Re: qmgr warning

2011-04-11 Thread Matthias Andree
Am 08.04.2011 18:31, schrieb Wietse Venema: Randy Ramsdell: Ralf Hildebrandt wrote: * Ralf Hildebrandt: * Randy Ramsdell: Apr 8 10:10:30 atlbl6 postfix/qmgr[11959]: warning: connect to transport private/retry: Connection refused grep retry /etc/postfix/master.cf what do you see? # grep

RE: smptd_client_restriction

2011-04-11 Thread mejaz
Hello The reason behind to apply smtpd_client_restriction is to control the spammers, now what is happening spammers (even those doesn't belongs to our network) are configuring our fake email address of our domain and sending spam emails to the internet which causing our. server black list i

rate limit per day

2011-04-11 Thread Tom Kinghorn
Good morning List. Is it possible to rate limit based on individual network ranges? We have multiple network ranges (3G, DSL& leased line) and I would like to setup a different sending rate limit for the individual networks. For example, is it possible limit the 3G network to 300 mails per da

Re: anonymous TLS query

2011-04-11 Thread Victor Duchovni
On Sun, Apr 10, 2011 at 12:46:03AM +1000, Voytek Eymont wrote: > Apr 10 00:37:13 palm postfix/smtp[12024]: setting up TLS connection to > gmail-smtp-in.l.google.com[7 > 4.125.127.27]:25 > > Apr 10 00:37:13 palm postfix/smtp[12024]: certificate verification failed > for gmail-smtp-in.l.googl > e.c

Re: selective greylisting with a long delay

2011-04-11 Thread lst_hoe02
Zitat von "pf at alt-ctrl-del.org" : Has anyone implemented or experimented with selectively greylisting specific networks, with a long delay? Let's say 4 hours... If so, what are your results? Background: 1. Greylisting seems to have lost much of its value, and I stopped using it about a y

Re: Restricting ETRN?

2011-04-11 Thread Victor Duchovni
On Fri, Apr 08, 2011 at 11:44:12PM -0500, Noel Jones wrote: > On 4/8/2011 11:29 PM, email builder wrote: >> >> Or is this of no concern and/or does the junk command limit take care of >> it? > > If you have no use for ETRN just set > smtpd_etrn_restrictions = reject > or maybe better > smtpd_etrn

Re: use of smtp(d)_tls_CAfile with opportunistic TLS?

2011-04-11 Thread Victor Duchovni
On Fri, Apr 08, 2011 at 11:09:00PM -0700, email builder wrote: > I'm wondering about the usefulness of smtp(d)_tls_CAfile(path) when using > opportunistic encryption in both incoming and outgoing connections. The > TLS_README suggests that certificate and key files be left empty for > opportuni

Re: migrating to new server ?

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 04:07:57PM +1000, li...@sbt.net.au wrote: > I'm migrating virtual mail domain/users to new Postfix server, > new server setup and working, I'm altering MX to point to the new server; > > I want the 'old' server to forward any new traffic over to the new server, > last time

Re: rate limit per day

2011-04-11 Thread Simone Caruso
On 11/04/2011 10:09, Tom Kinghorn wrote: > Good morning List. > > Is it possible to rate limit based on individual network ranges? try http://postfwd.org/ -- Simone Caruso IT Consultant

Re: smptd_client_restriction

2011-04-11 Thread Noel Jones
On 4/11/2011 1:08 AM, mejaz wrote: Hello, Many thanks for your feedback it works for me after replacing “hash” with “cidr” but after that whenever I was trying to send emails to outside domains it says relay access denied although the trusted IPs are listed in my network file. Please help Ejaz

stop sending email when concrete recipient detected

2011-04-11 Thread Jiri Vitek
Hi folks, what is the best solution for discarding email to be sended/trasnfered to all recipients when there is one concrete addres in to, cc bcc fields. i need that for functional testing of our e-shop, where we testing in production environment. And we don't want to spam our clients with "orde

Problem with how postfix chooses MX'es

2011-04-11 Thread Administrator Systemu
Hello all! I'm looking at logs of my postfix-2.6.6 and wonder how postfix chooses which MX it'll connect. There is some "cool" configured domain simplusnet.pl: simplusnet.pl.300INSOAplusmx1.polkomtel.com.pl. postmaster.plusgsm.pl. 2010122205 28800 7200 1209600 86400 simp

