Re: Code burn-in: postscreen/verify cache cleanup

2009-12-29 Thread Stefan Förster
* Wietse Venema : > I'm burning in some new code that I wrote over the past week to > periodically remove old entries from postscreen(8) and verify(8) > caches. This is not a sexy topic, but it helps to keep database > sizes in check, it speeds up database access, and it was time. > > If you're co

Re: In-queue rejections

2009-12-29 Thread Daniel L. Miller
Wietse Venema wrote: Daniel L. Miller: [ Charset ISO-8859-1 unsupported, converting... ] I don't know what the correct terminology is for my question - please adjust my wording as needed. When a user mistypes a remote e-mail address (not that THAT ever happens!), the result is typically ei

Re: Get username of local user from recipient address

2009-12-29 Thread Michal Kurka
Dne 28.12.2009 v 17:49 Wietse Venema napsal(a): > Michal Kurka: > > > Because I have not got any answer, I tried trace an internal communication > > between postfix'es processes via UNIX-sockets. I discovered that > > "trivial-rewrite" only specifies transport or does a canonicalizing. > >

Re: Get username of local user from recipient address

2009-12-29 Thread Serge Fonville
Hi, >> Michal Kurka: >> >> > Because I have not got any answer, I tried trace an internal communication >> > between postfix'es processes via UNIX-sockets. I discovered that >> > "trivial-rewrite" only specifies transport or does a canonicalizing. >> >     Process "verify" right tell that recipien

Re: Get username of local user from recipient address

2009-12-29 Thread Michal Kurka
Dne 29.12.2009 v 10:17 Serge Fonville napsal(a): > Can't you just use virtual alias maps based on an external service for > this purpose? > For example in case of mysql you can create a stored procedure that > 'logs' when the resultset is empty Yes, this is a good idea. But I need a solution inde

Re: In-queue rejections

2009-12-29 Thread Stan Hoeppner
Daniel L. Miller put forth on 12/29/2009 2:44 AM: > I believe I understand where you're headed with this - but it's NOT what > I was asking! Hi Daniel, Just a quick note. It's probably not a great idea to SHOUT! at Dr. Venema, the person to whom who were replying here, and who is trying to help

Re: In-queue rejections

2009-12-29 Thread Hannes Erven
Daniel, > 5F47320CEC2 4338844 Mon Dec 28 13:12:09 idiotu...@amfes.com > (host mail.fireprobymesa.com[65.40.152.138] said: 550 5.1.1 User unknown > (in reply to RCPT TO command)) > jeff...@fireprobymesa.com Do you have "soft_bounce=yes" configured? (http

Re: In-queue rejections

2009-12-29 Thread Charles Marcus
On 2009-12-28 5:17 PM, Daniel L. Miller wrote: > When a user mistypes a remote e-mail address (not that THAT ever > happens!), the result is typically either a "user unknown", "invalid > recipient", or "host or domain not found" message. At least for MY > system, with MY configuration (however fla

Random Source Parameter Error

2009-12-29 Thread Dennis Putnam
I'm trying to set up TLS on Postfix 2.5.5 and 'tlsmgr' keeps getting a fatal error on this statement: tls_random_source = dev:/dev/urandom It seems to work when I comment it out but I don't really understand what it does or if it is needed for TLS to work let alone what it should be to fix it.

Re: Random Source Parameter Error

2009-12-29 Thread Ralf Hildebrandt
* Dennis Putnam : > I'm trying to set up TLS on Postfix 2.5.5 and 'tlsmgr' keeps getting a fatal > error on this statement: > > tls_random_source = dev:/dev/urandom Which error exactly? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Cam

Re: Code burn-in: postscreen/verify cache cleanup

2009-12-29 Thread Wietse Venema
Stefan F?rster: > * Wietse Venema : > > I'm burning in some new code that I wrote over the past week to > > periodically remove old entries from postscreen(8) and verify(8) > > caches. This is not a sexy topic, but it helps to keep database > > sizes in check, it speeds up database access, and it w

Re: In-queue rejections

2009-12-29 Thread Wietse Venema
Daniel L. Miller: > 5F47320CEC2 4338844 Mon Dec 28 13:12:09 idiotu...@amfes.com > (host mail.fireprobymesa.com[65.40.152.138] said: 550 5.1.1 User unknown > (in reply to RCPT TO command)) > jeff...@fireprobymesa.com That does not seem right. You have "so

