fatal: pipe_command: execvp

2009-07-09 Thread Wim Groen
Hi, I've got a postfix server with spamassassin running. If one of my customers is on vacation he can turn on auto reply. For this I created a script /usr/local/bin/responder. It always worked but the last days it is stopped. I get the following error in the maillog: status=deferred (temporary fa

TLS handshake failed

2009-07-09 Thread Rocco Scappatura
Hello, a user of my mail gateway has got the following messages while have tried to send a message to ,: - Original Message - From: "Mail Delivery Subsystem" To: Sent: Tuesday, July 07, 2009 12:52 AM Subject: Warning: could not send message for past 4 hours > *

Re: TLS handshake failed

2009-07-09 Thread Charles Marcus
On 7/9/2009, Rocco Scappatura (rocco.scappat...@infracom.it) wrote: > # postconf -d | grep tls ? This shows defaults... please use postconf -n output - and no need to filter it, it won't (shouldn't) be all that long... -- Best regards, Charles

Re: fatal: pipe_command: execvp

2009-07-09 Thread Wietse Venema
Wim Groen: > Hi, > > I've got a postfix server with spamassassin running. If one of my > customers is on vacation he can turn on auto reply. For this I created a > script /usr/local/bin/responder. > It always worked but the last days it is stopped. I get the following > error in the maillog: > st

Re: TLS handshake failed

2009-07-09 Thread Wietse Venema
Rocco Scappatura: > # postconf -d | grep tls What web page is telling you to use "postconf -d" for trouble shooting? It should say "postconf -n" instead. Wietse

RE: TLS handshake failed

2009-07-09 Thread Rocco Scappatura
Thanks, > -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Charles Marcus > Sent: Thursday, July 09, 2009 12:43 PM > To: postfix-users@postfix.org > Subject: Re: TLS handshake failed > > On 7/9/2009, Rocco Scappatura (rocc

RE: TLS handshake failed

2009-07-09 Thread Rocco Scappatura
Hello, > -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Wietse Venema > Sent: Thursday, July 09, 2009 12:47 PM > To: Postfix users > Subject: Re: TLS handshake failed > > Rocco Scappatura: > > # postconf -d | grep tls >

RE: fatal: pipe_command: execvp

2009-07-09 Thread Wim Groen
Hi Wietse, I don't use AppArmor and i disabled SELinux but it didn't helped. Kind Regards, Wim Wim Groen: > Hi, > > I've got a postfix server with spamassassin running. If one of my > customers is on vacation he can turn on auto reply. For this I created > a script /usr/local/bin/responde

Re: fatal: pipe_command: execvp

2009-07-09 Thread Victor Duchovni
On Thu, Jul 09, 2009 at 09:17:20AM +0200, Wim Groen wrote: > This is the master.cf: > vacationunix- n n - - pipe > flags=FRq user=vmail argv=/usr/local/bin/responder ${sender} > ${recipient} > > When I look at the file it looks good: > -rwxr-xr-x 1 ro

Re: TLS handshake failed

2009-07-09 Thread Victor Duchovni
On Thu, Jul 09, 2009 at 10:11:26AM +0200, Rocco Scappatura wrote: > Hello, > > a user of my mail gateway has got the following messages while have > tried to send a message to > ,: > > - Original Message - > From: "Mail Delivery Subsystem" > To: > Sent: Tuesday, July 07, 2009 12:52 AM

RE: TLS handshake failed

2009-07-09 Thread Rocco Scappatura
Thanks Victor, > -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Victor Duchovni > Sent: Thursday, July 09, 2009 2:11 PM > To: postfix-users@postfix.org > Subject: Re: TLS handshake failed > > On Thu, Jul 09, 2009 at 10:1

safe etrn

2009-07-09 Thread Andre Hübner
Hello, i try to set up safe etrn. i use in main.cf smtpd_etrn_restrictions = check_etrn_access hash:/etc/postfix/etrn-domains reject if etrn-domain is found /etc/postfix/etrn-domains returns name of 2nd restriction which checks by check_client_access other file for clientip and returns ok if

smtpd_*_restrictions

2009-07-09 Thread Jon
Looking for some clarification to help me understand. Are smtpd_*_restrictions processed in this order: smtpd_client_restrictions smtpd_helo_restrictions smtpd_sender_restrictions smtpd_recipient_restrictions smtpd_data_restrictions If these restriction mechanisms share a common has