Re: Address Rewrite Problem

2011-04-11 Thread Noel Jones
On 4/10/2011 11:55 PM, Nasser Heidari wrote: Anyone has any idea ? Thanks for Your answer, Here is my postconf -n output: Please don't top-post. Please show us "postconf -n" output and non-comment entries from master.cf, along with logging demonstrating the problem. -- Noel Jones

Which is the best lookup table for postfix

2011-04-11 Thread kshitij mali
HI all , Which the best lookup for postfix databases from the following one : mysql ldap hash-db cdb I want to migrate from qmail to postfix which would be having 1378 email account Regards, Kshitij

Re: stop sending email when concrete recipient detected

2011-04-11 Thread Noel Jones
On 4/11/2011 7:05 AM, Jiri Vitek wrote: Hi folks, what is the best solution for discarding email to be sended/trasnfered to all recipients when there is one concrete addres in to, cc bcc fields. i need that for functional testing of our e-shop, where we testing in production environment. And we

Re: Problem with how postfix chooses MX'es

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 02:06:51PM +0200, Administrator Systemu wrote: > Hello all! > > I'm looking at logs of my postfix-2.6.6 and wonder how postfix chooses > which MX it'll connect. Random DNS order, as perturbed by demand-caching of sessions. Log parsers should look at lines without "conn_u

Re: Address Rewrite Problem

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 07:07:49AM -0500, Noel Jones wrote: > On 4/10/2011 11:55 PM, Nasser Heidari wrote: >> Anyone has any idea ? >> >> Thanks for Your answer, Here is my postconf -n output: >> >> > > Please don't top-post. > > Please show us "postconf -n" output and non-comment entries from mas

Re: Which is the best lookup table for postfix

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 05:39:09PM +0530, kshitij mali wrote: > HI all , > > Which the best lookup for postfix databases from the following one : > > mysql > ldap > hash-db > cdb Use cdb when you want simple read-only, indexed files. Use btree for Postfix dynamic caches (TLS session cache, verif

Re: Problem with how postfix chooses MX'es

2011-04-11 Thread Administrator Systemu
W dniu 11.04.2011 14:14, Victor Duchovni pisze: Mail deliveries will try mx1, but if that tempfails, mx2 or perhaps mx3 may be tried in turn. mx1& mx3 resolve to the same IP address, and permanently refuses connections to smtp port. Works only mx2. And now going back to logs: Apr 11 00:15:27

Re: Problem with how postfix chooses MX'es

2011-04-11 Thread Wietse Venema
Administrator Systemu: [ Charset ISO-8859-1 unsupported, converting... ] > W dniu 11.04.2011 14:14, Victor Duchovni pisze: > > Mail deliveries will try mx1, but if that tempfails, mx2 or perhaps > > mx3 may be tried in turn. > >> mx1& mx3 resolve to the same IP address, and permanently refuses >

RE: smptd_client_restriction

2011-04-11 Thread Ejaz
Thanks a lot Jones. I am using /etc/postfix/mynetworks where I can list "trusted" network addresses (IPADDRESS) is it? Postconf -n output bounce_queue_lifetime = 1d command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix de

HowTo detect full quota on border MTA

2011-04-11 Thread Jiří Hlinka
Hello, I've got border MTA (postfix + antispam) and MDA (postfix + dovecot) where emails are delivered to. Users on MDA are limited by dovecot-based quota. How can I pass information about "this user's quota is reached, do not receive email for him and reject it with relevant 5xx message" to the b

Re: Address Rewrite Problem

2011-04-11 Thread DTNX/NGMX Postmaster
On 9 apr 2011, at 18:54, Nasser Heidari wrote: > We have an Exchange for our local Emails and Exchange uses Postfix as > Smarthost. > Address Rewriting is Working properly for Emails from Exchange to > Outside network, but For Emails from Exchange to Postfix Virtually > hosted Domains or Postfix

email delivery delay : fatal: shared lock active

2011-04-11 Thread Zozime Rakotondrazafy
Hello there, We have been facing this problem for few weeks and could not find the right solution yet... One of our customers' system is experiencing a persistent email delivery delay (either for local or oustide recipients) and after making multiple changes to postfix settings, we keep on hav

