Re: unknown host error clarification

2011-12-26 Thread Nick Edwards
On Sun, Dec 25, 2011 at 1:46 PM, Sahil Tandon wrote: > On Sun, 2011-12-25 at 13:37:52 +1000, Nick Edwards wrote: > > > I am wondering why I have two different errors for same reason? > > > > : NOQUEUE: reject: RCPT from unknown[41.203.141.1]: 450 4.7.1 Client host > > rejected: cannot find your ho

Re: unknown host error clarification

2011-12-26 Thread Nick Edwards
On Mon, Dec 26, 2011 at 12:33 AM, Wietse Venema wrote: > Sahil Tandon: > > On Sun, 2011-12-25 at 13:37:52 +1000, Nick Edwards wrote: > > > > In the absence of full information, here's a WAG: > > > > > ... > > > : NOQUEUE: reject: RCPT from unknown[41.203.141.1]: 450 4.7.1 Client > host > > > rejec

Re: unknown host error clarification

2011-12-26 Thread Nick Edwards
On Sun, Dec 25, 2011 at 2:14 PM, Noel Jones wrote: > On 12/24/2011 9:37 PM, Nick Edwards wrote: > > Merry Christmas All! > > > > I am wondering why I have two different errors for same reason? > > > > : NOQUEUE: reject: RCPT from unknown[41.203.141.1]: 450 4.7.1 Client > > host rejected: cannot f

Re: unknown host error clarification

2011-12-26 Thread Charles Marcus
On 2011-12-26 5:46 AM, Nick Edwards wrote: > On Sun, Dec 25, 2011 at 1:46 PM, Sahil Tandon wrote: >> Show the entire log snippet, of which you elided important parts. > no, I did not, all I did not include was the from/to/helo, from/to > are irrelevant and the helo, I already mentioned the 5xx r

Re: unknown host error clarification

2011-12-26 Thread Sahil Tandon
On Mon, 2011-12-26 at 20:46:03 +1000, Nick Edwards wrote: > > ... > > Show the entire log snippet, of which you elided important parts. > > no, I did not, all I did not include was the from/to/helo, from/to are > irrelevant and the helo, I already mentioned > the 5xx resolved and the 4xx did not

Inserting Select Missing Headers

2011-12-26 Thread Sabahattin Gucukoglu
Hi, I've got an email client (KeyMail, part of KeySoft, a specialised client in the BrailleNote note-takers for the blind) that fails rather gracelessly when messages don't have Message-Id: fields. Being a purist, I *really* don't want to add any headers on mail received from outside, but I mu

Re: Inserting Select Missing Headers

2011-12-26 Thread Wietse Venema
Sabahattin Gucukoglu: > Hi, > > I've got an email client (KeyMail, part of KeySoft, a specialised > client in the BrailleNote note-takers for the blind) that fails > rather gracelessly when messages don't have Message-Id: fields. > Being a purist, I *really* don't want to add any headers on mail >

Re: Inserting Select Missing Headers

2011-12-26 Thread Robert Schetterer
Am 26.12.2011 17:55, schrieb Sabahattin Gucukoglu: > Hi, > > I've got an email client (KeyMail, part of KeySoft, a specialised client in > the BrailleNote note-takers for the blind) that fails rather gracelessly when > messages don't have Message-Id: fields. Being a purist, I *really* don't >

Re: Inserting Select Missing Headers

2011-12-26 Thread Robert Schetterer
Am 26.12.2011 18:11, schrieb Robert Schetterer: > Am 26.12.2011 17:55, schrieb Sabahattin Gucukoglu: >> Hi, >> >> I've got an email client (KeyMail, part of KeySoft, a specialised client in >> the BrailleNote note-takers for the blind) that fails rather gracelessly >> when messages don't have Mes

Re: problem with dspam

2011-12-26 Thread Steve
Original-Nachricht > Datum: Sun, 25 Dec 2011 19:00:10 +0100 > Von: ml > An: Postfix users > Betreff: Re: problem with dspam > Le 25.12.2011 06:35, fakessh @ a écrit : > > Le dimanche 25 décembre 2011 06:06, fakessh @ a écrit : > >> Le jeudi 22 décembre 2011 22:19, Andreas Bert

Re: Envelope sender address authorization and command line tool "mail"

2011-12-26 Thread Bartłomiej Romański
Thank you for your answer. > UUOC, '/usr/sbin/sendmail -t t...@test.test < mail.txt' :) I know it doesn't make sense. I just prefer reading from left to right. > Note, this is controlling the envelope sender, not the From: header. True, thanks. > 1. Get rid of untrusted shell users. If you can

Re: Envelope sender address authorization and command line tool "mail"

2011-12-26 Thread Wietse Venema
Bart?omiej Roma?ski: > > 2. Limit shell users' access to sendmail(1) using > > authorized_submit_users: > > That would break, for example, the 'at' command. It would like to > allow my users to send emails. I just want to prevent them from faking > "sender" header. > > > 3. Alternatively, you cou

Re: Envelope sender address authorization and command line tool "mail"

2011-12-26 Thread Noel Jones
On 12/26/2011 6:33 PM, Wietse Venema wrote: > Bart?omiej Roma?ski: >>> 2. Limit shell users' access to sendmail(1) using >>> authorized_submit_users: >> >> That would break, for example, the 'at' command. It would like to >> allow my users to send emails. I just want to prevent them from faking >>

Re: Envelope sender address authorization and command line tool "mail"

2011-12-26 Thread Viktor Dukhovni
On Mon, Dec 26, 2011 at 08:25:42PM -0600, Noel Jones wrote: > The BOFH solution is a custom cleanup_service_name with alternate > header_checks on the pickup service that removes user-supplied From: > headers. Postfix will supply a standard header based on the UID. IIRC this won't work. The defa

Ok. I'm finding a small issue on my server.

2011-12-26 Thread Glenn Sieb
Dear list, While I have SASL set up on port 587, I recently found that foreign IPs can connect, pretend to be, say, me, and send mail to my users. SPF can catch this, but I think it's something that should/can be caught by Postfix, no? So I conclude I have fubar'd my SMTP config somehow. How do I

Re: Ok. I'm finding a small issue on my server.

2011-12-26 Thread Steven King
Make sure the submission daemon in master.cf is configured with the following option: -o smtpd_sasl_auth_enable=yes Then ensure that you have SASL properly configured. Also, ensure that your trusted networks is configured properly to ensure you do not inadvertently have an open relay. On 1

Re: Ok. I'm finding a small issue on my server.

2011-12-26 Thread Bjørn Ruberg
On 12/27/2011 06:45 AM, Glenn Sieb wrote: Dear list, While I have SASL set up on port 587, I recently found that foreign IPs can connect, pretend to be, say, me, and send mail to my users. SPF can catch this, but I think it's something that should/can be caught by Postfix, no? Can, yes. But no

Re: Loadbalancing+failover solution

2011-12-26 Thread Michael Maymann
Hi All, Wietse: thanks for your replies - and sorry for not really knowing what I'm asking...:-) I guess my question is regarding receiving mail to PostFix: Linux servers->PostFix. is "DNS RoundRobin" or "MX record with equal value" preferred thanks in advance :-) ! ~maymann 2011/12/23 Wietse V