Wildcard certificate warning

2010-04-21 Thread Jordi Espasa Clofent
Hi all, I've configured a TLS/SSL smtpd in a box as follows: # postconf -n | grep -i tls smtpd_tls_cert_file = /usr/local/home/example.com.crt smtpd_tls_key_file = /usr/local/home/example.com.key smtpd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:/usr

Problem using deliver as LDA

2010-04-21 Thread Bastien Semene
Hi list, There's something I can't figure out with deliver as LDA configuration. I'm working with Postfix and Dovecot. I configured deliver as explained in the official doc and some directives in found in the conf file or while googling to resolve my issue : dovecot.conf : protocol lda { pos

Postfix sending NDR instead of rejecting in SMTP session

2010-04-21 Thread Vegard Svanberg
Hello, my mailserver usually rejects unknown recipients in the SMTP session. However, when an account or domain is forwarded, Postfix does not reject, but accepts and sends an NDR when it discovers that the recipient does not exist. Example 1: Domain @example.invalid is forwarded to domain @exam

Postfix & Exchange 2007

2010-04-21 Thread Cyril Vieville
Hi everybody, I'm actually configuring our new mail server Exchange 2007. It's a migration from Postfix/Cyrus to Exchange 2007. We plan to migrate some users at a time and we need to keep Postfix as a relay for the users who are migrated so postfix is used as a relay for the migrated users an

Re: Postfix sending NDR instead of rejecting in SMTP session

2010-04-21 Thread Ansgar Wiechers
On 2010-04-21 Vegard Svanberg wrote: > my mailserver usually rejects unknown recipients in the SMTP session. > > However, when an account or domain is forwarded, Postfix does not > reject, but accepts and sends an NDR when it discovers that the > recipient does not exist. > > Example 1: Domain @e

Re: Unknown senders and spam

2010-04-21 Thread Wietse Venema
Alex: > Hi, > > >> $ postfix check > >> postfix: fatal: /etc/postfix/main.cf, line 700: missing '=' after > >> attribute name: "warn_if_reject reject_maps_rbl > >> backscatter.spameatingmonkey.net" > >> Apr 19 02:35:33 smtp01 postfix[13351]: fatal: /etc/postfix/main.cf, > >> line 700: missing '='

email Status in mail queue

2010-04-21 Thread Sharma, Ashish
Hi, I just want to confirm my two observations that I read from Postfix documentation: 1. In before queue mail filter (milter) the email is not put in postfix queue until it's passed by milters successfully, only after email gets passed through milters then only email is received fully from fo

Re: Unknown senders and spam

2010-04-21 Thread Noel Jones
On 4/20/2010 10:47 PM, Alex wrote: Hi, $ postfix check postfix: fatal: /etc/postfix/main.cf, line 700: missing '=' after attribute name: "warn_if_reject reject_maps_rbl backscatter.spameatingmonkey.net" Apr 19 02:35:33 smtp01 postfix[13351]: fatal: /etc/postfix/main.cf, line 700: missing '=' af

Re: email Status in mail queue

2010-04-21 Thread Wietse Venema
Sharma, Ashish: > Hi, > > I just want to confirm my two observations that I read from Postfix > documentation: > > 1. In before queue mail filter (milter) the email is not put in > postfix queue until it's passed by milters successfully, only > after email gets passed through milters then only e

Re: Newbie question: difference config options

2010-04-21 Thread Noel Jones
On 4/21/2010 1:06 AM, M.S. Lucas wrote: Hello, I'm trying to migrate a qmail server to postfix and have a small question. At the bottom is a part of my main.cf file I'm missing what the real difference is between some options. In my words this is the difference but please correct me if I'm wro

Email attachment parsing via mime4j

2010-04-21 Thread Sharma, Ashish
Hi, I am using a small java smtp library (http://code.google.com/p/subethasmtp/), by this I need to parse the incoming emails in separate components viz body, attachments etc. I am trying to use mime4j , but the documentation suggests that mime4j can only give event notification or token notif

Re: Unknown senders and spam

2010-04-21 Thread Alex
Hi, > You're still using warn_if_reject wrong; that's why you're getting an error. > > If you post your "postconf -n" we can show you exactly what to change to use > warn_if_reject. Thanks so much for your help. I've included it below. Ideally I'd like to have support for smtpd_restriction_classe