Re: email delivery delay : fatal: shared lock active

2011-04-11 Thread Wietse Venema
Zozime Rakotondrazafy: > Hello there, > > > We have been facing this problem for few weeks and could not find > the right solution yet... One of our customers' system is experiencing > a persistent email delivery delay (either for local or oustide > recipients) and after making multiple changes t

Re: qmgr warning

2011-04-11 Thread Randy Ramsdell
Wietse Venema wrote: Randy Ramsdell: Ralf Hildebrandt wrote: * Ralf Hildebrandt : * Randy Ramsdell : Apr 8 10:10:30 atlbl6 postfix/qmgr[11959]: warning: connect to transport private/retry: Connection refused grep retry /etc/postfix/master.cf what do you see? # grep retry /etc/postfix/mas

Re: Sender access issue

2011-04-11 Thread Alex
Hi, >> Apr 11 03:32:07 alex postfix/smtpd[2278]: NOQUEUE: reject: RCPT from >> ut-tul-1.tul.getthere.net[151.193.164.249]: 450 4.1.8 >> : Sender address rejected: Domain not >> found; from=  to= >> proto=ESMTP helo= >> >> Would adding "st...@wl0.tul.getthere.net OK" to my sender_access map >> perm

Re: qmgr warning

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 10:02:47AM -0400, Randy Ramsdell wrote: > Argh, I ran postfix upgrade-configuration but not set-permissions. When I > do add the set-permissions argument, there is an error for README_FILES. > > postfix upgrade-configuration set-permissions > chown: cannot access `/usr/sha

Re: Sender access issue

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 10:18:34AM -0400, Alex wrote: > > Sounds as if the mail is being rejected by reject_unknown_sender_domain. > > ?Your check_sender_access whitelist needs to be before > > ?reject_unknown_sender_domain in the same smtpd_*_restrictions section. > > Okay, I've even put the sen

Re: smptd_client_restriction

2011-04-11 Thread Noel Jones
On 4/11/2011 7:37 AM, Ejaz wrote: Thanks a lot Jones. I am using /etc/postfix/mynetworks where I can list "trusted" network addresses (IPADDRESS) is it? *_Postconf –n output_* bounce_queue_lifetime = 1d command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/li

Re: stop sending email when concrete recipient detected

2011-04-11 Thread Jiri Vitek
that work like a charm. Thank you Noel On Mon, 2011-04-11 at 07:14 -0500, Noel Jones wrote: > On 4/11/2011 7:05 AM, Jiri Vitek wrote: > > Hi folks, > > > > what is the best solution for discarding email to be sended/trasnfered > > to all recipients when there is one concrete addres in to, cc bcc

Re: qmgr warning

2011-04-11 Thread Randy Ramsdell
Victor Duchovni wrote: On Mon, Apr 11, 2011 at 10:02:47AM -0400, Randy Ramsdell wrote: Argh, I ran postfix upgrade-configuration but not set-permissions. When I do add the set-permissions argument, there is an error for README_FILES. postfix upgrade-configuration set-permissions chown: cannot

Re: qmgr warning

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 10:54:57AM -0400, Randy Ramsdell wrote: > Now I am on dict_mysql.so. So I stalled postfix-mysql, now exiting for > pqsql. > > Is there a way to edit a configuration so the program skips certain > features? No, you need to fix all the problems. It seems that Postfix you a

Re: qmgr warning

2011-04-11 Thread Randy Ramsdell
Victor Duchovni wrote: On Mon, Apr 11, 2011 at 10:54:57AM -0400, Randy Ramsdell wrote: Now I am on dict_mysql.so. So I stalled postfix-mysql, now exiting for pqsql. Is there a way to edit a configuration so the program skips certain features? No, you need to fix all the problems. It seems

Message id not encircled with '<' and '>'. Bug in postfix logs?

2011-04-11 Thread Javier Amor Garcia
Hello, in my mail.log I have lines where the message-id is not encircled with '<' and '>'. This has broke my parsing scripts. It seems that it only happens in the cleanup process. The messages-id hadn't domain portions. In about one month, I had seen two examples of this problem. I will s

Re: Message id not encircled with '<' and '>'. Bug in postfix logs?

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 05:17:22PM +0200, Javier Amor Garcia wrote: > Hello, > in my mail.log I have lines where the message-id is not encircled with '<' > and '>'. This has broke my parsing scripts. > > It seems that it only happens in the cleanup process. The messages-id > hadn't domain porti

Re: Message id not encircled with '<' and '>'. Bug in postfix logs?