Re: Code burn-in: postscreen/verify cache cleanup

2009-12-29 Thread Ralf Hildebrandt
* Wietse Venema : > You may want to give a heads-up to the maintainer as I am just > about to release this code as a regular experimental release. > Cache cleanup will definitely be part of the Postfix 2.7 stable > release, so they will have to deal with it in a month or so anyway. I'm running th

Re: In-queue rejections

2009-12-29 Thread Sahil Tandon
On Dec 29, 2009, at 6:46 AM, Stan Hoeppner wrote: Daniel L. Miller put forth on 12/29/2009 2:44 AM: I believe I understand where you're headed with this - but it's NOT what I was asking! Hi Daniel, Just a quick note. It's probably not a great idea to SHOUT! at Dr. Venema, the perso

Questions on virtual aliases and mailboxes

2009-12-29 Thread Brian Schang
Hello: I have had virtual aliases and mailboxes working well for years. I have always had a separated virtual_*_domains and virtual_*_maps file. Now I am combining them to make administration easier. For virtual aliases, I simply commented out the virtual_alias_domains directive in the main.

Re: Random Source Parameter Error

2009-12-29 Thread Noel Jones
On 12/29/2009 7:43 AM, Dennis Putnam wrote: I'm trying to set up TLS on Postfix 2.5.5 and 'tlsmgr' keeps getting a fatal error on this statement: tls_random_source = dev:/dev/urandom It seems to work when I comment it out but I don't really understand what it does or if it is needed for TLS to

Re: Random Source Parameter Error

2009-12-29 Thread Dennis Putnam
Hi Ralf, Thanks for the reply Here is the text of the sequence of errors: Dec 29 08:26:41 xserveeml postfix/tlsmgr[64439]: fatal: poll: Unknown error: 0 Dec 29 08:26:42 xserveeml postfix/master[64050]: warning: process /usr/libexec/postfix/tlsmgr pid 64439 exit status 1 Dec 29 08:26:42 xserveem

Re: Random Source Parameter Error

2009-12-29 Thread Dennis Putnam
Hi Noel, Thanks. I think that is what I really wanted to know. That parameter was configured automatically by an installer, I think, so if I don't need it then all the better. TLS does appear to be working so I guess I won't worry. On Dec 29, 2009, at 10:41 AM, Noel Jones wrote: > On 12/29/200

Re: Random Source Parameter Error

2009-12-29 Thread Wietse Venema
Dennis Putnam: > Hi Ralf, > > Thanks for the reply > > Here is the text of the sequence of errors: > > Dec 29 08:26:41 xserveeml postfix/tlsmgr[64439]: fatal: poll: Unknown error: 0 > Dec 29 08:26:42 xserveeml postfix/master[64050]: warning: process > /usr/libexec/postfix/tlsmgr pid 64439 exit

Re: Random Source Parameter Error

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 10:44:09AM -0500, Dennis Putnam wrote: > Here is the text of the sequence of errors: > > Dec 29 08:26:41 xserveeml postfix/tlsmgr[64439]: fatal: poll: Unknown error: 0 > Dec 29 08:26:42 xserveeml postfix/master[64050]: warning: process > /usr/libexec/postfix/tlsmgr pid 64

Re: Random Source Parameter Error

2009-12-29 Thread Eero Volotinen
On 12/29/09 5:44 PM, Dennis Putnam wrote: Hi Ralf, Thanks for the reply Here is the text of the sequence of errors: Dec 29 08:26:41 xserveeml postfix/tlsmgr[64439]: fatal: poll: Unknown error: 0 Dec 29 08:26:42 xserveeml postfix/master[64050]: warning: process /usr/libexec/postfix/tlsmgr pid 6

Re: TLS Configuration on Postfix

2009-12-29 Thread Carlos Williams
On Mon, Dec 21, 2009 at 12:05 PM, Victor Duchovni wrote: > Yes, sorry, the rest of OP's message was about smtpd(8), failed to notice > this was smtp(8). Yes: > >    smtp_tls_security_level = may So are you suggestion in my current 'main.cf' I need to change the parameter from "smtpd_tls_security_

