From: "Noel Jones"
To:
postfix-users@postfix.orgSent: Thursday, July 8, 2010
5:04:07 PMSubject: Re: SASL Authentication per recipient
domainOn 7/8/2010 8:24 AM, David Jacobson wrote:> Hi
There,>> First post to postfix mailing list, be nice...
;)>> Postfix 2.6.6.2z>> We have a hosted mail
platform w
Hi folks,
we're having some trouble with greylisting (postgrey) and smtp auth.
smtp_recipient_restrictions looks like:
permit_sasl_authenticated, permit_mynetworks,
reject_unauth_destination, warn_if_reject,
reject_unknown_sender_d
* Hendrik Pahl :
> Hi folks,
>
> we're having some trouble with greylisting (postgrey) and smtp auth.
>
> smtp_recipient_restrictions looks like:
It's smtpd_recipient_restrictions
> permit_sasl_authenticated, permit_mynetworks,
> reject_unauth_destination, warn_i
On Fri, 9 Jul 2010 09:36:56 +0200 (SAST)
David Jacobson articulated:
> From: "Noel Jones"
> To: postfix-users@postfix.org
> Sent: Thursday, July 8, 2010 5:04:07 PM
> Subject: Re: SASL Authentication per recipient domain
>
> On 7/8/2010 8:24 AM, David Jacobson wrote:
> > Hi There,
> >
> >
From: "Jerry"
To:
postfix-users@postfix.orgSent: Friday, July 9, 2010
11:40:11 AMSubject: Re: SASL Authentication per recipient
domainOn Fri, 9 Jul 2010 09:36:56 +0200 (SAST)David Jacobson
articulated:> From: "Noel Jones"
> To: postfix-users@postfix.org
> Sent: Thursday, July 8, 2010 5:04:07 PM >
hello there,
i'm running a postfix 2.4.6 on a opensuse box.
postfix has amawis-new with spamassasin installed ...
since a few weeks one of my email accounts gets bombarded with thousands
of SPAM mailer daemon error bounces.
could not deliver message ... bla bla bla ...
it's getting really an
Am 09.07.2010 12:35, schrieb Administrator Beckspaced.com:
> hello there,
>
> i'm running a postfix 2.4.6 on a opensuse box.
> postfix has amawis-new with spamassasin installed ...
>
> since a few weeks one of my email accounts gets bombarded with thousands
> of SPAM mailer daemon error bounces.
hello robert,
thanks a lot for your quick reply ...
actually it is not always the same IP or host sending the error bounces ...
the bounces are sent from hundred of different IP addresses ...
any more idea?
thanks for your help & fun
becki
below some logs you requested ... change the real em
>From: owner-postfix-us...@postfix.org
[mailto:owner-postfix-us...@postfix.org] On Behalf Of Administrator
Beckspaced.com
>Sent: Friday, July 09, 2010 12:52 PM
>To: Robert Schetterer
>Cc: postfix-users@postfix.org
>Subject: Re: email account bombarded with SPAM error bounces - what to
do?
>
> hell
In an older episode (Friday, 9. July 2010), Kammen van, Marco, Springer
SBM NL wrote:
> But there is a big spam/virus attack going on, where messages look
> like NDR's but they aren't.
> Various big anti spam vendors are having serious issues stopping
> this.
Could you provide a URL where more
Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com:
> hello robert,
>
> thanks a lot for your quick reply ...
> actually it is not always the same IP or host sending the error bounces ...
> the bounces are sent from hundred of different IP addresses ...
>
> any more idea?
>
> thanks for
Am 09.07.2010 13:00, schrieb Kammen van, Marco, Springer SBM NL:
>> From: owner-postfix-us...@postfix.org
> [mailto:owner-postfix-us...@postfix.org] On Behalf Of Administrator
> Beckspaced.com
>> Sent: Friday, July 09, 2010 12:52 PM
>> To: Robert Schetterer
>> Cc: postfix-users@postfix.org
>> Subje
On 7/9/2010 13:27, Robert Schetterer wrote:
Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com:
hello robert,
thanks a lot for your quick reply ...
actually it is not always the same IP or host sending the error bounces ...
the bounces are sent from hundred of different IP addresses
>>-Original Message-
>>From: owner-postfix-us...@postfix.org
[mailto:owner-postfix-us...@postfix.org] On Behalf Of wolfgang
>>Sent: Friday, July 09, 2010 1:11 PM
>>To: postfix-users@postfix.org
>>Subject: Re: email account bombarded with SPAM error bounces - what to
do?
