Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread Patric Falinder
Ansgar Wiechers skrev 2010-11-24 18:11: On 2010-11-24 Patric Falinder wrote: lst_ho...@kwsoft.de skrev 2010-11-24 11:08: Be sure to limit the usage of the list to the affected account and maybe even to bounce sender addresses as a lot of legitim hosts are listed. See http://www.backscatterer.or

Upgrading from 2.7.1 to 2.7.2 is causing me a headache.

2010-11-25 Thread Thomas Løcke
Hello, I've used the following Slackware build script to create a Slackware 13.1 Postfix 2.7.1 package: http://pastebin.com/cfDZJGXf When I use the same script to build a 2.7.2 package, I get this error when I try to start Postfix: postsuper: fatal: scan_dir_push: open directory defer: Permissi

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread Ansgar Wiechers
On 2010-11-25 Patric Falinder wrote: > Ansgar Wiechers skrev 2010-11-24 18:11: >> On 2010-11-24 Patric Falinder wrote: >>> lst_ho...@kwsoft.de skrev 2010-11-24 11:08: Be sure to limit the usage of the list to the affected account and maybe even to bounce sender addresses as a lot of legit

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread lst_hoe02
Zitat von Patric Falinder : lst_ho...@kwsoft.de skrev 2010-11-24 11:08: Zitat von Patric Falinder : lst_ho...@kwsoft.de skrev 2010-11-24 10:22: Zitat von Patric Falinder : Hi, A colleague of mine gets a lot of weird Delivery Status Notifications, Failure Notice and Rejected messages. Yes

Re: Two postfix instances, different header_checks

2010-11-25 Thread Angel L. Mateo
El 24/11/10 18:41, Victor Duchovni escribió: On Wed, Nov 24, 2010 at 06:35:19PM +0100, Angel L. Mateo wrote: Hello, I'm running postfix (version 2.5.5, from debian lenny package) with amavis and spamassassin for spam checks. For amavis and SA to work, we have 2 postfix instan

Re: Two postfix instances, different header_checks

2010-11-25 Thread Angel L. Mateo
El 25/11/10 01:05, Jeroen Geilman escribió: header_checks is a cleanup(8) setting, not an smtpd(8) one. You can specify a different cleanup service by adding -o cleanup_service_name=my_cleanup_service to your SA resubmission smtpd listener, and defining my_cleanup_service unix - - - - - clea

Re: Relayhost

2010-11-25 Thread Angelo Amoruso
On 23/11/2010 17.37, Noel Jones wrote: On 11/23/2010 5:54 AM, Angelo Amoruso wrote: Hi, is there any way for postfix to change the outgoing relayhost using a sort of policy server? Postfix doesn't directly support that, although there may be workarounds for some situations. What information

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread Patric Falinder
Ansgar Wiechers skrev 2010-11-25 09:44: On 2010-11-25 Patric Falinder wrote: Ansgar Wiechers skrev 2010-11-24 18:11: On 2010-11-24 Patric Falinder wrote: lst_ho...@kwsoft.de skrev 2010-11-24 11:08: Be sure to limit the usage of the list to the affected account and maybe even to bounce sender

Watchdog timeout

2010-11-25 Thread Augusto Casagrande
Hi, i'm having some problems in my mta server. I'm running Suse 10.1 , Postfix 2.2.9. Suddenly i started receiving ths var/log/mail logs: ... Nov 25 08:43:28 cluster2 postfix/smtpd[7088]: fatal: watchdog timeout Nov 25 08:43:28 cluster2 postfix/smtpd[7062]: fatal: watchdog timeout Nov 25 08:43

Re: Relayhost

2010-11-25 Thread /dev/rob0
On Thu, Nov 25, 2010 at 10:33:33AM +0100, Angelo Amoruso wrote: > One situation is when having Postfix using as smarthost your ISP > smtp server. > Nowadays the smtp server DNS record is actually a round-robin dns > name or set of aliases which points to a pool of smtp servers. > > Example: > > s

Re: Relayhost

2010-11-25 Thread /dev/rob0
On Thu, Nov 25, 2010 at 06:34:03AM -0600, /dev/rob0 wrote: > And "dig outmx.site. mx" yields this: > outmx.site. IN 600 10 goodrelay.1.example.net. > outmx.site. IN 600 10 goodrelay.2.example.net. > ... Coffee deprivation, sorry. More like this: outmx.site. 600 IN

Re: Watchdog timeout

2010-11-25 Thread Wietse Venema
Augusto Casagrande: > daemon_timeout = 5 Delete that line from main.cf. Wietse

check_recipient_access seems doesn't work.

