Re: whitelist for smtp_recipient_restrictions

2010-03-25 Thread Ralf Hildebrandt
* Schwalbe, Oliver : > Hi community, > > in the last time i have some problems with smtp-senders who are blocked > by dnsbl-lists like uceprotect.net. > The owner of the mailservers assured me not to generate and send any > SPAM. How can i implement a whitelist for some friendly senderdomains > t

Postfix-2.7.0: wlgiv...@other.host loop!!!

2010-03-25 Thread Will L Givens
I have been messing with this for far more time than I should to do something so simple! I've run postfix in the past and have never run into anything like this. Basically it is this, I wanted to create an alias, wlgivens, to direct all email to wlgiv...@domain.net to wi...@domain.net. Simple? You

reject forged emails

2010-03-25 Thread Frank Bonnet
Hello Is there a possibility to reject that kind of forged email I have one domain, say domain.com and I want to reject emails that pretend to be sent from domain.com but are NOT into our IP range say 123.123.0.0/16 Thank you

RE: reject forged emails

2010-03-25 Thread Terry Gilsenan
Sent from my HTC -Original Message- From: Frank Bonnet Sent: Thursday, 25 March 2010 6:22 PM To: postfix-users@postfix.org Subject: reject forged emails Hello Is there a possibility to reject that kind of forged email I have one domain, say domain.com and I want to reject emails tha

Re: reject forged emails

2010-03-25 Thread Ralf Hildebrandt
* Frank Bonnet : > Hello > > Is there a possibility to reject that kind of forged email > > I have one domain, say domain.com and I want to reject emails > that pretend to be sent from domain.com > but are NOT into our IP range say 123.123.0.0/16 http://www.arschkrebs.de/postfix/postfix_incoming

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-03-25 Thread Gregory BELLIER
Victor Duchovni a écrit : On Wed, Mar 24, 2010 at 11:09:44AM +0100, Gregory BELLIER wrote: if I copy an existing cipher in OpenSSL and rename it, it will act as if it is a new cipher. On the wire SSL ciphers have numeric ids, not names. If you "rename" a cipher, it just changes how

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-03-25 Thread Gregory BELLIER
mouss a écrit : $ ldd /usr/local/libexec/postfix/smtpd /usr/local/libexec/postfix/smtpd: ... libssl.so.7 => /usr/local/lib/libssl.so.7 (0x2810a000) libcrypto.so.7 => /usr/local/lib/libcrypto.so.7 (0x2815) ... if you rebuild openssl but provide the same ABI, then it's ok. If

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-03-25 Thread Wietse Venema
Gregory BELLIER: > > At this point, you really need to step back, take a deep breath, and > > use OpenSSL as-is. > > > As I said, it's to learn. If I do nothing then it's pointless. > > What I ask is not your point on if it's relevant to do it or not because > we all know it's not. With inten

Re: Greylist server recommendations?

2010-03-25 Thread Nikolai K. Bochev
I provided a reply with info on the setup i use it in. While i do realize that it is far from big, it certainly proves that policydv2 is stable enough to be used in medium or large deployments and it does work and scale good enough. What i don't get is why does it bother you mentioning v2. v1 wo

Directing SPAM mail to a Junk Folder

2010-03-25 Thread Chaminda Indrajith
Dear All, I need to put the SPAM mails into users' Junk Mail folder. How can we do it in Postfix? Mails are stored in Maildir format in the user's home directory. Junk mail folder is inside the Maildir as ".Junk". Amavisd-new tags the spam mails as "[SPAM]" Highly appreciate your help in t

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread Ansgar Wiechers
On 2010-03-25 Chaminda Indrajith wrote: > I need to put the SPAM mails into users' Junk Mail folder. How can we > do it in Postfix? You can't. Postfix does not know (or care) about the inner workings of a user's mailbox. > Mails are stored in Maildir format in the user's home directory. Junk > ma

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread Erik Logtenberg
The (imho) nicest solution is to use an LDA which supports sieve. Then write a small sieve script to move spam to the junk folder. You can use sieve for all other kinds of mail-sorting as well. Most popular LDA's support sieve. Ansgar Wiechers wrote: > On 2010-03-25 Chaminda Indrajith wrote: >> I

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread Miles Fidelman
Chaminda Indrajith wrote: Dear All, I need to put the SPAM mails into users' Junk Mail folder. How can we do it in Postfix? Mails are stored in Maildir format in the user's home directory. Junk mail folder is inside the Maildir as ".Junk". Amavisd-new tags the spam mails as "[SPAM]" 1. ins

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread DUBOURG Kevin
Hello, I use maildrop package to replace "virtual". In your email directory "/home/email" for example you put this : Filename => .mailfilter # move spam to spamfolder ## SPAMFLD=$DEFAULT/.Junk/ SUBSCRIPT=$DEFAULT/courierimapsubscribed # test idf Junk folder exists, if notr create one # autosub

Re: Postfix-2.7.0: wlgiv...@other.host loop!!!

