Re: offer starttls only on port 587

2009-07-12 Thread Robert Schetterer
Bradley Giesbrecht schrieb: > How can I offer starttls on port 587 and not port 25? > > I've tried moving the tls statements from main.cf to master.cf under 587 > but postfix is still offering tls on port 25. > > > Thanks, > Bradley Giesbrecht Hi, what have you tried something like this in maste

reject mail without valid MX

2009-07-12 Thread Keld Jørn Simonsen
Hi I am fooling around with my postfix, and I wanted to reject mail without a valid MX record. How to do that? I tried smtpd_sender_restrictions = check_sender_mx_access cidr:/etc/postfix/mxaccess With a file /etc/postfix/mxaccess having the following contents: 64.94.110/24REJECT Verisi

Re: reject mail without valid MX

2009-07-12 Thread Magnus Bäck
On Sunday, July 12, 2009 at 11:37 CEST, Keld Jørn Simonsen wrote: > I am fooling around with my postfix, and I wanted to reject mail > without a valid MX record. How to do that? Don't do that. MX records are not required, and you will reject legitimate email. If the MX record isn't present,

reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Keld Jørn Simonsen
Hi More fooling around with postfix, Using in main.cf smtpd_sender_restrictions = reject_unknown_reverse_client_hostname did not do what I expected: from the /var/log/mail/info file: Jul 12 09:12:48 rap postfix/smtpd[6597]: NOQUEUE: reject: RCPT from unknown[92.45.179.70]: 450 4.7.1 Client h

Re: reject mail without valid MX

2009-07-12 Thread Keld Jørn Simonsen
On Sun, Jul 12, 2009 at 11:41:51AM +0200, Magnus Bäck wrote: > On Sunday, July 12, 2009 at 11:37 CEST, > Keld Jørn Simonsen wrote: > > > I am fooling around with my postfix, and I wanted to reject mail > > without a valid MX record. How to do that? > > Don't do that. MX records are not requ

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Ole Tange
2009/7/12 Keld Jørn Simonsen : > from the /var/log/mail/info file: > > Jul 12 09:12:48 rap postfix/smtpd[6597]: NOQUEUE: reject: RCPT from > unknown[92.45.179.70]: 450 4.7.1 Client host rejected: cannot find your > reverse hostname , [92.45.179.70]; from= > to= proto=ESMTP helo= > > I then used

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Keld Jørn Simonsen
On Sun, Jul 12, 2009 at 11:55:36AM +0200, Ole Tange wrote: > 2009/7/12 Keld Jørn Simonsen : > > > from the /var/log/mail/info file: > > > > Jul 12 09:12:48 rap postfix/smtpd[6597]: NOQUEUE: reject: RCPT from > > unknown[92.45.179.70]: 450 4.7.1 Client host rejected: cannot find your > > reverse

Re: offer starttls only on port 587

2009-07-12 Thread Gerard
On Sat, 11 Jul 2009 20:34:01 -0400 (EDT) wie...@porcupine.org (Wietse Venema) wrote: > Bradley Giesbrecht: > > How can I offer starttls on port 587 and not port 25? > > > > I've tried moving the tls statements from main.cf to master.cf > > under 587 but postfix is still offering tls on port 25. >

Re: reject mail without valid MX

2009-07-12 Thread Magnus Bäck
On Sunday, July 12, 2009 at 11:52 CEST, Keld Jørn Simonsen wrote: > On Sun, Jul 12, 2009 at 11:41:51AM +0200, Magnus Bäck wrote: > > > Don't do that. MX records are not required, and you will reject > > legitimate email. If the MX record isn't present, an MTA should > > use the A record. >

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Magnus Bäck
On Sunday, July 12, 2009 at 12:07 CEST, Keld Jørn Simonsen wrote: > On Sun, Jul 12, 2009 at 11:55:36AM +0200, Ole Tange wrote: > > > Notice how you get a 4xx error code. It may simply be your > > nameserver did not get an answer quickly enough. Indeed, but 450 is on the other hand the defau