2010-11-25 Thread Mauro
I have a file: recipient_checks with mym...@example.com REJECT and the corresponding hashed recipient_checks.db. In main.cf I have: smtpd_recipient_restrictions = .. .. check_recipient_access hash:/etc/postfix/maps/recipient_checks The transport is: virtual_transport = dovecot. When

Re: Upgrading from 2.7.1 to 2.7.2 is causing me a headache.

2010-11-25 Thread /dev/rob0
On Thu, Nov 25, 2010 at 09:22:09AM +0100, Thomas L?cke wrote: > I've used the following Slackware build script to create a Slackware > 13.1 Postfix 2.7.1 package: > > http://pastebin.com/cfDZJGXf Alan's a good ol' boy and friend and colleague of mine, but I told him that hardcoding the version i

Re: check_recipient_access seems doesn't work.

2010-11-25 Thread /dev/rob0
On Thu, Nov 25, 2010 at 01:54:49PM +0100, Mauro wrote: > I have a file: recipient_checks with mym...@example.com REJECT and the > corresponding hashed recipient_checks.db. > In main.cf I have: > smtpd_recipient_restrictions = >.. > .. The elided lines might have been significant. >

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread Ansgar Wiechers
On 2010-11-25 Patric Falinder wrote: > Ansgar Wiechers skrev 2010-11-25 09:44: >> You could try something like this: >> >> # /etc/postfix/main.cf >> ... >> smtpd_restriction_classes = backscatter_rbl >> backscatter_rbl = reject_rbl_client ips.backscatterer.org >> smtpd_recipient_restrictions = >>

Re: Pipelining of Sender Verify requets causing problems with Microsoft servers

2010-11-25 Thread Wietse Venema
Stephen Thorne: > G'day, > > I've been investigating an issue with using Sender Address Verification > using address_verify_sender. > > I've established that there is a problem with the implementation of > pipelining used by Microsoft's servers, here's an example of the broken > behaviour: > > #

Re: Upgrading from 2.7.1 to 2.7.2 is causing me a headache.

2010-11-25 Thread TuxRules
On 11/25/2010 07:06 AM, /dev/rob0 wrote: On Thu, Nov 25, 2010 at 09:22:09AM +0100, Thomas L?cke wrote: I've used the following Slackware build script to create a Slackware 13.1 Postfix 2.7.1 package: http://pastebin.com/cfDZJGXf Alan's a good ol' boy and friend and colleague of mine, but I tol

Do not send non-delivery notification

2010-11-25 Thread Lukas
Hello, my question is about not sending "non-delivery notification". I want to tell postfix, that in case on non delivery it has not to send any messages.. Is it possible? It should be useful for mass mailing servers.. -- Lukas UAB nSoft http://www.nsoft.lt +370 655 10 655

Re: Do not send non-delivery notification

2010-11-25 Thread Ralf Hildebrandt
* Lukas : > Hello, > > my question is about not sending "non-delivery notification". I want > to tell postfix, that in case on non delivery it has not to send any > messages.. Is it possible? Yes > It should be useful for mass mailing servers.. Why not use the non-delivery notifications to cl

Re: Do not send non-delivery notification

2010-11-25 Thread Lukas
Hi, >>  my question is about not sending "non-delivery notification". I want >> to tell postfix, that in case on non delivery it has not to send any >> messages.. Is it possible? > > Yes And how? >>  It should be useful for mass mailing servers.. > > Why not use the non-delivery notifications to

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread Noel Jones
On 11/25/2010 2:44 AM, Ansgar Wiechers wrote: On 2010-11-25 Patric Falinder wrote: Ansgar Wiechers skrev 2010-11-24 18:11: On 2010-11-24 Patric Falinder wrote: lst_ho...@kwsoft.de skrev 2010-11-24 11:08: Be sure to limit the usage of the list to the affected account and maybe even to bounce s

Re: Do not send non-delivery notification

2010-11-25 Thread Wietse Venema
Lukas: > Hi, > > >> ?my question is about not sending "non-delivery notification". I want > >> to tell postfix, that in case on non delivery it has not to send any > >> messages.. Is it possible? > > > > Yes > And how? > > >> ?It should be useful for mass mailing servers.. > > > > Why not use the

Re: Do not send non-delivery notification

2010-11-25 Thread Ralf Hildebrandt
* Lukas : > Hi, > > >>  my question is about not sending "non-delivery notification". I want > >> to tell postfix, that in case on non delivery it has not to send any > >> messages.. Is it possible? > > > > Yes > And how? You could create a bounce template containing a random character sequence a

Re: Do not send non-delivery notification

2010-11-25 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > Maybe use the normal header_checks instead... But I wonder if a bounce > (as generated by Postfix) is subject to header_checks! Nope. But one can change this using: internal_mail_filter_classes = bounce bounce Inspect the content of delivery status notifications. notify I

