Re: DSN without attachment?

2010-05-14 Thread Markus Schwengel
On Thu, May 13, 2010 at 14:19, Noel Jones wrote: > On 5/13/2010 5:45 AM, Markus Schwengel wrote: >>> >>> please don't top-post. >>> >>> If you're using clamav-milter postfix will reject the mail with a >>> milter-reject: log entry and no DSN is sent. >>> >>> So, what are you really doing? >>> http

Re: overidding with my networks. Better way of doing it?

2010-05-14 Thread mouss
Josh Cason a écrit : > I have three servers that need to send me e-mail. Two of the servers > won't send say avast reports and what not. I get the following error > > From one server: > > warning: 71.39.113.15: address not listed for hostname sbs.rtgis.com > > From the other server: > > NOQUEU

Re: Drop mail when X-Something header contains "value" AND destination domain == "somedomain.com"

2010-05-14 Thread mouss
Roman Medina-Heigl Hernandez a écrit : > [snip] > > I'd like to drop email if *any* of the following conditions are met: > 1/ "X-Amavis-Alert" *contains* "INFECTED" or "BANNED" > 2/ "X-Spam-Flag" *contains* "YES" > > Relating your 2nd question, perhaps it's not that easy. I'm currently > sharing

Re: lost connection after DATA Q?

2010-05-14 Thread Charles Marcus
On 2010-05-13 9:59 PM, Gary Smith wrote: > Anyway, we are still receiving them. The firewall allows port 25 > incoming, everything outgoing but there is also some nat'ing going on > because of the ipvsadm. Anyone ever seen this type of issue with > this type of config? Per the welcome message yo

Re: lost connection after DATA Q?

2010-05-14 Thread Wietse Venema
Gary Smith: > I've been getting a lost of "lost connection after DATA" this last > week. On our low volume servers (that houses some minor clients) > we are receiving 800/day. We switched over to ipvsadm about 3 > weeks ago and I though maybe it's because of non-persistent > connections. So I re

Re: DSN without attachment?

2010-05-14 Thread Larry Stone
On 5/14/10 3:19 AM, Markus Schwengel at markus.schwen...@googlemail.com wrote: >>> When a virus is found postfix sends a message like the one I posted >>> earlier. Is this not a DSN generated by postfix? I'm confused... >> >> >> We need to see log entries of an entire infected message transacti

Re: DSN without attachment?

2010-05-14 Thread Markus Schwengel
On Fri, May 14, 2010 at 13:44, Larry Stone wrote: > On 5/14/10 3:19 AM, Markus Schwengel at markus.schwen...@googlemail.com > wrote: > > When a virus is found postfix sends a message like the one I posted earlier. Is this not a DSN generated by postfix? I'm confused... >>> >>> >>> We nee

Re: DSN without attachment?

2010-05-14 Thread Wietse Venema
Markus Schwengel: > > True, the message is generated locally. But this is exactly what I need. > > So the question remains the same: How can i tell postfix to not > include the original message in the DSN or at least strip the > attachment? You can submit the message with "sendmail -N never" and

Re: Best practice to drop spam with virtual mailboxes

2010-05-14 Thread mouss
Take a écrit : > Hello! > > I've been trying to figure out the best way to drop/sort spam with > virtual users. All documentation I could find didn't fit to our virtual > configuration and I'm a bit confused what's the best way to drop spam. > > Our setup is postfix+cyrus-imapd+spamassassin. User

RE: Best practice to drop spam with virtual mailboxes

2010-05-14 Thread Kaleb Hosie
> Take a écrit : > > Hello! > > > > I've been trying to figure out the best way to drop/sort spam with > > virtual users. All documentation I could find didn't fit to our > > virtual configuration and I'm a bit confused what's the > best way to drop spam. > > > > Our setup is postfix+cyrus-imapd

Re: DSN without attachment?

2010-05-14 Thread Markus Schwengel
On Fri, May 14, 2010 at 14:46, Wietse Venema wrote: > Markus Schwengel: >> >> True, the message is generated locally. But this is exactly what I need. >> >> So the question remains the same: How can i tell postfix to not >> include the original message in the DSN or at least strip the >> attachmen

Re: DSN without attachment?

