Re: Feature request: new parameter no_result_format for ldap and sql maps

2012-09-20 Thread Michael Storz
Am 2012-09-19 21:41, schrieb Viktor Dukhovni: On Wed, Sep 19, 2012 at 07:13:49PM +0200, Michael Storz wrote: The consistency check requires that a user object is first (correctly) defined in OpenLDAP. Only then the second check looks for the correct definition in Active Directory. If it is not t

Re: Error: reject_sender_login_mismatch

2012-09-20 Thread Ansgar Wiechers
On 2012-09-20 Leon wrote: > smtpd_sender_login_maps = > mysql:/etc/postfix/mysql_mailbox_maps.cf, > mysql:/etc/postfix/mysql_alias_maps.cf > > smtpd_sender_restrictions = > reject_non_fqdn_sender, > reject_sender_login_mismatch > > > virtual_mailbox_maps = mysql:/etc/post

Re: Using postscreen_whitelist_interfaces

2012-09-20 Thread Wietse Venema
Brad Smith: > postscreen_whitelist_interfaces = !IPv4, static:all Where does the documentation promise that IPv4 is a "server IP address"? Wietse postscreen_whitelist_interfaces (default: static:all) A list of local postscreen(8) server IP addresses where a non- wh

Re: Feature request: new parameter no_result_format for ldap and sql maps

2012-09-20 Thread Wietse Venema
Michael Storz: > Well, provisioning never stops. There is a peak at the beginning of a > new > semester, because of new students. But new employees are provisioned > nearly every day. The defer has to be automatically for each affected > email. Try: http://www.postfix.org/ADDRESS_VERIFICATION_RE

Limit mail submission

2012-09-20 Thread Arnaud Jayet
Hello i have set up a smtp test server for nomad clients outside my network at work (postfix + TLS + SASL + LDAP) to prevent suspicious / infected client with spam (or usurpated login and password) i would like to limit mail submission (rate, count, max connexion) ideally, i would to limit

Re: Limit mail submission

2012-09-20 Thread Reindl Harald
Am 20.09.2012 15:00, schrieb Arnaud Jayet: > Hello > > i have set up a smtp test server for nomad clients outside my network at work > (postfix + TLS + SASL + LDAP) > > to prevent suspicious / infected client with spam (or usurpated login and > password) i would like to limit mail > submissio

Re: Using postscreen_whitelist_interfaces

2012-09-20 Thread Wietse Venema
Wietse Venema: > Brad Smith: > > postscreen_whitelist_interfaces = !IPv4, static:all > > Where does the documentation promise that IPv4 is a "server IP address"? That said, I must admit that a block of text was somehow left out of the documentation. The updated text below steals liberally from th

Re: Limit mail submission

2012-09-20 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/20/2012 8:06 AM, Reindl Harald wrote: > > > Am 20.09.2012 15:00, schrieb Arnaud Jayet: >> Hello >> >> i have set up a smtp test server for nomad clients outside my >> network at work (postfix + TLS + SASL + LDAP) >> >> to prevent suspicious /

Re: Using postscreen_whitelist_interfaces

2012-09-20 Thread Brad Smith
On Thu, Sep 20, 2012 at 06:47:44AM -0400, Wietse Venema wrote: > Brad Smith: > > postscreen_whitelist_interfaces = !IPv4, static:all > > Where does the documentation promise that IPv4 is a "server IP address"? It shows it right in the example below and the second paragraph explains this. >

Re: Using postscreen_whitelist_interfaces

2012-09-20 Thread Wietse Venema
Brad Smith: > On Thu, Sep 20, 2012 at 06:47:44AM -0400, Wietse Venema wrote: > > Brad Smith: > > > postscreen_whitelist_interfaces = !IPv4, static:all > > > > Where does the documentation promise that IPv4 is a "server IP address"? > > It shows it right in the example below and the second paragra

Re: Using postscreen_whitelist_interfaces

2012-09-20 Thread Brad Smith
On Thu, Sep 20, 2012 at 03:34:26PM -0400, Wietse Venema wrote: > Brad Smith: > > On Thu, Sep 20, 2012 at 06:47:44AM -0400, Wietse Venema wrote: > > > Brad Smith: > > > > postscreen_whitelist_interfaces = !IPv4, static:all > > > > > > Where does the documentation promise that IPv4 is a "server IP a

RE: Cleaning out certain 4xx-errors

2012-09-20 Thread Jan Johansson
>Otherwise you can try to use the smtp_reply_filter feature. This is an >incedibly sharp knife for desperate situations. Use at your own risk. > >Untested example: > >/etc/postfix/main.cf: >smtp_reply_filter = /etc/postfix/smtp_reply_filter.pcre > >/etc/postfix/smtp_reply_filter.pcre: ># T

RE: Cleaning out certain 4xx-errors

2012-09-20 Thread Jan Johansson
>>Make the PCRE pattern as specific as possible, so that it matches only PLESK >>responses. > >I must be missing something, but with the following pcre-entry > >/^451 4.5.1 Mailbox full/551 5.2.2 Mailbox full > >Everything gets rejected with: >Sep 20 23:19:03 laundromat postfix/smtpd[4083]: NOQUEU

Re: Cleaning out certain 4xx-errors

2012-09-20 Thread Wietse Venema
Jan Johansson: > >/^451 PLESK reply text here/ 551 5.2.2 Mailbox full ^SPACE HERE > >Make the PCRE pattern as specific as possible, so that it matches only PLESK > >responses. > > I must be missing something, but with the following pcre-entry > > /^451 4.5

RE: Cleaning out certain 4xx-errors

2012-09-20 Thread Jan Johansson
Jan Johansson: >> >/^451 PLESK reply text here/ 551 5.2.2 Mailbox full > ^SPACE HERE > >> >Make the PCRE pattern as specific as possible, so that it matches only >> >PLESK responses. >> >> I must be missing something, but with the following pcre-entry >> >>

Re: Cleaning out certain 4xx-errors

2012-09-20 Thread /dev/rob0
On Thu, Sep 20, 2012 at 09:46:22PM +, Jan Johansson wrote: Wietse: > Jan Johansson: > >> >/^451 PLESK reply text here/ 551 5.2.2 Mailbox full > > ^SPACE HERE > > > >> >Make the PCRE pattern as specific as possible, so that it > >> >matches only PLESK respo