Re: iptables based spam prevention

2013-08-26 Thread DTNX Postmaster
On Aug 26, 2013, at 06:20, pe...@ixp.jp wrote: > On Aug/25.20:11:49, Niclas Arndt wrote: >> Here are my questions: Is the iptables approach at all viable in the long >> run? Is there any non-commercial way to upload a text file containing >> spamming IP addresses and have it verified for correct

Re: TLS errors with GMX/web.de

2013-08-26 Thread Sebastian Wiesinger
* Viktor Dukhovni [2013-08-24 05:27]: > > > I just did, here is the PCAP: > > > > http://www.karotte.org/smtp-gmx.pcap > > The client sends an "internal error" alert. It is not clear what > problem it is encountering. The server elects: > > Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_

Re: email from comcast.net is bouncing

2013-08-26 Thread Wietse Venema
Grant: > >> SUBJECT: Delivery status notification > >> This is an automatically generated Delivery Status Notification. > >> Delivery to the following recipients was aborted after 7 second(s): > >> mas...@masked.com > > > > If you want that mail, whitelist them, > > They should already be whitelis

Re: TLS errors with GMX/web.de

2013-08-26 Thread Viktor Dukhovni
On Mon, Aug 26, 2013 at 12:04:28PM +0200, Sebastian Wiesinger wrote: > > It may be overkill, but it should work. I am afraid the best path > > forward is for GMX to debug this with their client software. > > Yeah I'm not holding my breath for that. Send them (postmaster@) a pointer to this thre

SMTP server error: 4.7.1 Error: too much mail from xx.xx.xx.xx

2013-08-26 Thread Frank Barcenas
I have moodle installed on my webserver. At peak times during the month, I begin to see this error: SMTP server error: 4.7.1 Error: too much mail from xx.xx.xx.xx in the logs. What value do I need to increase in my main.cf? Or is there some sortof whitelist that I can use so that it won't limit my

MARC link on postfix.org/lists.html

2013-08-26 Thread DTNX Postmaster
The MARC link on the mailing lists page no longer seems to work; http://www.postfix.org/lists.html http://marc.theaimsgroup.com/?l=postfix-users As far as I can tell, the new link seems to be; http://marc.info/?l=postfix-users Mvg, Joni

Re: SMTP server error: 4.7.1 Error: too much mail from xx.xx.xx.xx

2013-08-26 Thread Wietse Venema
Frank Barcenas: > I have moodle installed on my webserver. At peak times during the month, I > begin to see this error: SMTP server error: 4.7.1 Error: too much mail from > xx.xx.xx.xx in the logs. What value do I need to increase in my main.cf? Or > is there some sortof whitelist that I can use so

Re: SMTP server error: 4.7.1 Error: too much mail from xx.xx.xx.xx

2013-08-26 Thread Frank Barcenas
Awesome! Thank you. Can't wait to see if it happens again this month. > Look for these settings: > > $ postconf -n | grep smtpd_client > > Someone put these settings into your main.cf. > Wietse > Frank zello: barcef whatsapp: +5213331849895 "We hang petty thieves and appoint the great

Re: email from comcast.net is bouncing

2013-08-26 Thread Grant
>> >> SUBJECT: Delivery status notification >> >> This is an automatically generated Delivery Status Notification. >> >> Delivery to the following recipients was aborted after 7 second(s): >> >> mas...@masked.com >> > >> > If you want that mail, whitelist them, >> >> They should already be whitelis

Re: email from comcast.net is bouncing

2013-08-26 Thread Grant
>> >> SUBJECT: Delivery status notification >> >> This is an automatically generated Delivery Status Notification. >> >> Delivery to the following recipients was aborted after 7 second(s): >> >> mas...@masked.com >> > >> > If you want that mail, whitelist them, >> >> They should already be whitelis

Re: email from comcast.net is bouncing

2013-08-26 Thread Wietse Venema
Grant: > >> >> SUBJECT: Delivery status notification > >> >> This is an automatically generated Delivery Status Notification. > >> >> Delivery to the following recipients was aborted after 7 second(s): > >> >> mas...@masked.com > >> > > >> > If you want that mail, whitelist them, > >> > >> They sho

