Re: SSL_accept error / lost connection after STARTTLS

2010-02-17 Thread Merrick
I ended up getting this to work after installing: apt-get install dovecot-postfix and accepting the dovecot-postfix.conf file that comes with the package. Hope this helps someone down the road, sorry for replying to myself. On Tue, Feb 16, 2010 at 9:23 PM, Merrick wrote: > I migrated an 8 yea

Exceptions to reject_invalid_hostname ?

2010-02-17 Thread Frank Bonnet
Hello I have the following rules in main.cf : smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, reject_unauth_destination, reject_unli

Re: If I don't want to queue emails, which value I've to give to default_transport?

2010-02-17 Thread Michele Carandente
This is what I want: This is a local mailserver, where all the emails generally are queued and then relayed to differents smtp servers (depending of the sender). As internal emails I'll have different emails from differents domain... but I want to be able to say to postfix that one email is not loc

Re: Exceptions to reject_invalid_hostname ?

2010-02-17 Thread Barney Desmond
On 17 February 2010 20:07, Frank Bonnet wrote: > smtpd_recipient_restrictions = >   reject_invalid_hostname, >   reject_non_fqdn_sender, >   reject_unknown_sender_domain, >   reject_unknown_recipient_domain, >   reject_unauth_pipelining, >   permit_mynetworks, >   reject_unauth_destination, >   re

Deny SASL authentication not from local IP

2010-02-17 Thread Неворотин Вадим
How can I deny SASL authentication not from local (192.168.0.0/16) IP? Now I have restrictions in smtpd_recipient_restrictions and other parameters, which allow send mails to relayhost only from local IPs and only after authentication. But client from Internet still can authenticate on my server, b

Re: 554 5.7.1 relay access denied

2010-02-17 Thread Jerry
On Tue, 16 Feb 2010 15:20:56 -0800 (PST) Jeff Lacki replied: >That fixed it. I knew it would be something >simple, in the end it usually is. aka: Occam's razor -- Jerry postfix.u...@yahoo.com TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail TO (UN)SUBSCRIBE see http://ww

RE: SPF Issues

2010-02-17 Thread Jonathan Tripathy
Is it safe to put the external IP of my backup MX in mynetworks? -Original Message- From: owner-postfix-us...@postfix.org on behalf of LuKreme Sent: Thu 2/11/2010 20:30 To: postfix-users@postfix.org Subject: Re: SPF Issues On 11-Feb-2010, at 06:16, Jonathan Tripathy wrote: > > Does anyo

Re: SPF Issues

2010-02-17 Thread Gaby Vanhegan
On 17 Feb 2010, at 11:59, Jonathan Tripathy wrote: > Is it safe to put the external IP of my backup MX in mynetworks? Provided your backup MX has the same SMTP relay restrictions as the master MX you should be OK. I replicate our master config out to the secondaries but I have the master confi

Re: Deny SASL authentication not from local IP

2010-02-17 Thread Patrick Ben Koetter
* Неворотин Вадим : > How can I deny SASL authentication not from local (192.168.0.0/16) IP? Now I > have restrictions in smtpd_recipient_restrictions and other parameters, > which allow send mails to relayhost only from local IPs and only after > authentication. But client from Internet still can

RE: SPF Issues

2010-02-17 Thread Jonathan Tripathy
Yeah, what I do is have all my mail virtual mail accounts stored on the primary mx, and my backup mx is configured to relay mail (only my domains) to the primary mx using transport maps. I have since introduced SPF checking in the primary, and some emails are getting rejected when mail comes fro

Re: helo_access

2010-02-17 Thread Manu
Hello Thanks for all your reply I've made this change : smtpd_recipient_restrictions = check_client_access hash:/etc/postfix/smtp.domaineok.com reject /etc/postfix/smtp.domaineok.com contains: smtp.domaineok.com OK Another problem is that smtp.domaineok.com is a pool of computer (anti

Re: helo_access

2010-02-17 Thread Ralf Hildebrandt
* Manu : > .domaineok.com OK man 5 access says: domain.tld Matches domain.tld as the domain part of an email address. The pattern domain.tld also matches subdomains, but only when the string smtpd_access_maps is listed in the Postfix par‐ ent_domain_matches_subdomains configuration setting (

Re: helo_access

2010-02-17 Thread Manu
Yes I've seen this too. As i don't understand very well the smtpd_access_maps, i've choosen the second solution .domain.tld (note the initial dot) But strangly it doesn't work. domain.tld (without the initial dot) is OK Thanks for all - Original Message - From: "Ralf Hildebrandt"

Re: If I don't want to queue emails, which value I've to give to default_transport?

2010-02-17 Thread Reinaldo de Carvalho
On Wed, Feb 17, 2010 at 6:09 AM, Michele Carandente wrote: > This is what I want: > This is a local mailserver, where all the emails generally are queued > and then relayed to differents smtp servers (depending of the sender). Sender? > As internal emails I'll have different emails from differen

Re: helo_access

2010-02-17 Thread Victor Duchovni
On Wed, Feb 17, 2010 at 02:47:26PM +0100, Manu wrote: > Another problem is that smtp.domaineok.com is a pool of computer (anti > virus + anti spam relay). > I've tried to change /etc/postfix/smtp.domaineok.com to > > .domaineok.com OK > > But it doesn't work. > > It's OK when i put > smtp1.do

Re: Postfix - Timeout While Sending End of Data (slightly OT)

2010-02-17 Thread Charles Marcus
On 2010-02-16 7:30 PM, Sahil Tandon wrote: >> I wasn't the one posting the link, but I checked it when DJ Lucas posted >> it and checked it again just now, and it does have a visible answer (at >> the bottom of the page). > Yes, but for posterity and archives, Ansgar is correct and LuKreme is > wr

Re: Exceptions to reject_invalid_hostname ?

2010-02-17 Thread Frank Bonnet
On 02/17/10 11:32, Barney Desmond wrote: On 17 February 2010 20:07, Frank Bonnet wrote: smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks,