Re: backwards compatibility of OK in header_checks still needed?

2009-03-16 Thread Henk van Oers
Noel Jones wrote: [...] There is no bypass mechanism for header_checks. It whould be nice to have one.

saslauthd with realm support

2009-03-16 Thread ram
I use cyrus saslauthd with "-r" option to include realms in login. For smtp-auth configuration, some users put full emailid as username , some use just the userid part of email-id(before '@'). Can postfix always authenticate with userid. Can this be done only for email-ids of some domain For

Postgres benchmarking with pgbench

2009-03-16 Thread m...@bortal.de
Hello List, i would like to pimp my postgres setup. To make sure i dont have a slow hardware, i tested it on three diffrent enviorments: 1.) Native Debian Linux (Dom0) 2.) Debian Linux in Xen (DomU) 3.) Blade with SSD Disk Here are my results: http://i39.tinypic.com/24azpxg.jpg Here is my po

Re: Postgres benchmarking with pgbench

2009-03-16 Thread Costin Guşă
On Mon, Mar 16, 2009 at 11:40 AM, m...@bortal.de wrote: > Hello List, > > i would like to pimp my postgres setup. To make sure i dont have a slow > hardware, i tested it on three diffrent enviorments: Mario, you might want to subs cribe to postgresql-performance mailing list, at http://archives.p

Re: Postgres benchmarking with pgbench

2009-03-16 Thread Barney Desmond
2009/3/16 m...@bortal.de : > Hello List, > > i would like to pimp my postgres setup. To make sure i dont have a slow > hardware, i tested it on three diffrent enviorments: > 1.) Native Debian Linux (Dom0) > 2.) Debian Linux  in Xen (DomU) > 3.) Blade with SSD Disk > > Here are my results: http://i3

Re: Postgres benchmarking with pgbench

2009-03-16 Thread m...@bortal.de
Oh, oops. Sorry! :) Costin Guşă wrote: On Mon, Mar 16, 2009 at 11:40 AM, m...@bortal.de wrote: Hello List, i would like to pimp my postgres setup. To make sure i dont have a slow hardware, i tested it on three diffrent enviorments: Mario, you might want to subs cribe to postgresql-p

Re: backwards compatibility of OK in header_checks still needed?

2009-03-16 Thread Wietse Venema
Henk van Oers: > > Noel Jones wrote: > > [...] > > > There is no bypass mechanism for header_checks. > > It whould be nice to have one. Just to clue you in, here is an example SMTP dialog. 220 server.example.com ESMTP HELO client.example.com 250 server.example.com MAIL FROM:

Postfix, mysql, virtual users

2009-03-16 Thread Sebastian Chociwski
I've some problems setting up my postfix server to deliver mails to virtual users. As I understand it works that way : I send an email to my serwer to u...@virtual-domain.com which is redirected in mysql to user_login. Problem 1 : postfix tryes to add domain and send mail to : user_lo...@my_domain.

restricting sender to send outside and allow only as defined - help

2009-03-16 Thread aio shin
hi all, I have a postfix server and I want to restrict some users to send only to domain I want to allow. I already accomplished the restriction of who can send to some local users, what I have not is to restrict them to send outside my domain and allow only to defined external destination. my con

Re: Relay doubt

2009-03-16 Thread M. Rodrigo Monteiro
> Okay, so move those restrictions above permit_mynetworks. When placing > check_sender_access restrictions above reject_unauth_destination in > smtpd_recipient_restrictions, you must be very careful not to return > OK in that table since that would make you an open relay. If the > restriction must

Re: saslauthd with realm support

2009-03-16 Thread Victor Duchovni
On Mon, Mar 16, 2009 at 02:29:17PM +0530, ram wrote: > For smtp-auth configuration, some users put full emailid as username , > some use just the userid part of email-id(before '@'). Can postfix > always authenticate with userid. Can this be done only for email-ids of > some domain Postfix passe

Re: saslauthd with realm support

2009-03-16 Thread Reinaldo de Carvalho
On Mon, Mar 16, 2009 at 11:10 AM, Victor Duchovni wrote: > On Mon, Mar 16, 2009 at 02:29:17PM +0530, ram wrote: > >> For smtp-auth configuration, some users put full emailid as username , >> some use just the userid part of email-id(before '@'). Can postfix >> always authenticate with userid. Can

