Re: Relay doubt

2009-03-14 Thread Magnus Bäck
On Friday, March 13, 2009 at 22:09 CET, "M. Rodrigo Monteiro" wrote: > I have an Postfix as gateway for other domains (domain1, domain2, domain3). > When domain1 send an e-mail to domain2, it goes to Postfix and then to > domain2, and vice-versa. > When domain2 send an e-mail to Internet, it

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread mouss
email builder a écrit : >[snip] >> I do not support configurations with multiple myhostname/mydomain >> settings (or multiple settings for any domain-like parameter that >> determines how Postfix handles email). > > That's certainly fair. I can accept that I am stepping outside the use model > w

Re: relay_recipient_maps, aliases and LDAP

2009-03-14 Thread Magnus Bäck
On Friday, March 13, 2009 at 18:02 CET, Marcio Merlone wrote: > Long time since I last deployed a postfix server, and things used to be > much simpler. :) Now I have set a Ubuntu 8.04 server to work as an > anti-spam/anti-virus gateway. Messages will be sent to amavis via > transport_maps

Re: about relay server

2009-03-14 Thread mouss
tom lee a écrit : > On Tue, Mar 10, 2009 at 4:14 PM, mouss wrote: > >>> All mails sending from machine A via relaying machine B will arrive in >>> machine C. >>> I think I need to set up something in machine B so that there will be no >>> mails >>> bounce back to machine A. >> if you want machin

Re: Mail filtering problem

2009-03-14 Thread mouss
Webmaster Bliss Corporation a écrit : > Greetings, > > I am installing a Postfix Server, and I am having trouble setting up a > spam filter with Spamassassin. > > I installed Postfix and it is working fine using virtual domains (I > followed these instructions: > http://www.howtoforge.com/linux_p

Re: relay_recipient_maps, aliases and LDAP

2009-03-14 Thread Reinaldo de Carvalho
On Fri, Mar 13, 2009 at 2:02 PM, Marcio Merlone wrote: > Hello, > Hi (again?), > Long time since I last deployed a postfix server, and things used to be much > simpler. :) Now I have set a Ubuntu 8.04 server to work as an > anti-spam/anti-virus gateway. Messages will be sent to amavis via > tran

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread Wietse Venema
Wietse: > I do not support configurations with multiple myhostname/mydomain > settings (or multiple settings for any domain-like parameter that > determines how Postfix handles email). email builder: > That's certainly fair. I can accept that I am stepping outside > the use model with this and th

READMEs, where can I find them?

2009-03-14 Thread KLaM Postmaster
where can I find the postfix readme files, I have looked all over the postfix.com site, and while there is lots of documentation (man pages, how to, faqs, etc) but I cannot find the readme files except as embedded links. Is the a directory or something that contains just the readme files. My parti

Re: READMEs, where can I find them?

2009-03-14 Thread Wietse Venema
KLaM Postmaster: > where can I find the postfix readme files, I have looked all over the > postfix.com site, and while there is lots of documentation (man pages, > how to, faqs, etc) but I cannot find the readme files except as > embedded links. The files are installed here: $ postconf readme_di

Re: order of multiple hash file entries

2009-03-14 Thread list-user
- "mouss" schrieb: > C. V. a écrit : > > Hi, > > > > i've setup my mailsystem a while ago and query MySQL and LDAP vor > address and domain mappings. > > > > Since both of them (database and directory) are more likely to be > down of many reasons (network, connection overload etc.) i wan

Re: order of multiple hash file entries

2009-03-14 Thread C. V.
- "Noel Jones" schrieb: > C. V. wrote: > > Hi, > > > > i've setup my mailsystem a while ago and query MySQL and LDAP vor > address and domain mappings. > > > > Since both of them (database and directory) are more likely to be > down of many reasons (network, connection overload etc.) i w

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I get TLS setup. I am running 2.5.6. I did chang

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I get TLS setup. I am running 2.5.6. I did chang

Re: non-alpha HELO

2009-03-14 Thread Jorey Bump
LuKreme wrote, at 03/14/2009 12:19 PM: > On 13-Mar-2009, at 14:51, Jorey Bump wrote: >> submission inet n - n - - smtpd >> -o smtpd_tls_security_level=encrypt >> -o smtpd_sasl_auth_enable=yes >> -o smtpd_client_restrictions=permit_sasl_authenticated,reject > > Yeah, o

