Re: How to setup postfix to have port 25 for receive only

2009-07-28 Thread Zbyszek
Magnus Bäck pisze: On Monday, July 27, 2009 at 10:56 CEST, Zbyszek wrote: I googled everywhere, read how-tos but can not find solution for simple problem in postfix: I would like to have such config: - smtp25/tcp; only server-server communication, only mail receive for

Problem sending mail from outside permit_mynetworks

2009-07-28 Thread Hervé Hénoch
1) I want to use sasl in order to send mail outside my LAN. The authentification run well. But I was stopped by zen.spamhaus.org because my FAI have registered dynamic adresses in this site. I don't understand why because permit_sasl_authenticated is always the second line !!! 2) The sa

Re: Problem sending mail from outside permit_mynetworks

2009-07-28 Thread Magnus Bäck
On Tuesday, July 28, 2009 at 12:11 CEST, Hervé Hénoch wrote: > 1) I want to use sasl in order to send mail outside my LAN. The > authentification run well. But I was stopped by zen.spamhaus.org > because my FAI have registered dynamic adresses in this site. Not a problem if permit_sasl_auth

spoofed mails from backup mail server

2009-07-28 Thread itsramesh_s
Hi, I have configured backup mail server for our primary mail server. i am getting lot of spam with spoofed email ids from our domain. i noticed in header all these are accepting from backup mail server. primary mail server discarding spoofed mails. #postcon -n alias_database = hash:/etc/alia

Re: spoofed mails from backup mail server

2009-07-28 Thread Magnus Bäck
On Tuesday, July 28, 2009 at 12:54 CEST, itsramesh_s wrote: > I have configured backup mail server for our primary mail server. > i am getting lot of spam with spoofed email ids from our domain. > i noticed in header all these are accepting from backup mail server. > primary mail server di

Re: Address rewriting to include GECOS

2009-07-28 Thread Wietse Venema
Olivier Nicole: > Hi, > > I read and re-read the address-rewriting readme and coul dnot find any > indication on the way to rewrite addresses to include GECOS > information: > > o...@cs.ait.ac.th => Olivier Nicole Display names are the responsibility of the mail user agent. > Is that possible

Re: spoofed mails from backup mail server

2009-07-28 Thread LuKreme
On Jul 28, 2009, at 4:54 AM, itsramesh_s wrote: I have configured backup mail server for our primary mail server. Almost certainly a mistake. i am getting lot of spam with spoofed email ids from our domain. That's one reason why. i noticed in header all these are accepting from backup m

Need Outbound Only

2009-07-28 Thread wiskbroom
Hallo; I would like to configure postfix to send whatever is in its queue to whatever is setup as smarthost, but *NOT* listen for incoming mail; this particular server is not a mail relay and I do not want to allow it to be an open relay. Anything I must specifically perform? Thanks many, .v

Re: Need Outbound Only

2009-07-28 Thread Serge Fonville
Hi, > I would like to configure postfix to send whatever is in its queue to > whatever is setup as smarthost, but *NOT* listen for incoming mail; this > particular server is not a mail relay and I do not want to allow it to be an > open relay. Start by looking here: http://groups.google.com/gr

RE: Need Outbound Only

2009-07-28 Thread wiskbroom
Thanks Serge, my needs are different. What I've done so far was the following: myhostname = nonrelayhost.example.com mynetworks = 127.0.0.0/8, 192.168.100.10/32 # Or, this? # mynetworks = 127.0.0.0/8, $myhostname The above might work, but would still require manually masagging the file, I am

Need Outbound Only

2009-07-28 Thread Serge Fonville
> Thanks Serge, my needs are different.  What I've done so far was the > following: > > myhostname = nonrelayhost.example.com > mynetworks = 127.0.0.0/8, 192.168.100.10/32 > > # Or, this? > # mynetworks = 127.0.0.0/8, $myhostname If you just want to block incoming mails from outside your network

Re: Need Outbound Only

2009-07-28 Thread Noel Jones
wiskbr...@hotmail.com wrote: Thanks Serge, my needs are different. What I've done so far was the following: myhostname = nonrelayhost.example.com mynetworks = 127.0.0.0/8, 192.168.100.10/32 # Or, this? # mynetworks = 127.0.0.0/8, $myhostname The above might work, but would still require manua

Re: Need Outbound Only

2009-07-28 Thread Serge Fonville
> To turn off incoming mail completely, comment out the > "smtp ... smtpd" service in master.cf. Wouldn't that completely disable smtp then?

