Re: can not telnet,can not send mail

2013-11-26 Thread Benny Pedersen
Feel Zhou skrev den 2013-11-26 07:40: Hello, my friend +1 This is Tom I'm sending my greeting from China china is known for blocking port 25 :/ My postfix server can not telnet any other mail server, but other server can telnet my postfix server, so lots of mail in my queue, sadly you a

Re: Rejecting emails based on domain blacklist

2013-11-26 Thread Wietse Venema
Mark Goodge: > Thanks. I'll have a play with that later. Another option is to blacklist a spammer's DNS server with check_client_ns_access or check_sender_ns_access. Wietse

Re: can not telnet,can not send mail

2013-11-26 Thread higuita
Hi On Tue, Nov 26, 2013 at 11:14:30AM +0100, Benny Pedersen wrote: > china is known for blocking port 25 :/ (...)> > depending of your isp, there is not much other ways to solve then hope You might want to try to relay all emails to your ISP mail server, by using the relayhost = [hostnam

Re: can not telnet,can not send mail

2013-11-26 Thread Wietse Venema
higuita: > Hi > > On Tue, Nov 26, 2013 at 11:14:30AM +0100, Benny Pedersen wrote: > > china is known for blocking port 25 :/ > (...)> > > depending of your isp, there is not much other ways to solve then hope > > You might want to try to relay all emails to your ISP mail server, > by using

Re: can not telnet,can not send mail

2013-11-26 Thread Feel Zhou
Thanks for all May be my isp provider blocked outbound connections to port 25/tcp, I ask them to fix this problem, and it's working now, I want to send mail via port 587 when it happens again, Thanks again TOM 2013/11/26 Wietse Venema > higuita: > > Hi > > > > On Tue, Nov 26, 2013 at 11:14:30AM

Re: postprox per recipient

2013-11-26 Thread Ian Baldwin
Hi Wietse, all, I may see your point. Although postprox itself is an SMTP proxy, the script I'm forwarding its stdin to does nothing to acknowledge the SMTP protocol of the incoming data. Would that be the correct interpretation of your answer? Ian On Sat, Nov 23, 2013 at 10:09 PM, Wietse Venem

Re: postprox per recipient

2013-11-26 Thread Wietse Venema
Ian Baldwin: > Nov 24 07:01:13 aminoacid postfix/smtp[21274]: 80F96303AE7: > to=, relay=127.0.0.1[127.0.0.1]:10027, delay=303, > delays=1.9/0.02/301/0, dsn=5.5.0, status=bounced (host > 127.0.0.1[127.0.0.1] said: 354 End data with . (in > reply to MAIL FROM command)) Wietse: > You need a program t

Re: postfix reports no rDNS on a host with many PTR records

2013-11-26 Thread Blake Hudson
Blake Hudson wrote the following on 10/18/2013 4:40 PM: Leonardo Rodrigues wrote the following on 10/17/2013 2:04 PM: Em 17/10/13 15:09, Blake Hudson escreveu: Based on your suggestion, I did find the following bug report for glibc from 2008 (that looks like Wietse had an indirect hand in):

reject_unknown_sender_domain rejects from domain with unusual PTR record

2013-11-26 Thread Lucas Bergman
I see the following syslog entries for a message from the local public library system when I have reject_unknown_sender_domain in smtpd_recipient_restrictions: Nov 25 14:06:23 gob postfix/smtpd[19293]: connect from unknown[12.229.68.221] Nov 25 14:06:23 gob postfix/smtpd[19293]: warning: 221.68.22

Re: reject_unknown_sender_domain rejects from domain with unusual PTR record

2013-11-26 Thread Wietse Venema
Lucas Bergman: > Nov 25 14:06:23 gob postfix/smtpd[19293]: NOQUEUE: reject: RCPT from > unknown[12.229.68.221]: 450 4.1.8 : Sender address > rejected: Domain not found; from= to=<[REDACTED]@ > BERGMANS.US> proto=ESMTP helo= 450 Means that Postfix did not receive a DNS reply. There could have been

Re: reject_unknown_sender_domain rejects from domain with unusual PTR record

2013-11-26 Thread Viktor Dukhovni
On Tue, Nov 26, 2013 at 03:54:57PM -0500, Wietse Venema wrote: > Lucas Bergman: > > > Nov 25 14:06:23 gob postfix/smtpd[19293]: NOQUEUE: reject: RCPT from > > unknown[12.229.68.221]: 450 4.1.8 : Sender address > > rejected: Domain not found; from= to=<[REDACTED]@ > > BERGMANS.US> proto=ESMTP helo=

Re: reject_unknown_sender_domain rejects from domain with unusual PTR record

2013-11-26 Thread Wietse Venema
Viktor Dukhovni: > On Tue, Nov 26, 2013 at 03:54:57PM -0500, Wietse Venema wrote: > > > Lucas Bergman: > > > > > Nov 25 14:06:23 gob postfix/smtpd[19293]: NOQUEUE: reject: RCPT from > > > unknown[12.229.68.221]: 450 4.1.8 : Sender address > > > rejected: Domain not found; from= to=<[REDACTED]@ > >

lost connection error, need help debugging

2013-11-26 Thread Alex
Hi, I'm trying to figure out why the remote server is responding with a "lost connection" error without any further information to indicate why the message was deferred. If I use telnet and replicate the connection process, I can send a test message. However, messages sent from remote users and f