2011-04-11 Thread lst_hoe02
Zitat von Victor Duchovni : On Mon, Apr 11, 2011 at 05:17:22PM +0200, Javier Amor Garcia wrote: Hello, in my mail.log I have lines where the message-id is not encircled with '<' and '>'. This has broke my parsing scripts. It seems that it only happens in the cleanup process. The messages-id

Re: Message id not encircled with '<' and '>'. Bug in postfix logs?

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 05:34:46PM +0200, lst_ho...@kwsoft.de wrote: >> Postfix logs the content of the message-id header. Some messages are >> more equal than others. > > So it is a case of "shit in, shit out"?? Postfix logs the content of the Message-Id header as received. To determine whether

Re: qmgr warning

2011-04-11 Thread Randy Ramsdell
Randy Ramsdell wrote: Victor Duchovni wrote: On Mon, Apr 11, 2011 at 10:54:57AM -0400, Randy Ramsdell wrote: Now I am on dict_mysql.so. So I stalled postfix-mysql, now exiting for pqsql. Is there a way to edit a configuration so the program skips certain features? No, you need to fix all

Re: Performance or delivery problems caused by "sleep"?

2011-04-11 Thread Steve Jenkins
On Friday, April 8, 2011, Stan Hoeppner wrote: > email builder put forth on 4/8/2011 10:14 PM: >> Hello, >> >> I'm thinking about trying the example suggested in the documentation for >> "sleep": >> >> >> /etc/postfix/main.cf: >> smtpd_client_restrictions = >>         sleep 1, reject_unauth_pipeli

Re: qmgr warning

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 11:49:00AM -0400, Randy Ramsdell wrote: > Okay every single man page, and there are MANY, is also causing an error. > This are all related to opensuse's postfix-docs rpm which does not create > sym links to the gzipped page. If they change the names of the installed file

Re: What are the right users & groups to use for spampd & clamav when used with PostFix?

2011-04-11 Thread jeremy . alsten
Hello Daniel On Sun, 10 Apr 2011 22:19 -0400, "Daniel Bromberg" wrote: > It's not that there's a magic formula, but ideally you just want to > apply the principle of Least Privilege and reason it out from there. That was a good explanation. I had been thinking that since PostFix is designed to

Re: Message id not encircled with '<' and '>'. Bug in postfix logs?

2011-04-11 Thread Wietse Venema
Javier Amor Garcia: > mail.log.2:41222:Mar 24 12:49:45 kif postfix/cleanup[808]: EFA813D790: > message-id=468a9c3f8b21b9d8fe7af2181f4ddd99 > > This is a bug? The system that created the Message-ID header does not comply with the Internet email RFCs (RFC 5322 in this case). If you were expecting

SASL

2011-04-11 Thread Tolga
Hi, I've been trying to follow http://www.postfix.org/SASL_README.html and trying to get it working, but I keep getting relay access denied. As far as I know, SASL AUTH works (I've tested). Can you help me? Below is my postconf -n output and relevant log. postconf -n: command_directory = /u

Re: SASL

2011-04-11 Thread Wietse Venema
Tolga: > mail.log: > [snip] > Apr 11 16:25:39 216235 postfix/smtpd[24241]: connect from > unknown[193.255.135.1] > Apr 11 16:25:40 216235 postfix/smtpd[24241]: NOQUEUE: reject: RCPT from > unknown[193.255.135.1]: 554 5.7.1 : Relay > access denied; from= > to= proto=ESMTP helo= > Apr 11 16:25:42

Re: qmgr warning

2011-04-11 Thread Randy Ramsdell
Victor Duchovni wrote: On Mon, Apr 11, 2011 at 11:49:00AM -0400, Randy Ramsdell wrote: Okay every single man page, and there are MANY, is also causing an error. This are all related to opensuse's postfix-docs rpm which does not create sym links to the gzipped page. If they change the names o

Re: qmgr warning

2011-04-11 Thread Victor Duchovni
On Mon, Apr 11, 2011 at 12:43:38PM -0400, Randy Ramsdell wrote: > Victor Duchovni wrote: >> On Mon, Apr 11, 2011 at 11:49:00AM -0400, Randy Ramsdell wrote: >>> Okay every single man page, and there are MANY, is also causing an error. >>> This are all related to opensuse's postfix-docs rpm which d

