reject sender login mismatch only for some accaounts

2009-06-11 Thread ram
Can I implement smtp_sender_login_maps such a way that * for selective accountids reject_sender_login_mismatch * And the for the rest Permit any sender id if authenticated

relays not connecting msexchange

2009-06-11 Thread K bharathan
till yesterday there're no probs; suddenly two of my postfix relays not connecting the exchange2003; i cannot ping or telnet from the relays to exchange; exchange has got symantec endpoint protection and its firewall; what could've gone wrong!

Multiple Milters

2009-06-11 Thread Ihsan Dogan
Hello, I'm running two spamfilters on two machines, which are accessed with milter. In case of an error (eg: the first milter service is not running), I would like that Postfix wold use the second one on the other host. I was expecting something something like this: smtpd_milters = inet:[127.0.0

Re: reject sender login mismatch only for some accaounts

2009-06-11 Thread Darren Pilgrim
ram wrote: Can I implement smtp_sender_login_maps such a way that * for selective accountids reject_sender_login_mismatch * And the for the rest Permit any sender id if authenticated smtp_sender_login_maps works the other way around (it maps MAIL FROM to SASL login). What you want involve

Re: handling non MX entry domains

2009-06-11 Thread Truth Seeker
> Alternatively, the OP could use a transport map to reroute > stuck messages to > the error transport and "bounce" them back to the sender > with an > informative message. > what is this OP you mean? how can we do this? may be this is what i am exactly looking for...

Re: Spamassasin in Postfix Server

2009-06-11 Thread Truth Seeker
Any response for this queries is really appreciated!!! --- On Wed, 6/10/09, Truth Seeker wrote: > From: Truth Seeker > Subject: Spamassasin in Postfix Server > To: postfix-users@postfix.org > Date: Wednesday, June 10, 2009, 11:54 AM > > > Dear Pros. > > The following is my setup > > > H

Re: Spamassasin in Postfix Server

2009-06-11 Thread Robert Schetterer
Truth Seeker schrieb: > > Any response for this queries is really appreciated!!! > > > --- On Wed, 6/10/09, Truth Seeker wrote: > >> From: Truth Seeker >> Subject: Spamassasin in Postfix Server >> To: postfix-users@postfix.org >> Date: Wednesday, June 10, 2009, 11:54 AM >> >> >> Dear Pros. >>

Re: relays not connecting msexchange

2009-06-11 Thread Charles Marcus
On 6/11/2009 3:12 AM, K bharathan wrote: > till yesterday there're no probs; suddenly two of my postfix relays not > connecting the exchange2003; i cannot ping or telnet from the relays to > exchange; exchange has got symantec endpoint protection and its > firewall; what could've gone wrong! Per t

Re: Multiple Milters

2009-06-11 Thread Wietse Venema
Ihsan Dogan: > > Hello,^M > ^M > I'm running two spamfilters on two machines, which are accessed with^M > milter. In case of an error (eg: the first milter service is not running),^M > I would like that Postfix wold use the second one on the other host.^M > ^M > I was expecting something something

order of local_recipient_maps, smtpd_recipient_restrictions

2009-06-11 Thread Stefan Palme
Hi all, local_recipient_maps .vs. smtpd_recipient_restrictions - can anybody tell me which test happens first on incoming emails? Thanks and regards -stefan-

Re: getting an address in virtual_alias_maps to use different transport

2009-06-11 Thread Calvin Browne
Thanks - I had seen that online - but made several errors setting it up (like not setting maxproc to one). having corrected those, I am now queueing the mail one at a time. Some strange behaviour however - the wait between deliveries seems to bear no relation to what I set smtp_connect_timeout to

Re: Multiple Milters

2009-06-11 Thread Kouhei Sutou
Hi, In <5f0a4d43797f50decd8590a59d9e6...@localhost> "Multiple Milters" on Thu, 11 Jun 2009 09:27:11 +0200, Ihsan Dogan wrote: > I'm running two spamfilters on two machines, which are accessed with > milter. In case of an error (eg: the first milter service is not running), > I would like tha

Re: order of local_recipient_maps, smtpd_recipient_restrictions

2009-06-11 Thread Magnus Bäck
On Thu, June 11, 2009 1:03 pm, Stefan Palme said: > local_recipient_maps .vs. smtpd_recipient_restrictions - can > anybody tell me which test happens first on incoming emails? You're comparing apples and oranges, but I understand what you mean. local_recipient_maps specifies lookup tables that Po

