Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread Rafał Radecki
Hi all. I'm currently installing an smtp server on CentOS 5.3. Part of it is to use PostgreSQL backend to store virtual users/domains/aliases/passwords and of course to use it for SASL authentication. My /usr/lib/sasl2/smtpd.conf file: pwdcheck_method: auxprop sql_engine: pgsql sql_user: postfix s

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread EASY steve.h...@digitalcertainty.co.uk
On Sun, 2009-06-21 at 10:35 +0200, Rafał Radecki wrote: > Hi all. I'm currently installing an smtp server on CentOS 5.3. Part of > it is to use PostgreSQL backend to store virtual > users/domains/aliases/passwords and of course to use it for SASL > authentication. My /usr/lib/sasl2/smtpd.conf file:

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread EASY steve.h...@digitalcertainty.co.uk
Strike that, I've just noticed you crossposted to; cyrus-s...@lists.andrew.cmu.edu, Please ignore my stupid answer.

Re: rule to manually put on hold

2009-06-21 Thread Magnus Bäck
On Sunday, June 21, 2009 at 08:35 CEST, Stéphane MERLE wrote: > Terry Carmen a écrit : > > > This should work: > > > > In main.cf: > > header_checks = regexp:/etc/postfix/header_checks > > > > In /etc/postfix/header_checks: > > /^To:@temporarydeaddomain.com/ HOLD > > Hi, thanks, this wor

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread Patrick Ben Koetter
* Rafał Radecki : > Hi all. I'm currently installing an smtp server on CentOS 5.3. Part of it is > to use PostgreSQL backend to store virtual users/domains/aliases/passwords > and of course to use it for SASL authentication. My > /usr/lib/sasl2/smtpd.conf file: > > pwdcheck_method: auxprop Typo!

restrict external host

2009-06-21 Thread K bharathan
my setup: external relay1 -->internal postfix mail server how can i restrict postfix to receive only mails from relay1; can i do it through a access map? help appreciated

Re: restrict external host

2009-06-21 Thread Ralf Hildebrandt
* K bharathan : > my setup: > external relay1 -->internal postfix mail server > > how can i restrict postfix to receive only mails from relay1; can i do it > through a access map? mynetworks = externalrelay1 smtpd_recipient_restrictions = permit_mynetworks reject -- Ralf Hildebrandt Pos

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread Rafał Radecki
I corrected my mistake but it doesn't help. Any other ideas? 2009/6/21 Patrick Ben Koetter > * Rafał Radecki : > > Hi all. I'm currently installing an smtp server on CentOS 5.3. Part of it > is > > to use PostgreSQL backend to store virtual > users/domains/aliases/passwords > > and of course to

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread Steve
On Sun, 2009-06-21 at 15:58 +0200, Rafał Radecki wrote: > I corrected my mistake but it doesn't help. Any other ideas? What are the logs saying?

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread EASY steve.h...@digitalcertainty.co.uk
On Sun, 2009-06-21 at 15:16 +0100, Steve wrote: > On Sun, 2009-06-21 at 15:58 +0200, Rafał Radecki wrote: > > I corrected my mistake but it doesn't help. Any other ideas? > What are the logs saying? > OFF LIST RESPONSE RECEIVED; >/var/log/maillog: >Jun 21 17:54:00 localhost postfix/smtpd[3091]:

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread Rafał Radecki
Yes, but in /usr/lib/sasl2/smtpd.conf i have: pwcheck_method: auxprop sql_engine: pgsql sql_user: postfix sql_passwd: postfix sql_hostnames: localhost sql_database: postfix sql_select: SELECT password FROM mailbox WHERE username='%...@%r' mech_list: login plain log_level: 4 2009/6/21 EASY steve.h

Change queue_depth on the fly?

2009-06-21 Thread Ralf Hildebrandt
Can I change hash_queue_depth on the fly? I mean, with a queue already filled? If so, how? stop, change, start? -- Ralf Hildebrandt Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.computerbeschimpfung.de Wenn die Leute mit dem Logfile die IT-Kompetenz von ein

Re: Change queue_depth on the fly?

2009-06-21 Thread Wietse Venema
Ralf Hildebrandt: > Can I change hash_queue_depth on the fly? I mean, with a queue already > filled? If so, how? stop, change, start? If you don't change hash_queue_depth of the active queue, edit main.cf, then "postfix reload". Wietse

Re: Change queue_depth on the fly?

