VRFY functionality through the command line

2009-10-27 Thread frantisek holop
hello there, i am writing a custom filter tool and i am looking for a way to verify that the recipient address is valid--as far as postfix and it's aliases and all it's maps are concerned. probably something like a command line client for verify(8), or a program to somehow evaluate that the condi

AW: AW: AW: AW: virtual-mailbox-domain: Loops back zo myself

2009-10-27 Thread Daniel Spannbauer
vecot service) Oct 26 23:39:03 a1323 postfix/qmgr[32389]: 9143317A5A6: removed -- Regards Daniel > > > > __ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank-Version > 4545 (20091026) __ > > E-Mail wurde geprüft mit ESET NOD32 Antivirus. > > http://www.eset.com > __ Hinweis von ESET NOD32 Antivirus, Signaturdatenbank-Version 4546 (20091027) __ E-Mail wurde geprüft mit ESET NOD32 Antivirus. http://www.eset.com

Please criticize my basic filtering config

2009-10-27 Thread Harakiri
Hello, can a postfix guru please look over my easy configuration? I wanted to create some very easy antispam defense using only postfix (postgrey). I created a new smtpd_restriction_classes, which i appended to smtpd_recipient_restrictions. my_filtering = check_recipient_access proxy:pgsql:/e

Re: Spam Attack on Postmaster

2009-10-27 Thread Carlos Williams
On Thu, Sep 24, 2009 at 11:05 AM, Noel Jones wrote: > Some older versions of postfix give special treatment to the postmaster > address.  To disable this special treatment, add > # main.cf > address_verify_sender = $double_bounce_sender So when you note "older" I am going to assume 2.3.x qualifie

Re: AW: AW: AW: AW: virtual-mailbox-domain: Loops back zo myself

2009-10-27 Thread Brian Evans - Postfix List
Daniel Spannbauer wrote: > >> -Ursprüngliche Nachricht- >> Von: owner-postfix-us...@postfix.org [mailto:owner-postfix- >> us...@postfix.org] Im Auftrag von mouss >> Gesendet: Montag, 26. Oktober 2009 22:28 >> An: 'Postfix users' >> Betreff: Re: AW: AW: AW: virtual-mailbox-domain: Loops bac

Re: Invitation to connect on LinkedIn

2009-10-27 Thread Sahil Tandon
Hey Siju stop spamming all your mailing lists with this crap. Thanks much.

Re: Please criticize my basic filtering config

2009-10-27 Thread Sahil Tandon
On Oct 27, 2009, at 8:06 AM, Harakiri wrote: Hello, can a postfix guru please look over my easy configuration? I wanted to create some very easy antispam defense using only postfix (postgrey). I created a new smtpd_restriction_classes, which i appended to smtpd_recipient_restrictions.

Re: Spam Attack on Postmaster

2009-10-27 Thread Noel Jones
On 10/27/2009 7:22 AM, Carlos Williams wrote: On Thu, Sep 24, 2009 at 11:05 AM, Noel Jones wrote: Some older versions of postfix give special treatment to the postmaster address. To disable this special treatment, add # main.cf address_verify_sender = $double_bounce_sender So when you note "

AW: AW: AW: AW: AW: virtual-mailbox-domain: Loops back zo myself

2009-10-27 Thread Daniel Spannbauer
A6: > > client=fmmailgate03.web.de[217.72.192.234] > > Oct 26 23:38:58 a1323 postfix/cleanup[24923]: A688917A5A6: > > message-id=<007301ca568d$1a2f37c0$4e8da7...@de> > > Oct 26 23:38:58 a1323 postfix/qmgr[32389]: A688917A5A6: > > from=, size=1362, nrcpt

sender_restrictions are filtering ndr mails

2009-10-27 Thread Fiederling, Daniel
Hello, we use smtpd_sender_restrictions on our outgoing smtp gateway to filter mails from users who are not allowed to send mails to external recipients. We use the following config: smtpd_sender_restrictions=check_sender_access hash:/etc/postfix-outbound/sender_restrictions, check_sender_access

