Re: IPv6, backup MX and 4XX deferrals

2011-08-23 Thread Pim Zandbergen
Pim Zandbergen: Wietse Venema wrote: I know of no RFC that says only whitelisted clients can send email over IPv6. Well, it's their policy. I can respect that, if their assumption that senders should fall back to IPv4 is valid. 2 - Increase smtp_mx_session_limit (default: 2) so that Postf

Rewrite the "From" field

2011-08-23 Thread Anthony BRODARD
Hello guys, I am using postfix for one domain, lets call it domain1. In my postfix configuration I do have some alias defined on my ldap with virtual_alias_maps. I used to send my mail to one alias from another domain (domain2) not managed by my self. The alias is basically sending mail to diffe

Is there something like "check_recipient_access" for postscreen?

2011-08-23 Thread Matthias Egger
Hello List Since a few weeks i am using postscreen on our mailservers. I really like the postscreen_dnsbl_* settings as in july they blocked 75% of spammers. But now i have a user which fears, that the blacklists could also block legitim clients because of false positives. So he wants us to

Re: Is there something like "check_recipient_access" for postscreen?

2011-08-23 Thread Victor Duchovni
On Tue, Aug 23, 2011 at 12:25:29PM +0200, Matthias Egger wrote: > But now i have a user which fears, that the blacklists could also > block legitim clients because of false positives. So he wants us to > let trough all mails with a RCPT TO: set to his address. He is > aware, that he will then get

post-install, IPv6-only: could not find any active network interfaces

2011-08-23 Thread Mark Martinec
Trying to install postfix on an IPv6-only host FreeBSD 9.0B1, http://wiki.freebsd.org/IPv6Only ports: mail/postfix-current, but the installation chokes in the post-install phase. Running that failing command manually (in the ports work directory) gives: # bin/postfix -v post-install postfix

Re: post-install, IPv6-only: could not find any active network interfaces

2011-08-23 Thread Wietse Venema
Mark Martinec: > Trying to install postfix on an IPv6-only host > > FreeBSD 9.0B1, http://wiki.freebsd.org/IPv6Only > ports: mail/postfix-current, > > but the installation chokes in the post-install phase. > > Running that failing command manually (in the ports work directory) > gives: > >

Re: allow mutual authentication with ssl certificate

2011-08-23 Thread Alano Conraz
> > Create the .db file with postmap. > postmap hash:relay_clientcerts > thanks for the hint! I did it and it almost worked. Almost, because the smtp server asked me for a certificate, but i can still send messages with my MUA with no certificate (or with a non-registered certificate). Which opti

Re: allow mutual authentication with ssl certificate

2011-08-23 Thread Noel Jones
On 8/23/2011 6:42 AM, Alano Conraz wrote: > Create the .db file with postmap. > postmap hash:relay_clientcerts > > > thanks for the hint! > I did it and it almost worked. Almost, because the smtp server asked > me for a certificate, but i can still send messages with my MUA with > no cert

Bind Postfix to outgoing IP address

2011-08-23 Thread Mark Goodge
How can I bind Postfix to only send outgoing mail via one IP address (ie, always use the same ethernet interface)? I have a server which has two IP addresses, one on eth0 and one on eth0.1. I have discovered that some of my outgoing mail is being rejected by over-zealous spam filters because i

Re: Bind Postfix to outgoing IP address

2011-08-23 Thread Ralf Hildebrandt
* Mark Goodge : > How can I bind Postfix to only send outgoing mail via one IP address > (ie, always use the same ethernet interface)? postconf |grep bind -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenbur

Re: Bind Postfix to outgoing IP address

2011-08-23 Thread Patrick Ben Koetter
* Mark Goodge : > How can I bind Postfix to only send outgoing mail via one IP address > (ie, always use the same ethernet interface)? smtp_bind_address -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privacy is explici

Re: Bind Postfix to outgoing IP address

2011-08-23 Thread Mark Goodge
On 23/08/2011 14:29, Patrick Ben Koetter wrote: * Mark Goodge: How can I bind Postfix to only send outgoing mail via one IP address (ie, always use the same ethernet interface)? smtp_bind_address Yes, I discovered that about 5 seconds after I hit "send" on the previous email. Oh well, and t

postscreen stats

2011-08-23 Thread Kovács János
Dear postfix-users, I'm preparing for a presentation, and I'd like to include some statistics about postscreen. If you use this feature, could you please share it with me? Eg. it would be nice to include the blocked / total inbound emails % ratio, or any other data you think that can be relevant

Re: postscreen stats

2011-08-23 Thread Ralf Hildebrandt
* Kovács János : > Dear postfix-users, > > I'm preparing for a presentation, and I'd like to include some statistics > about postscreen. If you use this feature, could you please share it with me? > Eg. it would be nice to include the blocked / total inbound emails % ratio, > or any other data y

Re: Bind Postfix to outgoing IP address

2011-08-23 Thread Wietse Venema
Mark Goodge: > On 23/08/2011 14:29, Patrick Ben Koetter wrote: > > * Mark Goodge: > >> How can I bind Postfix to only send outgoing mail via one IP address > >> (ie, always use the same ethernet interface)? > > > > smtp_bind_address > > Yes, I discovered that about 5 seconds after I hit "send" on