Re: saslauthd with realm support

2009-03-16 Thread Jorey Bump
Victor Duchovni wrote, at 03/16/2009 10:10 AM: > On Mon, Mar 16, 2009 at 02:29:17PM +0530, ram wrote: > >> For smtp-auth configuration, some users put full emailid as username , >> some use just the userid part of email-id(before '@'). Can postfix >> always authenticate with userid. Can this be do

Re: saslauthd with realm support

2009-03-16 Thread Victor Duchovni
On Mon, Mar 16, 2009 at 10:19:44AM -0400, Jorey Bump wrote: > Victor Duchovni wrote, at 03/16/2009 10:10 AM: > > On Mon, Mar 16, 2009 at 02:29:17PM +0530, ram wrote: > > > >> For smtp-auth configuration, some users put full emailid as username , > >> some use just the userid part of email-id(befo

Re: Postfix, mysql, virtual users

2009-03-16 Thread Magnus Bäck
On Monday, March 16, 2009 at 12:36 CET, Sebastian Chociwski wrote: > I've some problems setting up my postfix server to deliver mails to > virtual users. > As I understand it works that way : > I send an email to my serwer to u...@virtual-domain.com which is > redirected in mysql to user_log

Re: Relay doubt

2009-03-16 Thread Magnus Bäck
On Monday, March 16, 2009 at 14:12 CET, "M. Rodrigo Monteiro" wrote: > > Okay, so move those restrictions above permit_mynetworks. When placing > > check_sender_access restrictions above reject_unauth_destination in > > smtpd_recipient_restrictions, you must be very careful not to return > >

Re: smtpd_tls_session_cache_database

2009-03-16 Thread mouss
LuKreme a écrit : > [snip] > Figured that out right after sending last. Everything works in postfix > right now as it is. I am only able to auth against the salsdb with > > $ cat smtpd.conf > pwcheck_method: auxprop > mech_list: PLAIN LOGIN > > Any changes I've tried to make to that file so fa

Re: Relay doubt

2009-03-16 Thread M. Rodrigo Monteiro
> Place check_sender_access in smtpd_sender_retrictions, probably > before permit_mynetworks unless you want to exempt local clients > from the checks. As long as smtpd_delay_reject = yes you can place > check_recipient_access in the same place, otherwise you need to keep > them in smtpd_recipient_

Re: Relay doubt

2009-03-16 Thread Magnus Bäck
On Monday, March 16, 2009 at 20:53 CET, "M. Rodrigo Monteiro" wrote: > > Place check_sender_access in smtpd_sender_retrictions, probably > > before permit_mynetworks unless you want to exempt local clients > > from the checks. As long as smtpd_delay_reject = yes you can place > > check_recip

Gentoo: "cert already in hash table" error

2009-03-16 Thread Victor Duchovni
Summary: Some Gentoo systems have 2 (related) CA certs in one of the files in the standard root CA bundle, one of the CAs is listed separately in another file. This leads to problems where the same trusted root is loaded twice. Working with a poster to the OpenSSL-users list, this was resolved to

restricting sender to send outside and allow only as defined

2009-03-16 Thread aio shin
(already sent this, but had a problem on the first attempt, am not sure If I sent it successfully) I have a postfix server and I want to restrict some users to send only to domain I want to allow. I already accomplished the restriction of who can send to some local users, what I have not is to

restricting sender to send outside and allow only as defined

2009-03-16 Thread aio shin
(already sent this, but had a problem on the first attempt, am not sure If I sent it successfully) I have a postfix server and I want to restrict some users to send only to domain I want to allow. I already accomplished the restriction of who can send to some local users, what I have not is to

Re: backwards compatibility of OK in header_checks still needed?