2010-03-25 Thread Wietse Venema
Will L Givens: > I have been messing with this for far more time than I should to do > something so simple! I've run postfix in the past and have never run into > anything like this. Basically it is this, I wanted to create an alias, > wlgivens, to direct all email to wlgiv...@domain.net to wi...@d

Exchange ActiveSync account

2010-03-25 Thread Jack Raats
Hi, I have an Exchange ActiveSync account and I would like to get this mail on my freebsd 7.3-stable server. I donn't haven an imap or pop account, only the information of the activesync account. Can anyone give me a clue how to achieve this? Thanks for your time! Jack Raats

Sending email from a pool of IP addresses

2010-03-25 Thread David Michard
Hello, I know this question has been discussed on this list* but no suitable solution was provided for our SMTP server settings. A patch** is published but reports on this list say that it does not work. I am responsible for a medium sized mailing-list, through which one email is sent per day to

Re: question about MX records and postfix (repost)

2010-03-25 Thread Daniel L'Hommedieu
On Mar 24, 2010, at 17:14, Wietse Venema wrote: > Daniel L'Hommedieu: >>> If all you want is treat anything.example.com as example.com, use: >>> >>> /etc/postfix/main.cf: >>> mydestination = localhost example.com pcre:/etc/postfix/mydestination.pcre >>> >>> /etc/postfix/mydestination.pcre: >>> /

Re: Relaying and backskatter problem

2010-03-25 Thread Randy
Stan Hoeppner wrote: Randy put forth on 3/24/2010 3:55 PM: dig -x 208.43.143.111 ;; ANSWER SECTION: 111.143.43.208.in-addr.arpa. 3600 INPTR 208.43.143.111-static.reverse.softlayer.com. Your problem isn't the Exchange server per se. Your problem is that you're forwarding spam

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread Chaminda Indrajith
Dear All, Thank you very much for the immediate responses for all you guys... I will try all of these options and let you know the progress. Thanks and Regards Indrajith On Thu, 25 Mar 2010 13:37:19 +0100 DUBOURG Kevin wrote: Hello, I use maildrop package to replace "virtual". In your email

Re: question about MX records and postfix (repost)

2010-03-25 Thread Wietse Venema
Daniel L'Hommedieu: > My real reason for writing again is to ask about PCRE support in > Postfix. I have read the short PCRE README at > http://www.postfix.org/PCRE_README.html, but it doesn't specifically > answer this question, or maybe I am not understanding it: is PCRE > supported (in Postfix)

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Tom Hendrikx
David Michard wrote: > we are having more and more problems with > very conservative SMTP servers enforcing a low number of simultaneous > connections from a single IP address. Our subscribers wish to receive > their email as soon as possible so delaying the email for a few hours > is not an option

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Ralf Hildebrandt
* Tom Hendrikx : > So actually you are trying to solve the other mail servers trouble. Did > you contact (some of) them to get you whitelisted? One could also run multiple instances and cascade them as a fallback_relay chain (uaaah!) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwer

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Daniel L'Hommedieu
On Mar 25, 2010, at 10:13, Tom Hendrikx wrote: > David Michard wrote: >> we are having more and more problems with >> very conservative SMTP servers enforcing a low number of simultaneous >> connections from a single IP address. Our subscribers wish to receive >> their email as soon as possible so

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Wietse Venema
David Michard: > Hello, > > I know this question has been discussed on this list* but no suitable > solution was provided for our SMTP server settings. > A patch** is published but reports on this list say that it does not work. > > I am responsible for a medium sized mailing-list, through which

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Wietse Venema
Daniel L'Hommedieu: > Here's what I did when I had a similar issue with sendmail: I > reconfigured sendmail such that all mailers are considered expensive. > In sendmail, what this does is: new messages are only queued, and > messages are sent only during a queue run. ... > I don't know if postfi

