Re: OT: need some advice as to distro

2009-12-02 Thread Jordi Espasa Clofent
Always is the same: the best option is the best for you needs. So, the best could be any distro that you feel comfortable with. Obviously there're out there some distros which are server-oriented (CentOS, Debian) or desktop-oriented and so on, but really it doesn't matter. Choose your favorite

authdaemond / postfix issues after OS upgrade

2009-12-02 Thread Corey Chandler
I recently upgraded from FreeBSD 7.2 to 8.0. This resulted in a strange error with authdaemond (part of the Courier imap package, used to authenticate users) when used in conjunction with postfix; I've rebuilt all of the packages, but the config they're using has worked since the 6.0 days. I att

Re: A question about Postfix and virus scanning

2009-12-02 Thread Jerry
On Wed, 02 Dec 2009 01:33:51 -0500 Michael Katz replied: >Responding to support lists is not a sales strategy, and if it was it >would be the worst strategy imaginable because it doesn't work. We >sell software because we have to make a living but answering on lists >is more of a personality tr

Re: postscreen dnsblog problem

2009-12-02 Thread Wietse Venema
Len Conrad: > freebsd 7.2 > mail_version = 2.7-20091008 > > out of 6 postscreen machines, I've got one that every 20 or 30 > minutes just halts, port 25 is dead (several monit agents see it > dead), then it starts off by itself after a few minutes, dumping > a bunch of these in maillog: > > warni

Re: OT: need some advice as to distro - Thank you all for the input.

2009-12-02 Thread John
We have decided to go with Centos as it is RedHat based and we hope similar to Fedora. At the same time I am going to start playing with a Ubuntu/Debian server just to see how easy it is to get the config and results we want. Once again thank you all for your input John A

Force matching envelop MAIL FROM and "From" header

2009-12-02 Thread lst_hoe02
Hello is it possible to force a matching "From" header in the mail if reject_sender_login_mismatch is used so the "From" header is the same as the checked MAIL FROM address? The goal is to prevent spoofing of the "From" header for SASL authenticated clients. Many Thanks Andreas smime.p

new server, same conf files

2009-12-02 Thread LuKreme
OK, in preparation for moving to new hardware I've copied all the mail from the working machine to the new machine, installed postfix and copied over my /usr/local/etc/postfix folder so that I have identical configs on both machines. Now, I haven't changed the MX records as yet because I want to

Re: new server, same conf files

2009-12-02 Thread lst_hoe02
Zitat von LuKreme : OK, in preparation for moving to new hardware I've copied all the mail from the working machine to the new machine, installed postfix and copied over my /usr/local/etc/postfix folder so that I have identical configs on both machines. Now, I haven't changed the MX recor

Re: Force matching envelop MAIL FROM and "From" header

2009-12-02 Thread Wietse Venema
lst_ho...@kwsoft.de: > Hello > > is it possible to force a matching "From" header in the mail if > reject_sender_login_mismatch is used so the "From" header is the same > as the checked MAIL FROM address? The goal is to prevent spoofing of > the "From" header for SASL authenticated clients.

Re: Force matching envelop MAIL FROM and "From" header

2009-12-02 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: Hello is it possible to force a matching "From" header in the mail if reject_sender_login_mismatch is used so the "From" header is the same as the checked MAIL FROM address? The goal is to prevent spoofing of the "From" header for SASL authenticat

Re: new server, same conf files

2009-12-02 Thread Noel Jones
On 12/2/2009 6:41 AM, LuKreme wrote: OK, in preparation for moving to new hardware I've copied all the mail from the working machine to the new machine, installed postfix and copied over my /usr/local/etc/postfix folder so that I have identical configs on both machines. Now, I haven't changed

Re: Force matching envelop MAIL FROM and "From" header

2009-12-02 Thread Noel Jones
On 12/2/2009 7:34 AM, lst_ho...@kwsoft.de wrote: Zitat von Wietse Venema : lst_ho...@kwsoft.de: Hello is it possible to force a matching "From" header in the mail if reject_sender_login_mismatch is used so the "From" header is the same as the checked MAIL FROM address? The goal is to prevent

Block mail sent from outside with own domain name

2009-12-02 Thread Stähelin , Simon
Dear List Users Is it possible (and how) to block emails sent via an outside smtp server (not mynetworks) with our domain? Background: We had phishing attacks from outside (not our ip-range) with the from-address someth...@ourdomain.ch which was sent to our users. Thanks a lot in advance Sim

Re: OT: need some advice as to distro

2009-12-02 Thread Christian Surchi
Il giorno mar, 01/12/2009 alle 13.15 -0800, Joe ha scritto: > > Why not just use Debian > > then, instead of Ubuntu? > Because enterprise support is available for ubuntu, and also, if someone > is familiar with ubuntu desktop already it makes sense for them to > deploy ubuntu server if servers ar

