Re: Postfix und SSL client problem.

2011-03-09 Thread kapetr
Hello, "Victor Duchovni" wrote: > > 1. How to get SSL certificate of smtp.iol.cz > > (and save it to > > > file). > > Use "openssl s_client -showcerts" Thanks - it works. Interesting is, that I get this way only 2 certificates: CN=smtp.iol.cz (issuer CN=Thawte SSL CA) and CN=Thawte SSL CA

Re: posfix rejected from google server

2011-03-09 Thread kapetr
Hello, I have try it - see bellow, but without removing also from PBL it fail, while Peter Evans s server use zen.spamhouse.org which includes also PBL list (dynamic address check). LOG: Mar 9 11:09:07 duron650 postfix/smtp[2873]: B316BA2A79: to=, relay=mail.ixp.jp[222.147.76.196]:25, delay=

postscreen pregreeter DNS trick

2011-03-09 Thread Christian Roessner
Hi, I recently read about the trick by Wietse, defining a second DNS record to skip the 450 delay that follows some postscreen tests. I modified my DNS and it looks like this now: host -t mx roessner-network-solutions.com roessner-network-solutions.com mail is handled by 10 mx0.roessner-net.de. r

Re: posfix rejected from google server

2011-03-09 Thread Reindl Harald
Non-authoritative answer: 108.234.71.85.in-addr.arpa name = 108.234.broadband4.iol.cz. [85.71.234.108] blocked using zen.spamhaus.org sorry but what is your problem? you can not use your home-machine as mailserver and nothing will change this, so what is new in your message after this long

Re: regular expressions was: Kernel Oops

2011-03-09 Thread Stan Hoeppner
mouss put forth on 3/8/2011 5:03 PM: > [WARNING: Steven CC'd] > > things. so I'd say, do not consider performances as a primary target. go > for catching spammers first. only tune after you get the irght rules, > and only if needed (I personally don't tune anything here. I'm happy to > focus on c

Re: Postfix und SSL client problem.

2011-03-09 Thread Matthias Andree
Am 09.03.2011 10:14, schrieb kapetr: > Hello, > > > "Victor Duchovni" wrote: >>> 1. How to get SSL certificate of smtp.iol.cz >>> (and save it to file). >> >> Use "openssl s_client -showcerts" > > Thanks - it works. Interesting is, that I get this way only 2 > certificates: > > CN=smtp.

Re: smtpd_sasl_path tcp-socket?

2011-03-09 Thread Hajo Locke
Hello, RTFM, please. The Postfix SASL_README file says: Communication between the Postfix SMTP server and Dovecot SASL happens via a UNIX-domain socket. Support for inet: is NOT DOCUMENTED. It may disappear any time. There is no promise nowhere that this actually works. You use NOT DOCUMENTE

Re: Postix Newbie: Send all outbound mail to another postfix server

2011-03-09 Thread Stan Hoeppner
Randy Ramsdell put forth on 3/8/2011 3:57 PM: > Stan Hoeppner wrote: >> FYI, the PBL isn't limited to dynamic listings. Many corporations add >> their unused IP space to the PBL, along with other IPs within their >> netblocks that shouldn't be sending direct mail. They do this as part >> of a mu

Re: regular expressions was: Kernel Oops

2011-03-09 Thread Stan Hoeppner
Steve put forth on 3/8/2011 5:12 PM: > Maybe using if/endif conditions like Stan Hoeppner has done on his pcre map > could speedup things even more? -> http://www.hardwarefreak.com/fqrdns.pcre You're giving me too much credit. ;) Again, I'm not the original author of that table. That person cr

Re: Postix Newbie: Send all outbound mail to another postfix server

2011-03-09 Thread Stan Hoeppner
Dennis Guhl put forth on 3/8/2011 6:41 PM: >> Dorothy, you're not in Kansas anymore. > > What does this saying mean? It's a para-quote from the 1939 American movie "The Wizard of Oz". Dorothy, a young girl living in farm house in Kansas, is swept away by a powerful tornado. When the house lands

Using transport_maps

2011-03-09 Thread deconya
Hi guys I need to configure my server to relay domains to and antispam server but by different hosts. I was looking and now I have doubts.In my configuration Im using two variables, relayhost and mydestination. I need to change it and I found to use transport_maps but I don't view examples to unde

