postfix duplicated dkim signature

2012-02-16 Thread Birta Levente
Hello I use postfix 2.7.2 with amavisd-new, opendkim and dk-milter. My problem is dkim signature appear 2 times in mail header. It is ok? how can i fix this? thanks Levi

Ldap queries optimization

2012-02-16 Thread Angel L. Mateo
Hello, We are using ldap maps in a relay server. Ldap maps are for address validation (valid users and alias) and a relocated map. But now, we are having problems with our ldap servers. Problems are not directly related with postfix servers, but I've been investigating if postfix could do

Re: postfix duplicated dkim signature

2012-02-16 Thread Wietse Venema
Birta Levente: > Hello > > I use postfix 2.7.2 with amavisd-new, opendkim and dk-milter. My problem > is dkim signature appear 2 times in mail header. It is ok? how can i fix > this? TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail TO (UN)SUBSCRIBE see http://www.postfix.o

Re: postfix duplicated dkim signature

2012-02-16 Thread li...@coffeehabit.net
On 16/02/12 09:46, Birta Levente wrote: Hello I use postfix 2.7.2 with amavisd-new, opendkim and dk-milter. I'm curious to know why you're using opendkim and dk-milter instead of using the built-in DKIM signing/checking in amavisd-new? > My problem is dkim signature appear 2 times in mail

Small question about header_checks

2012-02-16 Thread Franck MAHE
Is a restart of postfix mandatory in case of changes in the header_checks regex table? Thanks Franck

How to block senders whose domain without a MX record

2012-02-16 Thread daniel zhou
Hi Group, The document segment about the reject_unknown_sender_domain says that it will reject the domain without A record or MX record. Does it mean that only domains with both A and MX record will be accepted? Or, it means any domains with only A record,domains with only MX record or with bot

Re: How to block senders whose domain without a MX record

2012-02-16 Thread Reindl Harald
Am 16.02.2012 14:06, schrieb daniel zhou: > Hi Group, > > The document segment about the reject_unknown_sender_domain says that it will > reject the domain without A record or > MX record. Does it mean that only domains with both A and MX record will be > accepted? Or, it means any domains wit

RE: How to block senders whose domain without a MX record

2012-02-16 Thread Franck MAHE
Hi, It is only applicable to the domains that are not known, ie no DNS Resolution. So based on your request, it could accept all the domain that have a DNS, even if they don’t have an MX record. Franck --- De : owner-postfix-us...@postfix.org [m

Re: How to block senders whose domain without a MX record

2012-02-16 Thread /dev/rob0
On Thu, Feb 16, 2012 at 05:06:22AM -0800, daniel zhou wrote: > The document segment about the reject_unknown_sender_domain says > that it will reject the domain without A record or MX record. Does > it mean that only domains with both A and MX record will be > accepted? Or, it means any domains

Re: postfix duplicated dkim signature

2012-02-16 Thread Birta Levente
On 16/02/2012 15:02, li...@coffeehabit.net wrote: On 16/02/12 09:46, Birta Levente wrote: Hello I use postfix 2.7.2 with amavisd-new, opendkim and dk-milter. I'm curious to know why you're using opendkim and dk-milter instead of using the built-in DKIM signing/checking in amavisd-new? I th

Re: Small question about header_checks

2012-02-16 Thread /dev/rob0
On Thu, Feb 16, 2012 at 02:05:37PM +0100, Franck MAHE wrote: > Is a restart of postfix mandatory in case of changes in the > header_checks regex table? No; header_checks tables are read by the cleanup(8) daemon which is short-lived. Your changes will be effective at the next restart of cleanup.

Undefined MX record for a sender domain

2012-02-16 Thread Scappatura Rocco
Hello, I have the following configuration for the recipient restriction: permit_mynetworks permit_sasl_authenticated reject_unauth_destination reject_non_fqdn_sender reject_non_fqdn_recipient reject_unlisted_sender reject_unlisted_recipient reject_unknown_sender_do

Re: Undefined MX record for a sender domain

2012-02-16 Thread Wietse Venema
Scappatura Rocco: > I would like that sender domain names for which is not configured > any MX record are not relayed from my MTA. I have tried to use the That would be a mistake. There is no RFC REQUIREMENT that a domain has an MX record. Wietse

Re: Undefined MX record for a sender domain

2012-02-16 Thread Mark Goodge
On 16/02/2012 14:35, Scappatura Rocco wrote: I would like that sender domain names for which is not configured any MX record are not relayed from my MTA. Why? MX records are not required for receiving mail. Nor are they required for sending mail. So there is no reason to reject mail which la

RE: Undefined MX record for a sender domain

2012-02-16 Thread Scappatura Rocco
> Scappatura Rocco: > > I would like that sender domain names for which is not configured > > any MX record are not relayed from my MTA. I have tried to use the > > That would be a mistake. There is no RFC REQUIREMENT that a > domain has an MX record. > I have no doubt about the correctness of w