Re: reject mail without valid MX

2009-07-12 Thread Keld Jørn Simonsen
On Sun, Jul 12, 2009 at 12:09:15PM +0200, Magnus Bäck wrote: > On Sunday, July 12, 2009 at 11:52 CEST, > Keld Jørn Simonsen wrote: > > > On Sun, Jul 12, 2009 at 11:41:51AM +0200, Magnus Bäck wrote: > > > > > Don't do that. MX records are not required, and you will reject > > > legitimate ema

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Wolfgang Zeikat
Magnus Bäck wrote: Anyway asy70.asy179.tellcom.com.tr is a NXdomain. So maybe postfix tries to look up the name it got from the PTR. reject_unknown_reverse_client_hostname only checks that the PTR lookups succeeds, it doesn't care about the lookup result like reject_unknown_client_hostname doe

Re: reject mail without valid MX

2009-07-12 Thread Wolfgang Zeikat
Keld Jørn Simonsen wrote: I am fooling around with my postfix, and I wanted to reject mail without a valid MX record. How to do that? Don't do that. MX records are not required, and you will reject legitimate email. That sounds reasonable. Yes it is understood that the RFCs do not require M

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Wietse Venema
Keld J?rn Simonsen: > Hi > > More fooling around with postfix, > > Using in main.cf > > smtpd_sender_restrictions = reject_unknown_reverse_client_hostname > > did not do what I expected: > > from the /var/log/mail/info file: > > Jul 12 09:12:48 rap postfix/smtpd[6597]: NOQUEUE: reject: RCPT f

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Keld Jørn Simonsen
On Sun, Jul 12, 2009 at 08:15:11AM -0400, Wietse Venema wrote: > Keld Jørn Simonsen: > > Hi > > > > More fooling around with postfix, > > > > Using in main.cf > > > > smtpd_sender_restrictions = reject_unknown_reverse_client_hostname > > > > did not do what I expected: > > > > from the /var/lo

Re: Errors after upgrades

2009-07-12 Thread Sahil Tandon
On Sat, 11 Jul 2009, LuKreme wrote: > I updated my ports of mysql to 5.1.35 and of postfix to 2.6.2. > Everything seems to be working fine, except I get these errors > occasionally: > > postfix/trivial-rewrite[65905]: fatal: proxy:mysql:/usr/local/etc/ > postfix/mysql_virtual_domains_maps.cf(

Re: Allow a group of unauthenticated senders

2009-07-12 Thread Sahil Tandon
On Sat, 11 Jul 2009, priscilla wrote: [Please *never* send HTML mail to this list] > priscilla wrote: > > Is it possible to allow a group of unauthenticated senders while other > senders are authenticated. > > Yes, maybe. > > How do you intend to identify these senders? > > Also clarify

Re: reject mail without valid MX

2009-07-12 Thread Benny Pedersen
On Sun, July 12, 2009 11:52, Keld Jørn Simonsen wrote: > Yes it is understood that the RFCs do not require MX for mail. > But how many legitimate mails do not have MX? stats are stats, show me the logs :) mx is not a requirement, a will do reject_unknown_sender_domain will test both imho -- x

Re: reject mail without valid MX

2009-07-12 Thread Ralf Hildebrandt
* Keld Jørn Simonsen : > Hi > > I am fooling around with my postfix, and I wanted to reject mail without > a valid MX record. How to do that? reject_unknown_sender_domain -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Fran

Re: offer starttls only on port 587

2009-07-12 Thread Bradley Giesbrecht
On Jul 12, 2009, at 1:31 AM, Robert Schetterer wrote: Bradley Giesbrecht schrieb: How can I offer starttls on port 587 and not port 25? I've tried moving the tls statements from main.cf to master.cf under 587 but postfix is still offering tls on port 25. Thanks, Bradley Giesbrecht Hi, w

Re: reject mail without valid MX

2009-07-12 Thread Keld Jørn Simonsen
On Sun, Jul 12, 2009 at 05:45:37PM +0200, Ralf Hildebrandt wrote: > * Keld Jørn Simonsen : > > Hi > > > > I am fooling around with my postfix, and I wanted to reject mail without > > a valid MX record. How to do that? > > reject_unknown_sender_domain That does not reject mail, if the A record is

