Re: Postfix -- question regarding SPAM and Mailman

2012-10-03 Thread Wietse Venema
Futchko, Rose: > > This message was RETURNED TO your mailman service. > > That does not prove that it was SENT FROM your mailman service. > > That is a great point. So, I dug a little deeper into the mail log and > found what I believe is the outbound information: > > Oct 1 09:39:07 company-app0

Re: postscreen_access_list requires 'permit', not 'PERMIT'

2012-10-03 Thread francis picabia
On Tue, Oct 2, 2012 at 9:20 PM, Wietse Venema wrote: > Nope. If you were testing this more carefully then you would have > found that upper or lower case does not matter in this context. I tested the exact same line with PERMIT and permit. permit allowed the whitelist entry to work. PERMIT gene

PATCH: postscreen_access_list requires 'permit', not 'PERMIT'

2012-10-03 Thread Wietse Venema
francis picabia: [ Charset ISO-8859-1 unsupported, converting... ] > On Tue, Oct 2, 2012 at 9:20 PM, Wietse Venema wrote: > > > Nope. If you were testing this more carefully then you would have > > found that upper or lower case does not matter in this context. > > I tested the exact same line w

How to change queue id?

2012-10-03 Thread Steffen Schebesta
Hello everybody, I deliver mails to my Postfix through smtpd. Postfix then takes it and sends it out to the recipient. Now I'm trying to change the queue_id for each email in Postfix 2.9 source code so that it is equal to the Message-ID (it is unique, don't worry) that I set in the email heade

Re: How to change queue id?

2012-10-03 Thread Reindl Harald
Am 03.10.2012 16:53, schrieb Steffen Schebesta: > I deliver mails to my Postfix through smtpd. Postfix then takes it and sends > it out to the recipient. > > Now I'm trying to change the |queue_id| for each email in Postfix 2.9 source > code so that it is equal to > the |Message-ID| (it is uni

Re: Pointer to 'guide for setting up postfix'?

2012-10-03 Thread Matthew Moore
On 02/10/12 17:14, John Hudak wrote: > I want to set up a mail server that sends mail through a relay, e.g. > smtp.google.com and receives mail via a > domain registered at No-ip.com via email redirects. I know this is > not the 'proper' way to set up a email server, but i

Re: How to change queue id?

2012-10-03 Thread Viktor Dukhovni
On Wed, Oct 03, 2012 at 04:53:22PM +0200, Steffen Schebesta wrote: > I deliver mails to my Postfix through smtpd. Postfix then takes it and sends > it out to the recipient. One or more recipients. And it may receive one or more copies of the original message if it was sent to many recipients. >

Re: How to change queue id?

2012-10-03 Thread Noel Jones
On 10/3/2012 9:53 AM, Steffen Schebesta wrote: > Now I'm trying to change the |queue_id| for each email in Postfix > 2.9 source code so that it is equal to the |Message-ID| (it is > unique, don't worry) that I set in the email header when passing the > email to Postfix through smtpd. Why? At any

Re: How to change queue id?

2012-10-03 Thread Wietse Venema
Steffen Schebesta: > Hello everybody, > > I deliver mails to my Postfix through smtpd. Postfix then takes it and sends > it out to the recipient. > > Now I'm trying to change the queue_id for each email in Postfix 2.9 source > code so that it is equal to the Message-ID (it is unique, don't worry) t

reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
I recently updated a Postfix system from 2.4 to 2.9 and I have found what I believe is a change in behavior for reject_unknown_sender_domain which is confusing. In the past, an effective means of dealing with some classes of persistent spammers was to tell the local DNS resolver (BIND 9) to "bl

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Noel Jones
On 10/3/2012 1:15 PM, Bill Cole wrote: > I recently updated a Postfix system from 2.4 to 2.9 and I have found > what I believe is a change in behavior for > reject_unknown_sender_domain which is confusing. In the past, an > effective means of dealing with some classes of persistent spammers > was t

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Wietse Venema
Bill Cole: > I recently updated a Postfix system from 2.4 to 2.9 and I have found > what I believe is a change in behavior for reject_unknown_sender_domain > which is confusing. In the past, an effective means of dealing with some Sort answer: Postfix does not pass SERVFAIL, it just rejects the