OT: Re: Postix Newbie: Send all outbound mail to another postfix server

2011-03-09 Thread Dennis Guhl
On Wed, Mar 09, 2011 at 05:39:07AM -0600, Stan Hoeppner wrote: > Dennis Guhl put forth on 3/8/2011 6:41 PM: > > >> Dorothy, you're not in Kansas anymore. > > > > What does this saying mean? > > It's a para-quote from the 1939 American movie "The Wizard of Oz". > Dorothy, a young girl living in f

Re: Server-to-server TLS

2011-03-09 Thread Raven
On Tue, 2011-03-08 at 08:30 -0500, Victor Duchovni wrote: > On Tue, Mar 08, 2011 at 01:38:28PM +0100, Raven wrote: > > > I would like to implement server-to-server TLS encryption between two > > postfix instances I manage. One of the servers already has > > TLS-capabilities but they are only used

Re: postscreen pregreeter DNS trick

2011-03-09 Thread Noel Jones
On 3/9/2011 4:29 AM, Christian Roessner wrote: Hi, I recently read about the trick by Wietse, defining a second DNS record to skip the 450 delay that follows some postscreen tests. I modified my DNS and it looks like this now: host -t mx roessner-network-solutions.com roessner-network-solutions

Re: message id is a unique number?

2011-03-09 Thread Luciano Mannucci
On Wed, 9 Mar 2011 12:57:26 + Mauro wrote: > I my logs I have: > > > Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: > from=<..> > > That number BF683A28247 is a unique number? Yes and no. It is unique in a timespan. If you use logrotate(8) it is probably unique for

Re: Postix Newbie: Send all outbound mail to another postfix server

2011-03-09 Thread Randy Ramsdell
Stan Hoeppner wrote: Randy Ramsdell put forth on 3/8/2011 3:57 PM: Stan Hoeppner wrote: FYI, the PBL isn't limited to dynamic listings. Many corporations add their unused IP space to the PBL, along with other IPs within their netblocks that shouldn't be sending direct mail. They do this as

Re: message id is a unique number?

2011-03-09 Thread Reindl Harald
Am 09.03.2011 13:57, schrieb Mauro: > I my logs I have: > > > Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: > from=<..> > That number BF683A28247 is a unique number? yes for this messages with "cat /var/log/maillog | grep BF683A28247"you get all lines from this messag

Re: message id is a unique number?

2011-03-09 Thread Noel Jones
On 3/9/2011 6:57 AM, Mauro wrote: I my logs I have: Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: from=<..> That number BF683A28247 is a unique number? The postfix queueid identifies a single message while it's in the queue. The queueid is created from the queue fi

DSN with original message

2011-03-09 Thread moildard moildard
Hello, I know that full messages can be added in any failed DSN but I would like to configure DSN to add in all cases the original message. Could you tell me if this functionality could be added in futures releases ? Thanks for your help !

RE: rewrite the from based on a client hostname or ip

2011-03-09 Thread Katzir, Igal
Thanks Wietse, In order to run multiple postfix instances on a single host, I read in the http://www.postfix.org/MULTI_INSTANCE_README.html that we need to upgrade the Postfix to 2.6 and preferably to 2.7.3 This would take us some time to evaluate, so maybe the simplest thing is to clone the m

Re: rewrite the from based on a client hostname or ip

2011-03-09 Thread Nikolaos Milas
Just my 2c: Here: http://stevejenkins.com/blog/2011/01/building-postfix-2-8-on-rhel5-centos-5-from-source/ you can find directions to build Postfix from source, fully-compatible with CentOS Postfix packages. The above process should be identical in RHEL 5. I have found that building/upgradin

Re: DSN with original message

2011-03-09 Thread Wietse Venema
moildard moildard: > Hello, > > I know that full messages can be added in any failed DSN but I would like to > configure DSN to add in all cases the original message. Postfix NEVER sends full originals when: a) The sender specified RET=HDRS (return headers only). See RFC 3461 for details abou

Re: Using transport_maps

2011-03-09 Thread Noel Jones
On 3/9/2011 6:29 AM, deconya wrote: Hi guys I need to configure my server to relay domains to and antispam server but by different hosts. I was looking and now I have doubts.In my configuration Im using two variables, relayhost and mydestination. I need to change it and I found to use transport_

Re: message id is a unique number?