Re: Random Source Parameter Error

2009-12-29 Thread Dennis Putnam
Hi Wietse, I am running OS X (10.6.2) but beyond that I don't know what security software might interfere as Apple hides a lot from the admin. However, as I stated in an earlier reply, TLS seems to be working without that parameter. The only thing that gives me pause, is that I get this warning

Re: TLS Configuration on Postfix

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 11:14:37AM -0500, Carlos Williams wrote: > On Mon, Dec 21, 2009 at 12:05 PM, Victor Duchovni > wrote: > > Yes, sorry, the rest of OP's message was about smtpd(8), failed to notice > > this was smtp(8). Yes: > > > > ?? ??smtp_tls_security_level = may > > So are you suggest

Re: Random Source Parameter Error

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 05:57:20PM +0200, Eero Volotinen wrote: > On 12/29/09 5:44 PM, Dennis Putnam wrote: >> Hi Ralf, >> >> Thanks for the reply >> >> Here is the text of the sequence of errors: >> >> Dec 29 08:26:41 xserveeml postfix/tlsmgr[64439]: fatal: poll: Unknown >> error: 0 >> Dec 29 08:

Re: possible problem with postfix/local??

2009-12-29 Thread Wietse Venema
satishkumarp2k1: > > > > > Is the alias table generated dynamically? It is possible that it's not > > readable (still being written) at the time the lookup happens? > > Yes, correct. All the alias files are generated using perl scripts, which > run periodically. The scripts actually generate t

Re: In-queue rejections

2009-12-29 Thread Stan Hoeppner
Sahil Tandon put forth on 12/29/2009 9:08 AM: > God himself? Is this a joke or are you working on some creepy, > endearing biography? http://en.wikipedia.org/wiki/Analogy According to Jewish and Christian belief, God is the creator of the universe, and is all knowing of all things in the univer

Re: Random Source Parameter Error

2009-12-29 Thread Wietse Venema
Dennis Putnam: > Hi Wietse, > > I am running OS X (10.6.2) but beyond that I don't know what This suggests that MacOS /dev/urandom has a broken poll() interface. What other /dev/*random devices do you have? As long as you use a device that does not block, Postfix will be fine. > security softwar

Re: Random Source Parameter Error

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 11:19:11AM -0500, Dennis Putnam wrote: > Hi Wietse, > > I am running OS X (10.6.2) but beyond that I don't know what security > software might interfere as Apple hides a lot from the admin. However, > as I stated in an earlier reply, TLS seems to be working without that >

Re: Random Source Parameter Error

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 11:34:39AM -0500, Wietse Venema wrote: > What other /dev/*random devices do you have? As long as you use a > device that does not block, Postfix will be fine. With 10.5 there's just: crw-rw-rw- 1 root wheel8, 0 Dec 29 11:37 /dev/random crw-rw-rw- 1 root

Re: Random Source Parameter Error

2009-12-29 Thread Wietse Venema
Victor Duchovni: > On Tue, Dec 29, 2009 at 11:19:11AM -0500, Dennis Putnam wrote: > > > Hi Wietse, > > > > I am running OS X (10.6.2) but beyond that I don't know what security > > software might interfere as Apple hides a lot from the admin. However, > > as I stated in an earlier reply, TLS seem

Re: Random Source Parameter Error

2009-12-29 Thread Wietse Venema
Victor Duchovni: > On Tue, Dec 29, 2009 at 11:34:39AM -0500, Wietse Venema wrote: > > > What other /dev/*random devices do you have? As long as you use a > > device that does not block, Postfix will be fine. > > With 10.5 there's just: > > crw-rw-rw- 1 root wheel8, 0 Dec 29 11:37 /de

Re: Questions on virtual aliases and mailboxes

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 10:15:05AM -0500, Brian Schang wrote: > So that's my question: why does a virtual mailbox domain need to be > explicitly defined on the LHS of virtual_mailbox_maps, while a virtual > alias domain works without the domain defined on the LHS of > virtual_alias_maps? Virtu

Re: In-queue rejections

2009-12-29 Thread Sahil Tandon
On Dec 29, 2009, at 11:29 AM, Stan Hoeppner wrote: Sahil Tandon put forth on 12/29/2009 9:08 AM: God himself? Is this a joke or are you working on some creepy, endearing biography? http://en.wikipedia.org/wiki/Analogy According to Jewish and Christian belief, God is the creator of the