Re: Question about DNS registries

2012-10-03 Thread Wietse Venema
Alumno Etsii: > virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf > > In this table, there is a row with value: devels.es > > So why is this still happening? What is the result for: postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf Wietse

Re: Question about DNS registries

2012-10-03 Thread Noel Jones
On 10/3/2012 1:28 PM, Alumno Etsii wrote: > 2012/10/2 Dennis Guhl mailto:li...@dguhl.org>> > > On Tue, Oct 02, 2012 at 09:54:02AM +0100, Alumno Etsii wrote: > > Hi list! > > > > Yesterday I was experimenting with the DNS registries assigned > to my mail > > server. > >

Re: Question about DNS registries

2012-10-03 Thread Alumno Etsii
2012/10/3 Noel Jones > On 10/3/2012 1:28 PM, Alumno Etsii wrote: > > 2012/10/2 Dennis Guhl mailto:li...@dguhl.org>> > > > > On Tue, Oct 02, 2012 at 09:54:02AM +0100, Alumno Etsii wrote: > > > Hi list! > > > > > > Yesterday I was experimenting with the DNS registries assigned > >

Re: Question about DNS registries

2012-10-03 Thread Wietse Venema
Wietse Venema: > Alumno Etsii: > > virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf > > > > In this table, there is a row with value: devels.es > > > > So why is this still happening? > > What is the result for: > > postmap -q devels.es mysql:/etc/postfix/mysql-virtua

Re: Question about DNS registries

2012-10-03 Thread Wietse Venema
Alumno Etsii: > > > postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf > > > > If this returns devels.es, then Postfix will try to deliver to the > > service specified with "virtual_transport" instead of the relayhost. > > > > What is the output from: > > > > postconf virtual_transpor

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 14:48, Wietse Venema wrote: Bill Cole: I recently updated a Postfix system from 2.4 to 2.9 and I have found what I believe is a change in behavior for reject_unknown_sender_domain which is confusing. In the past, an effective means of dealing with some Sort answer: Postfix

Question about forwarding and SPAM checking

2012-10-03 Thread Dave Lewis - Mailinglist
Hi, I just recently made some changes for one of the users that I have on my system. Their request was a simple change to forward mail to another off server account as well as deliver it locally. I made the changes in postfix admin without issue but they are concerned that they are now gettin

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Ralf Hildebrandt
> DNS is definitely failing for dfleur.com, as the hit on the SA rule > "NO_DNS_FOR_FROM" indicates and as confirmed by a manual query: ~$ dig dfleur.com mx ; <<>> DiG 9.8.1-P1 <<>> dfleur.com mx ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47102 ;; f

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Wietse Venema
Bill Cole: > ; <<>> DiG 9.9.1-P3 <<>> dfleur.com mx > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41183 How will I reproduce this quickly? Wietse

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Viktor Dukhovni
On Wed, Oct 03, 2012 at 04:00:05PM -0400, Bill Cole wrote: > >>reject_unknown_sender_domain > This is what I would expect, based on the documentation. However, it > is accepting and delivering mail whose sender domain yields a > SERVFAIL and I can't figure out why. Note that as I stated in my > f

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 16:21, Ralf Hildebrandt wrote: DNS is definitely failing for dfleur.com, as the hit on the SA rule "NO_DNS_FOR_FROM" indicates and as confirmed by a manual query: ~$ dig dfleur.com mx ; <<>> DiG 9.8.1-P1 <<>> dfleur.com mx ;; global options: +cmd ;; Got answer: ;; ->>HEADER<

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Stefan Palme
On Wed, 2012-10-03 at 16:00 -0400, Bill Cole wrote: > lazarus:~# dig dfleur.com mx > > ; <<>> DiG 9.9.1-P3 <<>> dfleur.com mx > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41183 ... > ;; SERVER: 127.0.0.1#53(127.0.0.1) > ;; WHEN: Wed Oct 3 15:07:35 2012 Your locally

Re: Question about DNS registries

2012-10-03 Thread Wietse Venema
You report: # postconf -n ... virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf # postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf devels.es # postconf virtual_transport virtual_transport = virtual This means that mail for devels.es is given to the virt

Re: Question about DNS registries

2012-10-03 Thread Alumno Etsii
2012/10/3 Wietse Venema > You report: > > # postconf -n > ... > virtual_mailbox_domains = proxy:mysql:/etc/postfix/ > mysql-virtual_domains.cf > > # postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf > devels.es > > # postconf virtual_transport > virtual_transport = virtual > > This

AW: How to change queue id?

2012-10-03 Thread Steffen Schebesta
Thanks for all the insightful answers. So, I actually use the long_queue_ids options and I save the queue_ids to a database to later compare them to the queue_ids found in the mail log to parse and mark the bounces. The problem - and thus the source for my question - is that this always means a st

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread /dev/rob0
On Wed, Oct 03, 2012 at 04:26:33PM -0400, Wietse Venema wrote: > Bill Cole: > > ; <<>> DiG 9.9.1-P3 <<>> dfleur.com mx > > ;; global options: +cmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41183 > > How will I reproduce this quickly? Comcast owns dnssec-failed.or

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 16:26, Wietse Venema wrote: Bill Cole: ; <<>> DiG 9.9.1-P3 <<>> dfleur.com mx ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41183 How will I reproduce this quickly? I am not sure. If your resolver is BIND you can make dfleur.co

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 16:38, Stefan Palme wrote: On Wed, 2012-10-03 at 16:00 -0400, Bill Cole wrote: lazarus:~# dig dfleur.com mx ; <<>> DiG 9.9.1-P3 <<>> dfleur.com mx ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41183 ... ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: We

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread /dev/rob0
On Wed, Oct 03, 2012 at 04:35:59PM -0500, I wrote: > On Wed, Oct 03, 2012 at 04:26:33PM -0400, Wietse Venema wrote: > > Bill Cole: > > > ; <<>> DiG 9.9.1-P3 <<>> dfleur.com mx > > > ;; global options: +cmd > > > ;; Got answer: > > > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41183 > > >

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 14:46, Noel Jones wrote: On 10/3/2012 1:15 PM, Bill Cole wrote: I recently updated a Postfix system from 2.4 to 2.9 and I have found what I believe is a change in behavior for reject_unknown_sender_domain which is confusing. In the past, an effective means of dealing with some

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Wietse Venema
Wietse Venema: > Bill Cole: > > ; <<>> DiG 9.9.1-P3 <<>> dfleur.com mx > > ;; global options: +cmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41183 Net::DNS::Nameserver to the rescue, with a trivial reply handler of: sub reply_handler { my ($qname,

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Wietse Venema
Bill Cole: > On 3 Oct 2012, at 16:26, Wietse Venema wrote: > > > Bill Cole: > >> ; <<>> DiG 9.9.1-P3 <<>> dfleur.com mx > >> ;; global options: +cmd > >> ;; Got answer: > >> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41183 > > > > How will I reproduce this quickly? > > I am not sure. If

SOLVED! was Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
Predictably, the cause of this odd behavior was in fact external to Postfix. The server has 3 DNS servers in resolv.conf: itself, another one sitting across the room, and a third far away which was added in the same disaster recovery event that precipitated the upgrade from 2.4.5 to 2.9.3 a f

RE: Question about forwarding and SPAM checking

2012-10-03 Thread Dave Lewis - Mailinglist
Let me add to this question since I've been digging further, and racking my brain for a simple solution. If you have postfix with postfixadmin , mysql, spamassassin, maildrop configured and working where it is calling the default maildroprc file in /etc, Is there still a way to call a 2nd

Re: Question about forwarding and SPAM checking

2012-10-03 Thread Robert Schetterer
Am 04.10.2012 02:40, schrieb Dave Lewis - Mailinglist: > Let me add to this question since I’ve been digging further, and racking > my brain for a simple solution. > > > > If you have postfix with postfixadmin , mysql, spamassassin, maildrop > configured and working where it is calling the def