How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread jeremy . alsten
Hello again. I got postscreen working with content filtering and passing good mail through. I'm able to receive and send mail, and headers all look like it seems they should. It's good to feel some progress even if just first steps. I learned that we really should have both a primary and a backu

Re: SASL

2011-04-11 Thread Noel Jones
On 4/11/2011 11:30 AM, Tolga wrote: Hi, I've been trying to follow http://www.postfix.org/SASL_README.html and trying to get it working, but I keep getting relay access denied. As far as I know, SASL AUTH works (I've tested). Can you help me? Below is my postconf -n output and relevant log. pos

Re: qmgr warning

2011-04-11 Thread Randy Ramsdell
Victor Duchovni wrote: On Mon, Apr 11, 2011 at 12:43:38PM -0400, Randy Ramsdell wrote: Victor Duchovni wrote: On Mon, Apr 11, 2011 at 11:49:00AM -0400, Randy Ramsdell wrote: Okay every single man page, and there are MANY, is also causing an error. This are all related to opensuse's postfix-do

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread Wietse Venema
First, you can't run multiple postscreen daemons with the same postscreen_cache_map setting, as that will corrupt the database. I'm adding a check for this. Second, to make postscreen listen on more than once address, list all addresses in main.cf: inet_interfaces = 1.2.3.4 1.2.3.5 127.0.0.1

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread Michael Orlitzky
On 04/11/11 12:49, jeremy.als...@imap-mail.com wrote: > > I learned that we really should have both a primary and a backup MX > assigned, and that they should be different IPs. > I'm going question this wisdom with the hope that it might save you some pain. Why would it be better to have two MXe

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread jeremy . alsten
Hello Wietse On Mon, 11 Apr 2011 13:16 -0400, "Wietse Venema" wrote: > First, you can't run multiple postscreen daemons with the same > postscreen_cache_map setting, as that will corrupt the database. > I'm adding a check for this. > > Second, to make postscreen listen on more than once address,

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread Wietse Venema
jeremy.als...@imap-mail.com: > How do I do that and get different greetings on each IP it listens on? You do not need different banners on different IP addresses when you implement the following: MAIL EXCHANGER POLICY TESTS When a remote SMTP client is not on the permanent access

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread jeremy . alsten
Hi Michael On Mon, 11 Apr 2011 13:41 -0400, "Michael Orlitzky" wrote: > On 04/11/11 12:49, jeremy.als...@imap-mail.com wrote: > > > > I learned that we really should have both a primary and a backup MX > > assigned, and that they should be different IPs. > > > > I'm going question this wisdom

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread jeremy . alsten
On Mon, 11 Apr 2011 14:02 -0400, "Wietse Venema" wrote: > If the above required different banners on different IP addresses, > then surely I would have mentioned this. > > If the above required TWO postscreen daemons running on the same > host, then surely I would have mentioned this. > > I cou

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread Michael Orlitzky
On 04/11/11 14:02, jeremy.als...@imap-mail.com wrote: > Hi Michael > > On Mon, 11 Apr 2011 13:41 -0400, "Michael Orlitzky" > wrote: >> On 04/11/11 12:49, jeremy.als...@imap-mail.com wrote: >>> >>> I learned that we really should have both a primary and a backup MX >>> assigned, and that they shou

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread Wietse Venema
jeremy.als...@imap-mail.com: > > On Mon, 11 Apr 2011 14:02 -0400, "Wietse Venema" > wrote: > > If the above required different banners on different IP addresses, > > then surely I would have mentioned this. > > > > If the above required TWO postscreen daemons running on the same > > host, then s

Re: qmgr warning

2011-04-11 Thread Dennis Guhl
On Mon, Apr 11, 2011 at 01:04:46PM -0400, Randy Ramsdell wrote: [..] > What is the "postfix-files" that list say postmap.1 vs. If you take a peek at postfix.1 you will see a section FILES. There you can find the files referenced in this man page, including the postfix-files: $daemon_directory/

Re: qmgr warning

2011-04-11 Thread Randy Ramsdell
Dennis Guhl wrote: On Mon, Apr 11, 2011 at 01:04:46PM -0400, Randy Ramsdell wrote: [..] What is the "postfix-files" that list say postmap.1 vs. If you take a peek at postfix.1 you will see a section FILES. There you can find the files referenced in this man page, including the postfix-files:

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread Rod Dorman
On Monday, April 11, 2011, 14:02:37, jeremy.als...@imap-mail.com wrote: > ... > There's no wisdom here, just what I've been told -- use a minimum of 2. > All of the examples that I see have at least two MX records. > One of the fellas at the user group who told us about PostFix wast > talking abo

Re: How to manage 2 banners/greetings through postscreen, content filter, and after-filter SMTP on 1 server?