2010-05-14 Thread Noel Jones
On 5/14/2010 7:08 AM, Markus Schwengel wrote: On Fri, May 14, 2010 at 13:44, Larry Stone wrote: On 5/14/10 3:19 AM, Markus Schwengel at markus.schwen...@googlemail.com wrote: When a virus is found postfix sends a message like the one I posted earlier. Is this not a DSN generated by postfix?

Re: DSN without attachment?

2010-05-14 Thread Wietse Venema
Noel Jones: > > So the question remains the same: How can i tell postfix to not > > include the original message in the DSN or at least strip the > > attachment? > > This might help: > http://www.postfix.org/postconf.5.html#bounce_size_limit > > But for locally submitted mail it might be better t

Re: To know home many e-mail per session

2010-05-14 Thread Yikuo Chan
Hi Wietse : thanks for your advice .. Kevin Chan On Thu, May 13, 2010 at 11:43 PM, Wietse Venema wrote: > Yikuo Chan: > > I am curious about how many e-mail that has been received per session on > my > > postfix mail server , can I got those information from log files ? if not > is > > there

block bounced mail to single user

2010-05-14 Thread motty.cruz
Hello All, A client in my domain let's say domain.com is receiving lots of bounce mails "backscatter" or "joe job" can I block all bounced mail to that specific user u...@domain.com? I have the following check_headers but does not work for me because it will block genuine email and mail server re

RE: lost connection after DATA Q?

2010-05-14 Thread Gary Smith
> Per the welcome message you received when you joined the list: > That would be like 5+ years ago. I've slept since then. > TO REPORT A PROBLEM see: > http://www.postfix.org/DEBUG_README.html#mail > > At a minimum, postfix version, output of postconf -n and unedited > NON-verbose logs exhibit

Re: SMTP Authentication in Luminis / iPlanet Environment

2010-05-14 Thread Robert Lopez
On Thu, May 13, 2010 at 2:55 PM, Victor Duchovni wrote: > To enable remote submission, provision a port 587 TLS encrypted > submission service that offers AUTH PLAIN, and perhaps also GSSAPI > if you are willing to expose a suitable KDC to the Internet and > client software supports SMTP with GSS

RE: lost connection after DATA Q?

2010-05-14 Thread Gary Smith
Weitse, For some reason, random mails from you pop up in my inbox, instead of my postfix list instead delivery on behalf of postfix-users@postfix.org like most others. Just an FYI > If the NAT assumes that everything is a web client and drops > connections after a few seconds, then Postfix wi

how to configure relay host list on postfix

2010-05-14 Thread Wilberth Pérez
Hi: Any one knows how i could configure a trusted relay host list on postfix ? i just want permit specifics (don´t all one subnet) email servers IP's uses my primary email server for relay email. -- LCC Wilberth de Jesús Pérez Segura C

Re: lost connection after DATA Q?

2010-05-14 Thread Victor Duchovni
On Fri, May 14, 2010 at 09:23:12AM -0700, Gary Smith wrote: > I'm sure it's not a probable with postfix, I'm just looking for postfix > cases where they have overcome this type of config issue. Have you disabled window scaling on your Postfix server. Lost connections are often the result of firew

RE: lost connection after DATA Q?

2010-05-14 Thread Gary Smith
> Have you disabled window scaling on your Postfix server. Lost connections > are often the result of firewalls mangling "advanced" TCP features. > > - Disable window scaling > - Disable ECN > I don't believe we have disabled any of the advanced features. That will give me something to

Re: lost connection after DATA Q?

2010-05-14 Thread Wietse Venema
Gary Smith: > > If the NAT assumes that everything is a web client and drops > > connections after a few seconds, then Postfix will report lost > > connections. > > > > If the NAT keeps connections open but it is a crappy box that can > > maintain state for only 100 connections, then it will be fo

Re: lost connection after DATA Q?

2010-05-14 Thread Wietse Venema
Gary Smith: > May 13 18:48:33 host01 postfix/smtpd[18110]: connect from sender[senderip] > May 13 18:48:33 host01 postfix/smtpd[18110]: setting up TLS connection from > sender[senderip] > May 13 18:48:33 host01 postfix/smtpd[18110]: Anonymous TLS connection > established from sender[senderip]: TL

Re: Best practice to drop spam with virtual mailboxes

2010-05-14 Thread mouss
mouss a écrit : > Take a écrit : >> Hello! >> >> I've been trying to figure out the best way to drop/sort spam with >> virtual users. All documentation I could find didn't fit to our virtual >> configuration and I'm a bit confused what's the best way to drop spam. >> >> Our setup is postfix+cyrus-i