Re: reject mail without valid MX

2009-07-12 Thread J.D. Bronson
Keld Jørn Simonsen wrote: On Sun, Jul 12, 2009 at 05:45:37PM +0200, Ralf Hildebrandt wrote: * Keld Jørn Simonsen : Hi I am fooling around with my postfix, and I wanted to reject mail without a valid MX record. How to do that? reject_unknown_sender_domain Maybe this idea??? %cat mx_access

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Benny Pedersen
On Sun, July 12, 2009 11:48, Keld Jørn Simonsen wrote: > 70.179.45.92.in-addr.arpa domain name pointer asy70.asy179.tellcom.com.tr > And this means that there is a PTR RR. correct dig asy70.asy179.tellcom.com.tr gives the reverse ip ? :) (92.45.179.70) > Can it be something about postfix not s

Re: Running out of mail queue space encountered - need help analyzing logs

2009-07-12 Thread Charles Marcus
On 7/11/2009, Kenneth Stephen (marvin.the.cynical.ro...@gmail.com) wrote: > I'm interpreting the "warning: not enough free space in mail queue: > x bytes" message as postfix telling me that there are x bytes free on > the filesystem. I can see that this number decreasing between 2AM > (approx 15MB

Re: offer starttls only on port 587

2009-07-12 Thread Victor Duchovni
On Sun, Jul 12, 2009 at 10:31:58AM +0200, Robert Schetterer wrote: > Hi, what have you tried something like this in master.cf ? > > submission inetn - n - 100 smtpd > -o smtpd_etrn_restrictions=reject > -o smtpd_tls=yes > -o smtpd_sasl_auth_enable=yes >

Re: offer starttls only on port 587

2009-07-12 Thread etorres
as > On Sun, Jul 12, 2009 at 10:31:58AM +0200, Robert Schetterer wrote: > >> Hi, what have you tried something like this in master.cf ? >> >> submission inetn - n - 100 smtpd >> -o smtpd_etrn_restrictions=reject >> -o smtpd_tls=yes >> -o smtpd_sasl_auth_ena

Re: offer starttls only on port 587

2009-07-12 Thread Bradley Giesbrecht
On Jul 12, 2009, at 12:11 PM, etor...@dap.es wrote: as On Sun, Jul 12, 2009 at 10:31:58AM +0200, Robert Schetterer wrote: Hi, what have you tried something like this in master.cf ? submission inetn - n - 100 smtpd -o smtpd_etrn_restrictions=reject -o sm

Re: reject mail without valid MX

2009-07-12 Thread Ralf Hildebrandt
* Keld Jørn Simonsen : > On Sun, Jul 12, 2009 at 05:45:37PM +0200, Ralf Hildebrandt wrote: > > * Keld Jørn Simonsen : > > > Hi > > > > > > I am fooling around with my postfix, and I wanted to reject mail without > > > a valid MX record. How to do that? > > > > reject_unknown_sender_domain > > Th

Re: TLS library problems

2009-07-12 Thread Scott Haneda
On Jul 10, 2009, at 4:42 PM, Sahil Tandon wrote: On Fri, 10 Jul 2009, Scott Haneda wrote: system.log:Jul 10 00:07:57 trex postfix/smtpd[45598]: warning: TLS library problem: 45598:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:571: Debug the proxy. What is it

Milter Reject on Yahoo Mail

2009-07-12 Thread Chris Babcock
Just before the fourth of July weekend, Yahoo made some changes with their mail configuration. At which point my postscript install started rejecting Yahoo and BTI mail as follows: # grep B74659480C9: /var/log/maillog Jul 12 15:09:23 cl-t090-563cl postfix-ak/smtpd[14148]: B74659480C9: client=web3

