Re: postfix logs, spams and bounce messages

2009-02-12 Thread ddaas
I did the modification and it seems it work better. Since that modification I got no message rejected from yahoo. 1. Could you please explain to me why should the RBL checks be done before Sender Address Verification? And why it is not advisable to do SAV at all? 2. It is correct that my

Re: postfix logs, spams and bounce messages

2009-02-12 Thread mouss
ddaas a écrit : > I did the modification and it seems it work better. Since that > modification I got no message rejected from yahoo. > > 1. Could you please explain to me why should the RBL checks be done > before Sender Address Verification? And why it is not advisable to do > SAV at all? > > 2

Re: postfix benchmark performance

2009-02-12 Thread lst_hoe02
Zitat von Silas Boyd-Wickizer : Why do you believe that this should use 100% of ALL Cpus? If you look at your synthetic test then you will likely find that there are at any point in time only a few mail receiving processes and mail delivering processes, and that these processes will all be wait

Re: postfix logs, spams and bounce messages

2009-02-12 Thread mouss
Justin Piszcz a écrit : > > > On Wed, 11 Feb 2009, Victor Duchovni wrote: > >> You are doing Sender Address Verification (reject_unverified_sender) >> before doing RBL checks. Fix this. Do the RBL checks first, and consider >> not doing SAV at all, but if you do use it, do SAV *last*. >> > >>

Re: recipient_delimiter and virtual users

2009-02-12 Thread mouss
post...@corwyn.net a écrit : > > > OK, so I've become intrigued with recipient delimiters. > > My users are currently stored in a mysql database, 'postfix'. The table > format is as postfixadmin sets it up, so in the username is the user > email address u...@example.com > > Before I started t

holding mail for recipient

2009-02-12 Thread Christoph Erdle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi list, after having implemented dynamic aliases using ldap I have the following problem: I want to hold mails for a specific recipient which is an alias to multiple addresses so admin interaction is required to send to this alias. Problem i

Re: holding mail for recipient

2009-02-12 Thread Christoph Erdle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Additionally here is a log file excerpt of such a delivery: Feb 12 12:39:43 [postfix/smtpd] connect from e181105164.adsl.alicedsl.de[85.181.105.164] Feb 12 12:39:44 [postfix/smtpd] setting up TLS connection from e181105164.adsl.alicedsl.de[85.181

Enforcing TLS by recipient and sender domain

2009-02-12 Thread Urban Hillebrand
Hello list, is there a way to enforce TLS dependent on the sender domain? Background: Many customers are using our SMTP infrastructure (opportunistic TLS is active). Now one customer wants to enforce TLS to a certain destination; can I do this without affecting all other customers (who might as w

Add X-Envelope From/To into incoming mail

2009-02-12 Thread Petr Hudeček
Hi everybody! I need add X-Envelope From: and X-Envelope To: into incoming mail from envelope mail, no from head mail! I use Postfix and procmail. Can you help me, please?

Re: Enforcing TLS by recipient and sender domain

2009-02-12 Thread Wietse Venema
Urban Hillebrand: > Hello list, > > is there a way to enforce TLS dependent on the sender domain? Yes. Use "check_sender_access" and "reject_plaintext_session". Wietse > Background: > Many customers are using our SMTP infrastructure (opportunistic TLS is > active). Now one customer want

Re: Add X-Envelope From/To into incoming mail

2009-02-12 Thread Wietse Venema
Petr Hude?ek: > Hi everybody! > I need add X-Envelope From: and X-Envelope To: into incoming mail from > envelope mail, no from head mail! I use Postfix and procmail. Can you help > me, please? Use PREPEND actions in access maps. http://www.postfix.org/SMTPD_ACCESS_README.5.html http://www.post

Mail Annotation in Postfix

2009-02-12 Thread Zoltan Balogh
Hello All, I work on a project where we annotate emails coming through a mail server. By annotation I mean attaching additional possibly useful information to email body based on the email content. Annotation is enacted selectively based on users preferences. What is your opinion, what is the bes

Re: Enforcing TLS by recipient and sender domain

2009-02-12 Thread Urban Hillebrand
On Thu, Feb 12, 2009 at 07:13:19AM -0500, Wietse Venema wrote: > Urban Hillebrand: > > Hello list, > > > > is there a way to enforce TLS dependent on the sender domain? > > Yes. Use "check_sender_access" and "reject_plaintext_session". Thank you Wietse, but isn´t this a smtpD setting? My problem

