Re: Convert from basic to virtual

2012-10-22 Thread Noel Jones
On 10/15/2012 6:06 AM, Dominique wrote: > Hi list(s), You asked this last week; the answer is still the same. http://www.mailinglistarchive.com/html/postfix-users@postfix.org/2012-10/msg00283.html -- Noel Jones > > A few years ago we setup a simple postfix+Cyrus Mail server in the > o

Re: stat=queue and /var/spool/clientmqueue

2012-10-22 Thread Simone Felici
Il 18/10/2012 17:45, Ralf Hildebrandt ha scritto: * Simone Felici : That's sendmail, not postfix. I know this settings shoud be referred to sendmail and shouldn't have nothing to do with this issue. BTW I'm asking here infos on how manage correctly these mails to postfix. I'm not 100% sure

Fwd: Re: Fwd: Re: MX vs A records (SOLVED)

2012-10-22 Thread Tom Kinghorn
On 18/10/2012 14:41, Noel Jones wrote: On 10/18/2012 5:04 AM, Tom Kinghorn wrote: DO NOT send debug log files unless specifically requested. Normal log files are sufficient. And a friendly reminder that splitting required troubleshooting info up between multiple messages greatly reduces th

Re: MX vs A records (SOLVED)

2012-10-22 Thread Reindl Harald
Am 22.10.2012 15:29, schrieb Tom Kinghorn: > > > On 18/10/2012 14:41, Noel Jones wrote: >> On 10/18/2012 5:04 AM, Tom Kinghorn wrote: >>> >>> DO NOT send debug log files unless specifically requested. Normal >>> log files are sufficient. >>> >>> >>> And a friendly reminder that splitting requi

Re: MX vs A records (SOLVED)

2012-10-22 Thread Tom Kinghorn
On 22/10/2012 15:32, Reindl Harald wrote: Am 22.10.2012 15:29, schrieb Tom Kinghorn: On 18/10/2012 14:41, Noel Jones wrote: On 10/18/2012 5:04 AM, Tom Kinghorn wrote: DO NOT send debug log files unless specifically requested. Normal log files are sufficient. And a friendly reminder that s

Re: MX vs A records (SOLVED)

2012-10-22 Thread Wietse Venema
Tom Kinghorn: > > it would be nice having at the end of the thread the example config > > with corrected typo to help others which finding this in the archives! > > > apologies. > > > smtpd_recipient_restrictions = > check_recipient_ns_access > hash:/etc/postfix/recipient_nameserver_hos

Re: MX vs A records (SOLVED)

2012-10-22 Thread Noel Jones
On 10/22/2012 8:39 AM, Tom Kinghorn wrote: > On 22/10/2012 15:32, Reindl Harald wrote: >> >> Am 22.10.2012 15:29, schrieb Tom Kinghorn: >>> >>> On 18/10/2012 14:41, Noel Jones wrote: On 10/18/2012 5:04 AM, Tom Kinghorn wrote: > DO NOT send debug log files unless specifically requested. No

Re: MX vs A records (SOLVED)

2012-10-22 Thread Tom Kinghorn
On 22/10/2012 15:51, Wietse Venema wrote: Tom Kinghorn: it would be nice having at the end of the thread the example config with corrected typo to help others which finding this in the archives! apologies. smtpd_recipient_restrictions = check_recipient_ns_access hash:/etc/postfix/r

Re: MX vs A records (SOLVED)

2012-10-22 Thread Tom Kinghorn
On 22/10/2012 15:55, Noel Jones wrote: On 10/22/2012 8:39 AM, Tom Kinghorn wrote: On 22/10/2012 15:32, Reindl Harald wrote: Am 22.10.2012 15:29, schrieb Tom Kinghorn: On 18/10/2012 14:41, Noel Jones wrote: On 10/18/2012 5:04 AM, Tom Kinghorn wrote: DO NOT send debug log files unless specific

Re: MX vs A records (SOLVED)