2011-03-09 Thread Mauro
On 9 March 2011 14:04, Noel Jones wrote: > On 3/9/2011 6:57 AM, Mauro wrote: >> >> I my logs I have: >> >> >> Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: >> from=<..> >> >> That number BF683A28247 is a unique number? > > The postfix queueid identifies a single message wh

Re: message id is a unique number?

2011-03-09 Thread Patrick Ben Koetter
* Mauro : > On 9 March 2011 14:04, Noel Jones wrote: > > On 3/9/2011 6:57 AM, Mauro wrote: > >> > >> I my logs I have: > >> > >> > >> Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: > >> from=<..> > >> > >> That number BF683A28247 is a unique number? > > > > The postfix queu

Re: postscreen pregreeter DNS trick

2011-03-09 Thread Christian Roessner
> > Has the second-MX solution any advantages? Should I stay on the current > > setup? > > Your current setup looks fine. thanks for explaining the different aspects :) Christian -- Roessner-Network-Solutions Bachelor of Science Informatik Nahrungsberg 81, 35390 Gießen F: +49 641 5879091, M: +4

Re: message id is a unique number?

2011-03-09 Thread Mauro
On 9 March 2011 15:46, Patrick Ben Koetter wrote: > * Mauro : >> On 9 March 2011 14:04, Noel Jones wrote: >> > On 3/9/2011 6:57 AM, Mauro wrote: >> >> >> >> I my logs I have: >> >> >> >> >> >> Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: >> >> from=<..> >> >> >> >> That

Re: message id is a unique number?

2011-03-09 Thread Reindl Harald
[root@mail:~]$ cat maillog | grep -i sasl | grep reindl | tail -n 2 Mar 9 15:00:22 mail postfix/smtpd[7582]: 0BA7FE9: client=rh.thelounge.net[10.0.0.99], sasl_method=PLAIN, sasl_username=h.rei...@thelounge.net Mar 9 16:23:45 mail postfix/smtpd[8877]: 614CEE8: client=rh.thelounge.net[10.0.0.99],

Re: message id is a unique number?

2011-03-09 Thread Mauro
On 9 March 2011 16:19, Reindl Harald wrote: > [root@mail:~]$ cat maillog | grep -i sasl | grep reindl | tail -n 2 > Mar  9 15:00:22 mail postfix/smtpd[7582]: 0BA7FE9: > client=rh.thelounge.net[10.0.0.99], sasl_method=PLAIN, > sasl_username=h.rei...@thelounge.net > Mar  9 16:23:45 mail postfix/smt

Re: rewrite the from based on a client hostname or ip

2011-03-09 Thread Victor Duchovni
On Wed, Mar 09, 2011 at 02:22:15PM +, Katzir, Igal wrote: > Thanks Wietse, > > In order to run multiple postfix instances on a single host, > I read in the http://www.postfix.org/MULTI_INSTANCE_README.html that we need > to upgrade the Postfix to 2.6 and preferably to 2.7.3 You can run mul

Re: Server-to-server TLS

2011-03-09 Thread Victor Duchovni
On Wed, Mar 09, 2011 at 01:36:46PM +0100, Raven wrote: > How can I apply this to $relayhost without having to list all local > domains in the transport map (as they are already listed in > $virtual_mailbox_domains)? Why are you using virtual_mailbox_domains for addresses that are relayed to anoth

Re: message id is a unique number?

2011-03-09 Thread Noel Jones
On 3/9/2011 10:26 AM, Mauro wrote: On 9 March 2011 16:19, Reindl Harald wrote: [root@mail:~]$ cat maillog | grep -i sasl | grep reindl | tail -n 2 Mar 9 15:00:22 mail postfix/smtpd[7582]: 0BA7FE9: client=rh.thelounge.net[10.0.0.99], sasl_method=PLAIN, sasl_username=h.rei...@thelounge.net Mar

Re: message id is a unique number?