Re: lost connection error, need help debugging

2013-11-26 Thread Wietse Venema
Buried under useless verbose logging is a clear warning: > warning: TLS library problem: 16575:error:1408F10B:SSL > routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:337: smtp_get: This means that the TLS library had a problem. > I've also included the successful telnet test: telnet is not

Re: lost connection error, need help debugging

2013-11-26 Thread Viktor Dukhovni
On Tue, Nov 26, 2013 at 05:53:05PM -0500, Wietse Venema wrote: > Buried under useless verbose logging is a clear warning: > > > warning: TLS library problem: 16575:error:1408F10B:SSL > > routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:337: smtp_get: > > This means that the TLS library had

Re: lost connection error, need help debugging

2013-11-26 Thread Viktor Dukhovni
On Tue, Nov 26, 2013 at 11:05:48PM +, Viktor Dukhovni wrote: > > To debug SMTP over TLS, use "openssl s_client". > > No need. This is the problem with Exchange on Windows 2003, and > the broken DES-CBC3-SHA ciphersuite. Work-around in the list > archives. $ posttls-finger -c -lmay -Lsu

Re: lost connection error, need help debugging

2013-11-26 Thread Viktor Dukhovni
On Tue, Nov 26, 2013 at 11:05:48PM +, Viktor Dukhovni wrote: > > This means that the TLS library had a problem. > > Plus the server is an Microsoft Exchange server, and the problem > happens on the first command after the post STARTLS EHLO. One last comment, the mail server in question does

how to make postfix alter the "From" header on outbound messages to mat IP

2013-11-26 Thread list
So here's the problem: An unusual server rejects mail on the basis that the domain portion of the FROM address in the header does not match the IP address of the server. So I need to compose a message like this: From: anything@ To: ... Subject: ... and I need postfix to replace the

Re: how to make postfix alter the "From" header on outbound messages to mat IP

2013-11-26 Thread Wietse Venema
l...@airstreamcomm.net: > So here's the problem: > > An unusual server rejects mail on the basis that the domain portion > of the FROM address in the header does not match the IP address of > the server. > > So I need to compose a message like this: > > From: anything@ > To: ... > S

Advanced master.cf query/update support

2013-11-26 Thread Wietse Venema
I recently picked up work on the postconf command that I suspended in January this year. It's probably best to just give a few examples. First, a word about notation. I wanted to describe master.cf properties with a kind of pathname notation. The original idea was to have things like servicename.s

Re: lost connection error, need help debugging

2013-11-26 Thread Alex
Hi, > $ posttls-finger -c -lmay -Lsummary -o tls_medium_cipherlist=DES-CBC3-SHA > "[66.252.104.194]" > posttls-finger: Connected to 66.252.104.194[66.252.104.194]:25 > posttls-finger: Untrusted TLS connection established to > 66.252.104.194[66.252.104.194]:25: unknown with cipher DES

Re: lost connection error, need help debugging

2013-11-26 Thread Viktor Dukhovni
On Tue, Nov 26, 2013 at 08:53:32PM -0500, Alex wrote: > > posttls-finger: warning: lost connection while sending QUIT command > > I've just downloaded this and compiled it on my system, but it says > invalid options: You have to compile *with* TLS support enabled. make -f Makefile.init

Re: reject_unknown_sender_domain rejects from domain with unusual PTR record

2013-11-26 Thread Lucas Bergman
Just to close out this thread: On Tue, Nov 26, 2013 at 2:54 PM, Wietse Venema wrote: > Lucas Bergman: > > Nov 25 14:06:23 gob postfix/smtpd[19293]: NOQUEUE: reject: RCPT from > > unknown[12.229.68.221]: 450 4.1.8 : Sender address > > rejected: Domain not found; from= to=<[REDACTED]@ > > BERGMANS.

Re: lost connection error, need help debugging

2013-11-26 Thread Alex
Hi, > You have to compile *with* TLS support enabled. > > make -f Makefile.init CCARGS='-DUSE_TLS' AUXLIBS='-lssl -lcrypto' Okay, got it to work now. Apparently it wasn't included with my fedora postfix install. >> I looked at my debug trace of the messages delivered successfully, and >> it

Re: lost connection error, need help debugging

2013-11-26 Thread Viktor Dukhovni
On Tue, Nov 26, 2013 at 09:37:13PM -0500, Alex wrote: > > You have to compile *with* TLS support enabled. > > > > make -f Makefile.init CCARGS='-DUSE_TLS' AUXLIBS='-lssl -lcrypto' > > Okay, got it to work now. Apparently it wasn't included with my fedora > postfix install. Not surprising, po