>>In an older episo
Am 08.07.2010 um 20:55 schrieb Noel Jones:
> On 7/8/2010 12:13 PM, Philipp Leusmann wrote:
>>
>> Am 08.07.2010 um 19:02 schrieb Philipp Leusmann:
>>
>>>
>>> Am 08.07.2010 um 18:23 schrieb Noel Jones:
>>>
On 7/8/2010 10:58 AM, Philipp Leusmann wrote:
> Hi all,
>
> to stop bac
Hi,
My ISP (ovh) is complaining about my postfix servers doing wrong ARP
demand, do you have any idea of what can cause this in my postfix
configuration ?
188.165.55.92 : is one of the server ip (ip failover)
Thu Jul 8 02:03:32 2010 : arp who-has 169.254.140.241 tell 188.165.55.92
Thu Jul 8
* "Stéphane MERLE" :
> Hi,
>
> My ISP (ovh) is complaining about my postfix servers doing wrong ARP
> demand, do you have any idea of what can cause this in my postfix
> configuration ?
I'd think that's more because of the OS or failover. Postfix is
several layers above that.
--
Ralf Hildebrand
Am 09.07.2010 13:35, schrieb Administrator Beckspaced.com:
>
>
> On 7/9/2010 13:27, Robert Schetterer wrote:
>> Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com:
>>> hello robert,
>>>
>>> thanks a lot for your quick reply ...
>>> actually it is not always the same IP or host sending th
On Fri, 2010-07-09 at 12:20:12 +0200, David Jacobson wrote:
> I appreciate your response, however if you read my original message
> you will notice that we have had a look at all support
> smtp_sasl_password_maps options and it only allows for the following
> scenario according to the docs:
>
>
On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote:
>
> On 7/9/2010 13:27, Robert Schetterer wrote:
> > Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com:
> >> hello robert,
> >>
> >> thanks a lot for your quick reply ...
> >> actually it is not always the same IP or h
St?phane MERLE:
> My ISP (ovh) is complaining about my postfix servers doing wrong ARP
> demand, do you have any idea of what can cause this in my postfix
> configuration ?
Postfix does not send ARP requests. Instead, look at your kernel's
network configuration.
Wietse
On Fri, Jul 09, 2010 at 01:47:40PM +0200, St?phane MERLE wrote:
> Hi,
>
> My ISP (ovh) is complaining about my postfix servers doing wrong ARP
> demand, do you have any idea of what can cause this in my postfix
> configuration ?
>
> 188.165.55.92 : is one of the server ip (ip failover)
>
> Thu J
Hi,
I have a problem between one of my postfix and a zimbra server (postfix
server).
sometime (one mail every three days), I got this error :
502 5.5.2 Error: command not recognized (in reply to RCPT TO command)
I did a tcpdump to understand why I got this error and I found that one of
Philipp Leusmann:
> warning: restriction `User' after `defer' is ignored
>
> when I return something like
>
> 200 DEFER User is over quota
>
> I guess there is some special string expected after DEFER ?
No. When the first word is "defer" or "DEFER" etc., then the rest
of the text sent to the c
* Thomas POINDESSOUS :
>
> Hi,
>
>
> I have a problem between one of my postfix and a zimbra server (postfix
> server).
>
>
> sometime (one mail every three days), I got this error :
> 502 5.5.2 Error: command not recognized (in reply to RCPT TO command)
>
>
> I did a tcpdump to underst
Hi,
Le 09/07/2010 15:21, Victor Duchovni a écrit :
On Fri, Jul 09, 2010 at 01:47:40PM +0200, St?phane MERLE wrote:
Hi,
My ISP (ovh) is complaining about my postfix servers doing wrong ARP
demand, do you have any idea of what can cause this in my postfix
configuration ?
