Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Jan-Frode Myklebust
On Mon, Sep 06, 2010 at 06:29:28PM -0500, Noel Jones wrote: > > I fail to see how controlling your users From: addresses will affect > a backscatterer.org listing. I'm thinking we can accept sending some backscatter to our own customers, at least as long as it's authenticated backscatter and we c

Maximum number of delivery of emails

2010-09-07 Thread Avinash Pawar // Viva
Hi, I want to send 1 Lacs emails per hour. Please suggest me the steps to achieve this. -- Incase of any further queries, Please feel free to mail me or contact me on the numbers provided below. Thanks & Regards, Avinash Pawar Software Engineer. Viva Infomedia Pvt. Ltd. 242, Oshiwara Industria

Unable to put recepient access

2010-09-07 Thread Sharma, Ashish
Hi, I have a mail receiving postfix deployed. On this I am trying to block emails that are to sent to 'donotre...@mydomain.com' For this I am doing the following: smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blockList, reject_unauth_destination, reject_rbl_clie

Re: Unable to put recepient access

2010-09-07 Thread Simon Waters
On Tuesday 07 September 2010 10:11:02 Sharma, Ashish wrote: > > Sep 7 04:53:55 ip-10-194-99-63 postfix/smtpd[942]: fatal: open database > /etc/postfix/blockList.db: No such file or directory Sep 7 04:53:56 > ip-10-194-99-63 postfix/master[938]: warning: process > /usr/libexec/postfix/smtpd pid 94

Limit RCPT TO in Postfix

2010-09-07 Thread Claudio Prono
Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. Here is an example: telnet mailserver 25 Trying XXX.XXX.XXX.XXX... Connected to mailserver. Escape character is '^]'. 220 mailserver ESMTP helo mail 250 mailserv

Re: Postfix replacement for Icewarp MUA.

2010-09-07 Thread Jamrock
"Seann" wrote in message news:4c819dd3.8060...@tsukinokage.net... That is what I was figuring. Trying two different locations with the CA file I was using broke, when according to the list's information and my own reading it should work, turned out to require me to validate the CA file I was using

Re: Maximum number of delivery of emails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 01:50:30PM +0530, Avinash Pawar // Viva wrote: > I want to send 1 Lacs emails per hour. Most readers of this (international) list do not know that 1 "lac" is 100,000. This usage is largely confined to India. > Please suggest me the steps to achieve this. This is approxim

Re: Maximum number of delivery of emails

2010-09-07 Thread Ralf Hildebrandt
* Victor Duchovni : > On Tue, Sep 07, 2010 at 01:50:30PM +0530, Avinash Pawar // Viva wrote: > > > I want to send 1 Lacs emails per hour. > > Most readers of this (international) list do not know that 1 "lac" > is 100,000. This usage is largely confined to India. Ah! I'm reading "Sacred games" a

Unable to drop mails

2010-09-07 Thread Sharma, Ashish
Hi, I have a mail receiving postfix deployed. On this I am trying to block emails that are to sent to 'donotre...@mydomain.com' For this I am doing the following: smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blockList, reject_unauth_destination, reject_rbl_clie

Re: Maximum number of delivery of emails

2010-09-07 Thread Avinash Pawar // Viva
Hi, How many mails can I sent using basic configuration of postfix? Also please give me some idea about postfix performance tuning. On Tue, Sep 7, 2010 at 6:44 PM, Victor Duchovni < victor.ducho...@morganstanley.com> wrote: > On Tue, Sep 07, 2010 at 01:50:30PM +0530, Avinash Pawar // Viva wrote

Re: Unable to drop mails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 01:27:17PM +, Sharma, Ashish wrote: > Hi, > > I have a mail receiving postfix deployed. > > On this I am trying to block emails that are to sent to > 'donotre...@mydomain.com' > > For this I am doing the following: > > smtpd_recipient_restrictions = > check_recip

Re: Unable to drop mails

2010-09-07 Thread Claus
Hi, > * > > Now currently the mails are getting rejected with SMTP error code 554, and > the mailbox of the sender gets a notification from it's local mail server > about the failure. > > Is there any way I can quietly 'drop' the emails for the above mentioned > case. Then you shouldn't block t

Re: Maximum number of delivery of emails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 06:50:17PM +0530, Avinash Pawar // Viva wrote: > How many mails can I sent using basic configuration of postfix? This question has no answer, except to say that on typical commodity server hardware you are unlikely to send more than ~3,000 msgs/sec per Postfix instance. A

Re: Can postfix work with a TLS, authenticated smtp relay server?

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 12:53:13PM +0800, Richard Chapman wrote: > I am running postfix 2.3.3 as part of Centos 5.5. > > I am trying to set up a hybrid mail system which involves postfix, dovecot > and Google Apps. > Ideally - I would like the email clients to use a authenticated TLS > connecti

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Noel Jones
On 9/7/2010 5:16 AM, Claudio Prono wrote: Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. ... Any hint is well accepted. This is a basic function of the SMTP protocol.