Re: Enforcing TLS by recipient and sender domain

2009-02-12 Thread Wietse Venema
Urban Hillebrand: > On Thu, Feb 12, 2009 at 07:13:19AM -0500, Wietse Venema wrote: > > Urban Hillebrand: > > > Hello list, > > > > > > is there a way to enforce TLS dependent on the sender domain? > > > > Yes. Use "check_sender_access" and "reject_plaintext_session". > > Thank you Wietse, but is

Re: Mail Annotation in Postfix

2009-02-12 Thread Patrick Ben Koetter
* Zoltan Balogh : > Hello All, > > I work on a project where we annotate emails coming through a mail server. > By annotation I mean attaching additional possibly useful information to > email body based on the email content. Annotation is enacted selectively > based on users preferences. > > Wha

Re: How to safely re-inject an archived queue file?

2009-02-12 Thread Curtis
On Wed, Feb 11, 2009 at 6:51 PM, Wietse Venema wrote: > Curtis: >> Hi, >> >> I'm looking for a safe way to re-inject an archived queue file that >> was backed up and removed (via postsuper) from the hold queue. (Not >> just this once, but on a regular basis.) I realize that it would be >> possib

Re: How to safely re-inject an archived queue file?

2009-02-12 Thread Victor Duchovni
On Thu, Feb 12, 2009 at 06:51:20AM -0700, Curtis wrote: > So, on a box that I know has nothing else feeding into the maildrop > queue, it would be safe to skip the step of dropping it in the idle > queue of a second instance (on the same filesystem) and running > "postsuper -s" to get a properly n

Re: Enforcing TLS by recipient and sender domain

2009-02-12 Thread Victor Duchovni
On Thu, Feb 12, 2009 at 08:33:35AM -0500, Wietse Venema wrote: > > > > is there a way to enforce TLS dependent on the sender domain? > > This would have to be simulated with sender_dependent_relayhost_maps. > Specify a Postfix instance that encrypts all outbound mail. Postfix > multi-instance supp

Re: Sending hangs for no apparent reason..

2009-02-12 Thread Gaute Amundsen
It happened again :( Not in connection with backup, but in another situation with high load. Output of ps http://div.org/postfix_debug/postfix.processes.txt http://div.org/postfix_debug/stack_trace.28848 - qmgr http://div.org/postfix_debug/stack_trace.7175 - smtp http://div.org/postfix_debug/

Re: Enforcing TLS by recipient and sender domain

2009-02-12 Thread Wietse Venema
Victor Duchovni: > On Thu, Feb 12, 2009 at 08:33:35AM -0500, Wietse Venema wrote: > > > > > > is there a way to enforce TLS dependent on the sender domain? > > > > This would have to be simulated with sender_dependent_relayhost_maps. > > Specify a Postfix instance that encrypts all outbound mail.

Re: Add X-Envelope From/To into incoming mail

2009-02-12 Thread Victor Duchovni
On Thu, Feb 12, 2009 at 07:18:56AM -0500, Wietse Venema wrote: > /etc/postfix/sender_access: >/(.*)/ prepend X-Envelope-From: <$1> > > /etc/postfix/check_recipient_access: >/(.*)/ prepend X-Envelope-To: <$1> > > Beware, this breaks the privacy of BCC recipients. Note also that the add

Re: How to safely re-inject an archived queue file?

2009-02-12 Thread Curtis
On Thu, Feb 12, 2009 at 7:13 AM, Victor Duchovni wrote: > On Thu, Feb 12, 2009 at 06:51:20AM -0700, Curtis wrote: > >> So, on a box that I know has nothing else feeding into the maildrop >> queue, it would be safe to skip the step of dropping it in the idle >> queue of a second instance (on the sa

Re: How to safely re-inject an archived queue file?