Re: Ldap queries optimization

2012-02-16 Thread Viktor Dukhovni
On Thu, Feb 16, 2012 at 10:49:10AM +0100, Angel L. Mateo wrote: > My config is: > > virtual_alias_maps = hash:/etc/postfix/alu-aliases, > hash:/etc/postfix/dif-aliases, > proxy:ldap:/etc/postfix/ldap-sysaliases.cf > > relay_recipient_maps = hash:/etc/postfix/relaydomains, >

Re: Undefined MX record for a sender domain

2012-02-16 Thread Viktor Dukhovni
On Thu, Feb 16, 2012 at 04:26:58PM +0100, Scappatura Rocco wrote: > > Scappatura Rocco: > > > I would like that sender domain names for which is not configured > > > any MX record are not relayed from my MTA. I have tried to use the > > > > That would be a mistake. There is no RFC REQUIREMENT tha

Re: Undefined MX record for a sender domain

2012-02-16 Thread Mark Goodge
On 16/02/2012 15:26, Scappatura Rocco wrote: Scappatura Rocco: I would like that sender domain names for which is not configured any MX record are not relayed from my MTA. I have tried to use the That would be a mistake. There is no RFC REQUIREMENT that a domain has an MX record. I have no

MySQL table question

2012-02-16 Thread Gábor Lénárt
Hi All, I'd like to use MySQL table to block some of the peer MTAs based on their IP addresses by storing IP pools ('from' and 'to' addresses as unsigned integers, using MySQL's INET_ATON() function) in MySQL as blocked IP ranges. However I found a little problem in my solution: As access table

always_bcc to a specific address list

2012-02-16 Thread Alfredo Saldanha
Hi guys, My question is very simple. Is possible configure the Postfix to deliver a BCC message to a list of specifics address (list)? Can I use the feature always_bcc to do this? How? Thank you. Alfredo

RE: Undefined MX record for a sender domain

2012-02-16 Thread Scappatura Rocco
> On 16/02/2012 15:26, Scappatura Rocco wrote: > >> Scappatura Rocco: > >>> I would like that sender domain names for which is not > >>> configured any MX record are not relayed from my MTA. I have > >>> tried to use the > >> > >> That would be a mistake. There is no RFC REQUIREMENT that a domain >

Re: Undefined MX record for a sender domain

2012-02-16 Thread Mark Goodge
On 16/02/2012 16:07, Scappatura Rocco wrote: What do your logs say when your server tries to deliver the DSN? status=deferred (connect to domain.tld[xxx.yyy.uuu.vvv]:25: Connection timed out) Which proves that the problem is not lack of DNS, since your server is finding an IP address to d

Re: always_bcc to a specific address list

2012-02-16 Thread Alfredo Saldanha
Hi guys again, Sorry, I've done using sender_bcc_maps. It is ok now. Thank you. On 02/16/2012 01:51 PM, Alfredo Saldanha wrote: Hi guys, My question is very simple. Is possible configure the Postfix to deliver a BCC message to a list of specifics address (list)? Can I use the feature always

forcing MX lookups

2012-02-16 Thread Dipl.-Ing. Juergen Ladstaetter
Hi guys, We're currently developing a project where customers can add their own domains to our mailsystem. The biggest problem would be that a customer adds a domain he doesn't own or isn't represented by our mail cluster. For example a customer adds ibm.com - a manual validation through one of ou

Re: forcing MX lookups

2012-02-16 Thread Reindl Harald
Am 16.02.2012 18:13, schrieb Dipl.-Ing. Juergen Ladstaetter: > We're currently developing a project where customers can add their own > domains to our mailsystem. The biggest problem would be that a customer adds > a domain he doesn't own or isn't represented by our mail cluster. > For example a c

AW: forcing MX lookups

2012-02-16 Thread Dipl.-Ing. Juergen Ladstaetter
The configuration for domains etc. is stored in mysql tables but that has nothing to do with the initial problem described in my other email. -Ursprüngliche Nachricht- Von: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] Im Auftrag von Reindl Harald Gesendet: Thur

Re: forcing MX lookups

2012-02-16 Thread Reindl Harald
what is this for a strange day you are the second one in a few hours not understand that a domain does not need any MX-RECORD to be a valid maildomain your other things are also not job of postfix if you have a application where users can input data you are responsible to verify the input inside

AW: forcing MX lookups

2012-02-16 Thread Dipl.-Ing. Juergen Ladstaetter
I know that it doesn't need a MX record. I just want to know if there is some way of configuring postfix to make DNS (A or MX) lookups for every mail sent. Since a two instance configuration would work, I just wanted to know if there is a way to configure one instance to do this. No need to get imp

Re: forcing MX lookups

2012-02-16 Thread Reindl Harald
how should anybody imagine "lookups for every mail" if you have a local-domain it will not make a lookup if it would the mail could not be delivered local so no, you can have not in one instance local inboxes for "example.com" and force postfix to do any dns-lookups for "example.com" why should