2009-03-16 Thread Henk van Oers
On Mon, 16 Mar 2009, Wietse Venema wrote: Henk van Oers: Noel Jones wrote: [...] There is no bypass mechanism for header_checks. It whould be nice to have one. Just to clue you in, here is an example SMTP dialog. 220 server.example.com ESMTP HELO client.example.com 250 server

Max Queue Life

2009-03-16 Thread Post Freak
Hello, Is there a way (without recompiling) to increase maximal_queue_lifetime beyond 20 days? I've tried several settings, but none seem to work. I get this message in /var/log/maillog, but I can't set the param that high: postfix/qmgr[4176]: fatal: invalid maximal_queue_lifetime: 1296 (max

Re: Max Queue Life

2009-03-16 Thread Sahil Tandon
On Mon, 16 Mar 2009, Post Freak wrote: > Is there a way (without recompiling) to increase maximal_queue_lifetime > beyond 20 days? I've tried several settings, but none seem to work. I get > this message in /var/log/maillog, but I can't set the param that high: Yes, you can set maximal_queue_life

Re: restricting sender to send outside and allow only as defined

2009-03-16 Thread Sahil Tandon
On Tue, 17 Mar 2009, aio shin wrote: > (already sent this, but had a problem on the first attempt, am not > sure If I sent it successfully) This is the third time you've sent the same email to this mailing list. If you suspect delivery failures, do not just re-send your message; instead, check t

Re: backwards compatibility of OK in header_checks still needed?

2009-03-16 Thread Wietse Venema
Henk van Oers: > I think OK can be used to skip not only the rest of the expressions > but also the rest of the header lines. Sorry, that would break compatibility. Postfix is used for serious work, not jusr toy systems. Wietse

New action request (was: Re: backwards compatibility of OK in header_checks still needed?)

2009-03-16 Thread Henk van Oers
On Mon, 16 Mar 2009, Wietse Venema wrote: Henk van Oers: I think OK can be used to skip not only the rest of the expressions but also the rest of the header lines. Sorry, that would break compatibility. Postfix is used for serious work, not jusr toy systems. Fine, not Ok than. What abou

Re: New action request (was: Re: backwards compatibility of OK in header_checks still needed?)

2009-03-16 Thread Wietse Venema
Henk van Oers: > I think OK can be used to skip not only the rest of the expressions > but also the rest of the header lines. On Mon, 16 Mar 2009, Wietse Venema wrote: > Sorry, that would break compatibility. Postfix is used for > serious work, not jusr toy systems. Henk van Oers: > Fine, not Ok

Re: restricting sender to send outside and allow only as defined

2009-03-16 Thread aio shin
On 3/17/09, Sahil Tandon wrote: > On Tue, 17 Mar 2009, aio shin wrote: > >> (already sent this, but had a problem on the first attempt, am not >> sure If I sent it successfully) > > This is the third time you've sent the same email to this mailing list. If > you suspect delivery failures, do not

Re: Too strict?

2009-03-16 Thread Alberto Lepe
Thank you for your answer... You were right, I actually have commented that line (smtpd_client_restrictions) when I did the tests. So, that is why it allowed me. Thank you.. I still have 1 more question, but I will write other mail for that. Cheers... On Mon, Mar 16, 2009 at 2:48 PM, Magnus Bäc

reject_unlisted_recipient

2009-03-16 Thread Alberto Lepe
Hello! A quick question (I think). According to the Postfix Manual, "reject_unlisted_recipient": > "Reject the request when the MAIL FROM address is not listed in the list of > valid recipients for its domain class." > and "smtpd_reject_unlisted_sender": > "Request that the Postfix SMTP server

RE: Too strict?

2009-03-16 Thread MacShane, Tracy
> -Original Message- > From: owner-postfix-us...@postfix.org > [mailto:owner-postfix-us...@postfix.org] On Behalf Of Alberto Lepe > Sent: Monday, 16 March 2009 4:18 PM > To: postfix-users@postfix.org > Subject: Too strict? > > Hello, and thank you in advance for your time! > > I have

Clue hit

2009-03-16 Thread Henk van Oers
On Mon, 16 Mar 2009, Wietse Venema wrote: Headers that you want to reject may appear before or after headers that you want to whitelist. Now i see, thank you. I will write a header proxy that only collects the headers, does some expressions with shortcuts and starts streaming the 20+MB body

Re: reject_unlisted_recipient

2009-03-16 Thread Sahil Tandon
On Tue, 17 Mar 2009, Alberto Lepe wrote: > According to the Postfix Manual, "reject_unlisted_recipient": > > > "Reject the request when the MAIL FROM address is not listed in the list of > > valid recipients for its domain class." No, reject_unlisted_recipient has nothing to do with the MAIL FRO

