Re: Spam attacks

2009-03-04 Thread Paweł Leśniak
W dniu 2009-03-03 23:34, MacShane, Tracy pisze: We have a very clear policy that users are only permitted to relay mail from our networks. If they are sending from home, they use webmail. We've had one or two instances where external organisations have used some kind of auto-reply mechanism whic

FW: Spam attacks

2009-03-04 Thread Dave Johnson
Hi all Just to clarify some points They are running an IMAP server with SASL login for remote users Regards _ From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Pawel Lesniak Sent: 04 March 2009 10:32 AM To: postfix users list Sub

Re: Spam attacks

2009-03-04 Thread Paweł Leśniak
W dniu 2009-03-03 18:41, Noel Jones pisze: Some legit "reminder" type services, some meeting notifications, and other legit mail might arrive with you as the sender. Maybe not best practices, but it's legit mail and such a policy will reject it. Why would someone want to fake sender address? Is

Re: FW: Spam attacks

2009-03-04 Thread Paweł Leśniak
Hi all Just to clarify some points They are running an IMAP server with SASL login for remote users IMAP let's you get mail from your account. So it's really not related to your problem. You'd have to use SMTP authentication so when one wants to send mail from u...@example.com to anotheru..

Re: Possible reasons for "qmgr" loading the system?

2009-03-04 Thread Santiago Romero
Wietse Venema escribió: Santiago Romero: I case it happens again ... Where or what should I take a look? At OS level (disk or network I/O, processes...) I didn't see anything before the "postfix restart"... Try ``strace -o filename -p pid'' or the equivalent for your OS. Hi. T

Re: smtpd_recipient_restrictions suddenly stopping mail

2009-03-04 Thread Charles Marcus
On 3/3/2009 7:18 PM, LuKreme wrote: >> opendns works very well, as long as you disable the helper crap, >> so, no, has nothing to do with opendns. > Since one of the features of OpenDNS Is the so-called helper crap, > and is enabled by default, this can easily be a problem. For the clueless maybe

Re: Postfix + Dovecot SASL authentication.

2009-03-04 Thread Miguel Da Silva - Centro de Matemática
Victor Duchovni escribió: On Wed, Mar 04, 2009 at 12:29:29AM -0200, Miguel Da Silva - Centro de Matem?tica wrote: Mar 2 18:42:02 smtp postfix/smtpd[15652]: NOQUEUE: reject: RCPT from r190-134-zz-xx.dialup.adsl.anteldata.net.uy[190.134.zz. xx]: 450 4.7.1 : Recipient address rejected: Greylisti

Re: Postfix + Dovecot SASL authentication.

2009-03-04 Thread Miguel Da Silva - Centro de Matemática
Noel Jones escribió: Miguel Da Silva - Centro de Matemática wrote: Dear users, I realized today that the local SMTP server is not working as expected. I found these lines in the log files: Mar 2 22:42:48 smtp postfix/smtpd[30427]: 1A66913105B: client=r190-134-zz-xx.dialup.adsl.anteldata.net.

Re: Spam attacks

2009-03-04 Thread Noel Jones
> --- Original Message --- > From: Paweł Leśniak > I cant's see any risk anyways, not just in place. And it's possible that > zen BL will stop more "legit" mails (depends on what one means by "legit > mail", maybe there are people who read those "I'll give you $1billion" > mails). If I'

That Relay Access Denied Thing

2009-03-04 Thread Robert A. Ober
Hello Folks, I am a longtime Linux user and admin. Server drive got somewhat corrupt so I re-installed to new drive. Using Mandrive 2009.0 from the live CD with Postfix retrieved via urpmi. Using 2.2 and Dovecot. Tried Cyrus also. I have used uw-pop3 and pop-before-smtp in the past. Most

Re: That Relay Access Denied Thing

2009-03-04 Thread Charles Marcus
On 3/4/2009, Robert A. Ober (ro...@robob.com) wrote: > # "dovecot -n" command gives a clean output of the changed settings. Use it > # instead of copy&pasting this file when posting to the Dovecot mailing list. > # --with-ssldir=/etc/ssl You need to read the welcome message you got... ONLY provi

Re: That Relay Access Denied Thing

2009-03-04 Thread Victor Duchovni
On Wed, Mar 04, 2009 at 09:31:21AM -0500, Charles Marcus wrote: > On 3/4/2009, Robert A. Ober (ro...@robob.com) wrote: > > # "dovecot -n" command gives a clean output of the changed settings. Use it > > # instead of copy&pasting this file when posting to the Dovecot mailing > > list. > > # --with

Messages Are Refused

2009-03-04 Thread Carlos Williams
I am noticing that for some reason every time a specific user on my domain attempts to email a particular domain, the messages are always queued up. They don't ever appear to send for some reason and I checked the logs which don't really give any specific reason why he can't send email to this doma

Re: Postfix + Dovecot SASL authentication.