Re: SMTP server error: 4.7.1 Error: too much mail from xx.xx.xx.xx

2013-08-26 Thread Wietse Venema
Wietse: > Look for these settings: > > $ postconf -n | grep smtpd_client > > Someone put these settings into your main.cf. Frank Barcenas: > Awesome! Thank you. Can't wait to see if it happens again this month. Note the default smtpd_client_message_rate_limit is zero, i.e. no limit. If you n

Re: Significantly different date observed in Received and Date fields

2013-08-26 Thread LuKreme
On 25 Aug 2013, at 22:41 , Mike Seda wrote: > It's possible to modify the Date field on MUA side, if one were so inclined, > right? Yes, but I am having trouble thinking of a case where it is really actually truly a good idea. > If so, how would that be accomplished? I'd use procmail and form

Relay access denied on submission?

2013-08-26 Thread LuKreme
postfix/smtpd[4289]: Anonymous TLS connection established from mobile-166-147-083-103.mycingular.net[166.147.83.103]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) mail postfix/smtpd[4289]: NOQUEUE: reject: RCPT from mobile-166-147-083-103.mycingular.net[166.147.83.103]: 454 4.7.1 <*m

Re: Relay access denied on submission?

2013-08-26 Thread LuKreme
On 26 Aug 2013, at 16:47 , LuKreme wrote: > postfix/smtpd[4289]: Anonymous TLS connection established from > mobile-166-147-083-103.mycingular.net[166.147.83.103]: TLSv1 with cipher > ECDHE-RSA-AES256-SHA (256/256 bits) > > mail postfix/smtpd[4289]: NOQUEUE: reject: RCPT from > mobile-166-14

Re: Significantly different date observed in Received and Date fields

2013-08-26 Thread John Levine
In article you write: >-=-=-=-=-=- > >It's possible to modify the Date field on MUA side, if one were so >inclined, right? > >If so, how would that be accomplished? The easiest way is to change the clock in your computer, then send the message, then change it back.

Re: MARC link on postfix.org/lists.html

2013-08-26 Thread Sahil Tandon
On Mon, 2013-08-26 at 16:04:30 +0200, DTNX Postmaster wrote: > The MARC link on the mailing lists page no longer seems to work; > > http://www.postfix.org/lists.html > http://marc.theaimsgroup.com/?l=postfix-users > > As far as I can tell, the new link seems to be; > > http://marc.info/?l=postf

Disabling user submission on port 25

2013-08-26 Thread LuKreme
OK, now that port 587 is working, I would like to disable user submission via port 25. Not right now, but in a bit once people have a chance to change their settings. What do I do to prevent users sending via port25? -- >>Trying? >if you quote yoda, i swear upon everything holy that i will boo

Re: Disabling user submission on port 25

2013-08-26 Thread Noel Jones
On 8/26/2013 7:49 PM, LuKreme wrote: > OK, now that port 587 is working, I would like to disable user submission via > port 25. Not right now, but in a bit once people have a chance to change > their settings. > > What do I do to prevent users sending via port25? > Super easy... # main.cf sm

Re: Disabling user submission on port 25

2013-08-26 Thread John Allen
On 26/08/2013 9:00 PM, Noel Jones wrote: On 8/26/2013 7:49 PM, LuKreme wrote: OK, now that port 587 is working, I would like to disable user submission via port 25. Not right now, but in a bit once people have a chance to change their settings. What do I do to prevent users sending via port

Re: Disabling user submission on port 25

2013-08-26 Thread LuKreme
On 26 Aug 2013, at 19:00 , Noel Jones wrote: > # main.cf > smtpd_sasl_auth_enable = no Oh, right, of course. (I also needed to remove my fixed IP at home from my networks, which is why I was still able to send out via my machine). -- NOBODY LIKES SUNBURN SLAPPERS Bart chalkboard Ep. 7F23

Re: Disabling user submission on port 25

2013-08-26 Thread LuKreme
On 26 Aug 2013, at 21:24 , John Allen wrote: > remove the permit_mynetworks from all the various smtpd__restrictions > stanzas of main.cf. Then modify the master.cf by adding > -o smtpd_client_restrictions=hash:Deny_Mynetworks_Access,. > to the smtp service, and add > -o smtpd_clien