2011-04-11 Thread Michael Orlitzky
On 04/11/11 15:29, Rod Dorman wrote: > On Monday, April 11, 2011, 14:02:37, jeremy.als...@imap-mail.com wrote: >> ... >> There's no wisdom here, just what I've been told -- use a minimum of 2. >> All of the examples that I see have at least two MX records. >> One of the fellas at the user group w

Re: SASL

2011-04-11 Thread Tolga
11-04-2011 19:41, Wietse Venema yazmış: Tolga: mail.log: [snip] Apr 11 16:25:39 216235 postfix/smtpd[24241]: connect from unknown[193.255.135.1] Apr 11 16:25:40 216235 postfix/smtpd[24241]: NOQUEUE: reject: RCPT from unknown[193.255.135.1]: 554 5.7.1: Relay access denied; from= to= proto=ESMT

Re: SASL

2011-04-11 Thread Tolga
11-04-2011 19:59, Noel Jones yazmış: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination It worked, thanks a lot Noel :) Regards, Tolga

Re: Message id not encircled with '<' and '>'. Bug in postfix logs?

2011-04-11 Thread Javier Amor Garcia
Thanks for the answer. Things are clearer now. message-id=468a9c3f8b21b9d8fe7af2181f4ddd99 This is a bug? Postfix logs the content of the message-id header. Some messages are more equal than others.

Re: SASL

2011-04-11 Thread Steve
Original-Nachricht > Datum: Mon, 11 Apr 2011 23:14:10 +0300 > Von: Tolga > An: Postfix users > Betreff: Re: SASL > > > 11-04-2011 19:41, Wietse Venema yazmış: > > Tolga: > >> mail.log: > >> [snip] > >> Apr 11 16:25:39 216235 postfix/smtpd[24241]: connect from > >> unknown[193

Re: selective greylisting with a long delay

2011-04-11 Thread Stan Hoeppner
pf at alt-ctrl-del.org put forth on 4/10/2011 10:33 PM: > My thought on auto combating this is to use a CIDR list to kick these > networks (and only these networks) over to a greylist policy that delays > these emails for 4+ hours. By then, most of the bad IPs would be listed > in one or more RBL

SASL Authentication and debugging..

2011-04-11 Thread Simon Brereton
Hi Probably not the best place for this, but hopefully someone will tell me what I'm doing wrong anyway.. I've gotten the TLS up and working. And SASL auth seemed to be working. I installed saslfinger and everything was fine there. But when trying to locally inject mail on the submission po

Re: selective greylisting with a long delay

2011-04-11 Thread Jerry
On Mon, 11 Apr 2011 15:43:09 -0500 Stan Hoeppner articulated: > pf at alt-ctrl-del.org put forth on 4/10/2011 10:33 PM: > > > My thought on auto combating this is to use a CIDR list to kick > > these networks (and only these networks) over to a greylist policy > > that delays these emails for 4+

Filtering spam received from multiple users

2011-04-11 Thread Jose Hales-Garcia
Hello, I've recently been getting spam that has the first received header filled in with multiple users. This is an example. Received: from 79.14.233.16 (account , , , , , , , , , , , , , ,

minor postscreen cleanup logging issue

2011-04-11 Thread Peter Schultze
Hello, using postfix 2.8.2 under Solaris 10 with postscreen_cache_map = dbm:$data_directory/verify_cache it appears that cache cleanup logging gives erratic numbers of retained entries, ranging between 1875 and as high as 727916: Apr 3 11:32:25 postfix/postscreen[760]: [ID 197553 mail.info] c

Re: selective greylisting with a long delay

2011-04-11 Thread John Peach
On Mon, 11 Apr 2011 17:39:43 -0400 Jerry wrote: > On Mon, 11 Apr 2011 15:43:09 -0500 > Stan Hoeppner articulated: > > > pf at alt-ctrl-del.org put forth on 4/10/2011 10:33 PM: > > > > > My thought on auto combating this is to use a CIDR list to kick > > > these networks (and only these network