Using Sasl authentication and RBL

2010-04-21 Thread Oliver Schinagl
Hello all, I've been trying to figure out why a new server I setup using postfix doesn't allow me to relay messages after I authenticate (using cyrus-sasl). It appears then I can authenticate just fine, but when I try to send a message, I get a RBL error. I obviously want my ADSL IP not to be whit

problem with postdrop: warning: mail_queue_enter: create file maildrop/631329.7980: Permission denied

2010-04-21 Thread peceka
Hi all! i've created jail on FreeBSD system and put postifx into it. When i'm in jail and want to send mail i've got many such errors: Apr 21 16:30:49 rt postfix/postdrop[7852]: warning: mail_queue_enter: create file maildrop/103703.7852: Permission denied Apr 21 16:31:14 rt postfix/postdrop[7980]

Re: Email attachment parsing via mime4j

2010-04-21 Thread Wietse Venema
Sharma, Ashish: > Hi, > > I am using a small java smtp library > (http://code.google.com/p/subethasmtp/), by this I need to parse > the incoming emails in separate components viz body, attachments > etc. > > I am trying to use mime4j , but the documentation suggests that > mime4j can only give eve

Re: problem with postdrop: warning: mail_queue_enter: create file maildrop/631329.7980: Permission denied

2010-04-21 Thread Wietse Venema
peceka: > Hi all! > > i've created jail on FreeBSD system and put postifx into it. > When i'm in jail and want to send mail i've got many such errors: > Apr 21 16:30:49 rt postfix/postdrop[7852]: warning: mail_queue_enter: > create file maildrop/103703.7852: Permission denied You broke the file p

Re: Problem using deliver as LDA

2010-04-21 Thread Bastien Semene
I tried to modify the files permissions and the uids in the conf file, but that changed nothing. I can't find what "euid" and "egid" exactly is, so I can't understand what postfix is logging. If someone can point me some resources on this, it will be a great help ! Thanks, Bastien Semene Le

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-21 Thread Gregory BELLIER
Hi ! I managed to make it work. Finally ! Thank you Victor ! However, I've done dozen of tests and I found a weird behaviour when authenticating and I can reproduce it every time. This is a test sample I've done. Obviously to have a success, the login/password in sasl_passwd.db and the login

RE: Email attachment parsing via mime4j

2010-04-21 Thread Sharma, Ashish
Wietse, I have an implementation wherein the smtp library(http://code.google.com/p/subethasmtp/) is delivering the mail byte stream to my custom logic, here by using javax mail api I am able to strip the attachments etc. out of the byte stream. But since there are lots of cases that I need to

Re: Email attachment parsing via mime4j

2010-04-21 Thread Wietse Venema
Sharma, Ashish: > But since there are lots of cases that I need to cater to that's > why I am looking for a MIME processor that does this all catering > to all of the possible cases (like text/html, text/plain, > multipart/alternative, multipart/mixed, multipart/related etc) on > the backend. ... >

RE: Email attachment parsing via mime4j

2010-04-21 Thread Sharma, Ashish
Wietse, Accept my apologies. but I thought postfix mailing list subscribers might have good ideas about MIME parsing and such stuff. Thanks for helping and replying patiently Ashish Sharma -Original Message- From: Wietse Venema [mailto:wie...@porcupine.org] Sent: Wednesday, April 21

Re: Postfix & Exchange 2007

2010-04-21 Thread Victor Duchovni
On Wed, Apr 21, 2010 at 12:59:15PM +0200, Cyril Vieville wrote: > I made some modifications in the Postfix configuration. > > > > /etc/postfix/main.cf : > mydestination = localhost, localhost.test.com, localhost.testing.com > relay_domains = fr.design.test.com, test.com, testing.com If your d

Re: Unknown senders and spam

2010-04-21 Thread Noel Jones
On 4/21/2010 9:31 AM, Alex wrote: Hi, You're still using warn_if_reject wrong; that's why you're getting an error. If you post your "postconf -n" we can show you exactly what to change to use warn_if_reject. Thanks so much for your help. I've included it below. Ideally I'd like to have suppo

Major Bug!!