Re: Running out of mail queue space encountered - need help analyzing logs

2009-07-12 Thread Sahil Tandon
On Sat, 11 Jul 2009, Kenneth Stephen wrote: > Jul 11 05:30:51 rust mail:warn|warning postfix/smtpd[585982]: warning: > not enough free space in mail queue: 4345856 bytes < 1.5*message size > limit > Jul 11 05:30:52 rust mail:warn|warning postfix/smtpd[438490]: warning: > not enough free space in m

Re: TLS library problems

2009-07-12 Thread Scott Haneda
On Jul 11, 2009, at 6:40 PM, Barney Desmond wrote: 2009/7/11 Wietse Venema : system.log:Jul 10 00:07:57 trex postfix/smtpd[45598]: warning: TLS library problem: 45598:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:571: This is openssl's way of saying that the c

Re: TLS library problems

2009-07-12 Thread Wietse Venema
Scott Haneda: > Thanks for the estimation. Comparing a working transaction with one > that does not work, shows no difference. The one part I need even > more debug log data, only states "start tls" and then "failure". I > somehow need to get to the data that happens between those two log

Re: reject mail without valid MX

2009-07-12 Thread Keld Jørn Simonsen
On Sun, Jul 12, 2009 at 09:14:53PM +0200, Ralf Hildebrandt wrote: > * Keld Jørn Simonsen : > > On Sun, Jul 12, 2009 at 05:45:37PM +0200, Ralf Hildebrandt wrote: > > > * Keld Jørn Simonsen : > > > > Hi > > > > > > > > I am fooling around with my postfix, and I wanted to reject mail without > > > >

Re: Milter Reject on Yahoo Mail

2009-07-12 Thread Noel Jones
Chris Babcock wrote: Just before the fourth of July weekend, Yahoo made some changes with their mail configuration. At which point my postscript install started rejecting Yahoo and BTI mail as follows: # grep B74659480C9: /var/log/maillog Jul 12 15:09:23 cl-t090-563cl postfix-ak/smtpd[14148]: B7

Re: reject mail without valid MX

2009-07-12 Thread Noel Jones
Keld Jørn Simonsen wrote: But I would like to try out seeing what effect rejecting mail without a MX RR wil have. Can I do that in postfix, possibly by specifying something in the file for check_sender_mx_access . I did google for it. No, postfix has no built-in function for this. You can use

Re: Milter Reject on Yahoo Mail

2009-07-12 Thread Sahil Tandon
On Sun, 12 Jul 2009, Chris Babcock wrote: > Just before the fourth of July weekend, Yahoo made some changes with > their mail configuration. At which point my postscript install started > rejecting Yahoo and BTI mail as follows: > > # grep B74659480C9: /var/log/maillog > Jul 12 15:09:23 cl-t090-5

Re: reject mail without valid MX

2009-07-12 Thread Noel Jones
Wolfgang Zeikat wrote: Anyway: IMHO, a "valid" MX record should be a fully qualified domain name (FQDN) which would contain at least two characters from the alphabet [a-z] in the top level domain at the end of the record. So maybe you could use a regexp table to check for those: !/[a-z][a-z]$/

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Noel Jones
Keld Jørn Simonsen wrote: Is it true that if a PTR was found, then this name would be displayed in the above log message, and not the IP number? No, the name will still be "unknown" if the hostname->IP lookup fails. Anyway, can you confirm that there is no check on availablilty of the dom

Re: TLS library problems

2009-07-12 Thread Scott Haneda
On Jul 12, 2009, at 1:07 PM, Wietse Venema wrote: Scott Haneda: Thanks for the estimation. Comparing a working transaction with one that does not work, shows no difference. The one part I need even more debug log data, only states "start tls" and then "failure". I somehow need to get to the

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Keld Jørn Simonsen
On Sun, Jul 12, 2009 at 03:20:21PM -0500, Noel Jones wrote: > Keld Jørn Simonsen wrote: >> >> Is it true that if a PTR was found, then this name would be displayed in >> the above log message, and not the IP number? > > No, the name will still be "unknown" if the hostname->IP lookup fails. OK. > >