2009-03-04 Thread Victor Duchovni
On Wed, Mar 04, 2009 at 09:35:38AM -0200, Miguel Da Silva - Centro de Matem?tica wrote: >> The user was not "relaying": mail was sent to a domain you are responsible >> for, so this was not blocked by "reject_unauth_destination". > > Well... I don't think so, maybe I am not understandig > reject

Re: Spam attacks

2009-03-04 Thread Paweł Leśniak
I can state with authority that mail with sender==recipient is not universally 100% spam, and such a policy would likely have a much higher false positive rate than zen. You can argue it's a misconfiguration of the sender, but a mail admin's job is to receive legit mail. but you're welcome to

Re: Postfix + Dovecot SASL authentication.

2009-03-04 Thread Victor Duchovni
On Wed, Mar 04, 2009 at 09:40:51AM -0200, Miguel Da Silva - Centro de Matem?tica wrote: > smtpd_recipient_restrictions = > check_recipient_access hash:/etc/postfix/bloqueados > permit_mynetworks > permit_sasl_authenticated > reject_unauth_destination > reje

Re: Messages Are Refused

2009-03-04 Thread Paweł Leśniak
I am noticing that for some reason every time a specific user on my domain attempts to email a particular domain, the messages are always queued up. They don't ever appear to send for some reason and I checked the logs which don't really give any specific reason why he can't send email to this do

Re: Messages Are Refused

2009-03-04 Thread Matt Hayes
Carlos Williams wrote: > I am noticing that for some reason every time a specific user on my > domain attempts to email a particular domain, the messages are always > queued up. They don't ever appear to send for some reason and I > checked the logs which don't really give any specific reason why h

Re: Messages Are Refused

2009-03-04 Thread Barney Desmond
2009/3/5 Carlos Williams : > mail:~# postqueue -p > -Queue ID- --Size-- Arrival Time -Sender/Recipient--- > 4DB191FA4D50    84627 Mon Mar  2 14:59:56 �...@mydomain.com >             (connect to je.jfcom.mil[140.32.76.138]:25: Connection timed out) >                                      

Re: Messages Are Refused

2009-03-04 Thread Carlos Williams
Thanks for that info. Can someone also comment on this? I asked a friend via email and this was his response to the same issue: ** "I used nslookup to verify the address your queue is showing, and it does correspond to je.jfcom.mil. But a request for the mail-exchanger

Re: That Relay Access Denied Thing

2009-03-04 Thread Robert A. Ober
On 3/4/2009 8:39 AM, Victor Duchovni wrote: On Wed, Mar 04, 2009 at 09:31:21AM -0500, Charles Marcus wrote: On 3/4/2009, Robert A. Ober (ro...@robob.com) wrote: # "dovecot -n" command gives a clean output of the changed settings. Use it # instead of copy&pasting this file when postin

Re: That Relay Access Denied Thing

2009-03-04 Thread Charles Marcus
Hi Robert, You need to read the responses you are getting... > PS: postfix -n gives invalid option. This is because of this: >> If I recall correctly the OP reported using Postfix 2.2 and- should >> see: >> >> http://www.postfix.org/postconf.5.html#smtpd_sasl_type >> >> attempts to use Dovec

Re: That Relay Access Denied Thing

2009-03-04 Thread Robert A. Ober
On 3/4/2009 9:48 AM, Charles Marcus wrote: Hi Robert, You need to read the responses you are getting... PS: postfix -n gives invalid option. This is because of this: No, postfix -n does not return anything except a posfix generated error. It does not like the -n . Plain

Trouble sending mail to a piped alias

2009-03-04 Thread Kirk Strauser
I'm trying to allow users to reply to Bugzilla emails, but I'm having trouble getting Postfix to execute the command that handles this. The proper alias is defined: $ postconf | grep ^alias_maps alias_maps = hash:/etc/aliases, hash:/usr/local/mailman/data/aliases $ grep bugzilla-daemon /etc/ali

Re: That Relay Access Denied Thing

2009-03-04 Thread Robert A. Ober
On 3/4/2009 9:50 AM, Robert A. Ober wrote: On 3/4/2009 9:48 AM, Charles Marcus wrote: Hi Robert, You need to read the responses you are getting... PS: postfix -n gives invalid option. This is because of this: No, postfix -n does not return anything except a posfix generated

Re: That Relay Access Denied Thing

2009-03-04 Thread Scent-Sations Support
Robert A. Ober wrote: > On 3/4/2009 9:48 AM, Charles Marcus wrote: >> > No, postfix -n does not return anything except a posfix generated > error. It does not like the -n . > Charles means 'postconf -n'. This gives us a better picture of what Postfix is using and avoids fat finger mistakes. Bria