2010-04-21 Thread The Doctor
Dear Wietse, There is a bug in Postfix that should looked at immediately. FRom http://groups.google.com/group/alt.comp.mail.postfix/browse_thread/thread/fa83dc31cec1194e# In case you think I am being pompous, I am not. Found the problem, a filter was set to 120.0.0.1 instead of 127.0.0.1 . I

Re: Major Bug!!

2010-04-21 Thread Matt Hayes
On 4/21/2010 1:20 PM, The Doctor wrote: > Dear Wietse, > > There is a bug in Postfix that should looked at immediately. > > FRom > > http://groups.google.com/group/alt.comp.mail.postfix/browse_thread/thread/fa83dc31cec1194e# > > In case you think I am being pompous, I am not. > > Found the pr

Re: Major Bug!!

2010-04-21 Thread Victor Duchovni
On Wed, Apr 21, 2010 at 11:20:11AM -0600, The Doctor wrote: > Dear Wietse, > > There is a bug in Postfix that should looked at immediately. Dear "Doctor", if you don't want to be rediculed and summarily dismissed, ask humbly for clarification of how things are expected to work and whether what y

OT: Cyrus-sasl + virtual_mailbox_maps query - lowercase username

2010-04-21 Thread Charles Marcus
Hi, I know this isn't exactly a postfix question, but I'm hoping someone will have pity on me and answer anyway... I have a server using postfix+courier-imap+cyrus-sasl. Currently the query in virtual_mailbox_maps is: query = SELECT maildir FROM mailbox WHERE username='%s' If I want to force th

Re: Major Bug!!

2010-04-21 Thread Wietse Venema
The Doctor: > Found the problem, a filter was set to 120.0.0.1 instead of 127.0.0.1 . > > I thought it was fixed. > > Even after 'fixing' this problem, postfix still insisted the filter > was at 120.0.0.1 . See the "postsuper -r" option: http://www.postfix.org/postsuper.1.html This is also

Why was this message rejected by postfix

2010-04-21 Thread Russell Horn
Hi, I believed I had the whole facebook IP block covered by /etc/postfix/access by adding the line: 69.63.176.0/20 OK And recreating the has file. However, a message from that block was rejected on account of its listing by spamcop. Apr 21 20:39:51 paddington postfix/smtpd[29991]: connect from

Re: Fixing reverse DNS lookup for a virtual domain

2010-04-21 Thread Kārlis Repsons
On Tuesday 20 April 2010 20:50:08 Noel Jones wrote: > Here's the problem, your IP has no hostname: > # host 85.15.210.5 > Host 5.210.15.85.in-addr.arpa not found: 3(NXDOMAIN) .. > Your HELO name and rDNS name should match, there should be an > A record for the rDNS name that points back to the same

Reject Notification

2010-04-21 Thread Carlos Mennens
I was wondering if there is a simple way to have Postfix send all 'reject' messages regardless of the reason to a specific email like 'rej...@mydomain.tld' and then in my /etc/aliases file just route all mail to 'reject' to a known recipient? I was looking to see what the best suggestion would be f

Re: Why was this message rejected by postfix

2010-04-21 Thread Victor Duchovni
On Wed, Apr 21, 2010 at 04:04:32PM -0400, Russell Horn wrote: > Hi, > > I believed I had the whole facebook IP block covered by > /etc/postfix/access by adding the line: > > 69.63.176.0/20 OK > > And recreating the has file. cidr != hash Choose one or the other. cidr:

Re: Why was this message rejected by postfix

2010-04-21 Thread Noel Jones
On 4/21/2010 3:04 PM, Russell Horn wrote: Hi, I believed I had the whole facebook IP block covered by /etc/postfix/access by adding the line: 69.63.176.0/20 OK And recreating the has file. cidr: syntax is not supported in hash: files. You can list the first three octects to simulate a /24

Re: Reject Notification

2010-04-21 Thread Eduardo Júnior
Hi, On Wed, Apr 21, 2010 at 8:16 PM, Carlos Mennens wrote: > I was wondering if there is a simple way to have Postfix send all > 'reject' messages regardless of the reason to a specific email like > 'rej...@mydomain.tld' and then in my /etc/aliases file just route all > mail to 'reject' to a kno