Re: reject mail without valid MX

2009-07-12 Thread Sahil Tandon
On Sun, 12 Jul 2009, Noel Jones wrote: > Keld Jørn Simonsen wrote: >> But I would like to try out seeing what effect rejecting mail without a >> MX RR wil have. Can I do that in postfix, possibly by specifying >> something in the file for check_sender_mx_access . I did google for it. > > No, postf

Re: reject_unknown_reverse_client_hostname rejects even if PTR RR is found

2009-07-12 Thread Sahil Tandon
On Sun, 12 Jul 2009, Keld Jørn Simonsen wrote: > >> Anyway if it is a name server timeout, then I think this is always > >> handled by a 450 response. In my case the mail was rejected. > > > > Yes, temporary errors always get a 450 response. > > Then I do not understand why the message was reject

SOLVED (Probably) Re: Milter Reject on Yahoo Mail

2009-07-12 Thread Chris Babcock
On Sun, 12 Jul 2009 15:12:24 -0500 Noel Jones wrote: > Yes, the message was rejected by your DKIM policy action. The > postfix default_milter_action only triggers when the milter > cannot be contacted. If you want to accept mail that fails > DKIM, see the dkim-filter documentation. I sent a

SASL trouble

2009-07-12 Thread Postfix
Hi, I have a strange problem getting postfix to work with sasl. I am using Debian Etch. I have gotten everyting to work fine on a redhat system. I installed the sasl2- debian packages. I have compiled with use_sasl_auth use_cyrus_sasl I have tried with the dovecot version. (all as shown in

Re: offer starttls only on port 587

2009-07-12 Thread Robert Schetterer
Victor Duchovni schrieb: > On Sun, Jul 12, 2009 at 10:31:58AM +0200, Robert Schetterer wrote: > >> Hi, what have you tried something like this in master.cf ? >> >> submission inetn - n - 100 smtpd >> -o smtpd_etrn_restrictions=reject >> -o smtpd_tls=yes >>

Re: TLS library problems

2009-07-12 Thread Wietse Venema
Scott Haneda: > On Jul 12, 2009, at 1:07 PM, Wietse Venema wrote: > > > Scott Haneda: > >> Thanks for the estimation. Comparing a working transaction with one > >> that does not work, shows no difference. The one part I need even > >> more debug log data, only states "start tls" and then "failur

Re: offer starttls only on port 587

2009-07-12 Thread Wietse Venema
Robert Schetterer: > Victor Duchovni schrieb: > > On Sun, Jul 12, 2009 at 10:31:58AM +0200, Robert Schetterer wrote: > > > >> Hi, what have you tried something like this in master.cf ? > >> > >> submission inetn - n - 100 smtpd > >> -o smtpd_etrn_restrictions=

Re: offer starttls only on port 587

2009-07-12 Thread Robert Schetterer
Wietse Venema schrieb: > Robert Schetterer: >> Victor Duchovni schrieb: >>> On Sun, Jul 12, 2009 at 10:31:58AM +0200, Robert Schetterer wrote: >>> Hi, what have you tried something like this in master.cf ? submission inetn - n - 100 smtpd -o

Re: SASL trouble

2009-07-12 Thread Patrick Ben Koetter
* Postfix : > Hi, > I have a strange problem getting postfix to work with sasl. I am using Debian > Etch. > > I have gotten everyting to work fine on a redhat system. > > I installed the sasl2- debian packages. > > I have compiled with use_sasl_auth use_cyrus_sasl > > I have tried with the do

Re: Errors after upgrades

2009-07-12 Thread LuKreme
On Jul 12, 2009, at 8:41 AM, Sahil Tandon wrote: Sounds like a MySQL (not Postfix) issue; debug there. Are there any other type of mysql error lines in the log? Nope, and the errors are rare. OTOH, I use MySQL almost exclusively for postfix.

Need help munging inbound recipient address

2009-07-12 Thread Daniel L'Hommedieu
Greetings, all. I'm having trouble with a forwarded email setup, and I need to munge an inbound recipient address. Here's what I have set up: f...@bar.edu is forwarded to o...@rab.net. bar.edu is running GroupWise as its email server, and GroupWise munges the recipient address for forwarde