Re: Relaying and backskatter problem

2010-03-25 Thread martijn.list
Randy wrote: It appears that exchange uses some other criteria to check sender domain or that it does additional checks and simply rejects with that message. I do realize that I could set up something where we accept the mail to these domains, scan it then drop the email if it is tagged as sp

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread /dev/rob0
On Thu, Mar 25, 2010 at 05:05:47PM +0530, Chaminda Indrajith wrote: > I need to put the SPAM mails into users' Junk Mail folder. How > can we do it in Postfix? > > Mails are stored in Maildir format in the user's home directory. > Junk mail folder is inside the Maildir as ".Junk". Amavisd-new > ta

how to allow a rejcted domain

2010-03-25 Thread Jamie Griffin
Hello My isp has sent a message that my postfix is rejecting. I have spent the morning reading through what i think are the relevent parts of the documentation and through the archives but the changes i've made to my configuration are not working and I don't understand what i've done wrong.

RE: How to disable Postfix Mail Delivery Report

2010-03-25 Thread Aleksey Chudov
Hello! Thank you for your answer. I try to use "<>" as sender address but unfortunately some mail filters mark messages with null sender as spam, so I need another method to disable Postfix Mail Delivery Report. Is the a way to disable Postfix Mail Delivery Report completely or for some senders o

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-03-25 Thread Victor Duchovni
On Thu, Mar 25, 2010 at 10:31:40AM +0100, Gregory BELLIER wrote: >> At this point, you really need to step back, take a deep breath, and >> use OpenSSL as-is. >> > As I said, it's to learn. If I do nothing then it's pointless. No need to change the OpenSSL APIs to discover how Postfix handles

Sending mail to a FAX machine

2010-03-25 Thread Stefano Colombo
Hallo to everybody, I'm a newbie and I'm sorry for my English. Here is my question: Can I diversify messages for Hylafax relaying ( that's already running) from all others messages that I would deliver locally? Actually all the messages are "piped" to usr fax for faxing delivery! Thanks a l

Re: Small amount of spam still routed through server and another problem with spam

2010-03-25 Thread Charles Marcus
On 2010-03-24 7:24 PM, Josh Cason wrote: > As I said a person connnects up. (not one of the email users). Just a > random ip number. Sometimes it is postini (we use postini), aol, etc, > etc. That sends one message in with mutiple reciepients. Then it sends > out like say 20 or 30 or 100 messages t

Re: how to allow a rejcted domain

2010-03-25 Thread Dennis Guhl
On Thu, Mar 25, 2010 at 03:40:55PM +, Jamie Griffin wrote: > > Hello > > My isp has sent a message that my postfix is rejecting. I have spent the > morning reading through what i think are the relevent parts of the > documentation and through the archives but the changes i've made to my >

Re: how to allow a rejcted domain

2010-03-25 Thread /dev/rob0
On Thu, Mar 25, 2010 at 03:40:55PM +, Jamie Griffin wrote: > Mar 25 15:04:45 fix postfix/smtpd[11095]: NOQUEUE: reject: RCPT > from pih-inmx03.plus.net[212.159.10.4]: 450 4.1.8 > : Sender address > rejected: Domain not found; fhw-workplace02.servers.plus.net is the domain that does not exi

sender_dependent_relayhost_maps + recipient_bcc_maps

2010-03-25 Thread Damon Miller
Hello. I've configured Postfix to relay mail from a specific address to a remote MTA through 'sender_dependent_relayhost_maps' and that works fine. I now want to BCC an address for messages sent by this same user. The most obvious option seemed 'recipient_bcc_maps', but unfortunately I'm not

Re: How to disable Postfix Mail Delivery Report

2010-03-25 Thread Wietse Venema
Aleksey Chudov: > Hello! > > Thank you for your answer. I try to use "<>" as sender address but > unfortunately some mail filters mark messages with null sender as spam, so I > need another method to disable Postfix Mail Delivery Report. > > Is the a way to disable Postfix Mail Delivery Report co

Re: Log files this time! Small amount of spam still routed through server and another problem with spam

2010-03-25 Thread Josh Cason
Thanks for the help so far. I already posted my config file in the very first post. However, I will repost it. Plus an additional log file of the attack. Yes to me it seems like an open relay. As stated before when I run tests they say closed relay. As for reading the howto's. I have been t

