Re: Encrypt messages between 2 servers

2010-10-26 Thread Jerrale G
On 10/23/2010 4:20 PM, David Touzeau wrote: Yes i heard about VPN but in some cases in a big environnement you cannot play with networks and firewalls as you like. And there is a lot of remote sites to discuss, create VPN trought all theses remote sites is to complicated to maintain. the same vp

Upgrade from 2.4.5 to 2.7.1 and MS Outlook clients

2010-10-26 Thread Laurent CARON
Hi, I did upgrade a mail server from postfix 2.4.5 to 2.7.1. Unfortunately Outlook MUA is unable to send email through. I get the following error: Oct 26 11:34:06 sargon postfix/smtpd[23238]: connect from unknown[192.168.14.249] Oct 26 11:34:06 sargon postfix/smtpd[23238]: setting up TLS connec

Posfix: deliver to spam folder analog of reject_rbl_client

2010-10-26 Thread Покотиленко Костик
Hi, I have the following postfix configuration: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_client_hostname, reject_unknown_hostname, reject_non_fqdn_hostname, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname,

Mails received with same message id every 15 - 20 seconds

2010-10-26 Thread Sharma, Ashish
Hi, I have SpamAssassin integrated on my postfix mail server via 'Amavisd-new'. The problem that I am facing is that I am receiving same email every 15 second from same sender with same message-ID on my production mail servers, following are my postfix logs: "Oct 25 01:11:02 g2t0433g postfix/

SmartHost. Route all except one user.

2010-10-26 Thread Rafael Andrade
Hello members, I have a smarthost configured to relay all sent emails to @terra.com.br, and i have a domain locally configured has a domain.local, i need to configure logwatch to sent emails to root, but when this emails is sent postfix sent this email to @terra.com.br, and i have domain.local

Re: SMTP relay and greylisting

2010-10-26 Thread Noel Jones
On 10/25/2010 9:38 PM, utahnix wrote: Hello all, This question has probably been asked on this list before, but maybe not quite with these circumstances. I'm hoping one of you can give me some direction. I've got a fairly typical Postfix setup... Postfix, Cyrus IMAP, ClamAV, SpamAssassin... all

Re: Posfix: deliver to spam folder analog of reject_rbl_client

2010-10-26 Thread Покотиленко Костик
I'm now trying to move all RBL and RHSBL checks to policyd-weight. In policyd-weight I set "$ADD_X_HEADER = 1" and very high score so it never match. Then I plan to parse "X-policyd-weight" header with sieve script on cyrus to move spam to separate imap folder. Header looks like this: X-policyd-w

Re: SMTP relay and greylisting

2010-10-26 Thread Michael Orlitzky
On 10/25/10 23:35, utahnix wrote: > On 10/25/2010 9:05 PM, Michael Orlitzky wrote: >> On 10/25/2010 10:38 PM, utahnix wrote: >>> Hello all, >>> >>> Anyway, I've set up greylisting with Postgrey to help cut down on the >>> junk mail that I get. I've set it up with default values (deferral of >>> 300

Re: SmartHost. Route all except one user.

2010-10-26 Thread Reinaldo de Carvalho
On Tue, Oct 26, 2010 at 8:44 AM, Rafael Andrade wrote: > Hello members, > > I have a smarthost configured to relay all sent emails to @terra.com.br, and > i have a domain locally configured has a domain.local, i need to configure > logwatch to sent emails to root, but when this emails is sent post

Re: Upgrade from 2.4.5 to 2.7.1 and MS Outlook clients

2010-10-26 Thread Laurent CARON
On Tue, Oct 26, 2010 at 11:40:49AM +0200, Laurent CARON wrote: > I did upgrade a mail server from postfix 2.4.5 to 2.7.1. > > Unfortunately Outlook MUA is unable to send email through. > > I get the following error: > Oct 26 11:34:06 sargon postfix/smtpd[23238]: connect from > unknown[192.168.14

Re: Mails received with same message id every 15 - 20 seconds

2010-10-26 Thread Jeroen Geilman
On 10/26/2010 01:40 PM, Sharma, Ashish wrote: Hi, I have SpamAssassin integrated on my postfix mail server via 'Amavisd-new'. The problem that I am facing is that I am receiving same email every 15 second from same sender with same message-ID on my production mail servers, following are my po

Re: Upgrade from 2.4.5 to 2.7.1 and MS Outlook clients

2010-10-26 Thread Wietse Venema
> I'm now "playing" with ssldump: > ERROR: Length mismatch > > Do any of the postfix guru out there have a clue about what's going on ? According to ssldump source code: void pcap_cb(ptr,hdr,data) u_char *ptr; struct pcap_pkthdr *hdr; u_char *data; { n_handler *n; ... n=(n_ha

postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread Rok Potočnik
First of all, I'm quite satisfied with Postfix and some other opensource products which are keeping my life better and I owe a big *THANK YOU* to all developers etc... Now on to my questions... I'm using Postfix MTA on some email gateways and even though I belive I've configured maximal_queue_

