How to output custom message to sender_access reject

2014-02-10 Thread L. D. James
Can someone advise me how to customize the rejection message for message rejected by /etc/postfix/sender_access? For example: --- # /etc/postfix/sender_access # # Black/Whitelist for senders matching the 'MAIL FROM' field. Exam

Re: problem with postfix-sasl and debian 7: SASL PLAIN authentication failed: no mechanism available

2014-02-10 Thread Wietse Venema
nik600: > my /etc/default/saslauthd ... > OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd -r" > > my /etc/postfix/sasl/smtpd.conf ... > saslauthd_path: /var/spool/postfix/var/run/saslauthd/mux Debian runs Postfix with chroot turned on, which changes the meaning of pathnames. Try turning off c

Re: How to output custom message to sender_access reject

2014-02-10 Thread Noel Jones
On 2/10/2014 7:13 AM, L. D. James wrote: > Can someone advise me how to customize the rejection message for > message rejected by /etc/postfix/sender_access? http://www.postfix.org/access.5.html f...@example.com REJECT Custom message where Custom message contains the reject text sent to the cl

warning: hostname localhost does not resolve to address ::1: No address associated with hostname

2014-02-10 Thread Jelle de Jong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello everyone, I have a dual stack IPv6/IPv4 postfix server that been running on debian stable quite happy. At 9 februari I did some system updates for debian: apache2-mpm-prefork apache2-utils apache2.2-bin apache2.2-common base-files libc-bin libc

Re: warning: hostname localhost does not resolve to address ::1: No address associated with hostname

2014-02-10 Thread li...@rhsoft.net
Am 10.02.2014 16:33, schrieb Jelle de Jong: > I have a dual stack IPv6/IPv4 postfix server that been running on > debian stable quite happy. > > postfix/smtpd[15247]: warning: hostname localhost does not resolve to > address ::1: No address associated with hostname > > 1. should I be worried? > 2

Re: warning: hostname localhost does not resolve to address ::1: No address associated with hostname

2014-02-10 Thread Wietse Venema
Jelle de Jong: > postfix/smtpd[15247]: warning: hostname localhost does not resolve to > address ::1: No address associated with hostname .. > 2. why is the warning popping up now? Because the system getnameinfo() function cannot resolve "localhost" to "::1". # cat /etc/hosts 127.0.0.1

gmail certificate complaints

2014-02-10 Thread Norton Allen
I've noticed the following in my logs: Feb 9 04:10:01 endymion postfix/smtp[21298]: certificate verification failed for gmail-smtp-in.l.google.com: num=20:unable to get local issuer certificate Feb 9 04:10:01 endymion postfix/smtp[21298]: certificate verification failed for gmail

Re: [OT] SELinux Policies (port & maildir location)

2014-02-10 Thread Michal Bruncko
Hello > * A custom smtpd instance listening on the loopback interface on port 10025 as you can see from you policy posted at the end of your post - you can simply allow postfix to bind to port 10025 using command: setsebool -P allow_ypbind=on (parameter -P makes this change permanent) > * Usi

Re: problem with postfix-sasl and debian 7: SASL PLAIN authentication failed: no mechanism available

2014-02-10 Thread nik600
You are true...it was a chroot problem thanks! 2014-02-10 14:57 GMT+01:00 Wietse Venema : > nik600: > > my /etc/default/saslauthd > ... > > OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd -r" > > > > my /etc/postfix/sasl/smtpd.conf > ... > > saslauthd_path: /var/spool/postfix/var/run/sas

Re: gmail certificate complaints

2014-02-10 Thread Viktor Dukhovni
On Mon, Feb 10, 2014 at 11:05:50AM -0500, Norton Allen wrote: > I've noticed the following in my logs: > >Feb 9 04:10:01 endymion postfix/smtp[21298]: certificate >verification failed for gmail-smtp-in.l.google.com: num=20:unable to >get local issuer certificate >Feb 9 04:10:01

Re: Does this have side effects?

2014-02-10 Thread Jay G. Scott
On Fri, Feb 07, 2014 at 01:55:09PM -0500, Glenn Sieb wrote: > This will do what you're looking for, much easier. > > in main.cf: > > mydomain = arlut.utexas.edu > > # SENDING MAIL > # > # The myorigin parameter specifies the domain that locally-posted > # mail appears to come from. The default

Re: How to output custom message to sender_access reject

2014-02-10 Thread L. D. James
On 02/10/2014 09:33 AM, Noel Jones wrote: On 2/10/2014 7:13 AM, L. D. James wrote: Can someone advise me how to customize the rejection message for message rejected by /etc/postfix/sender_access? http://www.postfix.org/access.5.html f...@example.com REJECT Custom message where Custom messag

OT - call for speakers announcements?

