html was provided upstream. This contains > references to all the information you need to configure a home MTA if > th

Problems with user's mail file

2008-12-19 Thread Pedro Augusto
Good day, I'm having some strange problems with Postfix. It works perfectly, I have no problems sending or receiving e-mail but sometimes the user can't receive any e-mail using his client (such as Outlook Express) or through webmail. When we check the mail file, the first line is full of @ signs

Re: Problems with user's mail file

2008-12-19 Thread Brian Evans - Postfix List
Pedro Augusto wrote: > Good day, > > I'm having some strange problems with Postfix. > > It works perfectly, I have no problems sending or receiving e-mail but > sometimes the user can't receive any e-mail using his client (such as > Outlook Express) or through webmail. When we check the mail file,

Re: Problems with user's mail file

2008-12-19 Thread Victor Duchovni
On Fri, Dec 19, 2008 at 02:47:49PM -0500, Brian Evans - Postfix List wrote: > Pedro Augusto wrote: > > Good day, > > > > I'm having some strange problems with Postfix. > > > > It works perfectly, I have no problems sending or receiving e-mail but > > sometimes the user can't receive any e-mail usi

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Sahil Tandon
Asif Iqbal wrote: >> No need to jump through such hoops. You do not need certs or .pem files to >> relay through gmail. Search the archives of this mailing list for examples, > > No cert needed to relay through gmail? Let me dig in the mailing list. > I guess that is what > Wietse Venema meant in

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 1:16 PM, Wietse Venema wrote: > Asif Iqbal: >> On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote: >> > Asif Iqbal: >> >> I could skip the signing part and just a .pem file. But seems like I >> >> will also need a Thawte certificate. >> > >> > You need no certificate to

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Victor Duchovni
On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote: > How do I test the SSL ? > > I go this with openssl > > iqb...@ghar:~$ openssl s_client -connect smtp.gmail.com:587 You forgot "-starttls smtp". But gmail's SSL works, you don't really need to test it. Just set: smtp_tls_secu

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 4:41 PM, Victor Duchovni wrote: > On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote: > >> How do I test the SSL ? >> >> I go this with openssl >> >> iqb...@ghar:~$ openssl s_client -connect smtp.gmail.com:587 > > You forgot "-starttls smtp". But gmail's SSL works,

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Wietse Venema
Asif Iqbal: > > need to test it. Just set: > > > >smtp_tls_security_level = encrypt > > Thanks, I will put that in Just checked here that Postfix can talk SSL with [smtp.gmail.com]:587 just fine. But you need to set up client-side SASL authentication. Wietse

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Noel Jones
Asif Iqbal wrote: On Fri, Dec 19, 2008 at 4:41 PM, Victor Duchovni wrote: On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote: How do I test the SSL ? I go this with openssl iqb...@ghar:~$ openssl s_client -connect smtp.gmail.com:587 You forgot "-starttls smtp". But gmail's SSL work

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 6:06 PM, Noel Jones wrote: > Asif Iqbal wrote: >> >> On Fri, Dec 19, 2008 at 4:41 PM, Victor Duchovni >> wrote: >>> >>> On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote: >>> How do I test the SSL ? I go this with openssl iqb...@ghar:~$ op

Re: Connection timeout when trying to send email to gmail address

2008-12-19 Thread Asif Iqbal
On Fri, Dec 19, 2008 at 6:06 PM, Noel Jones wrote: > Asif Iqbal wrote: >> >> On Fri, Dec 19, 2008 at 4:41 PM, Victor Duchovni >> wrote: >>> >>> On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote: >>> How do I test the SSL ? I go this with openssl iqb...@ghar:~$ op

Re: how to send mail to gmail account

2008-12-19 Thread Jose Ildefonso Camargo Tolosa
On Fri, Dec 19, 2008 at 7:19 AM, Jorey Bump wrote: > Jose Ildefonso Camargo Tolosa wrote, at 12/18/2008 06:28 AM: > >> I think you should send more info on your config, for example: >> >> MX record for your domain. >> myhostname entry from main.cf >> >> these two should match. > > There is no requ

Re: how to send mail to gmail account

2008-12-19 Thread Jorey Bump
Jose Ildefonso Camargo Tolosa wrote, at 12/19/2008 08:47 PM: > On Fri, Dec 19, 2008 at 7:19 AM, Jorey Bump wrote: >> Jose Ildefonso Camargo Tolosa wrote, at 12/18/2008 06:28 AM: >> >>> I think you should send more info on your config, for example: >>> >>> MX record for your domain. >>> myhostname

Re: how to send mail to gmail account

2008-12-19 Thread Sahil Tandon
Jose Ildefonso Camargo Tolosa wrote: > On Fri, Dec 19, 2008 at 7:19 AM, Jorey Bump wrote: > > Jose Ildefonso Camargo Tolosa wrote, at 12/18/2008 06:28 AM: > > > >> I think you should send more info on your config, for example: > >> > >> MX record for your domain. > >> myhostname entry from main.c

Re: how to send mail to gmail account

2008-12-19 Thread Reinaldo de Carvalho
On Thu, Dec 18, 2008 at 9:01 AM, vivek.agrawal wrote: > > relayhost=smtp.gmail.com This is wrong. smtp.gmail.com no have MX entry. To point to A entry, you need []. relayhost=[smtp.gmail.com] And this continue wrong, because you dont need explicit transport declaration to send mail to gmail or