Re: order of local_recipient_maps, smtpd_recipient_restrictions

2009-06-11 Thread Wietse Venema
Stefan Palme: > Hi all, > > local_recipient_maps .vs. smtpd_recipient_restrictions - can > anybody tell me which test happens first on incoming emails? If you don't specify smtpd_*_restrictions = ... reject_unlisted_recipient ... (which searches local_recipient_maps, relay_recipient_maps e

Re: order of local_recipient_maps, smtpd_recipient_restrictions

2009-06-11 Thread Stefan Palme
On Thu, 2009-06-11 at 13:54 +0200, Magnus Bäck wrote: > On Thu, June 11, 2009 1:03 pm, Stefan Palme said: > > > local_recipient_maps .vs. smtpd_recipient_restrictions - can > > anybody tell me which test happens first on incoming emails? > > You're comparing apples and oranges, but I understand w

Re: order of local_recipient_maps, smtpd_recipient_restrictions

2009-06-11 Thread Wietse Venema
Stefan Palme: [ Charset ISO-8859-15 unsupported, converting... ] > On Thu, 2009-06-11 at 13:54 +0200, Magnus B_ck wrote: > > On Thu, June 11, 2009 1:03 pm, Stefan Palme said: > > > > > local_recipient_maps .vs. smtpd_recipient_restrictions - can > > > anybody tell me which test happens first on in

Re: order of local_recipient_maps, smtpd_recipient_restrictions

2009-06-11 Thread Magnus Bäck
On Thu, June 11, 2009 2:13 pm, Stefan Palme said: > On Thu, 2009-06-11 at 13:54 +0200, Magnus Bäck wrote: > > > You're comparing apples and oranges, but I understand what you mean. > > local_recipient_maps specifies lookup tables that Postfix will consult > > if the recipient address domain is loc

Re: anvil

2009-06-11 Thread Simon Jones
2009/6/10 Ralf Hildebrandt : > * Simon Jones : > >> This is the part I'm missing, how do I enable the shit flinger? > > You COULD use smtp_source > > OR > > your could set ridiculous low limits (1/60s) and then test it manually using > telnet. > > Keep in mind, though: > smtpd_client_event_limit_e

Re: anvil

2009-06-11 Thread Simon Jones
2009/6/11 Simon Jones : > 2009/6/10 Ralf Hildebrandt : >> * Simon Jones : >> >>> This is the part I'm missing, how do I enable the shit flinger? >> >> You COULD use smtp_source >> >> OR >> >> your could set ridiculous low limits (1/60s) and then test it manually using >> telnet. >> >> Keep in mind

Re: relays not connecting msexchange

2009-06-11 Thread K bharathan
i get the logs like the following: Jun 10 15:18:33 relay1 postfix/smtp[9353]: 574501614EC: to=, relay=none, delay=12531, delays=12501/0.28/30/0, d sn=4.4.1, status=deferred (connect to 192.168.20.240[192.168.20.240]: Connection timed out) Jun 10 15:18:33 relay1 postfix/error[9652]: 67FE8161520: t

Re: relays not connecting msexchange

2009-06-11 Thread Brian Evans - Postfix List
K bharathan wrote: > i get the logs like the following: > > Jun 10 15:18:33 relay1 postfix/smtp[9353]: 574501614EC: > to=mailto:a...@example.com>>, relay=none, > delay=12531, delays=12501/0.28/30/0, d > sn=4.4.1, status=deferred (connect to 192.168.20.240[192.168.20.240] > : Connection timed out) >

Re: How is it: mynetworks = 127.0.0.0/8 yet local network users are able to send.

2009-06-11 Thread Sthu Pous
Thank You for Your time and answer, Wietse: > > postconf -d > > > > I see mynetworks = 127.0.0.0/8 v.x.y.z/25 192.168.0.0/24 > > > > from whence it comes? - I have no mynetworks file. > > The command "postconf -d" does NOT show main.cf. Ok, but still how can it be that postconf -n gives me:

Re: How is it: mynetworks = 127.0.0.0/8 yet local network users are able to send.