[Postfix] Wrong Time

2009-10-27 Thread Jacopo Cappelli
On log i have the wrong time(-6h) but the date is ok. I read that i copy /etc/localtime to the chroot of postfix and i try but don't work... cp -p /etc/localtime /var/spool/postfix/etc/localtime and reload postfix don't work... I use Debian 5.0.3 tzdata and locales is ok and configured. Thanks, Ja

Re: [Postfix] Wrong Time

2009-10-27 Thread Terry L. Inzauro
Jacopo Cappelli wrote: > On log i have the wrong time(-6h) but the date is ok. > I read that i copy /etc/localtime to the chroot of postfix and i try > but don't work... > cp -p /etc/localtime /var/spool/postfix/etc/localtime > and reload postfix don't work... > I use Debian 5.0.3 tzdata and locale

Re: VRFY functionality through the command line

2009-10-27 Thread Noel Jones
On 10/27/2009 2:35 AM, frantisek holop wrote: hello there, i am writing a custom filter tool and i am looking for a way to verify that the recipient address is valid--as far as postfix and it's aliases and all it's maps are concerned. probably something like a command line client for verify(8),

Re: [Postfix] Wrong Time

2009-10-27 Thread Wietse Venema
Jacopo Cappelli: > On log i have the wrong time(-6h) but the date is ok. > I read that i copy /etc/localtime to the chroot of postfix and i try > but don't work... Show the evidence. What are the permissions of: /var/spool/postfix/etc /var/spool/postfix/etc/localtime Wietse

Re: [Postfix] Wrong Time

2009-10-27 Thread Jacopo Cappelli
server:/etc/postfix# ls -alh /var/spool/postfix/etc/ totale 48K drwxr-xr-x 2 root root 4,0K 27 ott 14:40 . drwxr-xr-x 20 root root 4,0K 9 set 11:53 .. -rw-r--r-- 1 root root 312 27 ott 14:40 hosts -rw-r--r-- 1 root root 2,6K 27 ott 14:40 localtime -rw-r--r-- 1 root root 475 27 ott 14:40 nssw

Relay mails to local domains

2009-10-27 Thread punit jain
Hi , I have multiple domains hosted on my postfix server. I am planning to relay mails for one of the domain test.com to my AS/AV appliance. I tried setting relayhost = 192.168.180.25 which is IP address of my appliance but it doesnot relay mails to this IP infact delivers locally: - Oct 27 18:58

Re: [Postfix] Wrong Time

2009-10-27 Thread Wietse Venema
Jacopo Cappelli: > server:/etc/postfix# ls -alh /var/spool/postfix/etc/ > totale 48K > drwxr-xr-x 2 root root 4,0K 27 ott 14:40 . > drwxr-xr-x 20 root root 4,0K 9 set 11:53 .. > -rw-r--r-- 1 root root 312 27 ott 14:40 hosts > -rw-r--r-- 1 root root 2,6K 27 ott 14:40 localtime > -rw-r--r-- 1 r

Re: [Postfix] Wrong Time

2009-10-27 Thread Dan Schaefer
Wietse Venema wrote: Try without SeLinux, AppArmor, and other "security" add-ons. They are not covered by the Postfix warranty. Wietse Postfix has a warranty? :) It's a free product... -- Dan Schaefer Web Developer/Systems Analyst Performance Administration Corp.

Re: [Postfix] Wrong Time

2009-10-27 Thread Wietse Venema
Dan Schaefer: > Wietse Venema wrote: > > Try without SeLinux, AppArmor, and other "security" add-ons. > > They are not covered by the Postfix warranty. > > > Postfix has a warranty? :) It's a free product... The warranty that defects will be fixed, for supported releases (currently, 2.3 and lat

Re: [Postfix] Wrong Time

2009-10-27 Thread Victor Duchovni
On Tue, Oct 27, 2009 at 10:51:07AM -0400, Dan Schaefer wrote: > Wietse Venema wrote: >> Try without SeLinux, AppArmor, and other "security" add-ons. >> They are not covered by the Postfix warranty. >> >> Wietse > > Postfix has a warranty? :) It's a free product... There is no contractual war