Re: Spam attacks

2009-03-04 Thread Noel Jones
Paweł Leśniak wrote: I think that situations pointed by you are rather rare. I see them often enough here that I can't reject based solely on this criteria, but I do add a couple spamassassin points. If it's rare at your site, lucky you. I don't know of any, so I'm fine with rejecting 0 le

Re: That Relay Access Denied Thing

2009-03-04 Thread Charles Marcus
On 3/4/2009, Scent-Sations Support (grkni...@scent-team.com) wrote: > Charles means 'postconf -n'. > This gives us a better picture of what Postfix is using and avoids fat > finger mistakes. Ooops... lol, sorry, thanks for catching that...

Re: That Relay Access Denied Thing

2009-03-04 Thread Robert A. Ober
On 3/4/2009 9:56 AM, Scent-Sations Support wrote: Robert A. Ober wrote: On 3/4/2009 9:48 AM, Charles Marcus wrote: No, postfix -n does not return anything except a posfix generated error. It does not like the -n . Charles means 'postconf -n'. This gives us a better picture o

Re: Postfix + Dovecot SASL authentication.

2009-03-04 Thread Miguel Da Silva - Centro de Matemática
Victor Duchovni escribió: On Wed, Mar 04, 2009 at 09:35:38AM -0200, Miguel Da Silva - Centro de Matem?tica wrote: The user was not "relaying": mail was sent to a domain you are responsible for, so this was not blocked by "reject_unauth_destination". Well... I don't think so, maybe I am not und

Botnet detection (pre-greet experiments)

2009-03-04 Thread Wietse Venema
A couple years ago there was a discussion about having Postfix SMTP servers pause for several seconds at the start of each SMTP session, and reject the session if the client speaks first. The idea was that this is a sure sign that the client is a piece of crapware. Although the idea of proactive b

postconf -n suggestion

2009-03-04 Thread Charles Marcus
Dovecot has added two lines of text to the beginning output of dovecot -n that could possibly save some time with troubleshooting... It adds the version on the first line, and OS/platform info on the second line, like so: # 1.1.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.23-gentoo-r9 x86_64 Gen

Re: Trouble sending mail to a piped alias

2009-03-04 Thread Ralf Hildebrandt
* Kirk Strauser : > I'm trying to allow users to reply to Bugzilla emails, but I'm having trouble > getting Postfix to execute the command that > handles this. The proper alias is defined: > > $ postconf | grep ^alias_maps > alias_maps = hash:/etc/aliases, hash:/usr/local/mailman/data/aliases >

Re: Trouble sending mail to a piped alias

2009-03-04 Thread Wietse Venema
Kirk Strauser: > $ sudo /usr/local/www/data/bugzilla/email_in.pl < /tmp/bugtest This executes the command as ROOT. This test is invalid because: > Mar 4 09:46:31 web2 local[61974]: fatal: execvp > /usr/local/www/data/bugzilla/email_in.pl: No such file or directory This executes the command as

Re: That Relay Access Denied Thing

2009-03-04 Thread Brian Evans - Postfix List
Robert A. Ober wrote: > On 3/4/2009 9:56 AM, Scent-Sations Support wrote: >> Robert A. Ober wrote: >> >>> On 3/4/2009 9:48 AM, Charles Marcus wrote: >>> >>> No, postfix -n does not return anything except a posfix generated >>> error. It does not like the -n . >>> >>> >> Charles means

Re: Virtual Domains - creating an alias to a script

2009-03-04 Thread Big Pizzle
Thank you Noel this works perfectly. You rock. On Tue, Mar 3, 2009 at 6:54 PM, Noel Jones wrote: > > Big Pizzle wrote: >> >> On our old server that doesn't do any Virtual Domains, we have lines in our >> /etc/alias which look like the following:  usera: >> "|/export/home/users/usera/blah/scr

Re: postconf -n suggestion

2009-03-04 Thread Wietse Venema
Charles Marcus: > Dovecot has added two lines of text to the beginning output of dovecot > -n that could possibly save some time with troubleshooting... > > It adds the version on the first line, and OS/platform info on the > second line, like so: > > # 1.1.11: /etc/dovecot/dovecot.conf > # OS: L

Re: Trouble sending mail to a piped alias

2009-03-04 Thread Kirk Strauser
On Wednesday 04 March 2009 10:19:01 Wietse Venema wrote: > Kirk Strauser: > > $ sudo /usr/local/www/data/bugzilla/email_in.pl < /tmp/bugtest > > This executes the command as ROOT. This test is invalid because: > > Mar 4 09:46:31 web2 local[61974]: fatal: execvp > > /usr/local/www/data/bugzilla/ema