Re: order of multiple hash file entries

2009-03-14 Thread Magnus Bäck
On Saturday, March 14, 2009 at 17:08 CET, list-u...@backenhoernchen.de wrote: > - "mouss" schrieb: > > > there's no backup. you have the choice between: > > > > - accepting temp failures if the backend is down > > - using a backedn that doesn't get down (hash, cdb, ...) > > ok, i am al

Re: non-alpha HELO

2009-03-14 Thread Sahil Tandon
On Mar 14, 2009, at 12:20 PM, LuKreme wrote: On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I g

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 14-Mar-2009, at 11:05, Jorey Bump wrote: LuKreme wrote, at 03/14/2009 12:19 PM: submit/smtpd[32686]: connect from c-67-164-162-51.hsd1.co.comcast.net[67.164.162.51] submit/smtpd[32686]: lost connection after EHLO from c-67-164-162-51.hsd1.co.comcast.net[67.164.162.51] submit/smtpd[32686]: dis

Re: order of multiple hash file entries

2009-03-14 Thread Noel Jones
list-u...@backenhoernchen.de wrote: Using them as fail-over would really be nice to do and i think shoult work. postix does not concatenantes these maps because it trys them one by one - in which order? is there any documentation on that? There is no failover for table lookups. You can spec

Re: READMEs, where can I find them?

2009-03-14 Thread Noel Jones
KLaM Postmaster wrote: where can I find the postfix readme files, I have looked all over the postfix.com site, and while there is lots of documentation (man pages, how to, faqs, etc) but I cannot find the readme files except as embedded links. Is the a directory or something that contains just t

Re: non-alpha HELO

2009-03-14 Thread mouss
LuKreme a écrit : > On 13-Mar-2009, at 14:51, Jorey Bump wrote: >> submission inet n - n - - smtpd >> -o smtpd_tls_security_level=encrypt >> -o smtpd_sasl_auth_enable=yes >> -o smtpd_client_restrictions=permit_sasl_authenticated,reject > > Yeah, once I get TLS setup.

Re: order of multiple hash file entries

2009-03-14 Thread list-user
- "Magnus Bäck" schrieb: > On Saturday, March 14, 2009 at 17:08 CET, > list-u...@backenhoernchen.de wrote: > > > - "mouss" schrieb: > > > > Lookup tables are tried in the order specified in the configuration, > but if any of the tables returns a result OR FAILS, the traversal i

backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Henk van Oers
Quote from header_checks (5): "" DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table search. For backwards compatibility reasons, Postfix also

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Michael Tokarev
Henk van Oers wrote: Quote from header_checks (5): "" DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table search. For backwards compatibility reasons, P

Re: order of multiple hash file entries

2009-03-14 Thread Magnus Bäck
On Saturday, March 14, 2009 at 20:15 CET, list-u...@backenhoernchen.de wrote: > So, when i trun around you statemant > > foo_bar_maps = hash:/etc/postfix/foo_backup,ldap:/etc/postfix/foo.cf > > the hash should alway be asked first and when there ist no matching > entry postfix will ask

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Henk van Oers
On Sat, 14 Mar 2009, Michael Tokarev wrote: Henk van Oers wrote: Quote from header_checks (5): "" DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table search.

Re: relay_based_on_MX

2009-03-14 Thread Joe Postfix
Can you explain how this feature could be enabled? One of our the services we offer our customers allows them to create as many domains as they like (on various DNS's), and we have a catchall mailbox that grabs any emails sent to those domains. Of course you are correct most of the content on ther

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Michael Tokarev
Henk van Oers wrote: On Sat, 14 Mar 2009, Michael Tokarev wrote: Henk van Oers wrote: [] I was trying to use action OK to jump out of header checks. That is: not only skip the next patterns, but also the next input lines. [] Isn't it better to use the same semantics as in restrictions? (Was

Re: relay_based_on_MX

2009-03-14 Thread Wietse Venema
Joe Postfix: > Does anyone know if postfix supports a feature equivalent to > relay_based_on_MX in sendmail? Wietse: > Yes. > > However such features must not be used because they accept mail > for non-existent recipients, and therefore 1) they fill the Postfix > queue with non-deliverable MAILER-

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Wietse Venema
Henk van Oers: > > Quote from header_checks (5): > "" > DUNNO Pretend that the input line did not match any pat- >tern, and inspect the next input line. This action >can be used to shorten the table search. > >For backwards compatibilit

