reject entire email if one recipient is invalid

2011-01-09 Thread yz1234
Hello, Is there a way to configure Postfix to reject the entire message (multi-recipient) if one of its recipients is unauthorized or invalid? Thanks -- View this message in context: http://old.nabble.com/reject-entire-email-if-one-recipient-is-invalid-tp30625158p30625158.html Sent from t

Re: another stupid question about exporting valid users from windows 2008 domain to postfix valid users map

2011-01-09 Thread lst_hoe02
Zitat von Eero Volotinen : Does this still works for windows 2008 ad? : http://postfix.state-of-mind.de/patrick.koetter/mailrelay/#d0e149 or is there better way to do it? In most cases it would be best to query Windows AD by LDAP without the need for script magic and without syncronisation

Re: delisting from spamcannibal.org

2011-01-09 Thread Stan Hoeppner
mouss put forth on 1/8/2011 3:53 PM: > Le 08/01/2011 13:28, Samuel Sappa a écrit : >> Sorry if my question doesn't fit the rule in this mailing list, i'm >> not looking for contact from spamcannibal or both yahoo and gmail, i'm >> just asking if there someone else have some experience and would >>

Re: reject entire email if one recipient is invalid

2011-01-09 Thread Wietse Venema
yz1234: > > Hello, > > Is there a way to configure Postfix to reject the entire message > (multi-recipient) if one of its recipients is unauthorized or invalid? This is not implemented in Postfix. You may implement this with a Milter plugin-program. Wietse

Order of policies?

2011-01-09 Thread Jan Johansson
I have the following config: smtpd_recipient_restrictions = permit_mynetworks reject_unauth_destination check_policy_service inet:127.0.0.1:10031 I assumed that it would mean that any attempt to send a mail to a recipient that is not a valid destination would be immediately rejected, and if the

Re: Order of policies?

2011-01-09 Thread Wietse Venema
Jan Johansson: > I have the following config: > > smtpd_recipient_restrictions = permit_mynetworks reject_unauth_destination > check_policy_service inet:127.0.0.1:10031 > > I assumed that it would mean that any attempt to send a mail to > a recipient that is not a valid destination would be imme

Re: Ignoring "certificate verification failed ... untrusted issuer"

2011-01-09 Thread lst_hoe02
Zitat von "Mike A. Leonetti" : I set up postfix with: smtp_tls_policy_maps = hash:/etc/postfix/tls_policy And a list of domains with "may" as the policy for each of them. The problem is postfix hates the certificate (because I don't have it listed as a trusted issuer anywhere). So I get this

Evaluation order of transport_maps?

2011-01-09 Thread Jan Johansson
Let's say that for various reasons a system ends up having two identical entries in transport maps. Is there a fixed logic as to which takes precedence? As an example (I entered my own address instead of the address in question): j...@mupp.net smtp:mail.kontinuitet.com j...@mu

Re: Evaluation order of transport_maps?

2011-01-09 Thread Wietse Venema
Jan Johansson: > Let's say that for various reasons a system ends up having two > identical entries in transport maps. By definition you can't have that in a hashed file, *SQL database, or LDAP. Other Postfix lookup tables such as regexp or pcre will return the first match, as documented.

SV: Evaluation order of transport_maps?

2011-01-09 Thread Jan Johansson
>By definition you can't have that in a hashed file, *SQL database, or LDAP. >Other Postfix lookup tables such as regexp or pcre will return the first >match, as documented. Come to think about it. That makes sense. Sorry about that. So, in the meantime, a dirty workaround is to do it like this

MS AD integration

2011-01-09 Thread K bharathan
hi all is there any way to postfix could query the mail users directly from Active Directory? what is required for this thanks -bharathan

SV: MS AD integration

2011-01-09 Thread Jan Johansson
>hi all >is there any way to postfix could query the mail users directly from Active >Directory? >what is required for this >Thanks Sure, plenty of ways, but do you _really_ want this? The reason I myself prefer to periodically transfer a dump of all proxy-addresses from the AD/Exchange enviro

Re: MS AD integration

2011-01-09 Thread K bharathan
On Sun, Jan 9, 2011 at 7:41 PM, Jan Johansson wrote: > >hi all > > >is there any way to postfix could query the mail users directly from > Active Directory? > > >what is required for this > > >Thanks > > > > Sure, plenty of ways, but do you _*really*_ want this? > > > > The reason I myself pre

Postdrop does not support MySQL lookups? / Limit outgoing mails.

2011-01-09 Thread Floris Bos
Hi, I am trying to limit the number of outgoing messages a single local Unix user (web hosting customer) can send in a single day. My first thought was to create a policy server for this, but unfortuneately Postfix does not supply the originating UID to the policy server, and the "sender" field

Re: Postdrop does not support MySQL lookups? / Limit outgoing mails.

2011-01-09 Thread Wietse Venema
Floris Bos: > Hi, > > I am trying to limit the number of outgoing messages a single local Unix user > (web hosting customer) can send in a single day. > My first thought was to create a policy server for this, but unfortuneately > Postfix does not supply the originating UID to the policy server,

Re: Postdrop does not support MySQL lookups? / Limit outgoing mails.

2011-01-09 Thread Wietse Venema
Floris Bos: > authorized_submit_users=mysql:/etc/postfix/mysql_outgoing_limit.cf > == > > it gives an error when trying to send mail: > > == > sendmail: fatal: unsupported dictionary type: mysql This means that MySQL support is not compiled into your Postfix sendmail command. Wietse

Re: MS AD integration

2011-01-09 Thread lst_hoe02
Zitat von K bharathan : On Sun, Jan 9, 2011 at 7:41 PM, Jan Johansson wrote: >hi all >is there any way to postfix could query the mail users directly from Active Directory? >what is required for this >Thanks Sure, plenty of ways, but do you _*really*_ want this? The reason I mysel

RE: MS AD integration

2011-01-09 Thread Dudi Goldenberg
>is there any way to postfix could query  the mail users directly from Active >Directory? Another reason not to use direct queries is that is for some reason the AD is down, postfix will reject emails destined to it. If use query the AD say once an hour into a hash, postfix will accept the mail

RE: MS AD integration

2011-01-09 Thread lst_hoe02
Zitat von Dudi Goldenberg : is there any way to postfix could query  the mail users directly from Active Directory? Another reason not to use direct queries is that is for some reason the AD is down, postfix will reject emails destined to it. If use query the AD say once an hour into a ha

Re: Postdrop does not support MySQL lookups? / Limit outgoing mails.

2011-01-09 Thread Floris Bos
On Sunday, January 09, 2011 08:44:12 pm Wietse Venema wrote: >Instead of guessing, try to read the documentation. > >man 5 postconf | less +/authorized_submit_users The documentation is where I found the option in the first place, and since it mentioned "type:table", I assumed it would support al

Re: Postdrop does not support MySQL lookups? / Limit outgoing mails.

2011-01-09 Thread Wietse Venema
Floris Bos: > > > sendmail: fatal: unsupported dictionary type: mysql > > > > This means that MySQL support is not compiled into your Postfix > > sendmail command. > > Do I need any special compile option other than the standard -DHAS_MYSQL (and > include/library directory) to get the support in

Is there a way to make Postfix 2.7.x stop announcing ETRN?

2011-01-09 Thread Mark Alan
While using Postfix 2.7.1 at an Ubuntu 10.10 server: We disabled ETRN as stated in the 'Configuring the Postfix fast ETRN service' section of the ETRN_README.html (...) smtpd_delay_reject = yes fast_flush_domains = mydestination = localhost.localdomain, localhost mynetworks = 127.0.0.0/8

Re: Postdrop does not support MySQL lookups? / Limit outgoing mails.

2011-01-09 Thread Floris Bos
Hi, On Sunday, January 09, 2011 09:34:10 pm Wietse Venema wrote: > Floris Bos: > > > > sendmail: fatal: unsupported dictionary type: mysql > > > > > > This means that MySQL support is not compiled into your Postfix > > > sendmail command. > > > > Do I need any special compile option other than t

Re: Is there a way to make Postfix 2.7.x stop announcing ETRN?

2011-01-09 Thread Noel Jones
On 1/9/2011 2:16 PM, Mark Alan wrote: While using Postfix 2.7.1 at an Ubuntu 10.10 server: We disabled ETRN as stated in the 'Configuring the Postfix fast ETRN service' section of the ETRN_README.html (...) smtpd_delay_reject = yes fast_flush_domains = mydestination = localhost.locald

Re: Postdrop does not support MySQL lookups? / Limit outgoing mails.

2011-01-09 Thread Wietse Venema
Floris Bos: [ Charset ISO-8859-1 unsupported, converting... ] > Hi, > > On Sunday, January 09, 2011 09:34:10 pm Wietse Venema wrote: > > Floris Bos: > > > > > sendmail: fatal: unsupported dictionary type: mysql > > > > > > > > This means that MySQL support is not compiled into your Postfix > > >

Re: Is there a way to make Postfix 2.7.x stop announcing ETRN?