Re: postconf -n suggestion

2009-03-04 Thread Charles Marcus
On 3/4/2009 11:22 AM, Wietse Venema wrote: >> Dovecot has added two lines of text to the beginning output of dovecot >> -n that could possibly save some time with troubleshooting... >> >> It adds the version on the first line, and OS/platform info on the >> second line, like so: >> >> # 1.1.11: /et

Re: Botnet detection (pre-greet experiments)

2009-03-04 Thread Jacqui Caren
Wietse Venema wrote: Although the idea of proactive botnet detection has merit, building delays into the SMTPD process is very problematic. It causes Postfix to waste more time on bogus SMTP clients, so that it reaches the "all SMTP servers busy" condition sooner. I thought some smtp reverse pr

"Forging" headers?

2009-03-04 Thread Ken D'Ambrosio
Hi, all. My company has a web server hosted by an external provider. It sends out e-mail (e.g., in response to web forms), and, occasionally, it gets bounced and/or eaten up by spam filters. What I'd like to do is relay mail from the web server through our corporate server, but make it look as i

VERPify recommendations

2009-03-04 Thread Steve Crawford
While we do not manage a "mailing list" in the traditional sense, we do send a lot of emails (daily/weekly/monthly reports, instant-alert messages, etc.) where using VERP to track bounces could prove useful. We run numerous projects with varying requirements and the messages could be generated

Re: Messages Are Refused

2009-03-04 Thread Evan Platt
At 07:03 AM 3/4/2009, Carlos Williams wrote: Thanks for that info. Can someone also comment on this? I asked a friend via email and this was his response to the same issue: ** "I used nslookup to verify the address your queue is showing, and it does correspond to je

Re: postconf -n suggestion

2009-03-04 Thread Victor Duchovni
On Wed, Mar 04, 2009 at 11:10:13AM -0500, Charles Marcus wrote: > Dovecot has added two lines of text to the beginning output of dovecot > -n that could possibly save some time with troubleshooting... > > It adds the version on the first line, and OS/platform info on the > second line, like so: >

Re: That Relay Access Denied Thing (Solved, Almost)

2009-03-04 Thread Robert A. Ober
On 3/4/2009 10:19 AM, Brian Evans - Postfix List wrote: Robert A. Ober wrote: On 3/4/2009 9:56 AM, Scent-Sations Support wrote: Robert A. Ober wrote: On 3/4/2009 9:48 AM, Charles Marcus wrote: No, postfix -n does not return anything except a posfix generated error. It doe

Re: Botnet detection (pre-greet experiments)

2009-03-04 Thread Wietse Venema
Jacqui Caren: > Wietse Venema wrote: > > Although the idea of proactive botnet detection has merit, building > > delays into the SMTPD process is very problematic. It causes Postfix > > to waste more time on bogus SMTP clients, so that it reaches the > > "all SMTP servers busy" condition sooner. >

Re: "Forging" headers?

2009-03-04 Thread Jorey Bump
Ken D'Ambrosio wrote, at 03/04/2009 11:53 AM: > Hi, all. My company has a web server hosted by an external provider. It > sends out e-mail (e.g., in response to web forms), and, occasionally, it > gets bounced and/or eaten up by spam filters. What I'd like to do is > relay mail from the web serv

Re: postconf -n suggestion

2009-03-04 Thread Charles Marcus
On 3/4/2009 12:26 PM, Victor Duchovni wrote: >> Dovecot has added two lines of text to the beginning output of dovecot >> -n that could possibly save some time with troubleshooting... >> >> It adds the version on the first line, and OS/platform info on the >> second line, like so: >> >> # 1.1.11: /

Re: That Relay Access Denied Thing (Solved, Almost)

2009-03-04 Thread Brian Evans - Postfix List
Robert A. Ober wrote: > On 3/4/2009 10:19 AM, Brian Evans - Postfix List wrote: >> Robert A. Ober wrote >> > vi /etc/sysconfig/saslauthd : > > FYI: saslauthd is Cyrus not Dovecot > > There is some issue with Mandriva 2009.0 that requires > SASL_AUTHMECH=shadow in /etc/sasl2/saslauthd. > > N

Re: postconf -n suggestion

2009-03-04 Thread LuKreme
On 4-Mar-2009, at 09:22, Wietse Venema wrote: Charles Marcus: Dovecot has added two lines of text to the beginning output of dovecot -n that could possibly save some time with troubleshooting... It adds the version on the first line, and OS/platform info on the second line, like so: # 1.1.11

Re: Possible reasons for "qmgr" loading the system?