2009-02-12 Thread Curtis
On Thu, Feb 12, 2009 at 8:46 AM, Curtis wrote: > Perfect. Does the pickup command have a trigger like qmgr that I can > use with postkick to get the queue file picked up from the maildrop > queue immediately? I'm guessing not since there's no mention of it in > the man page, but I thought I'd ch

Re: Add X-Envelope From/To into incoming mail

2009-02-12 Thread John Villalovos
On Thu, Feb 12, 2009 at 7:10 AM, Petr Hudeček wrote: > Hi everybody! > I need add X-Envelope From: and X-Envelope To: into incoming mail from > envelope mail, no from head mail! I use Postfix and procmail. Can you help > me, please? I believe by default there is an: X-Original-To header which

Re: How to safely re-inject an archived queue file?

2009-02-12 Thread Victor Duchovni
On Thu, Feb 12, 2009 at 08:46:51AM -0700, Curtis wrote: > Perfect. Does the pickup command have a trigger like qmgr that I can > use with postkick to get the queue file picked up from the maildrop > queue immediately? I'm guessing not since there's no mention of it in > the man page, but I thoug

Re: holding mail for recipient

2009-02-12 Thread Noel Jones
Christoph Erdle wrote: I want to hold mails for a specific recipient which is an alias to multiple addresses so admin interaction is required to send to this alias. Problem is that the mail is now held twice (following is the output of mailq and releasing the message): Feb 12 12:40:08 [postfi

Re: recipient_delimiter and virtual users

2009-02-12 Thread postfix
At 04:28 AM 2/12/2009, mouss wrote: recipient_delimiter works "out of the box". there is no need to change your tables, your sql statements nor add users. The problem is I don't know what the "out of the box" behavior should be. If I set recipient_delimiter = + then mail to u...@example.com,

Re: How to safely re-inject an archived queue file?

2009-02-12 Thread Wietse Venema
Victor Duchovni: > On Thu, Feb 12, 2009 at 08:46:51AM -0700, Curtis wrote: > > > Perfect. Does the pickup command have a trigger like qmgr that I can > > use with postkick to get the queue file picked up from the maildrop > > queue immediately? I'm guessing not since there's no mention of it in

Re: recipient_delimiter and virtual users

2009-02-12 Thread Victor Duchovni
On Thu, Feb 12, 2009 at 12:33:57PM -0500, post...@corwyn.net wrote: > At 04:28 AM 2/12/2009, mouss wrote: >> recipient_delimiter works "out of the box". there is no need to change >> your tables, your sql statements nor add users. > > The problem is I don't know what the "out of the box" behavior

virtual_alias_maps against local_recipient_maps

2009-02-12 Thread jakjr
Hello, Is there a way to check the result of a iteration(email address) on virtual_alias_maps(cleanup) against the local_recipient_maps (smtp) ? Best Regards Jakjr

Re: how to accept some addresses but relay the rest?

2009-02-12 Thread Andy Spiegl
On 2009-02-11, 09:32, Noel Jones wrote: > Andy Spiegl wrote: > >> Hm, but I don't have the list of valid recipients. :-( >> >> All I have is the list of valid LOCAL recipients. Everything else >> I have to relay to the MX of example.com... > > If the receiving server rejects unknown recipients dur

rbl clients.

2009-02-12 Thread Linux Addict
Please see below my smtpd_recipient_restrictions. On my rbl client list I have multiple entries, but not sure how many of them actually maintained. Is there one single place where I can find such a list. Any help is greatly appreciated. smtpd_helo_restrictions = permit_mynetworks, reject_non_

Re: rbl clients.

2009-02-12 Thread Victor Duchovni
On Thu, Feb 12, 2009 at 02:02:03PM -0500, Linux Addict wrote: > Please see below my smtpd_recipient_restrictions. On my rbl client list I > have multiple entries, but not sure how many of them actually maintained. Is > there one single place where I can find such a list. Any help is greatly > appr

Re: recipient_delimiter and virtual users

2009-02-12 Thread postfix
At 12:47 PM 2/12/2009, Victor Duchovni wrote: On Thu, Feb 12, 2009 at 12:33:57PM -0500, post...@corwyn.net wrote: > At 04:28 AM 2/12/2009, mouss wrote: >> recipient_delimiter works "out of the box". there is no need to change >> your tables, your sql statements nor add users. This up to your LDA

Re: how to accept some addresses but relay the rest?