2011-01-09 Thread Wietse Venema
Mark Alan: > While using Postfix 2.7.1 at an Ubuntu 10.10 server: > > We disabled ETRN as stated in the 'Configuring the Postfix fast ETRN service' > section of the ETRN_README.html > > (...) > smtpd_delay_reject = yes > fast_flush_domains = > mydestination = localhost.localdomain, localho

warning: pipe flag `D' requires dovecot-spamass_destination_recipient_limit = 1

2011-01-09 Thread JKL
Hi everyone, Just a quick question. I have Dovecot piping to Spamassassin. When I send an email to one user it seems to works, but when I have multiple recipients in the Email is gives this error. Does anyone know what it really means? Best wishes, J Jan 9 21:59:06 logout postfix/pip

Re: warning: pipe flag `D' requires dovecot-spamass_destination_recipient_limit = 1

2011-01-09 Thread Wietse Venema
JKL: [ Charset UTF-8 unsupported, converting... ] > Hi everyone, > > Just a quick question. I have Dovecot piping to Spamassassin. > When I send an email to one user it seems to works, but when I have > multiple recipients in the Email is gives this error. > > Does anyone know what it re

Re: Is there a way to make Postfix 2.7.x stop announcing ETRN?

2011-01-09 Thread Mark Alan
On Sun, 09 Jan 2011 14:49:11 -0600, Noel Jones wrote: > http://www.postfix.org/postconf.5.html#smtpd_discard_ehlo_keywords > > # main.cf > smtpd_discard_ehlo_keywords = silent-discard, etrn That works. Problem solved. Thank you very much Noel. M.

Re: warning: pipe flag `D' requires dovecot-spamass_destination_recipient_limit = 1

2011-01-09 Thread JKL
On 01/09/2011 10:26 PM, Wietse Venema wrote: > JKL: > [ Charset UTF-8 unsupported, converting... ] >> Hi everyone, >> >> Just a quick question. I have Dovecot piping to Spamassassin. >> When I send an email to one user it seems to works, but when I have >> multiple recipients in the Email is

Re: Ignoring "certificate verification failed ... untrusted issuer"

2011-01-09 Thread Mike A. Leonetti
(2011年01月09日 10:28), lst_ho...@kwsoft.de wrote: > Zitat von "Mike A. Leonetti" : > >> I set up postfix with: >> >>> smtp_tls_policy_maps = hash:/etc/postfix/tls_policy >> And a list of domains with "may" as the policy for each of them. The >> problem is postfix hates the certificate (because I don'

Another "certificate verification failed ... untrusted issuer" question

2011-01-09 Thread IT geek 31
My understanding is to prevent these errors, you obtain the root certificate for each server mail certificate your Postfix server connects to, append it to a pem file and reference it with smtp_tls_CAfile in main.conf. This could obviously take a while. On a Windows installation you can refer to

Re: reject entire email if one recipient is invalid

2011-01-09 Thread mouss
Le 09/01/2011 15:01, Wietse Venema a écrit : > yz1234: >> >> Hello, >> >> Is there a way to configure Postfix to reject the entire message >> (multi-recipient) if one of its recipients is unauthorized or invalid? > > This is not implemented in Postfix. You may implement this with > a Milter pl

"Standard" options when compiling Postfix from source?

2011-01-09 Thread Steve Jenkins
Up to now, we've been running Postfix 2.3.3 that was installed on a number of CentOS 5.5 production servers with a simple "yum install postfix" We want to run an updated version, so I compiled 2.7.2 from source using the information at http://postfix.wl0.org/en/building-rpms/ When creating the po

Re: Another "certificate verification failed ... untrusted issuer" question

2011-01-09 Thread Noel Jones
On 1/9/2011 4:39 PM, IT geek 31 wrote: My understanding is to prevent these errors, you obtain the root certificate for each server mail certificate your Postfix server connects to, append it to a pem file and reference it with smtp_tls_CAfile in main.conf. This could obviously take a while. On

Re: "Standard" options when compiling Postfix from source?

2011-01-09 Thread Wietse Venema
Steve Jenkins: > Up to now, we've been running Postfix 2.3.3 that was installed on a number > of CentOS 5.5 production servers with a simple "yum install postfix" > > We want to run an updated version, so I compiled 2.7.2 from source using the > information at http://postfix.wl0.org/en/building-rp

RE: "Standard" options when compiling Postfix from source?

2011-01-09 Thread Steve Jenkins
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Wietse Venema > Sent: Sunday, January 09, 2011 8:03 PM > Subject: Re: "Standard" options when compiling Postfix from source? > Postfix from postfix.org stores the compile-t

Re: delisting from spamcannibal.org

2011-01-09 Thread Samuel Sappa
> IIRC, Samuel stated in his original email mouss that he can successfully > send to gmail, yahoo, and others, but he can't receive from them. > > This sounds like he has misconfigured his Postfix server, and that his > problem probably has nothing to do with spamcannibal. > > Samuel, please forwar

Re: another stupid question about exporting valid users from windows 2008 domain to postfix valid users map

2011-01-09 Thread Ansgar Wiechers
On 2011-01-09 lst_ho...@kwsoft.de wrote: > Zitat von Eero Volotinen : >> Does this still works for windows 2008 ad? : >> http://postfix.state-of-mind.de/patrick.koetter/mailrelay/#d0e149 >> >> or is there better way to do it? > > In most cases it would be best to query Windows AD by LDAP without th