Re: postscreen stats

2011-08-23 Thread Kovács János
Thanks Ralf! It's amazing how much spam the pregreet test and a good RBL can catch. Do you have any data on how many spam emails survived postscreen? Kovacs Janos

Group-readable email and overriden ACL's

2011-08-23 Thread Kasper Loopstra
Dear list members, In our setup we have various mailboxes that have to be read (and edited) by groups of people. All these groups are defined in LDAP, as are the members (everything uses PAM, so all these accounts are on the system as well). The email is accessed by Dovecot, binding with the L

Re: Group-readable email and overriden ACL's

2011-08-23 Thread Wietse Venema
Kasper Loopstra: > Dear list members, > > In our setup we have various mailboxes that have to be read (and edited) > by groups of people. All these groups are defined in LDAP, as are the > members (everything uses PAM, so all these accounts are on the system as > well). The email is accessed by

Re: Automating regular checks that incoming & outgoing mails are still working

2011-08-23 Thread Thomas Harold
On 8/21/2011 10:03 AM, Roger Goh wrote: There's often problem with our postfix mail server (that runs Cyrus / Cyrus-imapd) : I have scripts (using mutt) to send hourly mails out (& from another postfix server, I can send mails to it). I need a way / method such that if those hourly test mails

Re: postscreen stats

2011-08-23 Thread Stan Hoeppner
On 8/23/2011 9:10 AM, Kovács János wrote: > Thanks Ralf! It's amazing how much spam the pregreet test and a good RBL can > catch. > Do you have any data on how many spam emails survived postscreen? Overall, Postscreen is no better nor worse at stopping spam than what we've all been doing via SMTP

Re: postscreen stats

2011-08-23 Thread Wietse Venema
Stan Hoeppner: > On 8/23/2011 9:10 AM, Kov?cs J?nos wrote: > > Thanks Ralf! It's amazing how much spam the pregreet test and a good RBL > > can catch. > > Do you have any data on how many spam emails survived postscreen? > > Overall, Postscreen is no better nor worse at stopping spam than what >

Re: postscreen stats

2011-08-23 Thread Patrick Ben Koetter
* Wietse Venema : > Stan Hoeppner: > > On 8/23/2011 9:10 AM, Kov?cs J?nos wrote: > > > Thanks Ralf! It's amazing how much spam the pregreet test and a good RBL > > > can catch. > > > Do you have any data on how many spam emails survived postscreen? > > > > Overall, Postscreen is no better nor wor

Re: postscreen stats

2011-08-23 Thread Stan Hoeppner
On 8/23/2011 2:25 PM, Wietse Venema wrote: > Stan Hoeppner: >> On 8/23/2011 9:10 AM, Kov?cs J?nos wrote: >>> Thanks Ralf! It's amazing how much spam the pregreet test and a good RBL >>> can catch. >>> Do you have any data on how many spam emails survived postscreen? >> >> Overall, Postscreen is no

Re: postscreen stats

2011-08-23 Thread Wietse Venema
Stan Hoeppner: > > Agreed. Postscreen's main goal is to reduce mail server load, so > > that you can postpone that forklift upgrade. > > > > Postscreen also stops a few percent of spambots that popular DNSBLs > > miss, but at this time, that is only a minor benefit. > > I would think the proper m

Re: postscreen stats

2011-08-23 Thread Homer Parker
On Tue, 2011-08-23 at 21:33 +0200, Patrick Ben Koetter wrote: > I disabled greylisting since I started using postscreen and the spam > ratio did > not increase, but the immediacy at which mails from new senders arrive > did. > > Anyone with similiar observations? That's what I've seen. I

Re: postscreen stats

2011-08-23 Thread Peter Blair
On Tue, Aug 23, 2011 at 8:04 PM, Homer Parker wrote: > On Tue, 2011-08-23 at 21:33 +0200, Patrick Ben Koetter wrote: >> I disabled greylisting since I started using postscreen and the spam >> ratio did >> not increase, but the immediacy at which mails from new senders arrive >> did. >> >> Anyone w

Re: postscreen stats

2011-08-23 Thread Steve Fatula
- Original Message - > From: Patrick Ben Koetter > To: postfix-users@postfix.org > Cc: > Sent: Tuesday, August 23, 2011 9:33 AM > Subject: Re: postscreen stats > > I disabled greylisting since I started using postscreen and the spam ratio did > not increase, but the immediacy at which m

Re: Group-readable email and overriden ACL's

2011-08-23 Thread Victor Duchovni
On Tue, Aug 23, 2011 at 11:11:31AM -0400, Wietse Venema wrote: > Kasper Loopstra: > > Dear list members, > > > > In our setup we have various mailboxes that have to be read (and edited) > > by groups of people. All these groups are defined in LDAP, as are the > > members (everything uses PAM, s

Re: Automating regular checks that incoming & outgoing mails are still working

2011-08-23 Thread Peter Blair
On Tue, Aug 23, 2011 at 11:59 AM, Thomas Harold wrote: > On 8/21/2011 10:03 AM, Roger Goh wrote: >> >> There's often problem with our postfix mail server (that runs Cyrus >> / Cyrus-imapd) : >> >> I have scripts (using mutt) to send hourly mails out (&  from >> another postfix server, I can send m