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Noel Jones
On 9/7/2010 2:32 AM, Jan-Frode Myklebust wrote: On Mon, Sep 06, 2010 at 06:29:28PM -0500, Noel Jones wrote: I fail to see how controlling your users From: addresses will affect a backscatterer.org listing. I'm thinking we can accept sending some backscatter to our own customers, at least as l

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Claudio Prono
Noel Jones ha scritto: > On 9/7/2010 5:16 AM, Claudio Prono wrote: >> Hello all, >> >> I use Postfix with mysql database for the users lookup. I have recently >> found an information leak with the RCPT TO command. >> > .. >> >> Any hint is well accepted. >> > > This is a basic function of the SMTP

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Noel Jones
On 9/7/2010 10:23 AM, Claudio Prono wrote: Noel Jones ha scritto: On 9/7/2010 5:16 AM, Claudio Prono wrote: Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. .. Any hint is well accepted. This is a bas

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 10:40:23AM -0500, Noel Jones wrote: >> Ok, this is right, but is also an information leak... with rcpt to i can >> enumerate the local users of the system, and for me this is not too >> good... No way to fix this? > > This is part of the design of SMTP. You can call it a f

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Jasper Jongmans
On 2010-09-07 17:23, Claudio Prono wrote: > Ok, this is right, but is also an information leak... with rcpt to i can > enumerate the local users of the system, and for me this is not too > good... No way to fix this? > > If it is not necessary for those local users to receive mail, you could alt

Re: Maximum number of delivery of emails

2010-09-07 Thread lst_hoe02
Zitat von Victor Duchovni : On Tue, Sep 07, 2010 at 06:50:17PM +0530, Avinash Pawar // Viva wrote: How many mails can I sent using basic configuration of postfix? This question has no answer, except to say that on typical commodity server hardware you are unlikely to send more than ~3,000 ms

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Ralf Hildebrandt
* Claudio Prono : > Ok, this is right, but is also an information leak... with rcpt to i can > enumerate the local users of the system, and for me this is not too > good... No way to fix this? Turn off SMTP :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitä

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread mouss
Le 07/09/2010 16:17, Noel Jones a écrit : On 9/7/2010 2:32 AM, Jan-Frode Myklebust wrote: On Mon, Sep 06, 2010 at 06:29:28PM -0500, Noel Jones wrote: I fail to see how controlling your users From: addresses will affect a backscatterer.org listing. I'm thinking we can accept sending some bac

Re: Maximum number of delivery of emails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 06:13:23PM +0200, lst_ho...@kwsoft.de wrote: >> This question has no answer, except to say that on typical commodity >> server hardware you are unlikely to send more than ~3,000 msgs/sec per >> Postfix instance. A queue-manager performance test I ran 2 years ago >> showed t

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Jeroen Geilman
On 09/07/2010 12:16 PM, Claudio Prono wrote: Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. Here is an example: telnet mailserver 25 Trying XXX.XXX.XXX.XXX... Connected to mailserver. Escape character is '^

Postfix rejecting mail when plenty of space

2010-09-07 Thread Noel David Torres Taño
Hello all: I have /var/mail mounted separately and plenty of space. But when / get short on space I saw things like this: Sep 7 18:37:24 tochox postfix/smtpd[25798]: connect from (somewhere) Sep 7 18:37:24 tochox postfix/smtpd[25798]: NOQUEUE: reject: MAIL from (somewhere): 452 4.3.1 Insuffic

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Jeroen Geilman
On 09/07/2010 06:57 PM, mouss wrote: Le 07/09/2010 16:17, Noel Jones a écrit : On 9/7/2010 2:32 AM, Jan-Frode Myklebust wrote: On Mon, Sep 06, 2010 at 06:29:28PM -0500, Noel Jones wrote: I fail to see how controlling your users From: addresses will affect a backscatterer.org listing. I'm t

Re: Postfix rejecting mail when plenty of space

2010-09-07 Thread Joe
Noel David Torres Taño wrote: > Hello all: > > I have /var/mail mounted separately and plenty of space. But when / get short > on space I saw things like this: > > Sep 7 18:37:24 tochox postfix/smtpd[25798]: connect from (somewhere) > Sep 7 18:37:24 tochox postfix/smtpd[25798]: NOQUEUE: reject:

Re: Maximum number of delivery of emails

2010-09-07 Thread Jeroen Geilman
On 09/07/2010 08:07 PM, Victor Duchovni wrote: On Tue, Sep 07, 2010 at 06:13:23PM +0200, lst_ho...@kwsoft.de wrote: This question has no answer, except to say that on typical commodity server hardware you are unlikely to send more than ~3,000 msgs/sec per Postfix instance. A queue-manager p