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-03-25 Thread Gregory BELLIER
Victor Duchovni a e'crit: On Thu, Mar 25, 2010 at 10:31:40AM +0100, Gregory BELLIER wrote: At this point, you really need to step back, take a deep breath, and use OpenSSL as-is. As I said, it's to learn. If I do nothing then it's pointless. No need to change the OpenSSL

Re: how to allow a rejcted domain

2010-03-25 Thread Jamie Griffin
Hello Rob (sorry if that's wrong, just assumed that's your name) and Dennis, thank you for your time and help. > You need to understand the documentation of > parent_domain_matches_subdomains. Unfortunately, I don't know enough > to explain it to you. :) But I'm fairly sure in your case that t

Re: Sending mail to a FAX machine

2010-03-25 Thread postfix
Stefano Colombo wrote: Hallo to everybody, I’m a newbie and I’m sorry for my English… Here is my question: Can I diversify > messages for Hylafax relaying ( that’s already running) from all others messages that I would deliver locally? Actually all the messages

Re: how to allow a rejcted domain

2010-03-25 Thread Dennis Guhl
On Thu, Mar 25, 2010 at 05:43:11PM +, Jamie Griffin wrote: > > Hello Rob (sorry if that's wrong, just assumed that's your name) and Dennis, > thank you for your time and help. dnf [..] > I also understood that using the $smtpd_sender_restrictions parameter would > be the right way to whi

Re: reject forged emails

2010-03-25 Thread Marcio Vogel Merlone dos Santos
On 25-03-2010 05:41, Ralf Hildebrandt wrote: * Frank Bonnet: I have one domain, say domain.com and I want to reject emails that pretend to be sent from domain.com but are NOT into our IP range say 123.123.0.0/16 http://www.arschkrebs.de/postfix/postfix_incoming.shtm Hi Ralf, It see

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Robert Schetterer
Am 25.03.2010 14:26, schrieb David Michard: > Hello, > > I know this question has been discussed on this list* but no suitable > solution was provided for our SMTP server settings. > A patch** is published but reports on this list say that it does not work. > > I am responsible for a medium sized

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Wietse Venema
Wietse Venema: > David Michard: > > Hello, > > > > I know this question has been discussed on this list* but no suitable > > solution was provided for our SMTP server settings. > > A patch** is published but reports on this list say that it does not work. > > > > I am responsible for a medium siz

Re: Log files this time! Small amount of spam still routed through server and another problem with spam

2010-03-25 Thread Noel Jones
On 3/25/2010 12:22 PM, Josh Cason wrote: Thanks for the help so far. I already posted my config file in the very first post. However, I will repost it. Plus an additional log file of the attack. Yes to me it seems like an open relay. As stated before when I run tests they say closed relay. As for

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Randy
David Michard wrote: Hello, I know this question has been discussed on this list* but no suitable solution was provided for our SMTP server settings. A patch** is published but reports on this list say that it does not work. I am responsible for a medium sized mailing-list, through which one em

Re: reject forged emails

2010-03-25 Thread Frank Bonnet
Le 25/03/2010 09:41, Ralf Hildebrandt a écrit : * Frank Bonnet: Hello Is there a possibility to reject that kind of forged email I have one domain, say domain.com and I want to reject emails that pretend to be sent from domain.com but are NOT into our IP range say 123.123.0.0/16 http://www.a

Re: update: Small amount of spam still routed through server and another problem with spam

2010-03-25 Thread Josh Cason
I checked a few setting as explained. I have a stupid question and also my results. First of all it is not just comming from postini. It once in a while wonders in from the outside. Not that I know how since all my mx records points to postini. Just random junk I suspose. The next thing i

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread Voytek Eymont
On Fri, March 26, 2010 2:29 am, /dev/rob0 wrote: Rob0, > Amavisd-new can also use a recipient_delimiter and change the > localpart "user" to "user+spam". See amavisd-new documentation to learn how > to activate this feature. > Postfix virtual(8) can handle this differently by using a different >

Re: reject forged emails

2010-03-25 Thread Ralf Hildebrandt
* Marcio Vogel Merlone dos Santos : > On 25-03-2010 05:41, Ralf Hildebrandt wrote: > >* Frank Bonnet: > >>I have one domain, say domain.com and I want to reject emails > >>that pretend to be sent from domain.com > >>but are NOT into our IP range say 123.123.0.0/16 > >http://www.arschkrebs.de/postfi