Re: Block mail sent from outside with own domain name

2009-12-02 Thread Daniel L'Hommedieu
On Dec 2, 2009, at 10:17, Stähelin, Simon wrote: > Dear List Users > > Is it possible (and how) to block emails sent via an outside smtp server (not > mynetworks) with our domain? > > Background: > We had phishing attacks from outside (not our ip-range) with the from-address > someth...@ourdo

Re: Block mail sent from outside with own domain name

2009-12-02 Thread Thomas Harold
On 12/2/2009 10:17 AM, Stähelin, Simon wrote: Is it possible (and how) to block emails sent via an outside smtp server (not mynetworks) with our domain? Three methods come to mind... 1) Publish restrictive SPF rules for your domain, then add a check_policy_service that uses one of the SPF p

Re: new server, same conf files

2009-12-02 Thread LuKreme
On 2-Dec-2009, at 06:44, Noel Jones wrote: > Postfix doesn't use MX records to decide what domains to accept (unless > you're using the permit_mx_backup hack). > Maybe virtual_mailbox_domains isn't set. > http://www.postfix.org/ADDRESS_CLASS_README.html Well, other than a couple of edits that I

Re: A question about Postfix and virus scanning

2009-12-02 Thread Seth Mattinen
Jerry wrote: > On Wed, 02 Dec 2009 01:33:51 -0500 > Michael Katz replied: > >> Responding to support lists is not a sales strategy, and if it was it >> would be the worst strategy imaginable because it doesn't work. We >> sell software because we have to make a living but answering on lists >>

Re: new server, same conf files

2009-12-02 Thread Noel Jones
On 12/2/2009 10:01 AM, LuKreme wrote: On 2-Dec-2009, at 06:44, Noel Jones wrote: Postfix doesn't use MX records to decide what domains to accept (unless you're using the permit_mx_backup hack). Maybe virtual_mailbox_domains isn't set. http://www.postfix.org/ADDRESS_CLASS_README.html Well, ot

Re: new server, same conf files

2009-12-02 Thread LuKreme
On 2-Dec-2009, at 10:39, Noel Jones wrote: > Domains listed in virtual_alias_domains MUST be rewritten to another domain > in virtual_alias_maps. It is in the hash:$config_directory/virtual kreme.com DOMAIN krem...@kreme.com kremels -- The Germans wore gray, you wore blue.

Re: new server, same conf files

2009-12-02 Thread Noel Jones
On 12/2/2009 12:48 PM, LuKreme wrote: On 2-Dec-2009, at 10:39, Noel Jones wrote: Domains listed in virtual_alias_domains MUST be rewritten to another domain in virtual_alias_maps. It is in the hash:$config_directory/virtual kreme.com DOMAIN krem...@kreme.com kremels Use a fu

possible hack to postfix

2009-12-02 Thread fakessh
hello all hello list I think there is a problem in the basic configuration of Postfix the basic configuration of Postfix is included in the rpm and sources I accessed the standard configuration file # Alternatively, you can specify the mynetworks list by hand, in # which case Postfix ignores the

Re: possible hack to postfix

2009-12-02 Thread Dhiraj Chatpar
i do now Samuel Goldwyn - "I'm willing to admit that I may not always be right, but I am never wrong." On Thu, Dec 3, 2009 at 01:18, fakessh wrote: > hello all > hello list > > I think there is a problem in the basic configuratio

Re: possible hack to postfix

2009-12-02 Thread Victor Duchovni
On Wed, Dec 02, 2009 at 08:48:41PM +0100, fakessh wrote: > I think there is a problem in the basic configuration of Postfix > the basic configuration of Postfix is included in the rpm and sources http://www.postfix.org/DEBUG_README.html#mail http://www.postfix.org/BASIC_CONFIGURATION_README.html#

Re: Block mail sent from outside with own domain name

2009-12-02 Thread Eugene V. Boontseff
Stähelin wrote: Dear List Users Is it possible (and how) to block emails sent via an outside smtp server (not mynetworks) with our domain? like this: main.cf: smtpd_restriction_classes = OnlyFromMyUsers OnlyFromMyUsers = permit_mynetworks, permit_sasl_authe

Re: possible hack to postfix

2009-12-02 Thread Sahil Tandon
On Dec 2, 2009, at 2:48 PM, fakessh wrote: hello all hello list Really? Every time? Come on! I think there is a problem in the basic configuration of Postfix the basic configuration of Postfix is included in the rpm and sources I accessed the standard configuration file # Alternatively,

Re: possible hack to postfix

2009-12-02 Thread Corey Chandler
fakessh wrote: hello all hello list I think there is a problem in the basic configuration of Postfix the basic configuration of Postfix is included in the rpm and sources I accessed the standard configuration file # Alternatively, you can specify the mynetworks list by hand, in # which case Po

Re: Block mail sent from outside with own domain name

2009-12-02 Thread mouss
Stähelin a écrit : > Dear List Users > > Is it possible (and how) to block emails sent via an outside smtp server > (not mynetworks) with our domain? > > Background: > We had phishing attacks from outside (not our ip-range) with the > from-address someth...@ourdomain.ch > which was sent to our

