Re: Solution to SMTPAuth compromised accounts.

2013-09-13 Thread lst_hoe02
Zitat von Viktor Dukhovni : On Fri, Sep 13, 2013 at 11:45:54AM +0900, Jorgen Lundman wrote: However, quite often the 3rd party involved uses software that can use pipelining, and simply keeps sending mail, even though the SMTPAuth account has been stopped. What you are calling "pipelining"

Postmaster address rewriting in bounce mail header

2013-09-13 Thread robby
Hi, I'm using the latest version of postfix on Debian 6. I'm using an email application to send mailings which automatically handles bounces through a pipe php script. I have successfully setup a mail alias for postmaster to the pipe script. However in the bounce emails the "To" field in the mail

Re: Solution to SMTPAuth compromised accounts.

2013-09-13 Thread José Borges Ferreira
On 09/13/2013 08:47 AM, lst_ho...@kwsoft.de wrote: > A workaround might be to force a mismatch with smtpd_sender_login_maps > by removing the MAIL FROM --> Login-ID match in the table, no? But > this only applies if reject_sender_login_mismatch could/should be used > of course. On top of that, plea

Re: Solution to SMTPAuth compromised accounts.

2013-09-13 Thread Wietse Venema
Viktor Dukhovni: > > Can we add something similar to the "smtpd_client_restrictions" or > > "smtpd_recipient_restrictions", and adding a new rule-entry which > > would simply confirm that the "SMTPAuth LDAP 'user' used way back, > > is still accountStatus=enabled" ? Built-in message rate limit: /

Re: Postmaster address rewriting in bounce mail header

2013-09-13 Thread Wietse Venema
robby: > Hi, > > I'm using the latest version of postfix on Debian 6. I'm using an email > application to send mailings which automatically handles bounces through a > pipe php script. I have successfully setup a mail alias for postmaster to > the pipe script. Please don't solve the wrong problem

Response 550 mailbox doesn't exist

2013-09-13 Thread Roman Gelfand
If outgoing email bounced with 550,I would like, if not forever, for a while, to bounce emails to that address locally. Is there a way to do that? Thanks in advance

Re: Response 550 mailbox doesn't exist

2013-09-13 Thread Wietse Venema
Roman Gelfand: > If outgoing email bounced with 550,I would like, if not forever, for a > while, to bounce emails to that address locally. Is there a way to do > that? To bounce mail before it is delivered: /etc/postfix/main.cf: transport_maps = hash:/etc/transport /etc/postfix/transport:

Re: Solution to SMTPAuth compromised accounts.

2013-09-13 Thread /dev/rob0
On Fri, Sep 13, 2013 at 04:29:28AM +, Viktor Dukhovni wrote: > Sadly Postfix does not have an access table keyed by the SASL > login name. Perhaps we should bite the bullet, and add one, +1, a check_sasl_auth_access feature would be useful, despite the fact that other approaches can accompli

Re: Response 550 mailbox doesn't exist

2013-09-13 Thread Roman Gelfand
This is a manual solution. Is there an automatic solution where based on the log a transport file or database is maintained... something that has smarts to automatically deal with 550's? On Fri, Sep 13, 2013 at 11:05 AM, Wietse Venema wrote: > Roman Gelfand: >> If outgoing email bounced with 550

Re: Response 550 mailbox doesn't exist

2013-09-13 Thread Wietse Venema
Roman Gelfand: > If outgoing email bounced with 550,I would like, if not forever, for a > while, to bounce emails to that address locally. Is there a way to do > that? Wietse: > > To bounce mail before it is delivered: > > > > /etc/postfix/main.cf: > > transport_maps = hash:/etc/transport > >

Re: blocked by Verizon & Hotmail?