Re: block bounced mail to single user

2010-05-14 Thread Noel Jones
On 5/14/2010 11:09 AM, motty.cruz wrote: Hello All, A client in my domain let’s say domain.com is receiving lots of bounce mails “backscatter” or “joe job” can I block all bounced mail to that specific user u...@domain.com? Read this: http://www.postfix.org/RESTRICTION_CLASS_README.html Then

Re: Best practice to drop spam with virtual mailboxes

2010-05-14 Thread mouss
Kaleb Hosie a écrit : >> [snip] >> > > What we have done in our organization is started Using SpamAssassin > Quarantine. It runs SA as well as scans it for viruses. If it's detected as > possible spam, it holds it in quarantine. > I see (at least) two problems: - this forkes a perl program for e

Re: how to configure relay host list on postfix

2010-05-14 Thread mouss
Wilberth Pérez a écrit : > Hi: > > Any one knows how i could configure a trusted relay host list on postfix ? > > i just want permit specifics (don´t all one subnet) email servers IP's > uses my primary email server for relay email. > > you can simply use mynetworks. for example mynetworks

RE: lost connection after DATA Q?

2010-05-14 Thread Gary Smith
> This strongly suggests that you have is a 10 second time limit > on the life time of NAT/VPS/whatever state. > > Wietse Makes complete sense. I will bounce it off the ipvsadm list. They don't tend to respond much as of recent. BTW, I did notice, while analyzing some of the logs, tha

Re: Postfix, SASL sending mail through Postfix.

2010-05-14 Thread BABEDH-DHRA
Ok I am reading the document and will get back later tonight or late Saturday. dovecot.rar Description: Binary data main.rar Description: Binary data

Re: lost connection after DATA Q?

2010-05-14 Thread Victor Duchovni
On Fri, May 14, 2010 at 11:20:47AM -0700, Gary Smith wrote: > May 13 04:08:33 host01 postfix/smtpd[10912]: lost connection after DATA from > unknown[82.178.110.201] Listed on SpamHaus XBL and PBL > May 13 04:08:34 host01 postfix/smtpd[10409]: lost connection after RCPT from > unknown[109.96.25

Mailing list on virtual domain

2010-05-14 Thread David F .
For a given virtual domain, I would like to send mail with a certain prefix to another process (via pipe) while all other mail gets delivered normally. Here are the (hopefully) relevant pieces of my various config files: /etc/postfix/master.cf list-expander unix - n n -

RE: lost connection after DATA Q?

2010-05-14 Thread Gary Smith
> > May 13 04:09:23 host01 postfix/smtpd[10301]: lost connection after RCPT from > unknown[190.107.112.194] > > Listed on SpamHaus XBL > > Unless these listings postdate your log entries, you should probably > not allow these clients to get as far as "DATA". > > reject_rbl_client zen.spamh

Re: Mailing list on virtual domain

2010-05-14 Thread Victor Duchovni
On Fri, May 14, 2010 at 02:06:55PM -0600, David F. wrote: > For a given virtual domain, I would like to send mail with a certain prefix > to another process (via pipe) while all other mail gets delivered normally. > > Here are the (hopefully) relevant pieces of my various config files: > > /etc

Re: Mailing list on virtual domain

2010-05-14 Thread David F.
On May 14, 2010, at 2:40 PM, Victor Duchovni wrote: > A wildcard transport mapping does not make random virtual mailbox > recipients valid. You should avoid wildcard mappings and list the valid > addresses in a suitable table, identity mappings in virtual_alias_maps > will suffice in this case, b

RE: content_filter post processing question

2010-05-14 Thread Gary Smith
> Just make sure to close stdout and stderr, to avoid writing garbage > into the pipe between Postfix and the filter, used to collect filter > error messages. > > With this level of complexity, you really should use the advanced (SMTP) > filter approach not pipe(8) based filters. Viktor/Weitse,

Re: DSN without attachment?

2010-05-14 Thread Markus Schwengel
On Fri, May 14, 2010 at 16:53, Wietse Venema wrote: > Noel Jones: >> > So the question remains the same: How can i tell postfix to not >> > include the original message in the DSN or at least strip the >> > attachment? >> >> This might help: >> http://www.postfix.org/postconf.5.html#bounce_size_li