2012-10-22 Thread Wietse Venema
Tom Kinghorn: > >> I checked the config and found that the lines did not end with a comma. > >> As soon as I added it, the access rule started working and mails were > >> redirected (i changed REJECT to REDIRECT) > > What program are you using to edit main.cf? > Hi Wietse. > This was an "inherited

Re: MX vs A records (SOLVED)

2012-10-22 Thread Tom Kinghorn
On 22/10/2012 16:09, Wietse Venema wrote: Tom Kinghorn: I suspect there was garbage at the end of lines. Postfix logs warnings in the maillog file when smtpd_xxx_restrictions contains unrecognized content. Wietse Thanks for the response Wietse. Thanks to all who helped. regards Tom

Latest package for RHEL6

2012-10-22 Thread Lima Union
Hi all! does anyone know where I can find the latest postfix release (2.9.x) for RHEL 6 x86_64 from some 'trusted' source? unfortunately Simon Mudd didn't post any package for this platform yet. Thanks in advance. LU

Re: Alert of unusually large queue

2012-10-22 Thread Jan P. Kessler
>> I'm not sure, if sending an e-mail about a "full mailqueue"-condition is >> the best way to go ;-) > depends > > if you have no bulk-mail on your server it will tak enot too long > to find a good value to adjust the "50" and as example if i have > 500 queued messages i like to look if there is

Re: Latest package for RHEL6

2012-10-22 Thread Morten Stevens
On 22.10.2012 16:40, Lima Union wrote: Hi all! does anyone know where I can find the latest postfix release (2.9.x) for RHEL 6 x86_64 from some 'trusted' source? unfortunately Simon Mudd didn't post any package for this platform yet. Thanks in advance. LU Hi, I have backported Postfix 2.9.x fo

Re: Alert of unusually large queue

2012-10-22 Thread Wietse Venema
Jan P. Kessler: > As mentioned by other posters you should set up a real monitoring > system, that periodically checks your queue or generates an alert (e.g. > snmp trap) on the server which does not rely on the mechanism that you > are trying to monitor (here smtp). To monitor an SMTP server, try

Re: Latest package for RHEL6

2012-10-22 Thread Patrick Lists
On 10/22/2012 04:56 PM, Morten Stevens wrote: [snip] > I have backported Postfix 2.9.x for my company and I am also package maintainer for Fedora. Here are my latest builds for el6: http://mstevens.fedorapeople.org/el6/postfix/ Would you mind making the SRPM also available? Regards, Patrick

Re: Latest package for RHEL6

2012-10-22 Thread Patrick Lists
On 10/22/2012 05:29 PM, Patrick Lists wrote: On 10/22/2012 04:56 PM, Morten Stevens wrote: [snip] > I have backported Postfix 2.9.x for my company and I am also package maintainer for Fedora. Here are my latest builds for el6: http://mstevens.fedorapeople.org/el6/postfix/ Would you mind mak

Re: Latest package for RHEL6

2012-10-22 Thread Lima Union
On Mon, Oct 22, 2012 at 11:56 AM, Morten Stevens wrote: > On 22.10.2012 16:40, Lima Union wrote: >> >> Hi all! does anyone know where I can find the latest postfix release >> (2.9.x) for RHEL 6 x86_64 from some 'trusted' source? unfortunately >> Simon Mudd didn't post any package for this platform

RE: Alert of unusually large queue

2012-10-22 Thread James Day
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Jan P. Kessler > Sent: 22 October 2012 15:44 > To: postfix-users@postfix.org > Subject: Re: Alert of unusually large queue > > > >> I'm not sure, if sending an e-mail ab

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Wednesday, October 17, 2012 7:52 PM -0400 Wietse Venema wrote: It's much easier to tell people not to use Milters before a proxy filter... If you use the milter after the proxy server, which is what I'm currently doing, then I result in the following problem: If Amavis is called bef

Re: Any best practices for stacking filters?