2009-03-04 Thread Victor Duchovni
On Wed, Mar 04, 2009 at 10:15:05AM +0100, Santiago Romero wrote: > /etc/postfix/master.cf > slow unix - - - - - smtp > -o syslog_name=postfix-slow > > > /etc/postfix/main.cf > # Special "slow" transport: > slow_destination_recipient_limit=1 A real

Re: Possible reasons for "qmgr" loading the system?

2009-03-04 Thread Wietse Venema
Santiago Romero: > Stracing qmgr process for a while (before restarting postfix), showed > lots of lines like: > > time(NULL) = 1236156322 > epoll_ctl(8, EPOLL_CTL_DEL, 128, {EPOLLIN, {u32=128, > u64=13252642876283682944}}) = 0 > fcntl64(128, F_GETFL)

Re: That Relay Access Denied Thing (Solved, Almost)

2009-03-04 Thread Robert A. Ober
On 3/4/2009 11:54 AM, Brian Evans - Postfix List wrote: Robert A. Ober wrote: On 3/4/2009 10:19 AM, Brian Evans - Postfix List wrote: Robert A. Ober wrote vi /etc/sysconfig/saslauthd : FYI: saslauthd is Cyrus not Dovecot There is some issue with Mandriva 2009.0

Re: Possible reasons for "qmgr" loading the system?

2009-03-04 Thread Wietse Venema
Victor Duchovni: > Is it the queue manager that's burning CPU? Nothing too interesting > here. Yes, according to this: PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 26926 postfix 20 0 5840 2552 1792 R 43 0.3 276:51.22 qmgr There needs to be a safety check for th

Re: That Relay Access Denied Thing (Solved, Almost)

2009-03-04 Thread Robert A. Ober
On 3/4/2009 11:54 AM, Brian Evans - Postfix List wrote: Robert A. Ober wrote: On 3/4/2009 10:19 AM, Brian Evans - Postfix List wrote: Robert A. Ober wrote vi /etc/sysconfig/saslauthd : FYI: saslauthd is Cyrus not Dovecot There is some issue with Mandriva 2009.0

Re: That Relay Access Denied Thing (Solved, Almost)

2009-03-04 Thread Robert A. Ober
On 3/4/2009 12:32 PM, Robert A. Ober wrote: On 3/4/2009 11:54 AM, Brian Evans - Postfix List wrote: Robert A. Ober wrote: On 3/4/2009 10:19 AM, Brian Evans - Postfix List wrote: Robert A. Ober wrote vi /etc/sysconfig/saslauthd : FYI: saslauthd is Cyrus not Dovecot

Re: postconf -n suggestion

2009-03-04 Thread Noel Jones
Wietse Venema wrote: Charles Marcus: Dovecot has added two lines of text to the beginning output of dovecot -n that could possibly save some time with troubleshooting... It adds the version on the first line, and OS/platform info on the second line, like so: # 1.1.11: /etc/dovecot/dovecot.conf

Re: modify ldap return query value

2009-03-04 Thread Evelio Vila
ok thanks wietse! Evelio Vila: > so I would like to modify the return_attribute to pass postfix only the user > part of the mail field. See: man ldap_table | less +/result_format > Also, could several queries can be combined to form the desired result? You can't make multiple queries per resu

Re: Possible reasons for "qmgr" loading the system?

2009-03-04 Thread Wietse Venema
Victor Duchovni: > > slow_destination_recipient_limit=1 > > slow_destination_concurrency_limit=1 I wonder if the problem recurs when these are changed. But let's first swap new and old queue managers. Wietse

Re: Spam attacks

2009-03-04 Thread /dev/rob0
On Wed March 4 2009 08:48:18 Paweł Leśniak wrote: > But then we come to definition of spam. It's in simple words unwanted > message. Too simple, and not correct. The true definition of spam is UBE: unsolicited bulk email. Most spammers put out messages that a tiny percentage of recipients want t

Re: postconf -n suggestion

2009-03-04 Thread postfix
At 12:52 PM 3/4/2009, Charles Marcus wrote: >> # 1.1.11: /etc/dovecot/dovecot.conf >> # OS: Linux 2.6.23-gentoo-r9 x86_64 Gentoo Base System release 1.12.11.1 If the output is name =value then could the output just be conf = 1.1.11: /etc/dovecot/dovecot.conf OS = Linux 2.6.23-gentoo-r9 x86_64 G

Re: postconf -n suggestion

2009-03-04 Thread Wietse Venema
Noel Jones: > Wietse Venema wrote: > > Charles Marcus: > >> Dovecot has added two lines of text to the beginning output of dovecot > >> -n that could possibly save some time with troubleshooting... > >> > >> It adds the version on the first line, and OS/platform info on the > >> second line, like s

