Re: postscreen doesn't seem to work anymore

2010-06-16 Thread Michael Tokarev
15.06.2010 21:12, Ralf Hildebrandt wrote: * Wietse Venema: More thoroughly, when I search for all IP addresses that show up in postscreen "DNSBL rank XXX" records: % egrep "`awk '/DNSBL rank/ { print $NF }' /var/log/maillog | sort -u`" /var/log/maillog | grep smtpd If I try this, I'm gettin

Two Postfix instances

2010-06-16 Thread Dragan Zubac
Hello I have two Postfix instances with configuration folders : /etc/postfix /etc/postfix-second I start both instances by issuing the following commands : postfix -c /etc/postfix start postfix -c /etc/postfix-second start I'm about to write a start/stop script for both instances,but I have a

Re: [SP] Re: How to force S MTP AUTH to restrict Sender Addresses…

2010-06-16 Thread Charles Marcus
On 2010-06-15 6:29 PM, Andrew G. Grant wrote: > Can anyone answer the question about how SASL is able to > authenticate Users with their Passwords stored in Open Directory, but > not pull their Email addresses? What do you mean by 'pull their email addresses'? If you mean that you have assigned m

Re: different IP for outbound mail

2010-06-16 Thread Wietse Venema
Avinash Pawar // Viva: > Hi Wietse, > > I check out the sender reputation topics under Postfix 2.7 RELEASE NOTES. > But this is different than what I want. > > I will explain you my requirements : > > Consider there are 20 IP's will be bind on one single MTA server. > > Then postfix will pickup

Re: different IP for outbound mail

2010-06-16 Thread Avinash Pawar // Viva
Hi Wietse, I check out the sender reputation topics under Postfix 2.7 RELEASE NOTES. But this is different than what I want. I will explain you my requirements : Consider there are 20 IP's will be bind on one single MTA server. Then postfix will pickup any IP (or in round robin fashion) and sen

Re: Two Postfix instances

2010-06-16 Thread Wietse Venema
Dragan Zubac: > Hello > > I have two Postfix instances with configuration folders : > > /etc/postfix > /etc/postfix-second > > I start both instances by issuing the following commands : > > postfix -c /etc/postfix start > postfix -c /etc/postfix-second start > > I'm about to write a start/stop

Re: Two Postfix instances

2010-06-16 Thread Victor Duchovni
On Wed, Jun 16, 2010 at 11:41:12AM +0200, Dragan Zubac wrote: > I start both instances by issuing the following commands : > > postfix -c /etc/postfix start > postfix -c /etc/postfix-second start Each is stopped by issuing: postfix -c "$config_directory" stop or via the postmulti(1) wr

reject bounced emails

2010-06-16 Thread Martin Bretschneider
Hi, is there a possibiliy to reject bounced emails from other smtp servers and forwared to a postfix server. I have control of Bserver and the following use case: 1. A sends an email from Aserver to B on Bserver. 2. B is an alias on Bserver, so the email is forwarded to Cserver. 3. Cserver do

Re: Two Postfix instances

2010-06-16 Thread Dragan Zubac
Hello Thank You all for hints. I did something else. ln -s /usr/lib/postfix/master /usr/lib/postfix/master-second Edit file : /etc/postfix-second/postfix-script , I changed all 'master' to 'master-second',so : postfix -c /etc/postfix-second stop will not kill first instance only the second one

Re: Two Postfix instances

2010-06-16 Thread Wietse Venema
Dragan Zubac: > Hello > > Thank You all for hints. > I did something else. > > ln -s /usr/lib/postfix/master /usr/lib/postfix/master-second This is not needed. Without making ANY changes, "postfix -c /etc/postfix-second stop" will stop only the second instance. > Edit file : /etc/postfix-second

Re: [SP] Re: [SP] Re: How to force SMTP AUTH to restrict Sender Addresses…

2010-06-16 Thread Andrew G. Grant
Charles, Just for clarification, and remember, I am very new at all of this. Postfix is requiring SASL Authentication. I have not listed any user names or passwords anywhere except in Apple Open Directory as User "Short Names" for use with login to network resources. Postfix seems to reference