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread Jeroen Geilman
On 10/26/2010 09:05 PM, Rok Potočnik wrote: First of all, I'm quite satisfied with Postfix and some other opensource products which are keeping my life better and I owe a big *THANK YOU* to all developers etc... Now on to my questions... I'm using Postfix MTA on some email gateways and even t

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread lst_hoe02
Zitat von Rok Potočnik : First of all, I'm quite satisfied with Postfix and some other opensource products which are keeping my life better and I owe a big *THANK YOU* to all developers etc... Now on to my questions... I'm using Postfix MTA on some email gateways and even though I belive

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread Rok Potočnik
On 26.10.2010 21:08, Jeroen Geilman wrote: On 10/26/2010 09:05 PM, Rok Potočnik wrote: First of all, I'm quite satisfied with Postfix and some other opensource products which are keeping my life better and I owe a big *THANK YOU* to all developers etc... Now on to my questions... I'm using Post

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread Rok Potočnik
On 26.10.2010 21:12, lst_ho...@kwsoft.de wrote: Zitat von Rok Potočnik : First of all, I'm quite satisfied with Postfix and some other opensource products which are keeping my life better and I owe a big *THANK YOU* to all developers etc... Now on to my questions... I'm using Postfix MTA on so

Re: Upgrade from 2.4.5 to 2.7.1 and MS Outlook clients

2010-10-26 Thread Victor Duchovni
On Tue, Oct 26, 2010 at 11:40:49AM +0200, Laurent CARON wrote: > Oct 26 11:34:06 sargon postfix/smtpd[23238]: SSL_accept:SSLv3 write > certificate request B > Oct 26 11:34:06 sargon postfix/smtpd[23238]: SSL_accept:SSLv3 flush data > Oct 26 11:34:06 sargon postfix/smtpd[23238]: SSL_accept error f

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread Jeroen Geilman
On 10/26/2010 09:37 PM, Rok Potočnik wrote: On 26.10.2010 21:08, Jeroen Geilman wrote: On 10/26/2010 09:05 PM, Rok Potočnik wrote: First of all, I'm quite satisfied with Postfix and some other opensource products which are keeping my life better and I owe a big *THANK YOU* to all developers etc

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread Rok Potočnik
On 26.10.2010 22:08, Jeroen Geilman wrote: Then you're probably accepting way too much mail that you shouldn't, as the other guy said. Even with volumes exceeding 100K per day, I don't have deferred messages. ISP mail servers usually accept a large number of messages that most company's mail s

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread Victor Duchovni
On Tue, Oct 26, 2010 at 10:25:32PM +0200, Rok Poto??nik wrote: > On 26.10.2010 22:08, Jeroen Geilman wrote: >> Then you're probably accepting way too much mail that you shouldn't, as >> the other guy said. >> Even with volumes exceeding 100K per day, I don't have deferred messages. > > ISP mail se

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread lst_hoe02
Zitat von Rok Potočnik : On 26.10.2010 22:08, Jeroen Geilman wrote: Then you're probably accepting way too much mail that you shouldn't, as the other guy said. Even with volumes exceeding 100K per day, I don't have deferred messages. ISP mail servers usually accept a large number of messages

postfix with TLS.

2010-10-26 Thread PA
Hi, recently I tried to complie TLS with postfix 2.4.5 and 2.6.5 on centos 4.8 and I'm getting an error. The server that I'm trying to get TLS working already is running postfix 2.4.5 with SASL with no issues. When I run make makefiles CCARGS="-DUSE_SASL_AUTH -DUSE_CYRUS_SASL -I/usr/include

Re: postfix with TLS.

2010-10-26 Thread Victor Duchovni
On Tue, Oct 26, 2010 at 05:03:53PM -0400, PA wrote: > Hi, recently I tried to complie TLS with postfix 2.4.5 and 2.6.5 on centos > 4.8 and I'm getting an error. The server that I'm trying to get TLS working > already is running postfix 2.4.5 with SASL with no issues. > > > > When I run > >

Re: Upgrade from 2.4.5 to 2.7.1 and MS Outlook clients

2010-10-26 Thread Laurent CARON
On Tue, Oct 26, 2010 at 03:48:57PM -0400, Victor Duchovni wrote: > On Tue, Oct 26, 2010 at 11:40:49AM +0200, Laurent CARON wrote: > > smtpd_tls_ask_ccert = yes > > Consider turning this off, unless you really make use of client certs, > the client may not have a cert, and may give up for that reas

anvil stats/restictions based on SASL username?