Re: That Relay Access Denied Thing

2009-03-04 Thread /dev/rob0
On Wed March 4 2009 08:39:37 Victor Duchovni wrote: > If I recall correctly the OP reported using Postfix 2.2 and should > see: > > http://www.postfix.org/postconf.5.html#smtpd_sasl_type > > attempts to use Dovecot SASL auth with Postfix 2.2 are unlikely to > get very far. I did it, but I chea

Re: postconf -n suggestion

2009-03-04 Thread Wietse Venema
LuKreme: > On 4-Mar-2009, at 09:22, Wietse Venema wrote: > > Charles Marcus: > >> Dovecot has added two lines of text to the beginning output of > >> dovecot > >> -n that could possibly save some time with troubleshooting... > >> > >> It adds the version on the first line, and OS/platform info on

Configuration advice

2009-03-04 Thread Emmanuel Seyman
Hey, all. I've been asked to overhaul a postfix configuration and I would really appreciate any tips or advice that people may have on the subject. I'm working on two servers : The first one receives mail for @example.org . The configuration isn't easy to read (hence the overhaul) but it looks

Re: That Relay Access Denied Thing (Solved, Almost)

2009-03-04 Thread Brian Evans - Postfix List
Robert A. Ober wrote: > On 3/4/2009 12:32 PM, Robert A. Ober wrote: >> On 3/4/2009 11:54 AM, Brian Evans - Postfix List wrote: >> FYI: saslauthd is Cyrus not Dovecot > Right and that means the type is Cyrus? > > Robert You seem to have had Cyrus working, but want to break it to try to us

Re: postconf -n suggestion

2009-03-04 Thread LuKreme
On 4-Mar-2009, at 11:54, Wietse Venema wrote: "postconf -n" does not list parameters unless they are set in main.cf. The simplicity of the tool makes it useful for building into other tools. If we start making random exceptions then we get on a slippery slope (why stop with mail_version? why not

Re: That Relay Access Denied Thing (Solved, Almost)

2009-03-04 Thread Robert A. Ober
On 3/4/2009 1:06 PM, Brian Evans - Postfix List wrote: Robert A. Ober wrote: On 3/4/2009 12:32 PM, Robert A. Ober wrote: On 3/4/2009 11:54 AM, Brian Evans - Postfix List wrote: FYI: saslauthd is Cyrus not Dovecot Right and that means the type is C

Re: Spam attacks

2009-03-04 Thread Paweł Leśniak
On Wed March 4 2009 08:48:18 Paweł Leśniak wrote: But then we come to definition of spam. It's in simple words unwanted message. Too simple, and not correct. The true definition of spam is UBE: unsolicited bulk email. Most spammers put out messages that a tiny percentage of recipient

Re: Configuration advice

2009-03-04 Thread Jorey Bump
Emmanuel Seyman wrote, at 03/04/2009 02:03 PM: > What's the best way to do this? If I install SA on the first domain > and remove the lists.example.org MX, spammers will still be able to > send spam to it directly. Is setting up SA on both machines the simplest > way to go? It's certainly more fl

Question about how Postfix sends the EHLO/HELO

2009-03-04 Thread Rob Tanner
Hi, We are having problems sending email to a particular site on the internet that uses SpamAssassin to filter for spam. They send me back the headers on a particular message and here is the spam portion: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.2.0 (2007-05-01) on microthun

Re: postconf -n suggestion

2009-03-04 Thread Paweł Leśniak
I was just talking about something that would make it easier when someone was asking for help on the list... I don't think the above will quite accomplish that... In many cases (I'm not gonna do statistics) new users do not post their questions correctly - often we can see 2nd message in th

Re: Postfix + Dovecot SASL authentication.

2009-03-04 Thread Robert A. Ober
On 3/4/2009 10:05 AM, Miguel Da Silva - Centro de Matemática wrote: Victor Duchovni escribió: On Wed, Mar 04, 2009 at 09:35:38AM -0200, Miguel Da Silva - Centro de Matem?tica wrote: The user was not "relaying": mail was sent to a domain you are responsible for, so this was not blocked by "re

Re: Spam attacks

2009-03-04 Thread Charles Marcus
On 3/4/2009, PaweB Le[niak (warl...@lesniakowie.com) wrote: > Looking at first email in thread carefully you'd see that Dave has > (or had) problem with spam sent from j...@foo.com to j...@foo.com. And > that's the case where authentication will do the job perfectly - IMHO > way better then zen.