2014-02-10 Thread CS DBA
Hi All; We're hosting a conference in April and we're looking for speakers (www.opendatasummit.com). Would it be appropriate to post the call for speakers announcement here? or is there a better list? Thanks in advance

Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread fleon
Hello, i am using Debian 7.3 with postfix, and am trying to send email through our Exchange 2007 server. I have read tons of posts but i have been unable to get it to work I am using the postfix package that comes with Debian, and also installed libsasl2-modules On mail.cf i tried the following:

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread Viktor Dukhovni
On Mon, Feb 10, 2014 at 09:54:42AM -0800, fleon wrote: > Hello, i am using Debian 7.3 with postfix, and am trying to send email > through our Exchange 2007 server. I have read tons of posts but i have been > unable to get it to work > > I am using the postfix package that comes with Debian, and a

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread fleon
I added the debug command you requested so you can see the whole error. I don't seem to have dns issues so i haven't felt the need for the brackets. I do seem to have the NTLM module I am aware of base64, so my tests with telnet i did use base64 to enter the username but as soon as i pressed enter

Re: OT - call for speakers announcements?

2014-02-10 Thread Wietse Venema
CS DBA: > Hi All; > > We're hosting a conference in April and we're looking for speakers > (www.opendatasummit.com). > > Would it be appropriate to post the call for speakers announcement here? > or is there a better list? Please do not post the CFP here. You can post a weblink instead.

Re: OT - call for speakers announcements?

2014-02-10 Thread CS DBA
On 2/10/14, 12:29 PM, Wietse Venema wrote: CS DBA: Hi All; We're hosting a conference in April and we're looking for speakers (www.opendatasummit.com). Would it be appropriate to post the call for speakers announcement here? or is there a better list? Please do not post the CFP here. You can

Re: [OT] SELinux Policies (port & maildir location)

2014-02-10 Thread Ori Bani
On 2/10/14, Michal Bruncko wrote: > > * A custom smtpd instance listening on the loopback interface on port > > 10025 > as you can see from you policy posted at the end of your post - you can > simply allow postfix to bind to port 10025 using command: > setsebool -P allow_ypbind=on > (parameter -P

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread Viktor Dukhovni
On Mon, Feb 10, 2014 at 10:39:49AM -0800, fleon wrote: > I added the debug command you requested so you can see the whole error. I > don't seem to have dns issues so i haven't felt the need for the brackets. I > do seem to have the NTLM module You need to add the "[]" not because you may or may n

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread fleon
Well, i tried with [] in both files, also tried changing the sasl password file to use domain\user instead of u...@domain.com and still i get the same errors. I wonder if exchange is rejecting anything without TLS. Our exchange has a self signed certificate and i know if i want to try TLS i will n

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread li...@rhsoft.net
Am 10.02.2014 19:39, schrieb fleon: > I added the debug command you requested so you can see the whole error. I > don't seem to have dns issues so i haven't felt the need for the brackets. I > do seem to have the NTLM module uninstall the NTLM module on my Fedora machines i had the same until "

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread Viktor Dukhovni
On Mon, Feb 10, 2014 at 11:51:31PM +0100, li...@rhsoft.net wrote: > Am 10.02.2014 19:39, schrieb fleon: > > I added the debug command you requested so you can see the whole error. I > > don't seem to have dns issues so i haven't felt the need for the brackets. I > > do seem to have the NTLM module

does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Michael McCallister
Hi, Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For example, lets assume an IP lookup on zen.spamhaus.org returns nxdomain and postscreen_dnsbl_ttl is set to an hour - postscreen won't check again for another hour? Or does that caching only apply to non-nxdomain responses

Re: does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Wietse Venema
Michael McCallister: > Hi, > > Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For > example, lets assume an IP lookup on zen.spamhaus.org returns nxdomain > and postscreen_dnsbl_ttl is set to an hour - postscreen won't check > again for another hour? Or does that caching only

Re: does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Michael McCallister
On 2/10/2014 7:43 PM, Wietse Venema wrote: Michael McCallister: Hi, Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For example, lets assume an IP lookup on zen.spamhaus.org returns nxdomain and postscreen_dnsbl_ttl is set to an hour - postscreen won't check again for another ho

Re: does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Noel Jones
On 2/10/2014 9:45 PM, Michael McCallister wrote: > On 2/10/2014 7:43 PM, Wietse Venema wrote: >> Michael McCallister: >>> Hi, >>> >>> Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For >>> example, lets assume an IP lookup on zen.spamhaus.org returns >>> nxdomain >>> and postscreen

Re: does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Michael McCallister
On 2/10/2014 9:09 PM, Noel Jones wrote: On 2/10/2014 9:45 PM, Michael McCallister wrote: On 2/10/2014 7:43 PM, Wietse Venema wrote: Michael McCallister: Hi, Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For example, lets assume an IP lookup on zen.spamhaus.org returns nxdoma