Re: Using Sasl authentication and RBL

2010-04-21 Thread mouss
Oliver Schinagl a écrit : > Hello all, > > I've been trying to figure out why a new server I setup using postfix > doesn't allow me to relay messages after I authenticate (using > cyrus-sasl). It appears then I can authenticate just fine, but when I > try to send a message, I get a RBL error. I ob

[OT] sql lower (WAS: OT: Cyrus-sasl + virtual_mailbox_maps query - lowercase username)

2010-04-21 Thread mouss
Charles Marcus a écrit : > Hi, > > I know this isn't exactly a postfix question, but I'm hoping someone > will have pity on me and answer anyway... > > I have a server using postfix+courier-imap+cyrus-sasl. Currently the > query in virtual_mailbox_maps is: > > query = SELECT maildir FROM mailbox

Re: Reject Notification

2010-04-21 Thread mouss
Carlos Mennens a écrit : > I was wondering if there is a simple way to have Postfix send all > 'reject' messages regardless of the reason to a specific email like > 'rej...@mydomain.tld' and then in my /etc/aliases file just route all > mail to 'reject' to a known recipient? I was looking to see wh

Re: mail from(Return-Path) when a mail relay via alias

2010-04-21 Thread mouss
Jeff Huang a écrit : > Hi All. > > I found when I send a email via alias,the Return-Path is null. > > For example,the alias : > > i...@domain1.com:i...@domain2.com sorry, unparsable... please copy-paste. anyway, in alias_maps, there's no domain in t

Re: Using Sasl authentication and RBL

2010-04-21 Thread Oliver Schinagl
On 04/21/10 23:47, mouss wrote: > Oliver Schinagl a écrit : > >> Hello all, >> >> I've been trying to figure out why a new server I setup using postfix >> doesn't allow me to relay messages after I authenticate (using >> cyrus-sasl). It appears then I can authenticate just fine, but when I >> tr

Set submission as to bypass RBLs

2010-04-21 Thread David Cottle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am having some issues with my server blocking ISP IP addresses. I know a recent update to plesk-9.5.1 changed my postfix main.cf and master.cf (the timestamps changed). I managed to fix main.cf as on the smtpd_client_restrictions, they put the RBLs

Re: Set submission as to bypass RBLs

2010-04-21 Thread Matt Hayes
n 04/21/2010 07:35 PM, David Cottle wrote: > #submission inet n - n - - smtpd > # -o smtpd_tls_security_level=encrypt > # -o smtpd_sasl_auth_enable=yes > # -o smtpd_client_restrictions=permit_sasl_authenticated,reject > # -o milter_macro_daemon_name=ORIGINATING S

Re: Using Sasl authentication and RBL

2010-04-21 Thread Matt Hayes
On 04/21/2010 07:19 PM, Oliver Schinagl wrote: > On 04/21/10 23:47, mouss wrote: >> Oliver Schinagl a écrit : >> >>> Hello all, >>> >>> I've been trying to figure out why a new server I setup using postfix >>> doesn't allow me to relay messages after I authenticate (using >>> cyrus-sasl). It app

Re: Set submission as to bypass RBLs

2010-04-21 Thread webmaster
Quoting Matt Hayes : n 04/21/2010 07:35 PM, David Cottle wrote: #submission inet n - n - - smtpd # -o smtpd_tls_security_level=encrypt # -o smtpd_sasl_auth_enable=yes # -o smtpd_client_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name

Re: Set submission as to bypass RBLs

2010-04-21 Thread Matt Hayes
On 04/21/2010 08:14 PM, webmas...@aus-city.com wrote: > Quoting Matt Hayes : > >> n 04/21/2010 07:35 PM, David Cottle wrote: >> >>> #submission inet n - n - - smtpd >>> # -o smtpd_tls_security_level=encrypt >>> # -o smtpd_sasl_auth_enable=yes >>> # -o smtpd_client

