About Postfix anti spoofing filters

2009-10-26 Thread Sharma, Ashish
Hello, I have applied the following filters (milters) in my Postfix incoming mail server: 1. DKIM milter 2. SenderID milter 3. SPF policy. All three append headers in the received e-mail regarding their checks. I want to know how much protection do these provide me against spoofing and do

Re: About Postfix anti spoofing filters

2009-10-26 Thread Sahil Tandon
On Oct 26, 2009, at 4:12 AM, "Sharma, Ashish" wrote: Hello, I have applied the following filters (milters) in my Postfix incoming mail server: DKIM milter SenderID milter SPF policy. All three append headers in the received e-mail regarding their checks. I want to know how much prote

setting up a "rejector"

2009-10-26 Thread rackow
I'm trying out various DNS blacklist items and am calling on the wisdom here for a little help. For example, if I DNS blacklist malwaresite.example.com to point to an internal "honeypot" machine. When the user goes to http://www dot malwaresite.example.com site, we have a little web server that

proxymap permissions?

2009-10-26 Thread Harakiri
Im using proxymap for an sql recipient check query, however when the file doesnt have postfix permission - the following error occurs postfix/proxymap[12724]: fatal: open /etc/mydir/recipient_check whats weird is, all other config files like postfix_mynetworks postfix_relaydomains which have th

Re: proxymap permissions?

2009-10-26 Thread Sahil Tandon
On Oct 26, 2009, at 9:41 AM, Harakiri wrote: Im using proxymap for an sql recipient check query, however when the file doesnt have postfix permission - the following error occurs postfix/proxymap[12724]: fatal: open /etc/mydir/recipient_check whats weird is, all other config files like post

Re: proxymap permissions?

2009-10-26 Thread Wietse Venema
Sahil Tandon: > On Oct 26, 2009, at 9:41 AM, Harakiri wrote: > > > Im using proxymap for an sql recipient check query, however when the > > file doesnt have postfix permission - the following error occurs > > > > postfix/proxymap[12724]: fatal: open /etc/mydir/recipient_check > > > > whats weir

Re: setting up a "rejector"

2009-10-26 Thread Noel Jones
On 10/26/2009 8:07 AM, rac...@mcs.anl.gov wrote: I'm trying out various DNS blacklist items and am calling on the wisdom here for a little help. For example, if I DNS blacklist malwaresite.example.com to point to an internal "honeypot" machine. When the user goes to http://www dot malwaresite.e

Re: proxymap permissions?

2009-10-26 Thread Harakiri
--- On Mon, 10/26/09, Wietse Venema wrote: > > In the section titled SECURITY, there needs to be a note > that > proxymap always opens tables with the privileges of the > "$mail_owner" > UID and GID. > >     Wietse Thanks, is there a particular reason why postfix itself can read config from

Re: proxymap permissions?

2009-10-26 Thread Simon Waters
On Monday 26 October 2009 16:03:56 Harakiri wrote: > > Thanks, is there a particular reason why postfix itself can read config > from any user like for maps etc - but proxymap cant? The only way i see now > is to add my user to the group of postfix. Because proxymap is running as user postfix? Sys

Re: proxymap permissions?

2009-10-26 Thread Wietse Venema
Wietse: > In the section titled SECURITY, there needs to be a note that > proxymap always opens tables with the privileges of the "$mail_owner" > UID and GID. Harakiri: > Thanks, is there a particular reason why postfix itself can read > config from any user like for maps etc - but proxymap cant?

AW: AW: AW: virtual-mailbox-domain: Loops back zo myself

2009-10-26 Thread Daniel Spannbauer
> > > > > > > > > > > > > > > > > > > > > > > > > > > [snip] > > > > > > __ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank- > Version > > 4539 (20091024) _

RE: How to accept incoming emails only to the users listed in my application's mysql database

2009-10-26 Thread William Jordan
Folks, We are using the goldfish autoresponder within our PostFix install and while it works fine for individuals it doesn't work well when that person is part of distribution list.This seems to be a configuration issue though as there is no reason it should send out an autoresponse for one of

Autoresponse and distribution lists

2009-10-26 Thread William Jordan
Sorry I didn't update the subject of my earlier post. I do apologise for the oversight. William Jordan IT Manager   -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of William Jordan Sent: October-26-09 11:29 AM To: postfix-users

Re: virtual_transport lmtp and return-path header.