188.165.55.92 : is
Hi Wietse,
what kind auf verbose logging are you talking about? "postmap -vv -q" ? Or a
more verbose logging for tcp_table in mail.log ? How could I turn this on?
Philipp
Am 09.07.2010 um 15:45 schrieb Wietse Venema:
> Philipp Leusmann:
>> warning: restriction `User' after `defer' is ignored
>>
From: "Sahil Tandon"
To:
postfix-users@postfix.orgSent: Friday, July 9, 2010 2:03:23
PMSubject: Re: SASL Authentication per recipient
domainOn Fri, 2010-07-09 at 12:20:12 +0200, David Jacobson
wrote:> I appreciate your response, however if you read my
original message> you will notice that we have
Thomas POINDESSOUS:
>
> Hi,
>
> I have a problem between one of my postfix and a zimbra server (postfix
> server).
>
> sometime (one mail every three days), I got this error :
> 502 5.5.2 Error: command not recognized (in reply to RCPT TO command)
>
> I did a tcpdump to understand why I go
Yes, I think this is a cisco asa 5550, with a special filter which protects
"smtp server".
Do you think I should ask to disable it ?
Thanks.
Le 9 juil. 2010 à 15:46, Ralf Hildebrandt a écrit
:
> * Thomas POINDESSOUS :
>>
>> Hi,
>>
>>
>> I have a problem between one of my postfix and a
Philipp Leusmann:
> warning: restriction `User' after `defer' is ignored
>
> when I return something like
>
> 200 DEFER User is over quota
>
> I guess there is some special string expected after DEFER ?
Wietse:
> No. When the first word is "defer" or "DEFER" etc., then the rest
> of the text s
* poindessous...@foncia.fr :
> Yes, I think this is a cisco asa 5550, with a special filter which protects
> "smtp server".
>
> Do you think I should ask to disable it ?
Yes. It causes nothing but grief :)
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitäts
On Fri, Jul 09, 2010 at 03:58:12PM +0200, poindessous...@foncia.fr wrote:
> ... a special filter which protects "smtp server".
>
> Do you think I should ask to disable it ?
Yes, always. The SMTP inspection feature notoriously does more harm than good.
--
Viktor.
From: "David Jacobson"
To:
postfix-users@postfix.orgSent: Friday, July 9, 2010 3:54:16
PMSubject: Re: SASL Authentication per recipient
domainFrom: "Sahil Tandon"
To:
postfix-users@postfix.orgSent: Friday, July 9, 2010 2:03:23
PMSubject: Re: SASL Authentication per recipient
domainOn Fri, 2010-07-0
Am 09.07.2010 um 16:02 schrieb Wietse Venema:
> Philipp Leusmann:
>> warning: restriction `User' after `defer' is ignored
>>
>> when I return something like
>>
>> 200 DEFER User is over quota
>>
>> I guess there is some special string expected after DEFER ?
>
> Wietse:
>> No. When the first
On 7/9/2010 14:40, Ram wrote:
On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote:
On 7/9/2010 13:27, Robert Schetterer wrote:
Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com:
hello robert,
thanks a lot for your quick reply ...
actually it is not always the sa
Kammen van, Marco, Springer SBM NL put forth on 7/9/2010 6:00 AM:
> Not sure if its related to your issue.
> But there is a big spam/virus attack going on, where messages look like
> NDR's but they aren't.
> Various big anti spam vendors are having serious issues stopping this.
Some of my trap ad
Am 09.07.2010 16:13, schrieb Administrator Beckspaced.com:
>
>
> On 7/9/2010 14:40, Ram wrote:
>> On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote:
>>> On 7/9/2010 13:27, Robert Schetterer wrote:
Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com:
>hello r
On 7/9/2010 6:46 AM, Philipp Leusmann wrote:
Am 08.07.2010 um 20:55 schrieb Noel Jones:
On 7/8/2010 12:13 PM, Philipp Leusmann wrote:
thanks for your advice. This really should be pointed out more explicitly in
the documentation.