Re: safe etrn

2009-07-09 Thread Wietse Venema
Andre H?bner: > Hello, > > i try to set up safe etrn. > i use in main.cf > > smtpd_etrn_restrictions = check_etrn_access hash:/etc/postfix/etrn-domains > reject > > if etrn-domain is found /etc/postfix/etrn-domains returns name of 2nd > restriction which checks by check_client_access other fil

Re: safe etrn

2009-07-09 Thread Thomas Gelf
Andre Hübner wrote: > setup works but there is still security-problem that a client ip which > is allowed for etrn is requesting mails for other domain. > is there a combination of restrictions to make it safe or is an own > policy-service better solution? As of ETRN works this is not to be consid

RE: Multiple Aliases Files - Same Domain

2009-07-09 Thread wiskbroom
> On Wed, Jul 08, 2009 at 04:04:33PM -0400, wiskbr...@hotmail.com wrote: > >> alias_maps = dbm:/etc/postfix/aliases, dbm:/etc/newcompany/aliases, >> nis:mail.aliases > > Are you sure you want a local aliases(5) file and not a virtual(5) aliases > file? Generally, and especially for non-system us

Re: smtpd_*_restrictions

2009-07-09 Thread Robert Lopez
On Thu, Jul 9, 2009 at 8:28 AM, Jon wrote: > Looking for some clarification to help me understand. Are > smtpd_*_restrictions processed in this order: > >  smtpd_client_restrictions >  smtpd_helo_restrictions >  smtpd_sender_restrictions >  smtpd_recipient_restrictions >  smtpd_data_restrictions >

Re: smtpd_*_restrictions

2009-07-09 Thread Brian Evans - Postfix List
Jon wrote: > Looking for some clarification to help me understand. Are > smtpd_*_restrictions processed in this order: > > smtpd_client_restrictions > smtpd_helo_restrictions > smtpd_sender_restrictions > smtpd_recipient_restrictions > smtpd_data_restrictions > > > > If these restriction

Re: smtpd_*_restrictions

2009-07-09 Thread Charles Marcus
On 7/9/2009, Robert Lopez (rlopez...@gmail.com) wrote: >> If these restriction mechanisms share a common hash file for their check, >> for example: >> >> /etc/postfix/main.cf >> ... >> smtpd_client_restrictions = check_client_access >> hash:/etc/postfix/access_hash ... >> ... >> smtpd_sender_rest

Re: Logging sender recipient pairs

2009-07-09 Thread brian moore
On Thu, 9 Jul 2009 09:25:40 +1000 Barney Desmond wrote: > I haven't done this myself, but I hear policy servers are quite > popular for this sort of thing (the usual question is how to setup > sending quotas for users, so this would be a slight modification). Yes, postfixpolicyd can do this. Th

unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Alban Deniz
Hello, I've implemented a milter (SNFMilter), and when I use it with postfix, and send postfix multiple messages over one SMTP connection, I get the following warning in the log file: Jun 18 10:32:58 skidmark postfix/smtpd[11622]: warning: milter unix:/snf- milter/socket: unexpected filter resp

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Wietse Venema
Alban Deniz: > Hello, > > I've implemented a milter (SNFMilter), and when I use it with postfix, and > send > postfix multiple messages over one SMTP connection, I get the following > warning > in the log file: > > Jun 18 10:32:58 skidmark postfix/smtpd[11622]: warning: milter unix:/snf- > mi

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Alban Deniz
On Thursday 09 July 2009 01:01:28 pm Wietse Venema wrote: > Alban Deniz: > > Hello, > > > > I've implemented a milter (SNFMilter), and when I use it with postfix, > > and send postfix multiple messages over one SMTP connection, I get the > > following warning in the log file: > > > > Jun 18 10:32:5

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Wietse Venema
Alban Deniz: > On Thursday 09 July 2009 01:01:28 pm Wietse Venema wrote: > > Alban Deniz: > > > Hello, > > > > > > I've implemented a milter (SNFMilter), and when I use it with postfix, > > > and send postfix multiple messages over one SMTP connection, I get the > > > following warning in the log f