Re: update: Small amount of spam still routed through server and another problem with spam

2010-03-25 Thread Ansgar Wiechers
On 2010-03-25 Josh Cason wrote: > First of all it is not just comming from postini. It once in a while > wonders in from the outside. Not that I know how since all my mx > records points to postini. Just random junk I suspose. Your previous log excerpt did not include a full transaction (much less

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread /dev/rob0
On Fri, Mar 26, 2010 at 08:26:33AM +1100, Voytek Eymont wrote: > so, if I was to create a mail user 'voytek+spam' in the database, > '+spam' mail would end up in voytek+spam mail user maildir ? The user for virtual(8) must be the full address: voy...@example.com example.com/voytek/ma

Re: how to allow a rejcted domain

2010-03-25 Thread /dev/rob0
On Thu, Mar 25, 2010 at 05:43:11PM +, Jamie Griffin wrote: > > You need to understand the documentation of > > parent_domain_matches_subdomains. Unfortunately, I don't know > > enough to explain it to you. :) But I'm fairly sure in your case > > that the leading dot pattern was not looked up

Re: sender_dependent_relayhost_maps + recipient_bcc_maps

2010-03-25 Thread /dev/rob0
On Thu, Mar 25, 2010 at 12:48:33PM -0400, Damon Miller wrote: > Hello. I've configured Postfix to relay mail from a specific > address to a remote MTA through 'sender_dependent_relayhost_maps' > and that works fine. I now want to BCC an address for messages > sent by this same user. The most

Re: update: Small amount of spam still routed through server and another problem with spam

2010-03-25 Thread Noel Jones
On 3/25/2010 4:27 PM, Josh Cason wrote: I checked a few setting as explained. I have a stupid question and also my results. First of all it is not just comming from postini. It once in a while wonders in from the outside. Not that I know how since all my mx records points to postini. Just random

Re: how to allow a rejcted domain

2010-03-25 Thread Jamie Griffin
> No. If you tell Postfix to match subdomains, the lookup that does > this is the domain name WITHOUT the leading dot. For example, this: > ihost.com permit_auth_destination > would match for a check_sender_access lookup of > i...@low1ap106.infra.secaucus.mebs.ihost.com . (Maybe my comp

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread Chaminda Indrajith
Hi rob0, ~user/.forward+spam would be a good solution for me since my users are system users. Could you give me an example for the following? I can configure amavisd-new to do + address extension. ## Deliver user+s...@example.com mails to /home/user/Maildir/.Junk .Junk is also in Maildir f

Set up SMTP AUTH/SASL, can't log in

2010-03-25 Thread Dennis Carr
I just set up basic configurations for SMTP AUTH (and, the next step, SASL) for my server, however I cannot seem to make it work quite right. Using the instructions at http://www.postfix.org/SASL_README.html, focusing on using dovecot as it is present. (Note, dovecot is not the active POP3/IMAP4 d

machine.local question

2010-03-25 Thread Terry Barnum
I've setup a postfix/dovecot/mysql server and am in the process of testing. I have a few machines without fully qualified names (e.g. mac.local) that run nightly scripts to be emailed. They were being rejected by postfix due to: Sender address rejected: Domain not found. I added to smtpd_sender

RE: sender_dependent_relayhost_maps + recipient_bcc_maps

2010-03-25 Thread Damon Miller
On Thu, Mar 25, 2010 at 7:45:14PM -0400, /dev/rob0 wrote: > On Thu, Mar 25, 2010 at 12:48:33PM -0400, Damon Miller wrote: > > Hello. I've configured Postfix to relay mail from a specific > > address to a remote MTA through 'sender_dependent_relayhost_maps' > > and that works fine. I now want to

RE: A little bit of spam is getting through

2010-03-25 Thread Josh Cason
I don't have time to post alot more info since I'm off of work on friday. But going back and looking at my log. I thought of a question a few months ago. But had not place to ask. We are behind a firewall that is doing nat translation. I got the impression that when this spam hits. It looks

Deliver raw, local emails to a socket?

2010-03-25 Thread Stephens, Kurt
I'd like to have all local postfix deliveries to go directly into a TCP or UDS (named pipe) socket, that will eventually end up raw in database table for subsequent triage. Are there any concrete examples or tools that do not include procmail? It appears that local(8) expects the mailbox path