Re: Using Sasl authentication and RBL

2010-04-21 Thread Oliver Schinagl
On 04/22/10 02:10, Matt Hayes wrote: > On 04/21/2010 07:19 PM, Oliver Schinagl wrote: > >> On 04/21/10 23:47, mouss wrote: >> >>> Oliver Schinagl a écrit : >>> >>> Hello all, I've been trying to figure out why a new server I setup using postfix doesn't allow me

Re: Using Sasl authentication and RBL

2010-04-21 Thread Matt Hayes
On 04/21/2010 08:33 PM, Oliver Schinagl wrote: > On 04/22/10 02:10, Matt Hayes wrote: >> On 04/21/2010 07:19 PM, Oliver Schinagl wrote: >> >>> On 04/21/10 23:47, mouss wrote: >>> Oliver Schinagl a écrit : > Hello all, > > I've been trying to figure out

Re: Using Sasl authentication and RBL

2010-04-21 Thread Oliver Schinagl
On 04/22/10 02:42, Matt Hayes wrote: > > On 04/21/2010 08:33 PM, Oliver Schinagl wrote: > >> On 04/22/10 02:10, Matt Hayes wrote: >> >>> On 04/21/2010 07:19 PM, Oliver Schinagl wrote: >>> >>> On 04/21/10 23:47, mouss wrote: > Oliver Schinagl a écri

Re: Set submission as to bypass RBLs

2010-04-21 Thread David Cottle
Sent from my iPhone On 22/04/2010, at 10:28, Matt Hayes wrote: On 04/21/2010 08:14 PM, webmas...@aus-city.com wrote: Quoting Matt Hayes : n 04/21/2010 07:35 PM, David Cottle wrote: #submission inet n - n - - smtpd # -o smtpd_tls_security_level=encrypt #

Re: Set submission as to bypass RBLs

2010-04-21 Thread Matt Hayes
On 04/21/2010 09:23 PM, David Cottle wrote: > > > Sent from my iPhone > > On 22/04/2010, at 10:28, Matt Hayes wrote: > >> >> On 04/21/2010 08:14 PM, webmas...@aus-city.com wrote: >>> Quoting Matt Hayes : >>> n 04/21/2010 07:35 PM, David Cottle wrote: > #submission inet n

Re: Using Sasl authentication and RBL

2010-04-21 Thread Oliver Schinagl
On 04/22/10 02:57, Oliver Schinagl wrote: > On 04/22/10 02:42, Matt Hayes wrote: > >> On 04/21/2010 08:33 PM, Oliver Schinagl wrote: >> >> >>> On 04/22/10 02:10, Matt Hayes wrote: >>> >>> On 04/21/2010 07:19 PM, Oliver Schinagl wrote: >>

postfix smtp_loop() breaks SMTP

2010-04-21 Thread Mij
Hello folks, Postfix appears to be breaking RFC 5321 by speculatively injecting the entire envelope session passing over replies from the server. In src/smtp/smtp_proto.c , smtp_loop() handles the delivery loop by deliberately "pipelining" commands and replies in separate queues. Only the SMTP g

Re: Using Sasl authentication and RBL

2010-04-21 Thread Oliver Schinagl
On 04/22/10 03:39, Oliver Schinagl wrote: > On 04/22/10 02:57, Oliver Schinagl wrote: > >> On 04/22/10 02:42, Matt Hayes wrote: >> >> >>> On 04/21/2010 08:33 PM, Oliver Schinagl wrote: >>> >>> >>> On 04/22/10 02:10, Matt Hayes wrote:

Re: Using Sasl authentication and RBL

2010-04-21 Thread Noel Jones
On 4/21/2010 8:39 PM, Oliver Schinagl wrote: Heh, I suppose it wasn't as straightforward as that; I'll look more into it after some sleep, I enabled it with the following: submission inet n - n - - smtpd # -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_

Re: Set submission as to bypass RBLs

2010-04-21 Thread Noel Jones
On 4/21/2010 6:35 PM, David Cottle wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am having some issues with my server blocking ISP IP addresses. I know a recent update to plesk-9.5.1 changed my postfix main.cf and master.cf (the timestamps changed). I managed to fix main.cf as on the