2009-06-11 Thread Sthu Pous
Thank You for Your time and answer, Barney: > As mouss suggested, your query is unclear. I can think of two interpretations: > 1. "I've set mynetworks=127.0.0.0/8 in main.cf but for some reason > machines on my LAN can relay mail out to the internet, how do I stop > this?" > 2. "I've set mynetwork

Re: How to discern from postfix log between TO and THROUGH sending a correspondence?

2009-06-11 Thread Sthu Pous
Thank You for Your time and answer, Magnus: > That's impossible to say based on these log entries. smtpd(8) and > cleanup(8) do not by default not log accepted recipients. > > Please do not trim logs unless asked to do so. I think I have discerned them - simply by their from=<> and unknown to

Re: message_size_limit

2009-06-11 Thread Simon Schelkshorn
Hi, thanks for your fast reply. @Truth Seeker: I added the message_size_limit statement to the definition in master.cf as I intended to increase the message size only for mail sent from my local users and not for all messages. > > > You can't change the size limit for the SMTP server alone. >

Re: anvil

2009-06-11 Thread Victor Duchovni
On Thu, Jun 11, 2009 at 01:34:15PM +0100, Simon Jones wrote: > Thanks guys, fail2ban looks great - config is being a bitch though but > i have anvil working now! Presumably as an anti-DoS service. It is not an anti-spam feature, and should not be used that way. The anti-DoS use-case is to prevent

Re: message_size_limit

2009-06-11 Thread Victor Duchovni
On Thu, Jun 11, 2009 at 04:08:16PM +0200, Simon Schelkshorn wrote: > Hi, > > thanks for your fast reply. > > @Truth Seeker: I added the message_size_limit statement to the > definition in master.cf as I intended to increase the message size > only for mail sent from my local users and not for

Re: anvil

2009-06-11 Thread Terry Carmen
> On Thu, Jun 11, 2009 at 01:34:15PM +0100, Simon Jones wrote: > >> Thanks guys, fail2ban looks great - config is being a bitch though but >> i have anvil working now! > > Presumably as an anti-DoS service. It is not an anti-spam feature, > and should not be used that way. The anti-DoS use-case is

Catchall not working

2009-06-11 Thread Gary Smith
/etc/postfix/custom/virtual @bounces.domain.tld bmana...@bounces.domain.tld Executed: postmap virtual postmap -q 'c...@bounces.domain.tld' hash:/etc/postfix/custom/virtual postmap -q '@bounces.domain.tld' hash:/etc/postfix/custom/virtual bmana...@bounces.domain.tld Test with

Policy protocol size attribute and postfix version

2009-06-11 Thread Rob Tanner
Hi, This is sort of a two part question. I am running Postfix version 2.2.10 from RedHat. It¹s current for Enterprise Linux 4. Since vendors often use their own numbering schemes, I don¹t know what Postfix version it really is in terms of the numbering at postfix.org. Can anyone tell me? Sec

Re: Policy protocol size attribute and postfix version

2009-06-11 Thread Wietse Venema
Rob Tanner: > Hi, > > This is sort of a two part question. I am running Postfix version 2.2.10 > from RedHat. It?s current for Enterprise Linux 4. Since vendors often use > their own numbering schemes, I don?t know what Postfix version it really is > in terms of the numbering at postfix.org.

RE: Catchall not working

2009-06-11 Thread Gary Smith
I think a better question that I should have asked, is I need all email for a domain to go to a single address on that box. We are running Cyrus on the backend is virtual domain mode so the destination account is bmana...@bounces.domain.tld. This is a dedicated box just for this email. It is

Re: Catchall not working

2009-06-11 Thread Noel Jones
Gary Smith wrote: /etc/postfix/custom/virtual @bounces.domain.tld bmana...@bounces.domain.tld Executed: postmap virtual postmap -q 'c...@bounces.domain.tld' hash:/etc/postfix/custom/virtual postmap -q '@bounces.domain.tld' hash:/etc/postfix/custom/virtual bmana...@bounces.do

RE: Catchall not working

2009-06-11 Thread Gary Smith
Noel, Thanks for the follow up (and sorry about the top post). So if I understand the postconf.5 manual, the recipient_delimiter will strip the bounce- off the email address and deliver it bou...@bounces.domain.tld as the originating email address instead of bounce-user=theirdomain@bounce

Re: Catchall not working

2009-06-11 Thread Noel Jones
Gary Smith wrote: Noel, Thanks for the follow up (and sorry about the top post). So if I understand the postconf.5 manual, the recipient_delimiter will strip the bounce- off the email address and deliver it bou...@bounces.domain.tld as the originating email address instead of bounce-user=th

Re: How to discern from postfix log between TO and THROUGH sending a correspondence?