Queue monitoring

2010-11-25 Thread Mark Watts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have a requirement to be able to monitor a postfix queue over time, and to determine whether any messages are delayed due to problems connecting to a remote servers. The mail system concerned is pretty simple; messages are generated locally and rel

slightly OT: how do others fight brute force SASL attacks

2010-11-25 Thread Udo Rader
Hi, in the past couple of days we have been somewhat hit by quite a lot of brute force SASL related attacks. I've now adapted fail2ban to catch those attacks, but I am wondering how others fight those attacks. Maybe there is something similar like a RBL for brute force attacks? -- Udo Rader, C

Re: Queue monitoring

2010-11-25 Thread Wietse Venema
Mark Watts: > > I have a requirement to be able to monitor a postfix queue over time, > and to determine whether any messages are delayed due to problems > connecting to a remote servers. > > The mail system concerned is pretty simple; messages are generated > locally and relayed to a remote serv

Re: Watchdog timeout

2010-11-25 Thread Wietse Venema
Augusto Casagrande: > I change it to 5 , because my system went u_n_s_t_a_b_l_e and it crashed. Get a better machine, or set default_process_limit=10 in main.cf and restart Postfix. Wietse > If i put the default parameter, the use of the cpu is permanent and > the system does not respond

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread Ansgar Wiechers
On 2010-11-25 Noel Jones wrote: > On 11/25/2010 2:44 AM, Ansgar Wiechers wrote: >> However, you can't use reject_rbl_client in these tables (see man 5 >> access). > > Yes, you can use reject_rbl_client (or any other built-in restriction) > as a result of a table lookup. Restriction classes are onl

Re: Do not send non-delivery notification

2010-11-25 Thread J. Roeleveld
On Thursday 25 November 2010 17:12:22 Lukas wrote: > Hi, > > >> my question is about not sending "non-delivery notification". I want > >> to tell postfix, that in case on non delivery it has not to send any > >> messages.. Is it possible? > > > > Yes > > And how? > > >> It should be useful fo

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread Victor Duchovni
On Thu, Nov 25, 2010 at 10:24:32AM -0600, Noel Jones wrote: >> However, you can't use reject_rbl_client in these tables (see man 5 >> access). > > Yes, you can use reject_rbl_client (or any other built-in restriction) as a > result of a table lookup. Restriction classes are only required if you

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread mouss
Le 24/11/2010 11:04, Patric Falinder a écrit : lst_ho...@kwsoft.de skrev 2010-11-24 10:22: Zitat von Patric Falinder : Hi, A colleague of mine gets a lot of weird Delivery Status Notifications, Failure Notice and Rejected messages. Yesterday she got 200 of them.. They all come from different

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread lst_hoe02
Zitat von mouss : Le 24/11/2010 11:04, Patric Falinder a écrit : lst_ho...@kwsoft.de skrev 2010-11-24 10:22: Zitat von Patric Falinder : Hi, A colleague of mine gets a lot of weird Delivery Status Notifications, Failure Notice and Rejected messages. Yesterday she got 200 of them.. They all

Re: Pipelining of Sender Verify requets causing problems with Microsoft servers

2010-11-25 Thread Stephen Thorne
On 2010-11-25, Wietse Venema wrote: > Looks like Microsoft has "bluewashed" the Frontbridge software > after acquiring that company (i.e. they replaced the alien code > by their own). Bluewashing is the word at IBM for this process. We have reported this bug to Microsoft through our clients who ar

Re: Re: Watchdog timeout

2010-11-25 Thread augustocasagrande
No, i believe it is a disk issue. I'm changing it. Thanks El , Wietse Venema escribió: Augusto Casagrande: > I change it to 5 , because my system went u_n_s_t_a_b_l_e and it crashed. Get a better machine, or set default_process_limit=10 in main.cf and restart Postfix. Wietse

Re: slightly OT: how do others fight brute force SASL attacks

2010-11-25 Thread Stephen Thorne
On 2010-11-25, Udo Rader wrote: > Hi, > > in the past couple of days we have been somewhat hit by quite a lot of > brute force SASL related attacks. > > I've now adapted fail2ban to catch those attacks, but I am wondering how > others fight those attacks. > > Maybe there is something similar lik

Re: slightly OT: how do others fight brute force SASL attacks

2010-11-25 Thread Robert Schetterer
Am 26.11.2010 01:39, schrieb Stephen Thorne: > On 2010-11-25, Udo Rader wrote: >> Hi, >> >> in the past couple of days we have been somewhat hit by quite a lot of >> brute force SASL related attacks. >> >> I've now adapted fail2ban to catch those attacks, but I am wondering how >> others fight thos

statistics for incoming/outcoming mail for each user

2010-11-25 Thread Eero Volotinen
Hi, I need to create statistics for postfix mailserver, mainly counting number each user incoming and outcoming emails/day. What is best software for this kind of statics? br, -- Eero