2010-10-26 Thread Cassidy Larson
We had an incident today where we had a user with a compromised machine. Their email/pass made it back to some botnet which proceeded to SASL auth to our mail servers and send numerous spam messages from many different hosts. The spamming hosts didnt trigger our smtpd_client_recipient_rate_limit se

How can i test my local_recipient_maps

2010-10-26 Thread jeffrey j donovan
greetings How can I test my local recipient map. Im looking for something similar to a " postmap -q us...@example.com hash:/etc/postfix/myfile " here is my map statement. local_recipient_maps = proxy:unix:passwd.byname $alias_maps this doesn't work postmap -q dva...@example.com proxy:unix:pas

Re: anvil stats/restictions based on SASL username?

2010-10-26 Thread Wietse Venema
Cassidy Larson: > We had an incident today where we had a user with a compromised > machine. Their email/pass made it back to some botnet which proceeded > to SASL auth to our mail servers and send numerous spam messages from > many different hosts. The spamming hosts didnt trigger our > smtpd_clie

Re: How can i test my local_recipient_maps

2010-10-26 Thread Jeroen Geilman
On 10/27/2010 02:43 AM, jeffrey j donovan wrote: greetings How can I test my local recipient map. Im looking for something similar to a " postmap -q us...@example.com hash:/etc/postfix/myfile " here is my map statement. local_recipient_maps = proxy:unix:passwd.byname $alias_maps this doesn't

Re: How can i test my local_recipient_maps

2010-10-26 Thread Wietse Venema
jeffrey j donovan: > greetings > > How can I test my local recipient map. Im looking for something similar to a > " postmap -q us...@example.com hash:/etc/postfix/myfile " > > here is my map statement. > local_recipient_maps = proxy:unix:passwd.byname $alias_maps > > this doesn't work > postm

Re: How can i test my local_recipient_maps

2010-10-26 Thread donovan jeffrey j
On Oct 26, 2010, at 8:47 PM, Wietse Venema wrote: > jeffrey j donovan: >> greetings >> >> How can I test my local recipient map. Im looking for something similar to a >> " postmap -q us...@example.com hash:/etc/postfix/myfile " >> >> here is my map statement. >> local_recipient_maps = proxy:u

OT: Re: anvil stats/restictions based on SASL username?

2010-10-26 Thread Tomoyuki Murakami
> Cassidy Larson: >> We had an incident today where we had a user with a compromised >> machine. Their email/pass made it back to some botnet which proceeded >> to SASL auth to our mail servers and send numerous spam messages from >> many different hosts. The spamming hosts didnt trigger our >> sm

Need help with SALS and TLS

2010-10-26 Thread Kory Hamzeh
I am trying to setup postfix to authenticate and relay message from 'traveling' users (user connecting to postfix from outside our network and IP range). Some of our users are using Apple iPads and connecting with SALS. Others are using TLS and are mostly Droid smartphones. SASL is almost working

Re: anvil stats/restictions based on SASL username?

2010-10-26 Thread John Fawcett
On 27/10/10 02:21, Cassidy Larson wrote: > This got me wondering if there's any easy way to have anvil report > stats based on the authenticated SASL username, in addition to the > remote IP address? > > This would help me prevent/monitor potential addresses that are being > used by a botnet system

Re: postqueue -p && postsuper ageout, transfer, ...

2010-10-26 Thread Rok Potočnik
On 26.10.2010 22:35, Victor Duchovni wrote: ISP mail servers usually accept a large number of messages that most company's mail servers reject (e.g. only accept only email sent from the hosted domain). Unfortunately we can only limit the email till one point, after that we must somehow work aroun

Postgrey and RBL checks

2010-10-26 Thread Patric Falinder
I just set up Postgrey yesterday and it works just fine. One thing that got me thinking though was that if I have greylisting check Before reject_rbl_client, shouldn't the rbl check be skipped if the IP get's greylisted and Then checked with rbl when/if it passes the greylisting? Or am I thinki

Re: Need help with SALS and TLS

2010-10-26 Thread Patrick Ben Koetter
* Kory Hamzeh : > I am trying to setup postfix to authenticate and relay message from > 'traveling' users (user connecting to postfix from outside our network and > IP range). Some of our users are using Apple iPads and connecting with SALS. > Others are using TLS and are mostly Droid smartphones.

Re: Postgrey and RBL checks

2010-10-26 Thread Henrik K
On Wed, Oct 27, 2010 at 08:45:56AM +0200, Patric Falinder wrote: > I just set up Postgrey yesterday and it works just fine. > One thing that got me thinking though was that if I have greylisting > check Before reject_rbl_client, shouldn't the rbl check be skipped > if the IP get's greylisted and Th

Re: Postgrey and RBL checks

2010-10-26 Thread Patric Falinder
Henrik K skrev 2010-10-27 08:52: On Wed, Oct 27, 2010 at 08:45:56AM +0200, Patric Falinder wrote: I just set up Postgrey yesterday and it works just fine. One thing that got me thinking though was that if I have greylisting check Before reject_rbl_client, shouldn't the rbl check be skipped if th