Re: selective greylisting with a long delay

2011-04-11 Thread Stan Hoeppner
Jerry put forth on 4/11/2011 4:39 PM: > On Mon, 11 Apr 2011 15:43:09 -0500 > Stan Hoeppner articulated: > >> pf at alt-ctrl-del.org put forth on 4/10/2011 10:33 PM: >> >>> My thought on auto combating this is to use a CIDR list to kick >>> these networks (and only these networks) over to a greyli

Re: Filtering spam received from multiple users

2011-04-11 Thread Stan Hoeppner
Jose Hales-Garcia put forth on 4/11/2011 4:47 PM: > > Hello, > > I've recently been getting spam that has the first received header filled in > with multiple users. This is an example. > > Received: from 79.14.233.16 (account , > , >HELO domain) > by domain (CommuniGate P

Re: selective greylisting with a long delay

2011-04-11 Thread Wietse Venema
Stan Hoeppner: > Have you heard of a case of an SMTP sender suing an SMTP receiver for > message rejection, and winning the case? http://www.spamhaus.org/organization/statement.lasso?ref=3 They sued, and the US judge awarded them US$11.7 million for damages. Wietse

Re: minor postscreen cleanup logging issue

2011-04-11 Thread Wietse Venema
Peter Schultze: > Hello, > > using postfix 2.8.2 under Solaris 10 with > postscreen_cache_map = dbm:$data_directory/verify_cache > > it appears that cache cleanup logging gives erratic numbers of retained > entries, > ranging between 1875 and as high as 727916: > > Apr 3 11:32:25 postfix/post

Re: selective greylisting with a long delay

2011-04-11 Thread Daniel Bromberg
On 4/11/2011 7:07 PM, Wietse Venema wrote: Stan Hoeppner: Have you heard of a case of an SMTP sender suing an SMTP receiver for message rejection, and winning the case? http://www.spamhaus.org/organization/statement.lasso?ref=3 They sued, and the US judge awarded them US$11.7 million for damag

Re: selective greylisting with a long delay

2011-04-11 Thread Stan Hoeppner
Wietse Venema put forth on 4/11/2011 6:07 PM: > Stan Hoeppner: >> Have you heard of a case of an SMTP sender suing an SMTP receiver for >> message rejection, and winning the case? > > http://www.spamhaus.org/organization/statement.lasso?ref=3 > > They sued, and the US judge awarded them US$11.7 m

Re: selective greylisting with a long delay

2011-04-11 Thread pf at alt-ctrl-del.org
"Stan Hoeppner" Monday, April 11, 2011 4:43 PM pf at alt-ctrl-del.org put forth on 4/10/2011 10:33 PM: My thought on auto combating this is to use a CIDR list to kick these networks (and only these networks) over to a greylist policy that delays these emails for 4+ hours. By then, most of the b

Re: Filtering spam received from multiple users

2011-04-11 Thread Jose Hales-Garcia
On Apr 11, 2011, at 3:44 PM, Stan Hoeppner wrote: >> My first idea for handling these messages is writing a filter in >> header_checks using regexp. Is this the best approach to take using Postfix >> 2.4.3? > > Probably not. Provide the full header and we may be able to give you > better opt

RE: smptd_client_restriction

2011-04-11 Thread mejaz
mynetworks isn't listed here. Thank you so much for you help. Sorry may some lines were not copied properly in my previous Email. Here is the ouput of postconf -n and you will find mynetworks in second last line. bounce_queue_lifetime = 1d command_directory = /usr/sbin config_directory = /et

Nulls not being stripped from incoming mail

2011-04-11 Thread Rich Wales
I'm running Postfix 2.8.1 and Cyrus 2.3.16 on an Ubuntu 10.04 (Lucid) server. I'm having trouble with incoming mail from Google's Postini help forum. The messages I'm getting contain null characters in the body, so Cyrus is saying "554 5.6.0 Message contains NUL characters (in reply to end of DATA

Re: Filtering spam received from multiple users

2011-04-11 Thread Stan Hoeppner
Jose Hales-Garcia put forth on 4/11/2011 8:00 PM: > > On Apr 11, 2011, at 3:44 PM, Stan Hoeppner wrote: > >>> My first idea for handling these messages is writing a filter in >>> header_checks using regexp. Is this the best approach to take using >>> Postfix 2.4.3? >> >> Probably not. Provide