2013-09-13 Thread Grant
>> I have nearly ten years experience with sending emails thru a newsletter. >> BOTH of the undelivered email examples are due to INVALID EMAIL ADDRESSES. > > The next task will to find out why your server is sending to invalid > addresses, too much of this just might find your server being blocke

disturbing TLS error

2013-09-13 Thread Mathieu R.
Hello, i've just setted up a postfix server, and i constantly have such error in my logs : Sep 13 21:31:34 effraie01 postfix/smtpd[12650]: SSL_accept error from ng17.bullet.mail.bf1.yahoo.com (ever from yahoo servers) i can't figure out wher my mistake come from. here is my postconf -n :

Re: blocked by Verizon & Hotmail?

2013-09-13 Thread Grant
> Jim is absolutely correct about filtering your invalid emails, though I > personally would > never do it automatically, as there are too many variables to distinguish > between > ISP's that are subject to change. You could lose a lot of valid subscribers > via > automated filtering. The bounces t

Re: disturbing TLS error

2013-09-13 Thread Viktor Dukhovni
On Fri, Sep 13, 2013 at 09:44:38PM +0200, Mathieu R. wrote: > Sep 13 21:31:34 effraie01 postfix/smtpd[12650]: SSL_accept error > from ng17.bullet.mail.bf1.yahoo.com There is generally more information in the log than this when the TLS handshake fails. DO NOT over-summarize the logs. > (ever fro

Re: disturbing TLS error

2013-09-13 Thread Mathieu R.
Le 13/09/2013 22:29, Viktor Dukhovni a écrit : On Fri, Sep 13, 2013 at 09:44:38PM +0200, Mathieu R. wrote: Sep 13 21:31:34 effraie01 postfix/smtpd[12650]: SSL_accept error from ng17.bullet.mail.bf1.yahoo.com There is generally more information in the log than this when the TLS handshake fails

Re: disturbing TLS error

2013-09-13 Thread Viktor Dukhovni
On Fri, Sep 13, 2013 at 11:03:22PM +0200, Mathieu R. wrote: > >There is generally more information in the log than this when the > >TLS handshake fails. DO NOT over-summarize the logs. > > Sep 13 22:58:40 effraie01 postfix/smtpd[22230]: SSL_accept error > from ng4.bullet.mail.bf1.yahoo.com[98.13

Re: disturbing TLS error

2013-09-13 Thread Mathieu R.
Le 13/09/2013 23:26, Viktor Dukhovni a écrit : On Fri, Sep 13, 2013 at 11:03:22PM +0200, Mathieu R. wrote: >There is generally more information in the log than this when the >TLS handshake fails. DO NOT over-summarize the logs. Sep 13 22:58:40 effraie01 postfix/smtpd[22230]: SSL_accept error

Re: disturbing TLS error

2013-09-13 Thread DTNX Postmaster
On Sep 13, 2013, at 23:51, Mathieu R. wrote: > Le 13/09/2013 23:26, Viktor Dukhovni a écrit : >> If your traffic volume is not too heavy, you can temporarily raise >> the Postfix SMTP server TLS log level to "2": >> >> smtpd_tls_loglevel = 2 >> >> this will show more details of the TLS han

Re: disturbing TLS error

2013-09-13 Thread Viktor Dukhovni
On Fri, Sep 13, 2013 at 11:51:39PM +0200, Mathieu R. wrote: > not very much more : > > Sep 13 23:33:09 effraie01 postfix/smtpd[25221]: connect from > ng4.bullet.mail.bf1.yahoo.com[98.139.164.99] > Sep 13 23:33:44 effraie01 postfix/smtpd[25221]: SSL_accept error > from ng4.bullet.mail.bf1.yahoo.co

Re: disturbing TLS error

2013-09-13 Thread Mathieu R.
Le 14/09/2013 03:23, Viktor Dukhovni a écrit : On Fri, Sep 13, 2013 at 11:51:39PM +0200, Mathieu R. wrote: not very much more : Sep 13 23:33:09 effraie01 postfix/smtpd[25221]: connect from ng4.bullet.mail.bf1.yahoo.com[98.139.164.99] Sep 13 23:33:44 effraie01 postfix/smtpd[25221]: SSL_accept e