Re: Need Outbound Only

2009-07-28 Thread Ralf Hildebrandt
* Serge Fonville : > > To turn off incoming mail completely, comment out the > > "smtp ... smtpd" service in master.cf. > > Wouldn't that completely disable smtp then? Incoming, yes. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus B

Re: Need Outbound Only

2009-07-28 Thread Serge Fonville
> * Serge Fonville : >> > To turn off incoming mail completely, comment out the >> > "smtp ... smtpd" service in master.cf. >> >> Wouldn't that completely disable smtp then? > > Incoming, yes. Perhaps I misunderstood then, but when would a mail be send then if it can't listen to SMTP requests? To m

Re: Need Outbound Only

2009-07-28 Thread Ralf Hildebrandt
* Serge Fonville : > > * Serge Fonville : > >> > To turn off incoming mail completely, comment out the > >> > "smtp ... smtpd" service in master.cf. > >> > >> Wouldn't that completely disable smtp then? > > > > Incoming, yes. > Perhaps I misunderstood then, but when would a mail be send then if it

RE: Need Outbound Only

2009-07-28 Thread wiskbroom
Thanks all; Instead of locking down access to smtpd for loopback and local IP address, I've simply commented out smtpd, but not smtp, it works! Thanks, .vp > From: ralf.hildebra...@charite.de > > * Serge Fonville : >>> * Serge Fonville : > To turn off incoming mail completely, comment

Postfix TLS and CRL?

2009-07-28 Thread Ralf Hildebrandt
Does Postfix support/use CRLs? I found some articles like http://www.irbs.net/internet/postfix/0706/0304.html but I have yet to find something more recnt. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgd

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread LuKreme
On Jul 27, 2009, at 11:18 AM, /dev/rob0 wrote: To name one, I tried to get automobile insurance with GEICO, a large insurer in the USA. If I had access to my old virtual_alias_maps I could find many more who rejected the "+". AT&T, Coca Cola, nearly every bank or any site for a company that is

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread LuKreme
On Jul 27, 2009, at 11:56 AM, Martijn de Munnik wrote: I guess I need prohibit the catch all account and offer the solution with the delimiter instead. That way all spam to bogus email addresses get rejected because the address does not exist. That is the best course, yes. But still I wonde

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread Sahil Tandon
On Jul 28, 2009, at 2:05 PM, LuKreme wrote: On Jul 27, 2009, at 11:18 AM, /dev/rob0 wrote: To name one, I tried to get automobile insurance with GEICO, a large insurer in the USA. If I had access to my old virtual_alias_maps I could find many more who rejected the "+". AT&T, Coca Cola, nearl

Re: Postfix TLS and CRL?

2009-07-28 Thread Wietse Venema
Ralf Hildebrandt: > Does Postfix support/use CRLs? I found some articles like Not according to documentation. If it gets added, then it is up to the sysadmin to feed up-to-date CRL files to Postfix. It unlikely that Postfix will reach out over the network whenever a client connects. Wiets

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread LuKreme
On Jul 28, 2009, at 12:10 PM, Sahil Tandon wrote: Some large banks use first_l...@foo.com. What other sites use doesn't affect me. '-' is problematic because it is sometimes part of a person's actual name. I chose '_' over '.' because I had users who already used '.' as a first.last separat

Re: Problem sending mail from outside permit_mynetworks

2009-07-28 Thread /dev/rob0
On Tuesday 28 July 2009 05:11:05 Hervé Hénoch wrote: > 1) I want to use sasl in order to send mail outside my LAN. The > authentification run well. But I was stopped by zen.spamhaus.org because > my FAI have registered dynamic adresses > in this site. > > I don't understand why because permit_sasl_

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread /dev/rob0
On Monday 27 July 2009 16:57:20 mouss wrote: > /dev/rob0 a écrit : > > Unfortunately, I have found that many Web programmers don't bother to > > read RFC's and find out what characters are allowed in email addresses. > > Many sites will not accept a "+" in your username. I think the old > > default

Re: Local to local and pop-before-smtp

2009-07-28 Thread /dev/rob0
On Sunday 26 July 2009 17:19:39 Magnus Bäck wrote: > On Sunday, July 26, 2009 at 23:58 CEST, > Pablo Yaggi wrote: > [...] > > > these are my current restrictions: [...] > > reject_rhsbl_client sbl-xbl.spamhaus.org, > > reject_rhsbl_client bl.spamcop.net, > > reject_rhsbl_client list.dsbl.o

Re: [Re: virtual_alias_maps works with hash but not LDAP (Postfix 2.5.1)]

2009-07-28 Thread mouss
John/SML a écrit : > [snip] > cleanup unix n - - - 0 cleanup mouss said: > make sure the 5th field is 'n' (and not 'y' nor '-'). then you said: > I have disbabled chroot in master.cf Wasn't that a lie? > [snip]

Re: multiple reverse DNS?