2012-10-22 Thread Wietse Venema
Quanah Gibson-Mount: > wrote: > > It's much easier to tell people not to use Milters before a proxy > > filter... > > If you use the milter after the proxy server, which is what I'm currently > doing, then I result in the following problem: You just confirmed the limitation that I explained at

ESMTP: keys and passwords

2012-10-22 Thread thorsopia
Hello, I'm trying to configure ESMTP using this guide [1]. $ touch smtpd.key $ chmod 600 smtpd.key $ openssl genrsa 4096 > smtpd.key $ openssl req -new -key smtpd.key -x509 -days 730 -out smtpd.crt ... If you enter '.', the field will be left blank. - Country Name (2 letter code) [AU]:. State

Re: ESMTP: keys and passwords

2012-10-22 Thread Reindl Harald
Am 22.10.2012 21:45, schrieb thorso...@lavabit.com: > Hello, > The above generated a 1024 bit RSA private key. How to create a 4096 bit key? the following is for 2048 bit replace 2048 by whatever you want alter the template for your needs (partly german) this is a script/remplate i am using sin

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 3:33 PM -0400 Wietse Venema wrote: One suggestion I can make is to avoid mixing mail streams from outside with mail streams from inside, before your mail is signed. For example, - Use before-queue filters for mail from outside so that you can reject mail befor

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 1:03 PM -0700 Quanah Gibson-Mount wrote: Hi Wieste, Wietse even. Sorry. ;) -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Any best practices for stacking filters?

2012-10-22 Thread Wietse Venema
Quanah Gibson-Mount: > --On Monday, October 22, 2012 3:33 PM -0400 Wietse Venema > wrote: > > > One suggestion I can make is to avoid mixing mail streams from > > outside with mail streams from inside, before your mail is signed. > > > > For example, > > > > - Use before-queue filters for mail f

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 4:24 PM -0400 Wietse Venema wrote: My example CAN sign mail with dkim-milter before it hits the Amavis filter. Your example CANNOT sign mail with dkim-milter before it hits the Amavis filter. I believe what you are saying is that I should adjust my originating

Re: Any best practices for stacking filters?

2012-10-22 Thread Wietse Venema
Quanah Gibson-Mount: > --On Monday, October 22, 2012 4:24 PM -0400 Wietse Venema > wrote: > > > My example CAN sign mail with dkim-milter before it hits the Amavis > > filter. > > > > Your example CANNOT sign mail with dkim-milter before it hits the > > Amavis filter. > > I believe what you are

Re: local_header_rewrite_clients behaving weird

2012-10-22 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > But as a matter of fact, both test clients are covered by > permit_inet_interfaces, the default for local_header_rewrite_cients. Plus, > rewrites stopped working without changing Postfix version or config. OK, can it. I got it. http://www.postfi

Re: postfix SMTP AUTH

2012-10-22 Thread William Holt
Hi Rob, thanks. I use the reserved adresses because I'm testing the box via local net (my laptop), I have everything setup straight through GoDaddy to my router I just forward the ports when I'm ready. I'll check out the smtpd_sasl_local_domain = $myhostname problem. By the way, do you know of any

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 5:09 PM -0400 Wietse Venema wrote: 1) Use the before-queue filter for mail from outside: external clients -> smtpd -> Amavis ... 2) Use the after-queue filter for mail from inside: internal clients -> smtpd -> cleanup -> queu

Re: Any best practices for stacking filters?

2012-10-22 Thread Wietse Venema
Quanah Gibson-Mount: > --On Monday, October 22, 2012 5:09 PM -0400 Wietse Venema > wrote: > > > 1) Use the before-queue filter for mail from outside: > > > > external clients -> smtpd -> Amavis ... > > > > 2) Use the after-queue filter for mail from inside: > > > >

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 6:17 PM -0400 Wietse Venema wrote: Quanah Gibson-Mount: --On Monday, October 22, 2012 5:09 PM -0400 Wietse Venema wrote: > 1) Use the before-queue filter for mail from outside: > >external clients -> smtpd -> Amavis ... > > 2) Use th

Re: postfix SMTP AUTH

2012-10-22 Thread Patrick Ben Koetter
See below ... * William Holt : > Hi Rob, thanks. I use the reserved adresses because I'm testing the > box via local net (my laptop), I have everything setup straight > through GoDaddy to my router I just forward the ports when I'm ready. > > I'll check out the smtpd_sasl_local_domain = $myhostna

Re: postfix SMTP AUTH

2012-10-22 Thread William Holt
P.S. I'm sorry I looked quickly and thought your name was Rob, forgive me Patrick. I'm reading your book, I like it. I also use the postfix web site and debian-wiki/arch-wiki. On Mon, Oct 22, 2012 at 5:53 PM, William Holt wrote: > Hi Rob, thanks. I use the reserved adresses because I'm testing th

Re: Any best practices for stacking filters?