Re: authdaemond / postfix issues after OS upgrade

2009-12-02 Thread mouss
Corey Chandler a écrit : > I recently upgraded from FreeBSD 7.2 to 8.0. This resulted in a strange > error with authdaemond (part of the Courier imap package, used to > authenticate users) when used in conjunction with postfix; I've rebuilt > all of the packages, but the config they're using has w

Re: new server, same conf files

2009-12-02 Thread LuKreme
On 2-Dec-2009, at 11:56, Noel Jones wrote: > On 12/2/2009 12:48 PM, LuKreme wrote: >> >> On 2-Dec-2009, at 10:39, Noel Jones wrote: >> >>> Domains listed in virtual_alias_domains MUST be rewritten to another domain >>> in virtual_alias_maps. >> >> >> It is in the hash:$config_directory/virtu

anybody know how postfix and puremessage know about each other?

2009-12-02 Thread Jay G. Scott
we use puremessage and sendmail now, i'm contemplating/planning the switch to postfix. i installed puremessage (which installs postfix for me) on a test box. and i looked through main.cf, master.cf ... and i don't see how puremessage and postfix know about each other. in my sendmail.mc file th

Re: new server, same conf files

2009-12-02 Thread Noel Jones
On 12/2/2009 4:41 PM, LuKreme wrote: On 2-Dec-2009, at 11:56, Noel Jones wrote: On 12/2/2009 12:48 PM, LuKreme wrote: On 2-Dec-2009, at 10:39, Noel Jones wrote: Domains listed in virtual_alias_domains MUST be rewritten to another domain in virtual_alias_maps. It is in the hash:$config_

Re: authdaemond / postfix issues after OS upgrade

2009-12-02 Thread Corey Chandler
mouss wrote: [snip] I see no postfix logs, nor any explanation of what problem you have. Bloody hell, thought they were in the same logfile; my apologies. The issue is that while IMAP works correctly authenticating against authdaemond, any attempt I make to authenticate via SASL fails accor

sender_dependent_relayhost_maps and ldap with multivalue attribute

2009-12-02 Thread Giovanni Mancuso
Hi guys, I'm trying to configure my postfix to use a different relayhost if the sender of the email is in ldap. My ldap entry is: dn: SenderHost=exampleSender,o=AllHost objectClass=provider domains: example1.org domains: example2.org domains: example3.org The "domain" attribute is multivalue. I

Re: sender_dependent_relayhost_maps and ldap with multivalue attribute

2009-12-02 Thread Wietse Venema
Giovanni Mancuso: > Hi guys, > > I'm trying to configure my postfix to use a different relayhost if the > sender of the email is in ldap. You must return a result that satisfies the documented syntax. http://www.postfix.org/postconf.html#relayhost Wietse

Re: sender_dependent_relayhost_maps and ldap with multivalue attribute

2009-12-02 Thread Giovanni Mancuso
Thanks for answer. But, can i configure ldap search to manage multivalue in entry? I tried with: server_host = ldap://x.x.x.x server_port = 389 search_base = SenderHost=exampleSender,o=AllHost scope = sub query_filter = (&(domains=%d)(objectClass=provider)) result_attribute = domains result_forma

Re: anybody know how postfix and puremessage know about each other?

2009-12-02 Thread Huaqing Zheng
On Wed, Dec 2, 2009 at 2:46 PM, Jay G. Scott wrote: > > we use puremessage and sendmail now, i'm contemplating/planning the > switch to postfix. > > i installed puremessage (which installs postfix for me) on a test > box.  and i looked through main.cf, master.cf ...  and i don't see > how puremess

Re: sender_dependent_relayhost_maps and ldap with multivalue attribute

2009-12-02 Thread Wietse Venema
Wietse: > You must return a result that satisfies the documented syntax. > http://www.postfix.org/postconf.html#relayhost Giovanni Mancuso: > Thanks for answer. > > But, can i configure ldap search to manage multivalue in entry? See my previous reply, above. Wietse

Re: sender_dependent_relayhost_maps and ldap with multivalue attribute

2009-12-02 Thread /dev/rob0
> Wietse Venema wrote: > > Giovanni Mancuso: > > > >> I'm trying to configure my postfix to use a different > >> relayhost if the sender of the email is in ldap. > > > > You must return a result that satisfies the documented syntax. > > http://www.postfix.org/postconf.html#relayhost On Thu, Dec

Re: new server, same conf files

2009-12-02 Thread LuKreme
On 2-Dec-2009, at 15:54, Noel Jones wrote: > If they were identical, there wouldn't be a problem. They are identical. The various virtual files were copied via rsync and have been verified as identical with diff which is why I thought the MX was the issue. I'll try it again with the same main.

Re: new server, same conf files

2009-12-02 Thread Noel Jones
On 12/2/2009 9:35 PM, LuKreme wrote: On 2-Dec-2009, at 15:54, Noel Jones wrote: If they were identical, there wouldn't be a problem. OK, that was kind of a smart-ass answer. But it's true. They are identical. The various virtual files were copied via rsync and have been verified as ident