Re: reject_unlisted_recipient

2009-03-16 Thread Alberto Lepe
Ok, that makes sense... I have so many windows opened that i didn't rechecked what I was reading... sorry for that. Have a nice day. On Tue, Mar 17, 2009 at 10:44 AM, Sahil Tandon wrote: > On Tue, 17 Mar 2009, Alberto Lepe wrote: > > > According to the Postfix Manual, "reject_unlisted_recipient

Re: reject_unlisted_recipient

2009-03-16 Thread Alberto Lepe
Ok, I checked the references... so let me correct my question: "reject_unlisted_recipient" was indeed "reject_unlisted_sender". So, If I use that rule, and someone is trying to send a mail to a local account from for example hotmail, gmail, or any other external server, means that it will be

Re: reject_unlisted_recipient

2009-03-16 Thread Sahil Tandon
On Tue, 17 Mar 2009, Alberto Lepe wrote: [Please stop top-posting!] > Ok, I checked the references... so let me correct my question: > > "reject_unlisted_recipient" was indeed "reject_unlisted_sender". > > So, If I use that rule, and someone is trying to send a mail to a > local account from

Re: reject_unlisted_recipient

2009-03-16 Thread Alberto Lepe
Sorry but what do you mean by "top-posting"? I'm just replying to the mail... ?? I'm sorry if I'm bothering someone with that... how it is the "normal" way to answer then? I know that hotmail, gmail, etc. should NOT be listed in $mydestination...etc... So if I understood (sorry my English is not p

Re: reject_unlisted_recipient

2009-03-16 Thread Sahil Tandon
On Tue, 17 Mar 2009, Alberto Lepe wrote: > Sorry but what do you mean by "top-posting"? I'm just replying to the > mail... ?? > I'm sorry if I'm bothering someone with that... how it is the "normal" way > to answer then? Top-posting makes it difficult for others to follow the thread in its logica

Re: reject_unlisted_recipient

2009-03-16 Thread Rod Whitworth
On Tue, 17 Mar 2009 11:45:17 +0900, Alberto Lepe wrote: >Sorry but what do you mean by "top-posting"? I'm just replying to the mail... >?? >I'm sorry if I'm bothering someone with that... how it is the "normal" way to >answer then? A: Because it messes up the order in which people normally read

Re: reject_unlisted_recipient

2009-03-16 Thread Alberto Lepe
On Tue, Mar 17, 2009 at 12:00 PM, Rod Whitworth wrote: > On Tue, 17 Mar 2009 11:45:17 +0900, Alberto Lepe wrote: > > >Sorry but what do you mean by "top-posting"? I'm just replying to the > mail... ?? > >I'm sorry if I'm bothering someone with that... how it is the "normal" way > to answer then?

Relocate queue directory

2009-03-16 Thread Brandon Hilkert
I'm looking to move the postfix directory from /var/spool/postfix to another array. When I specify the setting in main.cf as: queue_directory = /opt/postfix I reload and postfix will no longer send mail. All the subfolders are created underneath the /opt/postfix directory with the proper perm

Re: Relocate queue directory

2009-03-16 Thread Sahil Tandon
On Mon, 16 Mar 2009, Brandon Hilkert wrote: > I'm looking to move the postfix directory from /var/spool/postfix to > another array. When I specify the setting in main.cf as: > > queue_directory = /opt/postfix Did you stop Postfix before making this change to main.cf? In your follow-up, includ

SSL/TLS for dummies

2009-03-16 Thread Security Admin (NetSec)
Someday (maybe today) I will WRITE DOWN the proper way to generate and export certificates. Getting this warning in my maillog: "warning: cannot get private key from file /etc/postfix/privkey.pem" Doesn't stop TLS from occurring, it is just annoying. TLS is used between postfix mail gateways

Re: SSL/TLS for dummies

2009-03-16 Thread Barney Desmond
2009/3/17 Security Admin (NetSec) : > Someday (maybe today) I will WRITE DOWN the proper way to generate and export > certificates.  Getting this warning in my maillog: > > "warning: cannot get private key from file /etc/postfix/privkey.pem" > > Doesn't stop TLS from occurring, it is just annoying