Re: [Postfix] Wrong Time

2009-10-27 Thread Linux Addict
On Tue, Oct 27, 2009 at 10:51 AM, Dan Schaefer wrote: > Wietse Venema wrote: > >> Try without SeLinux, AppArmor, and other "security" add-ons. >> They are not covered by the Postfix warranty. >> >>Wietse >> >> > Postfix has a warranty? :) It's a free product... > > -- > Dan Schaefer > Web

Re: Please criticize my basic filtering config

2009-10-27 Thread Harakiri
--- On Tue, 10/27/09, Sahil Tandon wrote: > From: Sahil Tandon > > I reject with zen before greylisting. > Hi, thanks for your reply - i had thought about it - but since RBL is an external service - it takes more time to go through, therefor i used greylisting before RBL since its a local

Default parameter values in postfix configuration file.

2009-10-27 Thread Manoj Burande
Hello All, I am a newbie for Postfix Mail server. Can anybody please suggest me on Postfix's default parameter's configuration values. I have one query relating to the same as, On my machine I am getting hundreds of default Postfix configuration parameter values after running the "#p

Reverse DNS Rejection Problem

2009-10-27 Thread Dennis Putnam
I have my Postfix configured to require proper DNS resolution in both directions. However, I have a situation that is giving me problems perhaps due to multiple PTR records for the IP address. I am getting the error: 450 Client host rejected: cannot find your hostname When I 'dig' the host

Re: Default parameter values in postfix configuration file.

2009-10-27 Thread Noel Jones
On 10/27/2009 10:08 AM, Manoj Burande wrote: Hello All, I am a newbie for Postfix Mail server. Can anybody please suggest me on Postfix's default parameter's configuration values. I have one query relating to the same as, On my machine I am getting hundreds of default Postfix con

Re: Reverse DNS Rejection Problem

2009-10-27 Thread Wietse Venema
Dennis Putnam: > I have my Postfix configured to require proper DNS resolution in both > directions. However, I have a situation that is giving me problems > perhaps due to multiple PTR records for the IP address. I am getting > the error: > > 450 Client host rejected: cannot find your hostn

Postfix and Google Docs Repositories

2009-10-27 Thread Michael Katz
Have some software to very selectively store email attachments in Google Docs repository directly from Postfix using web services API of Google. Please contact me if interested to test. Thanks, Mike Katz http://mailspect.com

Re: [Postfix] Wrong Time

2009-10-27 Thread Wietse Venema
Jacopo Cappelli: > Only security is grsec but don't block anything of Postfix. Logging the "wrong time" means one of the following: 1) The timezone file is not accessible (no file, no permission). Use strace to see what system call fails. 2) The file contains the wrong data. Use cmp(1) to fin

Re: [Postfix] Wrong Time

2009-10-27 Thread Victor Duchovni
On Tue, Oct 27, 2009 at 12:28:52PM -0400, Wietse Venema wrote: > Jacopo Cappelli: > > Only security is grsec but don't block anything of Postfix. > > Logging the "wrong time" means one of the following: > > 1) The timezone file is not accessible (no file, no permission). >Use strace to see w

Re: Reverse DNS Rejection Problem

2009-10-27 Thread Charles Marcus
On 10/27/2009, Dennis Putnam (dennis.put...@aimaudit.com) wrote: > I have my Postfix configured to require proper DNS resolution in both > directions. However, I have a situation that is giving me problems > perhaps due to multiple PTR records for the IP address. I am getting the > error: > > 450

Re: Reverse DNS Rejection Problem

2009-10-27 Thread Dennis Putnam
Thanks or the reply. That sucks. Is there a way around this, short of turning that off or whitelisting? On Oct 27, 2009, at 11:34 AM, Wietse Venema wrote: Dennis Putnam: I have my Postfix configured to require proper DNS resolution in both directions. However, I have a situation that is givi