2009-07-28 Thread mouss
ghe a écrit : > On 7/27/09 1:45 PM, /dev/rob0 wrote: > >> [1] Strictly speaking, it's $smtp_helo_name which should resolve, but >> the default value for smtp_helo_name is $myhostname, and I would >> not generally recommend setting smtp_helo_name without good reason. > > My MTA is on the

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread mouss
/dev/rob0 a écrit : > On Monday 27 July 2009 16:57:20 mouss wrote: >> /dev/rob0 a écrit : >>> Unfortunately, I have found that many Web programmers don't bother to >>> read RFC's and find out what characters are allowed in email addresses. >>> Many sites will not accept a "+" in your username. I th

Postfix/dovecot smtp auth implementation question

2009-07-28 Thread indio
Hi all! With the config lines below, all clients from inside my network MUST authenticate to deliver a message. But all connections from the Internet where "mail from" is @mydomain.com can deliver mail to local users without authenticate. What should I do to force authentication to ALL

Re: Postfix/dovecot smtp auth implementation question

2009-07-28 Thread mouss
indio a écrit : > Hi all! > With the config lines below, all clients from inside my network MUST > authenticate to deliver a message. But all connections from the Internet > where "mail from" is @mydomain.com can deliver mail to local users > without authenticate. What should I do to force auth

Re: Catchall account and lots of spam in a short period

2009-07-28 Thread LuKreme
On Jul 28, 2009, at 3:39 PM, mouss wrote: reported this to my boss, just to hear him saying "I don't want extensions. I want _real_ addresses". I used to have an email address (since retired into a spam magnet). u...@example.com -> All mail was fed to sa-learn --spam and reported to spamcop

Invalid Header problems

2009-07-28 Thread Oscar Cruz
Hi folks i'm trying to figure out a problem with some domains when they send mails to my server. apparently the problem comes from an invalid header but i don't know what kind of parameter must change, cause this isn't happens with all the domains just with some ones. maybe one of you help me abou

request to update ... in non-postfix directory

2009-07-28 Thread Martijn de Munnik
What do these log entries mean and how can I fix this problem: Jul 29 02:19:39 stevie.youngguns.nl postfix/postfix-script[24806]: [ID 197553 mail.info] starting the Postfix mail system Jul 29 02:19:41 stevie.youngguns.nl postfix/master[24807]: [ID 197553 mail.info] daemon started -- version 2

Re: request to update ... in non-postfix directory

2009-07-28 Thread Wietse Venema
Martijn de Munnik: > What do these log entries mean and how can I fix this problem: Read the RELEASE_NOTES. Wietse > Jul 29 02:19:39 stevie.youngguns.nl postfix/postfix-script[24806]: [ID > 197553 mail.info] starting the Postfix mail system > Jul 29 02:19:41 stevie.youngguns.nl postfix

Re: Invalid Header problems

2009-07-28 Thread Wietse Venema
Oscar Cruz: > Hi folks i'm trying to figure out a problem with some domains when they send > mails to my server. apparently the problem comes from an invalid header but > i don't know what kind of parameter must change, cause this isn't happens > with all the domains just with some ones. Jul 28 09

Re: request to update ... in non-postfix directory

2009-07-28 Thread Noel Jones
Martijn de Munnik wrote: What do these log entries mean and how can I fix this problem: Jul 29 02:19:41 stevie.youngguns.nl postfix/tlsmgr[24813]: [ID 947731 mail.warning] warning: request to update table btree:/var/spool/postfix/smtpd_scache in non-postfix directory /var/spool/postfix Jul 29

Re: Problem sending mail from outside permit_mynetworks

2009-07-28 Thread Hervé Hénoch
Thanks for your response. So if i have understood : since permit_sals_authenticated is before the other lines it implies that sasl authentication failed ? True ? false ? It is when I use Outlook Express 6 that I have the problem With thunderbird it works fine. I have "broken_sasl_auth_cli

Re: Problem sending mail from outside permit_mynetworks

2009-07-28 Thread Magnus Bäck
On Wednesday, July 29, 2009 at 08:01 CEST, Hervé Hénoch wrote: > Thanks for your response. So if i have understood : since > permit_sals_authenticated is before the other lines it implies > that sasl authentication failed ? True ? false ? There could've been other reasons for the failure to