2012-10-22 Thread Wietse Venema
Quanah Gibson-Mount: > --On Monday, October 22, 2012 6:17 PM -0400 Wietse Venema > wrote: > > > Quanah Gibson-Mount: > >> --On Monday, October 22, 2012 5:09 PM -0400 Wietse Venema > >> wrote: > >> > >> > 1) Use the before-queue filter for mail from outside: > >> > > >> >

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 7:09 PM -0400 Wietse Venema wrote: You had a problem with not being able to sign mail with a Milter before it enters your content filter. I kindly provided an example that allows you to do that. It even works with the same content filter. Now you reject the sol

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 4:23 PM -0700 Quanah Gibson-Mount wrote: There is, and there will not be, a queue between the Postfix SMTP server protocol engine and the Postfix Milter client protocol engine, where email messages wait until a broken Milter server comes back. By the way, as lo

Re: Any best practices for stacking filters?

2012-10-22 Thread Wietse Venema
Quanah Gibson-Mount: > --On Monday, October 22, 2012 4:23 PM -0700 Quanah Gibson-Mount > wrote: > > > >> There is, and there will not be, a queue between the Postfix SMTP > >> server protocol engine and the Postfix Milter client protocol engine, > >> where email messages wait until a broken Mil

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 7:39 PM -0400 Wietse Venema wrote: There is, however, no milter_default_action ON THE SMTP SERVER SIDE that accepts mail and keeps it queued until the milter comes back. That's what you objected to, and that's what will never exist. All I want is to be able to s

Re: Any best practices for stacking filters?

2012-10-22 Thread Wietse Venema
Quanah Gibson-Mount: > --On Monday, October 22, 2012 7:39 PM -0400 Wietse Venema > wrote: > > > There is, however, no milter_default_action ON THE SMTP SERVER SIDE > > that accepts mail and keeps it queued until the milter comes back. > > That's what you objected to, and that's what will never e

Re: Any best practices for stacking filters?

2012-10-22 Thread Quanah Gibson-Mount
--On Monday, October 22, 2012 8:32 PM -0400 Wietse Venema wrote: No doubt there will be some other objection, and never a thankyou. Actually, I greatly appreciate your time and help with this. So thank you, very much for your patience as well. As for using Amavis to sign via DKIM, that

ot: iPhone smtp setup

2012-10-22 Thread lists
I have Postfix with smtp-auth, port 587, all works good I'm having problems setting an iPhone with smtp-auth sending, hoping some iPhone experts can point me in correct direction on this iPhone, under SMTP, it has 'primary' SMTP server, correct host, port 587, SSL; under 'additional' there are IS

Re: postfix SMTP AUTH

2012-10-22 Thread William Holt
i guessed it was a realm issue so I changed smtpd_sasl_local_domain = $myhostname to smtpd_sasl_local_domain = $mydomain and added a u...@my.org i believe auxprop is using sasldb (which I did change in smtpd.conf from sasldb2 to sasldb) handind it "user" + "realm") correct? and now I have thus n

Re: ESMTP: keys and passwords

2012-10-22 Thread Viktor Dukhovni
On Mon, Oct 22, 2012 at 03:45:22PM -0400, thorso...@lavabit.com wrote: > I'm trying to configure ESMTP using this guide [1]. > > $ touch smtpd.key > $ chmod 600 smtpd.key > $ openssl genrsa 4096 > smtpd.key This will generate a 4096 bit key, though you almost certainly should not use a key this