Re: reject bounced emails

2010-06-16 Thread Charles Marcus
On 2010-06-16 10:03 AM, Martin Bretschneider wrote: > 3. Cserver does generate a bounce (I do not know the cause) and forwards > this to Bserver. If B is a (valid) alias on Cserver, why does it bounce it? > 4. Bserver wants to deliver this bounce to Aserver but gets rejected. > > So, I do not wa

Re: Smtpd_sender_maps and sender / recipient restrictions

2010-06-16 Thread Andrew G. Grant
Thank you Wietse. That was very helpful and I believe I can get this done now. —— Andrew Grant Information Systems Administrator Email: andrew.gr...@caddock.com Caddock Electronics, Inc. High Performance Resistor Products Web: www.caddock.com 17271 North Umpqua Hwy.

finding things postscreen rejects

2010-06-16 Thread Ralf Hildebrandt
Today I got this bounce from somebody whose mail had been rejected: : Protocol error: host mail.python.org[82.94.164.166] refused to talk to me: 220-mail.python.org ESMTP Postfix 521 5.7.1 Blocked by DNSBL It was quite hard finding this in my log, since the bounce from the french system only cont

Alternative MDA for postfix

2010-06-16 Thread Rui Francisco
Hi, We have postfix installed with virtual addresses. Due to the fact that is not possible to postfix to process .forward files with the current MDA, i would like to know if somebody knows what are the alternatives to allow this Thank you Rui -- Rui Francisco - blackmo...@gmail.com São Jo

Re: finding things postscreen rejects

2010-06-16 Thread Wietse Venema
Ralf Hildebrandt: > Today I got this bounce from somebody whose mail had been rejected: > > : Protocol error: host > mail.python.org[82.94.164.166] refused to talk to me: > 220-mail.python.org ESMTP Postfix 521 5.7.1 Blocked by DNSBL > > It was quite hard finding this in my log, since the bounce

Re: finding things postscreen rejects

2010-06-16 Thread Noel Jones
On 6/16/2010 5:45 PM, Wietse Venema wrote: Ralf Hildebrandt: Today I got this bounce from somebody whose mail had been rejected: : Protocol error: host mail.python.org[82.94.164.166] refused to talk to me: 220-mail.python.org ESMTP Postfix 521 5.7.1 Blocked by DNSBL It was quite hard finding t

Re: finding things postscreen rejects

2010-06-16 Thread Wietse Venema
Noel Jones: > I believe Ralf's request is about the smtp rejection message > sent to the remote client, not about postfix logging. > > ie. the current reject response in postscreen.c around line > 920 or so looks something like: > > if (dnsbl_action == PS_ACT_DROP) { > smtp_reply(v

Re: [SP] Re: [SP] Re: How to force SMTP AUTH to rest rict Sender Addresses…

2010-06-16 Thread Jose Ildefonso Camargo Tolosa
Greetings, What are you using for SASL authentication, in my case, I'm using dovecot, which in turn uses pam, which in turn uses LDAP. And then use: smtpd_sender_login_maps = ldap:/etc/postfix/sender_login.cf and permit_sasl_authenticated on smtpd_recipient_restrictions and reject_sender_log

Re: Alternative MDA for postfix

2010-06-16 Thread /dev/rob0
On Wed, Jun 16, 2010 at 11:42:40PM +0100, Rui Francisco wrote: > We have postfix installed with virtual addresses. Due to the fact > that is not possible to postfix to process .forward files with the > current MDA, i would like to know if somebody knows what are the > alternatives to allow this

Re: Postpals policy daemon to whitelist known correspondents

2010-06-16 Thread Henrik K
On Fri, Feb 05, 2010 at 03:46:16PM +0200, Henrik K wrote: > > Hello, > > There was a thread earlier about whitelisting known correspondents. > > I have now written a tool for my pleasure, but feel free to check it out. > > http://mailfud.org/postpals/ Now that I've had a chance to run it for m