Re: Postfix rejecting mail when plenty of space

2010-09-07 Thread Noel David Torres Taño
On Martes 07 Septiembre 2010 19:21:02 Joe escribió: > Noel David Torres Taño wrote: > > Hello all: > > > > I have /var/mail mounted separately and plenty of space. But when / get > > short on space I saw things like this: > > > > Sep 7 18:37:24 tochox postfix/smtpd[25798]: connect from (somewher

Re: Trying to use different header_checks depending on TCP port for incoming mail

2010-09-07 Thread Ralph Seichter
On 06.09.10 19:07, Jeroen Geilman wrote: > postconf(5) says "cleanup_service_NAME" - I suspect it will work once > he changes that :) You're right, I did not spot this. ;-) When I use "cleanup_service_name" instead of "cleanup_service", it works. This is a feasible solution, as long as the submis

Re: Maximum number of delivery of emails

2010-09-07 Thread lst_hoe02
Zitat von Victor Duchovni : On Tue, Sep 07, 2010 at 06:13:23PM +0200, lst_ho...@kwsoft.de wrote: This question has no answer, except to say that on typical commodity server hardware you are unlikely to send more than ~3,000 msgs/sec per Postfix instance. A queue-manager performance test I ran

Re: Trying to use different header_checks depending on TCP port for incoming mail

2010-09-07 Thread Ralph Seichter
On 06.09.10 23:13, mouss wrote: > you need to review your master.cf and main.cf for typos and > space/comment errors. As Jeroen Geilman pointed out, it is "cleanup_service_name" instead of "cleanup_service". > I recommend using > -o var=${main_cf_var} > where variables are defined in main.cf.

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Terry Carmen
Quoting Claudio Prono : > Hello all, > > I use Postfix with mysql database for the users lookup. I have recently > found an information leak with the RCPT TO command. > > Here is an example: > > telnet mailserver 25 > Trying XXX.XXX.XXX.XXX... > Connected to mailserver. > Escape character is '^]'.

Relay to another internal server using TLS

2010-09-07 Thread james.raines
Hello all, I am looking for a way to relay from one internal postfix box to another internal postfix box using TLS. Basically, I have several servers with applications that need to relay HIDS events and system logs etc. to the central postfix email server for normal distribution from there. Rig

Re: Relay to another internal server using TLS

2010-09-07 Thread Noel Jones
On 9/7/2010 3:17 PM, james.rai...@heartland-ins.com wrote: Hello all, I am looking for a way to relay from one internal postfix box to another internal postfix box using TLS. Basically, I have several servers with applications that need to relay HIDS events and system logs etc. to the central po

Re: Maximum number of delivery of emails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 09:07:54PM +0200, lst_ho...@kwsoft.de wrote: >> Single-core CPU limit. The system had 4 CPUs and the load peaked at ~25%. >> The queue manager is single-threaded, and must do a fair amount of message >> envelope processing. So the current design tops out at ~2-3k msgs/sec,

Re: Maximum number of delivery of emails

2010-09-07 Thread Wietse Venema
Victor Duchovni: > On Tue, Sep 07, 2010 at 09:07:54PM +0200, lst_ho...@kwsoft.de wrote: > > >> Single-core CPU limit. The system had 4 CPUs and the load peaked at ~25%. > >> The queue manager is single-threaded, and must do a fair amount of message > >> envelope processing. So the current design t

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Jan-Frode Myklebust
On Tue, Sep 07, 2010 at 08:20:36PM +0200, Jeroen Geilman wrote: > On 09/07/2010 06:57 PM, mouss wrote: > > > >OP is an ISP providing outbound relay to residential users. his > >problem is not easy to solve. > > Thanks for understanding. I´ve gotten information off list that gmail are setting the s

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Noel Jones
On 9/7/2010 4:36 PM, Jan-Frode Myklebust wrote: On Tue, Sep 07, 2010 at 08:20:36PM +0200, Jeroen Geilman wrote: On 09/07/2010 06:57 PM, mouss wrote: OP is an ISP providing outbound relay to residential users. his problem is not easy to solve. Thanks for understanding. I´ve gotten informatio

Re: Can postfix work with a TLS, authenticated smtp relay server?

2010-09-07 Thread Richard Chapman
Thanks for your incredibly useful advice Victor... May I ask some follow up questions?.. On 7/09/2010 10:06 PM, Victor Duchovni wrote: On Tue, Sep 07, 2010 at 12:53:13PM +0800, Richard Chapman wrote: I am running postfix 2.3.3 as part of Centos 5.5. I am trying to set up a hybrid mail sys

reject_unknown_client_hostname light?

2010-09-07 Thread pf at alt-ctrl-del.org
Am I missing something obvious? With many ISPs providing generic PTR, reject_unknown_reverse_client_hostname is too gentle. I'd really like to implement reject_unknown_client_hostname, but I've seen too many cases where address->name mapping = exists, the name->address mapping = exists, BUT