2009-02-12 Thread Wietse Venema
Andy Spiegl: > But I couldn't get it to work. I set: > > smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, > hash:/etc/postfix/recipient_access Meaning: do not examine the access map if the client is in mynetworks. Wietse

Re: virtual_alias_maps against local_recipient_maps

2009-02-12 Thread Noel Jones
jakjr wrote: Hello, Is there a way to check the result of a iteration(email address) on virtual_alias_maps(cleanup) against the local_recipient_maps (smtp) ? Best Regards Jakjr No. If you describe your problem maybe someone can give some helpful suggestions. -- Noel Jones

Re: rbl clients.

2009-02-12 Thread Peter Blair
http://stats.dnsbl.com/ As victor said, ZEN is usually enough for most people, but it's always good to know why you're not using the rest. On Thu, Feb 12, 2009 at 2:02 PM, Linux Addict wrote: > Please see below my smtpd_recipient_restrictions. On my rbl client list I > have multiple entries, but

Re: filtering mail

2009-02-12 Thread Peter Blair
Including every solicited bulk email. They usually create unique bounce addresses to track dead target mailboxes etc. On Wed, Feb 11, 2009 at 9:30 AM, Michael Katz wrote: > Ilo Lorusso wrote: >> Hi >> >> >> is their a way I can reject messages when its from address does not >> match the envelope

Re: Redirect all mail from one domain to the same u...@otherdomain?

2009-02-12 Thread Jeff Weinberger
Mouss wrote: Jeff Weinberger a �crit : > [snip] > > This is helpful, but I still need the query to take all the other > alias domains into account. So, I need the IF condition, or a second map. > I don't think so. I used this. I don't remember the details, but the idea is that you can often g

Re: rbl clients.

2009-02-12 Thread Rik
On Thu, 2009-02-12 at 14:07 -0500, Victor Duchovni wrote: > On Thu, Feb 12, 2009 at 02:02:03PM -0500, Linux Addict wrote: > > > Please see below my smtpd_recipient_restrictions. On my rbl client list I > > have multiple entries, but not sure how many of them actually maintained. Is > > there one

Re: recipient_delimiter and virtual users

2009-02-12 Thread mouss
post...@corwyn.net a écrit : > [snip] > > So while recipient_delimited works "out of the box" it doesn't quite do > what I want (hence why I provided not only what wasn't working, but a > detailed explanation of what I wanted to solve.) > but you didn't talk about folders in your post, did you?

Re: rbl clients.

2009-02-12 Thread mouss
Rik a écrit : > On Thu, 2009-02-12 at 14:07 -0500, Victor Duchovni wrote: >> On Thu, Feb 12, 2009 at 02:02:03PM -0500, Linux Addict wrote: >> >>> Please see below my smtpd_recipient_restrictions. On my rbl client list I >>> have multiple entries, but not sure how many of them actually maintained. I

No virtual alias with diferent cleanup for submission service

2009-02-12 Thread rafa
Hello everyone, I created a second cleanup for the submission service to have separate header checks from incoming emails. cleanup-out unix n - - - 0 cleanup -o header_checks=pcre:/etc/postfix/header_checks-out -o body_checks=pcre:/etc/postfix/bod

Re: rbl clients.

2009-02-12 Thread Paweł Leśniak
Victor Duchovni pisze: On Thu, Feb 12, 2009 at 02:02:03PM -0500, Linux Addict wrote: Please see below my smtpd_recipient_restrictions. On my rbl client list I have multiple entries, but not sure how many of them actually maintained. Is there one single place where I can find such a list. Any

How disk I/O affect postfix performance ?

2009-02-12 Thread Yu (Irvin) Fan
Hi, We're building a box to run two postfix instances to receive and send high volume of emails. According to the documentation it's better to run the two instances on separate disks for performance reason. I'm trying to understand how exactly does the disk I/O affect the postfix performance? By s

Re: Add X-Envelope From/To into incoming mail

2009-02-12 Thread Sahil Tandon
On Thu, 12 Feb 2009, Petr Hude?ek wrote: > I need add X-Envelope From: and X-Envelope To: into incoming mail from > envelope mail, no from head mail! I use Postfix and procmail. Can you help > me, please? Would Return-Path: and X-Original-To: suffice? Postfix adds these headers by default. --

Re: holding mail for recipient

2009-02-12 Thread Christoph Erdle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 12.02.2009 um 18:02 schrieb Noel Jones: Christoph Erdle wrote: I want to hold mails for a specific recipient which is an alias to multiple addresses so admin interaction is required to send to this alias. Problem is that the mail is now held