2009-10-26 Thread Victor Duchovni
On Sat, Oct 24, 2009 at 02:34:11PM -0400, Wietse Venema wrote: > The Postfix LMTP server does not perform final delivery. That's Postfix LMTP *client* of course. If Postfix had an LMTP server that deposited mail into a store of some sort, that could indeed be final delivery. This said, Postfix ha

Re: virtual_transport lmtp and return-path header.

2009-10-26 Thread Wietse Venema
Victor Duchovni: > On Sat, Oct 24, 2009 at 02:34:11PM -0400, Wietse Venema wrote: > > > The Postfix LMTP server does not perform final delivery. > > That's Postfix LMTP *client* of course. If Postfix had an LMTP server > that deposited mail into a store of some sort, that could indeed be > final

how to remove received by headers before mail gateway

2009-10-26 Thread Eero Volotinen
I am running ssl+sasl authenticated mailgateway and problem is that in some cases clients from world are sending mail from "blacklisted" networks. The main problem is that spamassasin is analyzing received headers and it might tag message as spam by received by headers. So, How I can remove h

Re: how to remove received by headers before mail gateway

2009-10-26 Thread Magnus Bäck
On Monday, October 26, 2009 at 20:15 CET, Eero Volotinen wrote: > I am running ssl+sasl authenticated mailgateway and problem is that > in some cases clients from world are sending mail from "blacklisted" > networks. > > The main problem is that spamassasin is analyzing received headers > a

Re: Autoresponse and distribution lists

2009-10-26 Thread Magnus Bäck
On Monday, October 26, 2009 at 19:32 CET, William Jordan wrote: > Sorry I didn't update the subject of my earlier post. I do apologise > for the oversight. The problem was not that you didn't replace the Subject header, the fundamental problem was that you replied to an old message when yo

Upgrade From 2.3 to 2.6

2009-10-26 Thread Carlos Williams
I am getting ready to remove my Postfix installation of 2.3 which is the latest version RHEL / CentOS have to offer for stability reasons in place for the 2.6.5-1 RPM I downloaded from Simon. I have Postgrey, Amavisd-new, Dovecot, and ClamAV all integrated or interacting with the Postfix 2.3 MTA pa

Re: Upgrade From 2.3 to 2.6

2009-10-26 Thread Wietse Venema
Carlos Williams: > I am getting ready to remove my Postfix installation of 2.3 which is > the latest version RHEL / CentOS have to offer for stability reasons > in place for the 2.6.5-1 RPM I downloaded from Simon. I have Postgrey, > Amavisd-new, Dovecot, and ClamAV all integrated or interacting wi

Re: how to remove received by headers before mail gateway

2009-10-26 Thread Eero Volotinen
Yes, header_checks can be used. Howeer, you'd want to avoid doing this to all email. To affect only messages submitted by your clients, define two cleanup(8) services (one with these header checks and one without) and use separate SMTP listener for your SASL clients (which you might have already

Re: how to remove received by headers before mail gateway

2009-10-26 Thread Noel Jones
On 10/26/2009 2:15 PM, Eero Volotinen wrote: I am running ssl+sasl authenticated mailgateway and problem is that in some cases clients from world are sending mail from "blacklisted" networks. The main problem is that spamassasin is analyzing received headers and it might tag message as spam by r

Autoresponder - distribution list problem

2009-10-26 Thread William Jordan
Folks, We are using the goldfish autoresponder within our PostFix install. It sends out an autoresponse when e-mailing the person directly as expected but also sends the response when e-mailing a distribution list the person is a member of. So if someone e-mails a distribution list and one of th