Mail sometimes is not delivered to one customer

2009-07-09 Thread Jakub Nadolny
Hi, I have repeating problem with delivering mail to one of our customers. It looks like e-mail stays endlessly in active queue. At first I've thought that it might be some network issue on customer side as my netstat shows something waits for a long time in Send-Q: tcp0 86284 myserver:4

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Alban Deniz
On Thursday 09 July 2009 01:51:38 pm Wietse Venema wrote: > Alban Deniz: > > On Thursday 09 July 2009 01:01:28 pm Wietse Venema wrote: > > > Alban Deniz: > > > > Hello, > > > > > > > > I've implemented a milter (SNFMilter), and when I use it with > > > > postfix, and send postfix multiple messages

postfix and ldap alias users

2009-07-09 Thread Evan Platt
Thanks all for the previous help getting postfix up and running with ldap / tls.. Finally after I don't even know how many build attempts, ,it's up and running :) My setup is all mail is delivered from a mail host to my postfix from another server. They do ldap lookups which is working fine.

Re: smtpd_*_restrictions

2009-07-09 Thread Sahil Tandon
On Jul 9, 2009, at 10:28 AM, Jon wrote: Looking for some clarification to help me understand. Are smtpd_*_restrictions processed in this order: smtpd_client_restrictions smtpd_helo_restrictions smtpd_sender_restrictions smtpd_recipient_restrictions smtpd_data_restrictions The processi

policyd-weight and postgrey: which should work first?

2009-07-09 Thread Ignacio Garcia
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there. We use both postgrey and policyd-weight to block spam. policyd-weight checks against several RBL and DNSBL so each time a mail is received several queries are done in order to get a score. On the other side, we have a filter with postgrey th

Re: policyd-weight and postgrey: which should work first?

2009-07-09 Thread Michael Orlitzky
Ignacio Garcia wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there. We use both postgrey and policyd-weight to block spam. policyd-weight checks against several RBL and DNSBL so each time a mail is received several queries are done in order to get a score. On the other side, we have a

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Wietse Venema
Alban Deniz: > > Postfix receives the "add header" request when it reports a "mail > > from" command to the Milter. > > I'm not sure I understand--Doesn't postfix report a "mail from" command to the > Milter by invoking the xxfi_envfrom callback? As I understand it, that isn't > the end-of-messa

Re: Mail sometimes is not delivered to one customer

2009-07-09 Thread Wietse Venema
Jakub Nadolny: > Jul 8 12:43:33 zonk postfix/qmgr[7095]: DF7C21811E53: > from=, size=4254293, nrcpt=2 (queue active) > Jul 8 13:33:40 zonk postfix/qmgr[16317]: DF7C21811E53: skipped, still being > delivered > Jul 8 13:34:41 zonk postfix/qmgr[16317]: DF7C21811E53: skipped, still being > delive

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Wietse Venema
Alban Deniz: > It seems to me that if postfix is expecting an SMFIR_ADDHEADER > milter response after invoking the xxfi_envfrom application 1) Postfix does not invoke xxfi callbacks. Instead, Postfix sends messages to the milter application, where libmilter invokes the application callbacks. 2) P

Postfix and AUTH

2009-07-09 Thread Scott Haneda
Hello, I have been looking into this for the better part of today. I am using a proxy in front of postfix. In order to be able to AUTH a user through the proxy, the proxy needs the 250-AUTH credentials to show up. I discovered that mynetworks disables this for those hosts listed in myne

Re: Postfix and AUTH

2009-07-09 Thread Wietse Venema
Scott Haneda: > Hello, I have been looking into this for the better part of today. I > am using a proxy in front of postfix. In order to be able to AUTH a > user through the proxy, the proxy needs the 250-AUTH credentials to > show up. > > I discovered that mynetworks disables this for tho

Re: Logging sender recipient pairs

2009-07-09 Thread Sahil Tandon
On Thu, 09 Jul 2009, brian moore wrote: > > I haven't done this myself, but I hear policy servers are quite > > popular for this sort of thing (the usual question is how to setup > > sending quotas for users, so this would be a slight modification). > > Yes, postfixpolicyd can do this. > > The r