2009-06-21 Thread Ralf Hildebrandt
* Wietse Venema : > Ralf Hildebrandt: > > Can I change hash_queue_depth on the fly? I mean, with a queue already > > filled? If so, how? stop, change, start? > > If you don't change hash_queue_depth of the active queue, edit > main.cf, then "postfix reload". Thanks. I just changed them for defer,

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread Steve
On Sun, 2009-06-21 at 17:05 +0200, Rafał Radecki wrote: > Yes, but in /usr/lib/sasl2/smtpd.conf i have: > > pwcheck_method: auxprop > sql_engine: pgsql > sql_user: postfix > sql_passwd: postfix > sql_hostnames: localhost > sql_database: postfix > sql_select: SELECT password FROM mailbox WHERE user

Re: Cyrus-sasl + postfix + postgresql problem.

2009-06-21 Thread mouss
Rafał Radecki a écrit : > I corrected my mistake but it doesn't help. Any other ideas? > Please do not top post: put your replies after the text your reply to. did you restart postfix after the fix? if so, download and run saslfinger (see Patrick's signature). - make sure you installed the post

Re: false return addresses

2009-06-21 Thread mouss
Jon a écrit : > Wietse Venema wrote: >> James D. Parra: >>> Hello, >>> >>> How can I drop external messages with a return address from our domain? >> >> Something like this will reject "local" senders from outside >> "mynetworks". >> >> > > I'm glad this question came up, I too am getting from= >

reject with Access denied on legitimate messages

2009-06-21 Thread Dale Carstensen
I searched on the MARC archive for "access denied" and got 30 hits since 4-30-2009, but none of the subjects looked promising, so here's a question. A local recipient has registered a complaint that correspondents are getting 554 responses part of the time (not always) when attempting to send mail

Re: reject with Access denied on legitimate messages

2009-06-21 Thread mouss
Dale Carstensen a écrit : > I searched on the MARC archive for "access denied" and got 30 hits > since 4-30-2009, but none of the subjects looked promising, so here's > a question. > > A local recipient has registered a complaint that correspondents are > getting 554 responses part of the time (no

Re: reject with Access denied on legitimate messages

2009-06-21 Thread Dale Carstensen
>Dale Carstensen a écrit : >> I searched on the MARC archive for "access denied" and got 30 hits >> since 4-30-2009, but none of the subjects looked promising, so here's >> a question. >> >> A local recipient has registered a complaint that correspondents are >> getting 554 responses part of the

Re: reject with Access denied on legitimate messages

2009-06-21 Thread Noel Jones
Dale Carstensen wrote: Dale Carstensen a écrit : I searched on the MARC archive for "access denied" and got 30 hits since 4-30-2009, but none of the subjects looked promising, so here's a question. A local recipient has registered a complaint that correspondents are getting 554 responses part

Re: rule to manually put on hold

2009-06-21 Thread Stéphane MERLE
Magnus Bäck a écrit : On Sunday, June 21, 2009 at 08:35 CEST, Stéphane MERLE wrote: Terry Carmen a écrit : This should work: In main.cf: header_checks = regexp:/etc/postfix/header_checks In /etc/postfix/header_checks: /^To:@temporarydeaddomain.com/ HOLD Hi, thanks,

Unknown mail transport error (injection only)

2009-06-21 Thread Ville Walveranta
Hello all, I'm finally implementing into production the systems for which I got excellent advise from this list last fall (or was it last summer?). However, I have one issue I haven't been able to figure out: How do I restrict mail reception only to certain accounts from external sources? The syst

Re: Unknown mail transport error (injection only)

2009-06-21 Thread Magnus Bäck
On Sunday, June 21, 2009 at 21:12 CEST, Ville Walveranta wrote: > I'm finally implementing into production the systems for which I got > excellent advise from this list last fall (or was it last summer?). > However, I have one issue I haven't been able to figure out: How do > I restrict mail

Best combinations

2009-06-21 Thread The Doctor
What is the best internediary for postfix ClamAV Spamassassin tnef and Blacklisting phishers ?? -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Beware Anti-Christ rising! Never Satan President Republic! Rudeness is the weak man's imitat

Re: Best combinations

2009-06-21 Thread Joe Sloan
The Doctor wrote: What is the best internediary for postfix ClamAV Spamassassin tnef and Blacklisting phishers I like maia mailguard - http://maiamailguard.com/maia/wiki It's based on amavisd-new, spamassassin, clamav, apache and mysql. We use maia for 15k users at a large company near L

Re: restrict external host

2009-06-21 Thread K bharathan
it did n't work with changes in mynetworks if i elaborate the setup, it's like the following: main external relay -> internal relay(internal-192.168.100.0/24) -> finally mails reach exchange (192.168.100.122) i want internal relay should not receive any mails other than from external relay th