Re: Random Source Parameter Error

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 11:45:57AM -0500, Wietse Venema wrote: > Victor Duchovni: > > On Tue, Dec 29, 2009 at 11:34:39AM -0500, Wietse Venema wrote: > > > > > What other /dev/*random devices do you have? As long as you use a > > > device that does not block, Postfix will be fine. > > > > With 10

Re: In-queue rejections

2009-12-29 Thread Wietse Venema
Sahil Tandon: > On Dec 29, 2009, at 11:29 AM, Stan Hoeppner > wrote: > > > Sahil Tandon put forth on 12/29/2009 9:08 AM: > > > >> God himself? Is this a joke or are you working on some creepy, > >> endearing biography? > > > > http://en.wikipedia.org/wiki/Analogy > > > > According to Jewish an

Re: Random Source Parameter Error

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 11:44:01AM -0500, Wietse Venema wrote: > Is Postfix is still the default MTA? If so then it is surprising > than this /dev/urandom bug was not found during testing. On my current 10.5 system, yes Postfix is still the default MTA, but: $ /usr/sbin/postconf -d tls_rando

Re: address rewriting

2009-12-29 Thread Christoph Anton Mitterer
On Tue, 2009-12-29 at 01:11 -0500, Victor Duchovni wrote: > No, it means that address *normalization* to standard form is done > at least three times: > > - smtpd resolve envelope addresses to > (transport, nexthop, standard form) > for ac

Re: Random Source Parameter Error

2009-12-29 Thread Wietse Venema
Victor Duchovni: > On Tue, Dec 29, 2009 at 11:44:01AM -0500, Wietse Venema wrote: > > > Is Postfix is still the default MTA? If so then it is surprising > > than this /dev/urandom bug was not found during testing. > > On my current 10.5 system, yes Postfix is still the default MTA, but: > >

Re: Code burn-in: postscreen/verify cache cleanup

2009-12-29 Thread Wietse Venema
Ralf Hildebrandt: > * Wietse Venema : > > > You may want to give a heads-up to the maintainer as I am just > > about to release this code as a regular experimental release. > > Cache cleanup will definitely be part of the Postfix 2.7 stable > > release, so they will have to deal with it in a month

Re: In-queue rejections

2009-12-29 Thread Stan Hoeppner
Wietse Venema put forth on 12/29/2009 10:56 AM: > We have a cultural confusion. > > I think Stan's use of "God" does not imply adolation but rather > indicates a special role (in this case with respect to Postfix). Correct. The "God" analogy simply implies "creator" and "supreme authority" of

Re: In-queue rejections

2009-12-29 Thread Daniel L. Miller
Wietse Venema wrote: Daniel L. Miller: 5F47320CEC2 4338844 Mon Dec 28 13:12:09 idiotu...@amfes.com (host mail.fireprobymesa.com[65.40.152.138] said: 550 5.1.1 User unknown (in reply to RCPT TO command)) jeff...@fireprobymesa.com That does no

Re: In-queue rejections

2009-12-29 Thread Wietse Venema
Daniel L. Miller: > Wietse Venema wrote: > > Daniel L. Miller: > > > >> 5F47320CEC2 4338844 Mon Dec 28 13:12:09 idiotu...@amfes.com > >> (host mail.fireprobymesa.com[65.40.152.138] said: 550 5.1.1 User unknown > >> (in reply to RCPT TO command)) > >> j

Re: Random Source Parameter Error

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 11:35:09AM -0500, Victor Duchovni wrote: > I'll look into this when I get a chance to test Postfix on a 10.6 > system. It is possible that /dev/urandom does not support poll(2) > with Snow Leopard. Unlike /dev/random, it is a non-blocking device, > so arguably no polling is

Re: address rewriting

2009-12-29 Thread Victor Duchovni
On Tue, Dec 29, 2009 at 06:47:07PM +0100, Christoph Anton Mitterer wrote: > What I wonder is: When does recipient checking happen? > Probably somewhere during the "receiving stage" (because we want smtpd > to reject unknown recipients). Don't confuse recipient validation with relay control. > Bu