Re: Question about how Postfix sends the EHLO/HELO

2009-03-04 Thread Noel Jones
Rob Tanner wrote: Hi, We are having problems sending email to a particular site on the internet that uses SpamAssassin to filter for spam. They send me back the headers on a particular message and here is the spam portion: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.2.0 (

Re: postconf -n suggestion

2009-03-04 Thread Charles Marcus
On 3/4/2009 2:36 PM, Paweł Leśniak wrote: >> I was just talking about something that would make it easier when >> someone was asking for help on the list... I don't think the above will >> quite accomplish that... > In many cases (I'm not gonna do statistics) new users do not post their > question

escape "^From "

2009-03-04 Thread LuKreme
What controls escaping "From " in the body of a mail message if it's at the start of a line? Since I've switched everyone over to Maildir, it seems silly to do this anymore, but I can't find the setting. In fact, I'm not even sure it's in postfix at all. RTFM replies preferred, just say wi

Re: That Relay Access Denied Thing (Solved, Almost)

2009-03-04 Thread Brian Evans - Postfix List
Robert A. Ober wrote: > On 3/4/2009 1:06 PM, Brian Evans - Postfix List wrote: >> Robert A. Ober wrote: >> >>> On 3/4/2009 12:32 PM, Robert A. Ober wrote: >>> On 3/4/2009 11:54 AM, Brian Evans - Postfix List wrote: >> >> FYI: saslauthd is Cyrus not Dovecot

submission port requiring starttls even when set not to

2009-03-04 Thread J.P. Trosclair
I'm trying to implement a white list with check_sender_access in smtpd_recipient_restrictions. The problem I'm running into is that the submission port is requiring TLS even when I have set smtpd_enforce_tls=no and smtp_enfoce_tls=no in main.cf and specified them as options for the submission e

Re: postconf -n suggestion

2009-03-04 Thread Paweł Leśniak
W dniu 2009-03-04 20:53, Charles Marcus pisze: Irrelevant. There is nothing wrong with simplifying things... Simplifying does not mean changing behavior. As Wietse said, postconf -n shows only setting from main.cf. So adding values from outside main.cf is not simplifying at all. By your ar

Re: VERPify recommendations

2009-03-04 Thread Noel Jones
Steve Crawford wrote: While we do not manage a "mailing list" in the traditional sense, we do send a lot of emails (daily/weekly/monthly reports, instant-alert messages, etc.) where using VERP to track bounces could prove useful. We run numerous projects with varying requirements and the messa

Re: Spam attacks

2009-03-04 Thread Paweł Leśniak
On 3/4/2009, PaweB Le[niak (warl...@lesniakowie.com) wrote: Looking at first email in thread carefully you'd see that Dave has (or had) problem with spam sent from j...@foo.com to j...@foo.com. And that's the case where authentication will do the job perfectly - IMHO way better then zen.

Re: Question about how Postfix sends the EHLO/HELO

2009-03-04 Thread LuKreme
On 4-Mar-2009, at 12:33, Rob Tanner wrote: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.2.0 (2007-05-01) on microthunder.com They really *really* need to update their two-year old SA install. X-Spam-Level: X-Spam-Status: Yes, score=4.4 required=4.0 They really *REALLY* n

Re: submission port requiring starttls even when set not to

2009-03-04 Thread Brian Evans - Postfix List
J.P. Trosclair wrote: > I'm trying to implement a white list with check_sender_access in > smtpd_recipient_restrictions. The problem I'm running into is that the > submission port is requiring TLS even when I have set > smtpd_enforce_tls=no and smtp_enfoce_tls=no in main.cf and specified > them as

Re: postconf -n suggestion

2009-03-04 Thread Wietse Venema
Pawe?? Le??niak: > W dniu 2009-03-04 20:53, Charles Marcus pisze: > > Irrelevant. There is nothing wrong with simplifying things... > > > Simplifying does not mean changing behavior. As Wietse said, postconf -n > shows only setting from main.cf. So adding values from outside main.cf > is not

Blocking a domain and user

2009-03-04 Thread Jim McIver
I have Postfix 2.1 on Freebsd 4.10 and am having trouble blocking email from a domain. Here is a snipet of the postqueue -p: DF6A927D 3512 Tue Mar 3 18:42:35 MAILER-DAEMON (connect to mx1.mail.yahoo.co.jp[124.83.183.240]: server dropped connection without sending the initial SMTP greet

Re: Messages Are Refused

2009-03-04 Thread Noel Jones
Carlos Williams wrote: Thanks for that info. Can someone also comment on this? I asked a friend via email and this was his response to the same issue: ** "I used nslookup to verify the address your queue is showing, and it does correspond to je.jfcom.mil. But a reque

Re: submission port requiring starttls even when set not to

2009-03-04 Thread LuKreme
On 4-Mar-2009, at 13:08, J.P. Trosclair wrote: submission inet n - - - - smtpd -o smtpd_tls_security_level=encrypt Why? -- If I were you boys, I wouldn't talk or even think about women. T'aint good for your health.