Re: Best combinations

2009-06-21 Thread Noel Jones
The Doctor wrote: What is the best internediary for postfix ClamAV Spamassassin tnef and Blacklisting phishers ?? I like amavisd-new for interfacing postfix with spamassassin & clamav. There are several unrelated projects (mostly dead) with some variation of "amavis" in the name, be sure

Re: restrict external host

2009-06-21 Thread Noel Jones
K bharathan wrote: it did n't work with changes in mynetworks if i elaborate the setup, it's like the following: main external relay -> internal relay(internal-192.168.100.0/24) -> finally mails reach exchange (192.168.100.122) i want internal relay should not receive any mails other than f

Re: restrict external host

2009-06-21 Thread Ville Walveranta
Or, if you want to have one "regular" interface and one "restricted" (to receive email only from the primary relay), you could use the following: In master.cf: #standard port 25 smtp inet n - n - - smtpd #restricted interface to receive email only from specif

Re: Best combinations

2009-06-21 Thread The Doctor
On Sun, Jun 21, 2009 at 01:53:29PM -0700, Joe Sloan wrote: > The Doctor wrote: >> What is the best internediary for >> >> postfix >> ClamAV >> Spamassassin >> tnef and >> Blacklisting phishers >> >> > > I like maia mailguard - http://maiamailguard.com/maia/wiki > > It's based on amavisd-new, spa

Re: Best combinations

2009-06-21 Thread The Doctor
On Sun, Jun 21, 2009 at 05:50:27PM -0500, Noel Jones wrote: > The Doctor wrote: >> What is the best internediary for >> >> postfix >> ClamAV >> Spamassassin >> tnef and >> Blacklisting phishers >> >> ?? >> > > I like amavisd-new for interfacing postfix with spamassassin & clamav. > There are seve

Re: Best combinations

2009-06-21 Thread Joe Sloan
The Doctor wrote: On Sun, Jun 21, 2009 at 01:53:29PM -0700, Joe Sloan wrote: The Doctor wrote: What is the best internediary for postfix ClamAV Spamassassin tnef and Blacklisting phishers I like maia mailguard - http://maiamailguard.com/maia/wiki It's based on amavisd-new,

A few postfix issues - LDAP / anvil and sasl?

2009-06-21 Thread Evan Platt
My setup is I get my mail from a relay host - they perform A/V and anti spam. So if I can set up a ldap server, they can query for valid domains. I've recompiled postfix with ldap support (I hope!), but it doesn't appear postfix is using the aliases in my ldap. My setup is I have one mailbox o

Re: A few postfix issues - LDAP / anvil and sasl?

2009-06-21 Thread Evan Platt
I should add - this is a OS/X 10.4 box if that makes a difference (workstation). - Original Message From: Evan Platt To: postfix-users@postfix.org Sent: Sunday, June 21, 2009 6:38:24 PM Subject: A few postfix issues - LDAP / anvil and sasl? My setup is I get my mail from a relay hos

Reporting Connection Attempts back to originators ISP

2009-06-21 Thread Justin C. Le Grice
I'm sorry if this has already been done to death but I have searched high and low and have found scant discussion of this. I have been running Postfix for three weeks now and have reduced spam to just one or two messages getting through a day. I have implemented recommended anti spam settings f

Re: Reporting Connection Attempts back to originators ISP

2009-06-21 Thread EASY steve.h...@digitalcertainty.co.uk
On Mon, 2009-06-22 at 15:30 +1200, Justin C. Le Grice wrote: > I'm sorry if this has already been done to death but I have searched > high and low and have found scant discussion of this. > > I have been running Postfix for three weeks now and have reduced spam to > just one or two messages gett

Re: restrict external host

2009-06-21 Thread K bharathan
it's working i've been always a reader of this list. before i pose a question, i understand, i've to be well grounded on postfix ; these ingenuities r not comparable; great! to begin with i've started with 'the book of postfix' thanks everybody On Mon, Jun 22, 2009 at 1:25 AM, Ville Walveranta

Weird SASL error/warning

2009-06-21 Thread The Doctor
Right, I find in my log: Jun 21 22:22:51 incoming postfix/smtpd[10649]: warning: smtpd_sasl_auth_enable is true, but SASL support is not compiled in Yes I did compile as follows: make tidy; make makefiles CCARGS="-DUSE_SASL_AUTH -DUSE_CYRUS_SASL -DUSE_TLS -I/usr/contrib/include/ -I/usr/co

Re: Unknown mail transport error (injection only)

2009-06-21 Thread Ville Walveranta
Thanks for that information! It pointed me to the right direction. Yes, I was using "accounts" and "addresses" interchangeably because I wanted to be able to control both. In other words, there are both actual accounts (virtual and UNIX) and addresses (aliases) that either need to be accessible pub