Re: Relay mails to local domains

2009-10-27 Thread Magnus Bäck
On Tuesday, October 27, 2009 at 15:35 CET, punit jain wrote: > I have multiple domains hosted on my postfix server. I am planning to > relay mails for one of the domain test.com to my AS/AV appliance. I > tried setting relayhost = 192.168.180.25 which is IP address of my > appliance but it d

Re: Reverse DNS Rejection Problem

2009-10-27 Thread Victor Duchovni
On Tue, Oct 27, 2009 at 01:14:05PM -0400, Dennis Putnam wrote: > Thanks or the reply. That sucks. Is there a way around this, short of > turning that off or whitelisting? Don't use "reject_unknown_client" uncondionally. Use it selectively in a check_client_access cidr:/etc/postfix/clien

Re: Reverse DNS Rejection Problem

2009-10-27 Thread Dennis Putnam
That is not much different than whitelisting, right? I still have to maintain a list of permitted networks, do I not? On Oct 27, 2009, at 1:24 PM, Victor Duchovni wrote: On Tue, Oct 27, 2009 at 01:14:05PM -0400, Dennis Putnam wrote: Thanks or the reply. That sucks. Is there a way around thi

Setup Question with multiple Interfaces and domains.

2009-10-27 Thread Marcelo Iturbe
Hello, I have the following need: - Setup a postfix server wich has 2 interfaces - All emails where the SENDER is @domainA.com is to be sent from interface 1 - All emails where the SENDER is @domainB.com is to be sent from interface 2 - Interface 1 will only receive email which is for domainA.com

Re: Please criticize my basic filtering config

2009-10-27 Thread LuKreme
On 27-Oct-2009, at 09:00, Harakiri wrote: --- On Tue, 10/27/09, Sahil Tandon wrote: From: Sahil Tandon I reject with zen before greylisting. Hi, thanks for your reply - i had thought about it - but since RBL is an external service - it takes more time to go through, I dunno about

Re: Setup Question with multiple Interfaces and domains.

2009-10-27 Thread Frappy John
I hope you realize that the sender (with the cooperation of his ISP) determines which mail server his outgoing mail goes through. It often isn't associated with the domain name of his email address. Having said that, you should have no problem in configuring a single instance of postfix to support

Re: Reverse DNS Rejection Problem

2009-10-27 Thread Phillip Smith
2009/10/28 Dennis Putnam > Thanks or the reply. That sucks. Is there a way around this, short of > turning that off or whitelisting? Tell the admin of the remote domain to fix their PTR records and/or MX helo configuration because in the meantime, you're going to have to implement a dirty hack

[Postfix] Wrong Time

2009-10-27 Thread Stan Hoeppner
Dan Schaefer put forth on 10/27/2009 9:51 AM: > Wietse Venema wrote: >> Try without SeLinux, AppArmor, and other "security" add-ons. >> They are not covered by the Postfix warranty. >> >> Wietse >> > Postfix has a warranty? :) It's a free product... Yes, even Wietse has a sense of humor, th

Re: Setup Question with multiple Interfaces and domains.

2009-10-27 Thread Marcelo Iturbe
Hello, Thank you for your quick response. I apologize if I was not completely clear. I have set up virtual domains and domain aliasing before, all going through the same interface sharing the same IP. In this case, I need domainA.com (thus mail.domainA.com) and domainB.com (thus mail.domainB.com)

Re: VRFY functionality through the command line

2009-10-27 Thread frantisek holop
hmm, on Tue, Oct 27, 2009 at 09:24:23AM -0500, Noel Jones said that > Have postfix do recipient validation before your helo checks. That way, > only valid recipients will be rejected by your other rules. > > Usually you can do this by putting reject_unlisted_recipient just after > permit_mynetwor

Re: VRFY functionality through the command line

2009-10-27 Thread Noel Jones
On 10/27/2009 8:55 PM, frantisek holop wrote: hmm, on Tue, Oct 27, 2009 at 09:24:23AM -0500, Noel Jones said that Have postfix do recipient validation before your helo checks. That way, only valid recipients will be rejected by your other rules. Usually you can do this by putting reject_unliste