2011-03-09 Thread Wietse Venema
Noel Jones: > On 3/9/2011 10:26 AM, Mauro wrote: > > On 9 March 2011 16:19, Reindl Harald wrote: > >> [root@mail:~]$ cat maillog | grep -i sasl | grep reindl | tail -n 2 > >> Mar 9 15:00:22 mail postfix/smtpd[7582]: 0BA7FE9: > >> client=rh.thelounge.net[10.0.0.99], sasl_method=PLAIN, > >> sasl_u

Re: message id is a unique number?

2011-03-09 Thread Victor Duchovni
On Wed, Mar 09, 2011 at 01:17:38PM -0500, Wietse Venema wrote: > Correct. With current Postfix implementations, there are two "marker" > records that you can use: > > - The "postfix/qmgr removed" record that says the file is deleted. > This record was introduced with Postfix version 2.1. >

Re: message id is a unique number?

2011-03-09 Thread Wietse Venema
Victor Duchovni: > On Wed, Mar 09, 2011 at 01:17:38PM -0500, Wietse Venema wrote: > > > Correct. With current Postfix implementations, there are two "marker" > > records that you can use: > > > > - The "postfix/qmgr removed" record that says the file is deleted. > > This record was introdu

Re: message id is a unique number?

2011-03-09 Thread Victor Duchovni
On Wed, Mar 09, 2011 at 01:56:50PM -0500, Wietse Venema wrote: > Perhaps it is time to replace the time-in-microseconds portion of > the queue ID by a sufficient number of random bits. I would not replace the microsecond time, its monotonicity has useful properties. Rather, we could augment the

RE: message id is a unique number?

2011-03-09 Thread Murray S. Kucherawy
For what it's worth, sendmail's implementation encodes the current time down to the second plus the pid of the handling process in its queue IDs. A collision then could only happen if the same pid got re-used twice in the same second. It doesn't include the inode or any random data. Details:

RE: Message is modified after after-queue filter

2011-03-09 Thread Murray S. Kucherawy
> -Original Message- > From: owner-postfix-us...@postfix.org > [mailto:owner-postfix-us...@postfix.org] On Behalf Of Victor Duchovni > Sent: Tuesday, March 08, 2011 2:02 PM > To: postfix-users@postfix.org > Subject: Re: Message is modified after after-queue filter > > > My current work-ar

Re: message id is a unique number?

2011-03-09 Thread Wietse Venema
Murray S. Kucherawy: > For what it's worth, sendmail's implementation encodes the current > time down to the second plus the pid of the handling process in > its queue IDs. A collision then could only happen if the same > pid got re-used twice in the same second. It doesn't include the > inode or

Re: message id is a unique number?

2011-03-09 Thread Victor Duchovni
On Wed, Mar 09, 2011 at 04:05:18PM -0500, Wietse Venema wrote: > Postfix uses the inode number in the name, because the name needs > to be unique across the incoming, active, and deferred directories. > > Postfix could lengthen the time before reuse, by including more > time information (four hex

Re: message id is a unique number?

2011-03-09 Thread Randy Ramsdell
Victor Duchovni wrote: On Wed, Mar 09, 2011 at 04:05:18PM -0500, Wietse Venema wrote: Postfix uses the inode number in the name, because the name needs to be unique across the incoming, active, and deferred directories. Postfix could lengthen the time before reuse, by including more time infor

Limiting outgoing SMTP connections when relaying message

2011-03-09 Thread Tim
Sorry if this is a silly question, but I'm something of a Postfix (and mail servers in general) newbie. My Postfix server is all working fine, and is happily acting as a relay for my local network. However, I'm having problems when a user tries to send a single, large message to a large numb

Re: Limiting outgoing SMTP connections when relaying message

2011-03-09 Thread Victor Duchovni
On Wed, Mar 09, 2011 at 09:40:26PM +, Tim wrote: > What happens is that Postfix receives the message from the sender, queues > it, then immediately connects to *all* of the destination servers > simultaneously and starts sending the message to them. This completely > saturates the upstream

Re: Limiting outgoing SMTP connections when relaying message

2011-03-09 Thread Tim
Victor Duchovni wrote: On Wed, Mar 09, 2011 at 09:40:26PM +, Tim wrote: What happens is that Postfix receives the message from the sender, queues it, then immediately connects to *all* of the destination servers simultaneously and starts sending the message to them. This completely satura

Re: message id is a unique number?