Re: Blocking a domain and user

2009-03-04 Thread Brian Evans - Postfix List
Jim McIver wrote: > I have Postfix 2.1 on Freebsd 4.10 and am having trouble blocking > email from a domain. > Postfix 2.1 is ancient. Recommend an upgrade as some things I mention may require 2.2 or 2.3 or higher. > Here is a snipet of the postqueue -p: > > DF6A927D 3512 Tue Mar 3 18:42:3

Re: Blocking a domain and user

2009-03-04 Thread Paweł Leśniak
W dniu 2009-03-04 21:32, Jim McIver pisze: I have Postfix 2.1 on Freebsd 4.10 and am having trouble blocking email from a domain. Here is a snipet of the postqueue -p: DF6A927D 3512 Tue Mar 3 18:42:35 MAILER-DAEMON (connect to mx1.mail.yahoo.co.jp[124.83.183.240]: server dropped conne

Re: Blocking a domain and user

2009-03-04 Thread LuKreme
On 4-Mar-2009, at 13:32, Jim McIver wrote: they just pile up in the postqueue and I'd like to keep the postqueue -p cleaned out. Snippet from maillog: Mar 4 00:09:21 mail postfix/smtpd[36633]: NOQUEUE: reject: RCPT from unknown[89.218.164.251]: 554 : Sender address rejected: Access denie

Re: submission port requiring starttls even when set not to (Resolved)

2009-03-04 Thread J.P. Trosclair
LuKreme wrote: On 4-Mar-2009, at 13:08, J.P. Trosclair wrote: submission inet n - - - - smtpd -o smtpd_tls_security_level=encrypt Why? I didn't explicitly add it. It was a left over from the default master.cf for the postfix package on debian 5.0. It's gone

Re: Blocking a domain and user

2009-03-04 Thread Noel Jones
Paweł Leśniak wrote: W dniu 2009-03-04 21:32, Jim McIver pisze: I have Postfix 2.1 on Freebsd 4.10 and am having trouble blocking email from a domain. Here is a snipet of the postqueue -p: DF6A927D 3512 Tue Mar 3 18:42:35 MAILER-DAEMON (connect to mx1.mail.yahoo.co.jp[124.83.183.240]:

Re: submission port requiring starttls even when set not to (Resolved)

2009-03-04 Thread Jorey Bump
J.P. Trosclair wrote, at 03/04/2009 04:05 PM: > LuKreme wrote: >> On 4-Mar-2009, at 13:08, J.P. Trosclair wrote: >>> submission inet n - - - - smtpd >>> -o smtpd_tls_security_level=encrypt >> >> >> Why? >> > > I didn't explicitly add it. It was a left over from the d

Local mail listener

2009-03-04 Thread Daniel L. Miller
Ok - now that I've fixed my idiotic routing errors (don't have two NIC's on the same network unless you know what you're doing - which I clearly don't!), I can get back to Postfix. From my prior configuration questions in ages past, I have been trying to make most of my changes in master.cf, s

restricting who can be sent to.

2009-03-04 Thread Carver Banks
Hello, I am in the process of setting up an internal mail server (carver-test.mydomain.local) using postfix, dovecot and squirrel mail. I want the users of this system only be able send mail to a few users in mydomain.com I imagine that there is an easy way to map this to a file, but I can't seem

Re: Spam attacks

2009-03-04 Thread mouss
Paweł Leśniak a écrit : > W dniu 2009-03-03 18:41, Noel Jones pisze: >> Some legit "reminder" type services, some meeting notifications, and >> other legit mail might arrive with you as the sender. Maybe not best >> practices, but it's legit mail and such a policy will reject it. > Why would someo

Re: submission port requiring starttls even when set not to (Resolved)

2009-03-04 Thread J.P. Trosclair
Jorey Bump wrote: Put it back. smtpd_enforce_tls is deprecated since Postfix 2.3 and smtpd_tls_security_level should be used instead. I'll research the smtpd_tls_security_level option further. It didn't present a problem until I started working on this specific feature with the white lists.

Re: Blocking a domain and user

2009-03-04 Thread Jim McIver
My mistake, the ones piling up in postqueue -p are the yahoo.co.jp. The u...@domain.com is just listed in the maillog and it's a bogus email address I'd like not to receive email from. -jm LuKreme wrote: On 4-Mar-2009, at 13:32, Jim McIver wrote: they just pile up in the postqueue and I'd like

Re: Blocking a domain and user

2009-03-04 Thread Jim McIver
My mistake. The u...@domain.com is in the maillog. yahoo.co.jp is in postqueue -p -jm Paweł Leśniak wrote: W dniu 2009-03-04 21:32, Jim McIver pisze: I have Postfix 2.1 on Freebsd 4.10 and am having trouble blocking email from a domain. Here is a snipet of the postqueue -p: DF6A927D 3

  1   2   >