Re: In-queue rejections

2009-12-29 Thread Daniel L. Miller
Wietse Venema wrote: Daniel L. Miller: Wietse Venema wrote: Daniel L. Miller: So...I unreservedly withdraw my question about an e-mail interface for queue management. But...is there any provision for more advanced bounce processing? I offered a solution that allows you to s

Re: In-queue rejections

2009-12-29 Thread Wietse Venema
Daniel L. Miller: > Wietse Venema wrote: > > Daniel L. Miller: > > > >> Wietse Venema wrote: > >> > >>> Daniel L. Miller: > >>> > >>> So...I unreservedly withdraw my question about an e-mail interface for > >>> queue management. But...is there any provision for more advanced bounce > >>>

Notification emails

2009-12-29 Thread Michael
It appears the reason that a over-quota notification email is not being received by the sender is because according to the logs Postfix is sending these with a NULL sender. How do I set the sender for notification emails? say postmas...@site.tld...

Re: Notification emails

2009-12-29 Thread Wietse Venema
Michael: > It appears the reason that a over-quota notification email is not being > received by the sender is because according to the logs Postfix is sending > these with a NULL sender. Then the RECEIVER mail configuration is broken. > How do I set the sender for notification emails? say post

Re: Notification emails

2009-12-29 Thread Ansgar Wiechers
On 2009-12-30 Michael wrote: > It appears the reason that a over-quota notification email is not > being received by the sender is because according to the logs Postfix > is sending these with a NULL sender. > > How do I set the sender for notification emails? say > postmas...@site.tld... Please

Re: Notification emails

2009-12-29 Thread Michael
On Wed, 30 Dec 2009 12:41:32 Wietse Venema wrote: > The Internet mail standards specify that delivery status notifications > have the null sender address. This is for good reasons, and if > someone disagrees, you are welcome to refer them to the standards. > > Wietse Thanks Wietse. Ok. Thi

Re: Notification emails

2009-12-29 Thread Wietse Venema
Michael: > however with Amavis enabled the above message does not turn up in the > sender's > email box, thus they have no way of knowing the recipient's mailbox is full. Then your mail configuration is broken, and I refer you to the mailing list welcome message below for instructions.

Re: In-queue rejections

2009-12-29 Thread Daniel L. Miller
Wietse Venema wrote: Daniel L. Miller: Wietse Venema wrote: Postfix reports enhanced status codes (5.1.1 means the mailbox does not exist, etc.) in standardized non-delivery notifications. See RFC 3463 for an overview. Mail user agents can translate these standardized status codes into

Re: address rewriting

2009-12-29 Thread Christoph Anton Mitterer
On Tue, 2009-12-29 at 17:29 -0500, Victor Duchovni wrote: > > Adding example.com (or remote.domain) to mydestination above should mean > > that ONLY @example.com (or @remote.domain or > > @ is accepted, right? > No. It means that example.com becomes a local domain. Ok,.. of course,.. but only @ sho

Re: Notification emails

2009-12-29 Thread Daniel V. Reinhardt
- Original Message > From: Michael > To: postfix-users@postfix.org > Sent: Tue, December 29, 2009 6:49:47 PM > Subject: Re: Notification emails > > On Wed, 30 Dec 2009 12:41:32 Wietse Venema wrote: > > > The Internet mail standards specify that delivery status notifications > > hav

Re: In-queue rejections

2009-12-29 Thread Wietse Venema
Daniel L. Miller: > Wietse Venema wrote: > > Daniel L. Miller: > > > >> Wietse Venema wrote: > >> > > Postfix reports enhanced status codes (5.1.1 means the mailbox does > > not exist, etc.) in standardized non-delivery notifications. See RFC > > 3463 for an overview. > > > > Mail user agen

Re: Code burn-in: postscreen/verify cache cleanup

2009-12-29 Thread Stefan Förster
* Ralf Hildebrandt : > * Wietse Venema : > > Dec 29 04:20:17 spike postfix/postscreen[44900]: cache > > /var/lib/postfix/ps_cache.db full cleanup: retained=134 dropped=19 entries > > Dec 29 06:19:33 spike postfix/verify[46072]: cache > > /var/lib/postfix/verify.db full cleanup: retained=1726 drop