2009-06-11 Thread Victor Duchovni
On Thu, Jun 11, 2009 at 08:45:34PM +0700, Sthu Pous wrote: > Do You know a way how I can track an local application/process that called > postfix to send a messages (on a hacked system)? The only thing recorded by Postfix is either the SMTP client source IP address (and optionally the source port

Re: what is the meaning???

2009-06-11 Thread Barney Desmond
009/6/10 Truth Seeker : > now to do flushing for a particular domain, i am trying to configure fast > flush service. in the documentation i found the following line, which i am > confused. > > could anyone explain this further > > As mentioned in the introduction, the mail is delivered by connect

Re: Policy protocol size attribute and postfix version

2009-06-11 Thread Ralf Hildebrandt
* Rob Tanner : > Hi, > > This is sort of a two part question. I am running Postfix version 2.2.10 > from RedHat. It¹s current for Enterprise Linux 4. Since vendors often use > their own numbering schemes, I don¹t know what Postfix version it really is > in terms of the numbering at postfix.org.

RE: Catchall not working

2009-06-11 Thread Gary Smith
Noel, I created a file /etc/postfix/custom/mydestination and put my entry in there (hash) and added the following lines to /etc/postfix/main.cf (only changes made to a stock 2.5.5 config) mydestination = $myhostname,localhost.$mydomain,localhost,hash:/etc/postfix/custom/mydestination

Re: Catchall not working

2009-06-11 Thread Noel Jones
Gary Smith wrote: Noel, I created a file /etc/postfix/custom/mydestination and put my entry in there (hash) and added the following lines to /etc/postfix/main.cf (only changes made to a stock 2.5.5 config) mydestination = $myhostname,localhost.$mydomain,localhost,hash:/etc/postfix/

Message with 300,000+ recips via alias_maps

2009-06-11 Thread dan trainor
Hello, all - I've sent an email through Postfix which has one recipient, which is an alias via alias_maps (mysql lookup table). I've had just a little bit of experience with this type of delivery, but not a lot of experience with this many final recipients. Right now I see the message sitting in

RE: Catchall not working

2009-06-11 Thread Gary Smith
Bingo... That will teach me to not put my quick changes in the top of the file... Thanks, Gary From: owner-postfix-us...@postfix.org [owner-postfix-us...@postfix.org] On Behalf Of Noel Jones [njo...@megan.vbhcs.org] Sent: Thursday, June 11, 2009 12:52

Re: Message with 300,000+ recips via alias_maps

2009-06-11 Thread Wietse Venema
dan trainor: > Hello, all - > > I've sent an email through Postfix which has one recipient, which is an > alias via alias_maps (mysql lookup table). I've had just a little bit of > experience with this type of delivery, but not a lot of experience with this > many final recipients. > > Right now

RE: Catchall not working

2009-06-11 Thread Gary Smith
Noel, Here is what I ended with. I had to add a virtual_alias_maps as the email address is different the the one we have been sending (and because of the auth system on this box) mydestination = $myhostname, localhost.$mydomain, localhost, hash:/etc/postfix/custom/mydestination rec

Re: Message with 300,000+ recips via alias_maps

2009-06-11 Thread dan trainor
On Thu, Jun 11, 2009 at 1:32 PM, Wietse Venema wrote: > dan trainor: > > Hello, all - > > > > I've sent an email through Postfix which has one recipient, which is an > > alias via alias_maps (mysql lookup table). I've had just a little bit of > > experience with this type of delivery, but not a

Re: Upgrade TOTAL screw-up - Part One

2009-06-11 Thread William Michael
snip === It was not obvious how to turn off html, so I selected UTF-8 option for gmail...hopefully the e-mail(s) will be more readable. Stripped configuration still yields: Jun 11 16:34:12 dns1 postfix/master[3308]: reload configuration /etc/postfix Jun 11 1

Content filter - 2 entries?

2009-06-11 Thread Vasilios Tzanoudakis
Hello all, Is there any way that i can use 2 content filters? system works for ONE of the entries below (main.cf). I have also tried content_filter = scan:127.0.0.1:10025, spamassassin with no luck (getting mail transport unavailable) I use clamsmtp for clamav connection. thanks in advance B