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Henk van Oers
On Sat, 14 Mar 2009, Michael Tokarev wrote: Henk van Oers wrote: On Sat, 14 Mar 2009, Michael Tokarev wrote: Henk van Oers wrote: [] I was trying to use action OK to jump out of header checks. That is: not only skip the next patterns, but also the next input lines. [] Isn't it better to us

Re: relay_based_on_MX

2009-03-14 Thread Wietse Venema
Wietse Venema: > Joe Postfix: > > Does anyone know if postfix supports a feature equivalent to > > relay_based_on_MX in sendmail? > > Wietse: > > Yes. > > > > However such features must not be used because they accept mail > > for non-existent recipients, and therefore 1) they fill the Postfix > >

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread email builder
> email builder a écrit : > >[snip] > >> I do not support configurations with multiple myhostname/mydomain > >> settings (or multiple settings for any domain-like parameter that > >> determines how Postfix handles email). > > > > That's certainly fair. I can accept that I am stepping outside

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread email builder
> > I do not support configurations with multiple myhostname/mydomain > > settings (or multiple settings for any domain-like parameter that > > determines how Postfix handles email). > > email builder: > > That's certainly fair. I can accept that I am stepping outside > > the use model with th

Re: reject outgoiong mail not from domain of host

2009-03-14 Thread mouss
Noel Jones a écrit : > John G. Heim wrote: >> I want to make sure that any messages my system sends out always has a >> sender of someb...@math.wisc.edu. I am looking at configuring the >> smtpd_sender_restrictions directive. >> >> smtpd_sender_restrictions = >> hash:/etc/postfix/all_addresses_at_m

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread Wietse Venema
Wietse: > I do not support configurations with multiple myhostname/mydomain > settings (or multiple settings for any domain-like parameter that > determines how Postfix handles email). email builder: > That's certainly fair. I can accept that I am stepping outside > the use model with this and th

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Bill Cole
Michael Tokarev wrote, On 3/14/09 4:13 PM: Henk van Oers wrote: [...] I the case of multiple recipients there can be rejects for some, no tests for some others (OK), a few test for DUNNO recipients and all the checks for the rest. Right? Yes. For each recipient independently. I don't belie

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread email builder
Wietse: > I do not support configurations with multiple myhostname/mydomain > settings (or multiple settings for any domain-like parameter that > determines how Postfix handles email). email builder: > That's certainly fair. I can accept that I am stepping outside > the use model with this an

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 14-Mar-2009, at 13:02, mouss wrote: test the connection manually: $ telnet yourserv 587 ... EHLO yourclienthostname ... QUIT Right, I do know that. Sorry if I wasn't clear, my only point was that what was actaully logged under submit was not useful and expressing disappointment that th

smtpd_tls_session_cache_database

2009-03-14 Thread LuKreme
In reading and all the posts in the last 15 months with 'smtpd_tls_session_cache_database' in the subject (all 7 of them!), it is not clear to me how the smtpd_tls_session_cache_database file is created, or what exactly it contains. If the file is no

Re: smtpd_tls_session_cache_database

2009-03-14 Thread Wietse Venema
LuKreme: > In reading and all the posts > in the last 15 months with 'smtpd_tls_session_cache_database' in the > subject (all 7 of them!), it is not clear to me how the > smtpd_tls_session_cache_database file is created, or what exactly it > contains

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Henk van Oers
On Sat, 14 Mar 2009, Wietse Venema wrote: Henk van Oers: Quote from header_checks (5): "" DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table search.

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Noel Jones
Henk van Oers wrote: On Sat, 14 Mar 2009, Wietse Venema wrote: Henk van Oers: Quote from header_checks (5): "" DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table

Re: non-alpha HELO

2009-03-14 Thread Noel Jones
LuKreme wrote: On 14-Mar-2009, at 13:02, mouss wrote: test the connection manually: $ telnet yourserv 587 ... EHLO yourclienthostname ... QUIT Right, I do know that. Sorry if I wasn't clear, my only point was that what was actaully logged under submit was not useful and expressing disappoi

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Roger Marquis
Noel Jones wrote: There is no bypass method for header_checks. Have you tried a filter action at the beginning of the file? Destination can be another postfix instance, another smtpd, or a content_filter like amavis or spamd: /^Received: from .*\.mx\.aol.com (.*\.mx\.aol\.com/ FILTER smtp:[1