As for 500, would it be a good practice to return 500, if the
On Fri, Jul 09, 2010 at 04:13:28PM +0200, Philipp Leusmann wrote:
> Jul 9 16:07:00 s15277780 postfix/smtpd[18815]: NOQUEUE: reject:
> RCPT from c-68-57-126-48.hsd1.va.comcast.net[68.57.126.48]:
> 450 4.3.2 : Recipient address rejected:
> Try again later; from= to=
> proto=
Hi,
I would have 2 questions :
- 1 what is the procedure for postfix when it try to send email to
a domain with no MX record ?
like : dig mx elv.enic.fr
- 2 would that be an offense to refuse to send to domain with no MX
record ? (I don't know if there's a lot of them)
On Fri, Jul 09, 2010 at 06:09:26PM +0200, St?phane MERLE wrote:
> Hi,
>
> I would have 2 questions :
> - 1 what is the procedure for postfix when it try to send email to a
> domain with no MX record ?
> like : dig mx elv.enic.fr
Per 20+ year old SMTP standards it sends to the A r
On Fri, Jul 09, 2010 at 04:12:41PM +0200, David Jacobson wrote:
> We tried PCRE matches to no avail. Based on your request we tried to change
> sasl_passwd lookup from hash to pcre (I'm no postfix guy, so have no idea if
> this should work or not, but postfix restart didn't complain)
>
> smtp_
On Fri, Jul 9, 2010 at 12:09, Stéphane MERLE
wrote:
> I would have 2 questions :
> - 1 what is the procedure for postfix when it try to send email to a
> domain with no MX record ?
> like : dig mx elv.enic.fr
>
> - 2 would that be an offense to refuse to send to domain with no MX
Philipp Leusmann:
> > I need to see ONE example of verbose logging that shows
> >
> > (
> >
> > tcp_table returning the string that is giving the above error,
> >
> > AND
> >
> > the Postfix SMTP server processing that result
> >
> > ).
>
> Sorry, I still don't get, what you mean.
I need t
Am 09.07.2010 um 17:39 schrieb Victor Duchovni:
> On Fri, Jul 09, 2010 at 04:13:28PM +0200, Philipp Leusmann wrote:
>
>> Jul 9 16:07:00 s15277780 postfix/smtpd[18815]: NOQUEUE: reject:
>> RCPT from c-68-57-126-48.hsd1.va.comcast.net[68.57.126.48]:
>> 450 4.3.2 : Recipient address reje
On Fri, Jul 09, 2010 at 07:25:45PM +0200, Philipp Leusmann wrote:
> Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: send: get
> be...@xxx.de
> Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: recv: 200
> DEFER%20User%20over%20quota
> Jul 9 19:15:25 s15277780 pos
On Jul 9, 2010, at 4:57 AM, Hendrik Pahl wrote:
> Hi folks,
>
> we're having some trouble with greylisting (postgrey) and smtp auth.
>
> smtp_recipient_restrictions looks like:
>
I'm not sure what the rest of your network looks like but I greylist through
openbsd's spamd and to sasl authenti
On 7/9/2010 11:35 AM, Phil Howard wrote:
On Fri, Jul 9, 2010 at 12:09, Stéphane MERLE
wrote:
I would have 2 questions :
- 1 what is the procedure for postfix when it try to send email to a
domain with no MX record ?
like : dig mx elv.enic.fr
- 2 would that be an offense t
Am 09.07.2010 um 19:46 schrieb Victor Duchovni:
> On Fri, Jul 09, 2010 at 07:25:45PM +0200, Philipp Leusmann wrote:
>
>> Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: send: get
>> be...@xxx.de
>> Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: recv: 200
>> D
Victor Duchovni:
> On Fri, Jul 09, 2010 at 07:25:45PM +0200, Philipp Leusmann wrote:
>
> > Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: send: get
> > be...@xxx.de
> > Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: recv: 200
> > DEFER%20User%20over%20quota
>
On Fri, Jul 09, 2010 at 08:56:38PM +0200, Philipp Leusmann wrote:
> It would be nice, if somebody else, also running a Debian Lenny (it's lenny,
> not etch) system could verify this behavior.
>
> Anybody here?
>
> I will also reinstall postfix and try again.
If it is compiled with debugging sy
On Fri, Jul 09, 2010 at 04:04:59PM -0400, Wietse Venema wrote:
> > Either your Postfix source is modified, miscompiled, the binaries are
> > corrupted, or CPU is mal-functioning.