2011-03-09 Thread Wietse Venema
Victor Duchovni: > On Wed, Mar 09, 2011 at 04:05:18PM -0500, Wietse Venema wrote: > > > Postfix uses the inode number in the name, because the name needs > > to be unique across the incoming, active, and deferred directories. > > > > Postfix could lengthen the time before reuse, by including more

Re: Limiting outgoing SMTP connections when relaying message

2011-03-09 Thread Victor Duchovni
On Wed, Mar 09, 2011 at 10:21:44PM +, Tim wrote: > Victor Duchovni wrote: >> On Wed, Mar 09, 2011 at 09:40:26PM +, Tim wrote: >>> What happens is that Postfix receives the message from the sender, queues >>> it, then immediately connects to *all* of the destination servers >>> simultaneo

Re: Limiting outgoing SMTP connections when relaying message

2011-03-09 Thread Tim
Victor Duchovni wrote: On Wed, Mar 09, 2011 at 10:21:44PM +, Tim wrote: Victor Duchovni wrote: On Wed, Mar 09, 2011 at 09:40:26PM +, Tim wrote: What happens is that Postfix receives the message from the sender, queues it, then immediately connects to *all* of the destination servers

Re: Limiting outgoing SMTP connections when relaying message

2011-03-09 Thread Reinaldo de Carvalho
On Wed, Mar 9, 2011 at 6:40 PM, Tim wrote: > > What happens is that Postfix receives the message from the sender, queues > it, then immediately connects to *all* of the destination servers > simultaneously and starts sending the message to them. This completely > saturates the upstream Internet li

timeout after CONNECT, no HELO/EHLO response from clients

2011-03-09 Thread Adam N. Copeland
Seeing a problem with inbound delivery from relays. Incoming client connections are timing out, but I'm able to telnet to port 25 on my host and immediately get the 220 banner every time. Sometimes the connection times out before the 220 banner is displayed, sometimes it doesn't and the client neve

Re: timeout after CONNECT, no HELO/EHLO response from clients

2011-03-09 Thread Jeroen Geilman
On 03/10/2011 01:00 AM, Adam N. Copeland wrote: Seeing a problem with inbound delivery from relays. Incoming client connections are timing out, but I'm able to telnet to port 25 on my host and immediately get the 220 banner every time. Sometimes the connection times out before the 220 banner is d

Re: Limiting outgoing SMTP connections when relaying message

2011-03-09 Thread Victor Duchovni
On Wed, Mar 09, 2011 at 08:36:36PM -0300, Reinaldo de Carvalho wrote: > Fix the problem on the right way, use traffic control. Example to > outgoing email 1Mbit limit. That won't help with the timing out deliveries. There will still be very slow deliveries across many connections and they may wel

Re: timeout after CONNECT, no HELO/EHLO response from clients

2011-03-09 Thread Victor Duchovni
On Thu, Mar 10, 2011 at 01:14:48AM +0100, Jeroen Geilman wrote: >> Mar 9 18:38:03 pmx4 postfix/smtpd[13358]: [ID 197553 mail.info] connect >> from unknown[134.53.6.74] >> > okay > >> Mar 9 18:41:03 pmx4 postfix/smtpd[13243]: [ID 197553 mail.info]> >> unknown[134.53.6.74]: 421 4.4.2 smtp-in.m

Re: timeout after CONNECT, no HELO/EHLO response from clients

2011-03-09 Thread Jeroen Geilman
On 03/10/2011 01:56 AM, Victor Duchovni wrote: On Thu, Mar 10, 2011 at 01:14:48AM +0100, Jeroen Geilman wrote: Mar 9 18:38:03 pmx4 postfix/smtpd[13358]: [ID 197553 mail.info] connect from unknown[134.53.6.74] okay Mar 9 18:41:03 pmx4 postfix/smtpd[13243]: [ID 197553 mail

having and custome queue in postfix same as like HOLD queue

2011-03-09 Thread kshitij mali
HI All , My self kshitij and i am using postfix MTA for mailing service around 1.5 year EXP. I want to built an new coustome queue same as like HOLD queue . currrent sinerio is like i donot want any mail to be rejected as per my mangement instruction all the filter i applied on the smtpd_*_restr