Re: Autoresponder - distribution list problem

2009-10-26 Thread Steve
Original-Nachricht > Datum: Mon, 26 Oct 2009 12:52:48 -0700 > Von: "William Jordan" > An: postfix-users@postfix.org > Betreff: Autoresponder - distribution list problem > Folks, > > We are using the goldfish autoresponder within our PostFix install. It > sends out an autoresp

Re: Recursive expressions in parameter values in main.cf

2009-10-26 Thread Victor Duchovni
On Fri, Oct 23, 2009 at 10:25:51PM -0400, Wietse Venema wrote: > Daniel Kauffman: > >multi_instance_wrapper = ${command_directory}/postmulti -p -- > > This is currently not supported. Ask your money back. This is a regression from the original implementation, when the default syslog_name dep

Re: multiple domains - status=bounced (cannot access mailbox /var/mail/domain for user domain. cannot open file: Permission denied)

2009-10-26 Thread Rupert Reid
On 24 Oct 2009, at 19:21, Wietse Venema wrote: Rupert Reid: On 23 Oct 2009, at 11:48, Wietse Venema wrote: Rupert Reid: Delivery Status Notification (Failure) = The following message to was undeliverable. The reason for the problem: 5.1.2 - Bad destination host 'DNS Hard Error looki

Edit message in active queue and re-submit

2009-10-26 Thread Jack Knowlton
Hi all. Every day I have a bunch of messages stuck in the active queue because of address typos made by the sender. Some of them I just let exprire and go back to the user, but others could be so easily fixed (eg "hotmal.com" instead of "hotmail.com") that I would like to do that myself. Is there a

Re: Edit message in active queue and re-submit

2009-10-26 Thread Magnus Bäck
On Monday, October 26, 2009 at 21:48 CET, Jack Knowlton wrote: > Every day I have a bunch of messages stuck in the active queue because > of address typos made by the sender. Some of them I just let exprire > and go back to the user, but others could be so easily fixed (eg > "hotmal.com" ins

Re: multiple domains - status=bounced (cannot access mailbox /var/mail/domain for user domain. cannot open file: Permission denied)

2009-10-26 Thread Magnus Bäck
On Monday, October 26, 2009 at 21:48 CET, Rupert Reid wrote: > Thank you for your offer of help. I was able to locate he problem - > for some inexplicable reason the permissions to /var/mail/user was > corrupted (exactly what was written on the tin) - meaning that > postfix could not access

Re: AW: AW: AW: virtual-mailbox-domain: Loops back zo myself

2009-10-26 Thread mouss
Daniel Spannbauer a écrit : > >> bet of the day: something in master.cf overrides your main.cf >> config >> >> show your master.cf. > > > [snip] your master.cf shows a content_filter, but this doesn't appear in the last post logs. you need to check that the postfix that logs the error is t

Re: Autoresponder - distribution list problem

2009-10-26 Thread mouss
William Jordan a écrit : > Folks, > > We are using the goldfish autoresponder within our PostFix install. It > sends out an autoresponse when e-mailing the person directly as expected > but also sends the response when e-mailing a distribution list the > person is a member of. So if someone e-ma

Re: Edit message in active queue and re-submit

2009-10-26 Thread mouss
Jack Knowlton a écrit : > Hi all. > Every day I have a bunch of messages stuck in the active queue because of > address typos made by the sender. Some of them I just let exprire and go > back to the user, but others could be so easily fixed (eg "hotmal.com" > instead of "hotmail.com") that I would

Invitation to connect on LinkedIn

2009-10-26 Thread Siju George
LinkedIn I'd like to add you to my professional network on LinkedIn. - Siju Confirm that you know Siju George https://www.linkedin.com/e/isd/822151906/TaU6iNvw/ Every day, millions of professionals like Siju George use LinkedIn to connect with colleagues, find experts, and e