Re: Set submission as to bypass RBLs

2010-04-21 Thread David Cottle
Sent from my iPhone On 22/04/2010, at 11:38, Matt Hayes wrote: On 04/21/2010 09:23 PM, David Cottle wrote: Sent from my iPhone On 22/04/2010, at 10:28, Matt Hayes wrote: On 04/21/2010 08:14 PM, webmas...@aus-city.com wrote: Quoting Matt Hayes : n 04/21/2010 07:35 PM, David Cottl

Re: Using Sasl authentication and RBL

2010-04-21 Thread Oliver Schinagl
On 04/22/10 03:55, Noel Jones wrote: > On 4/21/2010 8:39 PM, Oliver Schinagl wrote: >>> >> Heh, I suppose it wasn't as straightforward as that; I'll look more into >> it after some sleep, I enabled it with the following: >> submission inet n - n - - smtpd >> # -o smtp

Re: Set submission as to bypass RBLs

2010-04-21 Thread Noel Jones
On 4/21/2010 9:01 PM, David Cottle wrote: The best way: postconf -n -Matt smtpd_client_restrictions = check_client_access hash:/etc/postfix/whitelist, permit_sasl_authenticated, check_client_access hash:/etc/postfix/check_backscatterer, check_client_access hash:/etc/postfix/check_spamcannibal

Re: postfix smtp_loop() breaks SMTP

2010-04-21 Thread Wietse Venema
Mij: > Hello folks, > > Postfix appears to be breaking RFC 5321 by speculatively injecting > the entire envelope session passing over replies from the server. You MUST show a packet trace to support this claim. Wietse

Re: mail from(Return-Path) when a mail relay via alias

2010-04-21 Thread Jeff Huang
For Example: Mail Server1(@domain1.com): alias: id1:i...@domain2.com when I send a email from other domain(not @domain1.com) to i...@domain1.com. I will receive this email from i...@domain2.com. And I check the header of the email,I found that:Return-Path: <>.

Re: postfix smtp_loop() breaks SMTP

2010-04-21 Thread Matt Hayes
On 04/21/2010 09:45 PM, Mij wrote: > Hello folks, > > Postfix appears to be breaking RFC 5321 by speculatively injecting > the entire envelope session passing over replies from the server. > > In src/smtp/smtp_proto.c , smtp_loop() handles the delivery loop by > deliberately "pipelining" comman

Re: postfix smtp_loop() breaks SMTP

2010-04-21 Thread Wietse Venema
Mij: > Hello folks, > > Postfix appears to be breaking RFC 5321 by speculatively injecting > the entire envelope session passing over replies from the server. Oh, and while you're collecting the evidence, you may also want to read up on RFC 2920 (SMTP Pipelining). Wietse

Re: Using Sasl authentication and RBL

2010-04-21 Thread Noel Jones
On 4/21/2010 9:03 PM, Oliver Schinagl wrote: On 04/22/10 03:55, Noel Jones wrote: On 4/21/2010 8:39 PM, Oliver Schinagl wrote: Heh, I suppose it wasn't as straightforward as that; I'll look more into it after some sleep, I enabled it with the following: submission inet n - n

Re: Set submission as to bypass RBLs

2010-04-21 Thread David Cottle
Sent from my iPhone On 22/04/2010, at 12:00, Noel Jones wrote: On 4/21/2010 6:35 PM, David Cottle wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am having some issues with my server blocking ISP IP addresses. I know a recent update to plesk-9.5.1 changed my postfix main.cf and mas

Re: Using Sasl authentication and RBL

2010-04-21 Thread David Cottle
Sent from my iPhone On 22/04/2010, at 12:49, Noel Jones wrote: On 4/21/2010 9:03 PM, Oliver Schinagl wrote: On 04/22/10 03:55, Noel Jones wrote: On 4/21/2010 8:39 PM, Oliver Schinagl wrote: Heh, I suppose it wasn't as straightforward as that; I'll look more into it after some sleep, I

Re: postfix smtp_loop() breaks SMTP

2010-04-21 Thread Victor Duchovni
On Thu, Apr 22, 2010 at 03:45:34AM +0200, Mij wrote: > Postfix appears to be breaking RFC 5321 by speculatively injecting > the entire envelope session passing over replies from the server. Folks, today is not April 1st, that was 21 days ago. Please, no more "Postfix is fundamentally broken, and