>
> Or he is running a Postfix version before 2.6.
>
> Citing the access(5) manpage:
>
>DEFER optional text.
Victor Duchovni:
> On Fri, Jul 09, 2010 at 04:04:59PM -0400, Wietse Venema wrote:
>
> > > Either your Postfix source is modified, miscompiled, the binaries are
> > > corrupted, or CPU is mal-functioning.
> >
> > Or he is running a Postfix version before 2.6.
> >
> > Citing the access(5) manpage:
On Fri, 2010-07-09 at 16:12:41 +0200, David Jacobson wrote:
[ .. ]
> It just seems like SASL doesn't support PCRE.
The statement does not make sense.
> Just for the sake of clarification we've found what we're looking for,
> PCRE was not required.
PCRE is not *required*, but it would be fine
Resolved!
Another concurrent thread "SASL Authentication per recipient domain"
gave additional clues.
I ended up using a PCRE map for sender_dependent_relayhost_maps
(domain names changed to protect the innocent and to better illustrate
what was done):
main.cf:
smtp_sasl_auth_enable = yes
Hi all,
does Postfix Supports additional parameters to the SMTP MAIL and RCPT
commands as mentioned in RFC 2821 and others?
RCPT TO: [ SP ]
i have tried to use something like as follows in the sender Postfix Server
RCPT TO: SP
but it is not accepted by the recipient postfix server and g
On Friday, July 9, 2010, 17:42:37, Sufian Hameed wrote:
> does Postfix Supports additional parameters to the SMTP MAIL and RCPT
> commands as mentioned in RFC 2821 and others?
>
> RCPT TO: [ SP ]
>
> i have tried to use something like as follows in the sender Postfix Server
> RCPT TO: SP
> but
Hi,
I am thinking about trying to replicate a feature I custom-built for my
Sendmail installation, in Postfix. What this does is, whenever a host I am
backup for is mentioned in the SMTP RCPT command, I check to see if the host is
up, and *refuse* the command (450) if it is. The consequence o
On Friday, July 9, 2010, 18:57:10, Rod Dorman wrote:
> On Friday, July 9, 2010, 17:42:37, Sufian Hameed wrote:
>> does Postfix Supports additional parameters to the SMTP MAIL and RCPT
>> commands as mentioned in RFC 2821 and others?
>>
>> RCPT TO: [ SP ]
>>
>> i have tried to use something like
Hi,
can you please elaborate? what is wrong?
RCPT TO: [ SP ] is the syntax
mentioned in RFC 2821.
regards
On Sat, Jul 10, 2010 at 1:01 AM, Rod Dorman wrote:
> On Friday, July 9, 2010, 18:57:10, Rod Dorman wrote:
> > On Friday, July 9, 2010, 17:42:37, Sufian Hameed wrote:
> >> does Postfix S
On 10 Jul 2010, at 00:10, Sufian Hameed wrote:
> can you please elaborate? what is wrong?
>
> RCPT TO: [ SP ] is the syntax
> mentioned in RFC 2821.
>
1. "SP" is part of the ABNF grammar in the formal specification of the syntax
of the command. It means a space character. There is no lite
Sabahattin Gucukoglu:
> Hi,
>
> I am thinking about trying to replicate a feature I custom-built for my Se
>-ndmail installation, in Postfix. What this does is, whenever a host I am ba
>-ckup for is mentioned in the SMTP RCPT command, I check to see if the host i
>-s up, and *refuse* the command
Am 09.07.2010 um 22:37 schrieb Wietse Venema:
> Victor Duchovni:
>> On Fri, Jul 09, 2010 at 04:04:59PM -0400, Wietse Venema wrote:
>>
Either your Postfix source is modified, miscompiled, the binaries are
corrupted, or CPU is mal-functioning.
>>>
>>> Or he is running a Postfix version
ok, i missed out mydestination entry cause the bounce. after i put in the
entry, now i got mail from for xxx.xxx.com loops back to myself.
due to is a null client config, so i put xxx.xxx.com in relay_domains entry
also cannot help, anyone please help.
Jul 10 14:37:35 smtp1 postfix/cleanup[32546]
65 matches
Mail list logo