AW: forcing MX lookups

2012-02-16 Thread Dipl.-Ing. Juergen Ladstaetter
Alright then let me try to make it more clear for you: > if you have a local-domain it will not make a lookup if it would the mail could not be delivered local That's the point. Even though it's configured as local-domain I would want it to look up any records (MX, A) and try to sent the mail to t

virtual_

2012-02-16 Thread Toomas Vendelin
Hello list, I have set up a home e-mail server with Postfix and Cyrus, and everything seems to work. There is one matter I'd like to clarify, though. Is it so, that if I use "non-Postfix" virtual mail delivery (in my case, to Cyrus accounts via unix socket using LMTP), I'm supposed to use virtual_

Re: virtual_

2012-02-16 Thread Brian Evans - Postfix List
On 2/16/2012 2:15 PM, Toomas Vendelin wrote: > Hello list, > > I have set up a home e-mail server with Postfix and Cyrus, and > everything seems to work. There is one matter I'd like to clarify, > though. > Is it so, that if I use "non-Postfix" virtual mail delivery (in my > case, to Cyrus accounts

Re: forcing MX lookups

2012-02-16 Thread Reindl Harald
Am 16.02.2012 19:32, schrieb Dipl.-Ing. Juergen Ladstaetter: >> if you have a local-domain it will not make a lookup if it would the mail > could not be delivered local > That's the point. Even though it's configured as local-domain I would want > it to look up any records (MX, A) and try to sent

Re: forcing MX lookups

2012-02-16 Thread Michael Orlitzky
On 02/16/2012 12:13 PM, Dipl.-Ing. Juergen Ladstaetter wrote: yet. Is there any way to configure postfix to always make MX record DNS lookups, or is the only way through a second postfix instance that has no localdomains specified? Even with two instances you could have problems. For example,

Re: forcing MX lookups

2012-02-16 Thread /dev/rob0
On Thu, Feb 16, 2012 at 03:20:30PM -0500, Michael Orlitzky wrote: > On 02/16/2012 12:13 PM, Dipl.-Ing. Juergen Ladstaetter wrote: > > > >yet. Is there any way to configure postfix to always make MX > >record DNS lookups, or is the only way through a second postfix > >instance that has no localdom

AW: forcing MX lookups

2012-02-16 Thread Dipl.-Ing. Juergen Ladstaetter
Thank you both very much. That input was very good and I might rethink the strategy we're aiming at. Probably active DNS checks and periodic re-checks are better to ensure some security. Thanks guys -Ursprüngliche Nachricht- Von: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...

Re: AW: forcing MX lookups

2012-02-16 Thread Tom Hendrikx
On 16-02-12 23:52, Dipl.-Ing. Juergen Ladstaetter wrote: > Thank you both very much. That input was very good and I might rethink the > strategy we're aiming at. Probably active DNS checks and periodic re-checks > are better to ensure some security. Thanks guys > Checking DNS at input time would

per sender relay and sasl not receiving username/password

2012-02-16 Thread Jake Stride
I am trying to setup my mail server to send email from a single email address via a rely and deliver all other email properly, however I am having problems with the TLS authentication and was hoping for some points please. The current configs are below (anonymised) and the error I am getting is:

Re: forcing MX lookups

2012-02-16 Thread Reindl Harald
Am 17.02.2012 00:07, schrieb Tom Hendrikx: > On 16-02-12 23:52, Dipl.-Ing. Juergen Ladstaetter wrote: >> Thank you both very much. That input was very good and I might rethink the >> strategy we're aiming at. Probably active DNS checks and periodic re-checks >> are better to ensure some security.

Re: per sender relay and sasl not receiving username/password

2012-02-16 Thread Patrick Ben Koetter
* Jake Stride : > I am trying to setup my mail server to send email from a single email address > via a rely and deliver all other email properly, however I am having problems > with the TLS authentication and was hoping for some points please. The > current configs are below (anonymised) and th

Re: How to block senders whose domain without a MX record

2012-02-16 Thread daniel zhou
Thanks all for the clarification.   You are right. That idea may block more real mail than the spam ones. From: /dev/rob0 To: postfix-users@postfix.org Sent: Thursday, February 16, 2012 9:28 PM Subject: Re: How to block senders whose domain without a MX record

Re: per sender relay and sasl not receiving username/password

2012-02-16 Thread Jake Stride
Thanks - I was using sendmail -f addr...@domain.com to check it worked, using telnet the current config works. Thanks for the help. On Friday, 17 February 2012 at 11:56 AM, Patrick Ben Koetter wrote: > * Jake Stride mailto:j...@stride.me.uk)>: > > I am trying to setup my mail server to send em

Re: Ldap queries optimization

2012-02-16 Thread Angel L. Mateo
El 16/02/12 16:35, Viktor Dukhovni escribió: On Thu, Feb 16, 2012 at 10:49:10AM +0100, Angel L. Mateo wrote: My config is: virtual_alias_maps = hash:/etc/postfix/alu-aliases, hash:/etc/postfix/dif-aliases, proxy:ldap:/etc/postfix/ldap-sysaliases.cf relay_recipient_maps