[Code submission] Postfix ODBC support

2014-04-26 Thread John Fawcett
I am submitting the attached code (patches to some existing files and two new files: dict_odbc.c and dict_odbc.h) which adds support for a new dictionary type that uses unixODBC (www.unixodbc.org). As noted in the past on this list, that could be useful in supporting map types that don't have nati

Re: Request for data points: DANE-enabled receiving domains

2014-04-26 Thread Jonas Wielicki
On 25.04.2014 17:00, Viktor Dukhovni wrote: > If anyone else on this list has a DNSSEC signed domain and adds MX > host TLSA records, please feel free to drop me a note. I'll connect > to your domain from my home network a few times a year to test DANE > interoperability, you will not be exposed t

Receiving one mail at a time

2014-04-26 Thread Mehmet Tolga Avcioglu
Hello, I have been searching if SMTP protocol supports limiting the number of recipients an MTA will accept and if there is any way to implement such a setup in postix, but couldn't find a definitive answer. What I mean is telling the other side not to send more than one rcpt, just like default_de

Re: Request for data points: DANE-enabled receiving domains

2014-04-26 Thread /dev/rob0
On Fri, Apr 25, 2014 at 03:00:42PM +, Viktor Dukhovni wrote: > If anyone else on this list has a DNSSEC signed domain and adds > MX host TLSA records, please feel free to drop me a note. You helped me with that in this very thread back in December. :) Those records are in place now for nodns4.

Fwd: [Code submission] Postfix ODBC support

2014-04-26 Thread John Fawcett
Forgot to mention: Need to add some parameters to the make Makefiles command, namely HAS_ODBC and the linking of the library with -lodbc, assuming the include files are in a standard location. make -f Makefile.init makefiles \ 'CCARGS=-DHAS_ODBC 'AUXLIBS= -lodbc '

Re: Outgoing spam problem

2014-04-26 Thread Marcin Szymonik
Hello, Many thanks to all who replied. Many suggestion are really helpful and we have been able to stop the spammers for now. Best regards -- Marcin Szymonik szymoni...@gmail.com

Re: Receiving one mail at a time

2014-04-26 Thread Wietse Venema
Mehmet Tolga Avcioglu: > Hello, > > I have been searching if SMTP protocol supports limiting the number of > recipients an MTA will accept [...] but couldn't find a definitive answer. RFC 5321 defines the SMTP protocol. This requires that the server can receive at least 100 recipients. This docum

Problems with local mail delivery

2014-04-26 Thread Sebastian
Hello! I’m running Postfix 2.11.0,1 on FreeBSD 10.0-RELEASE-p1 inside of a jail. The jail is bound to an alias of the hosts loopback interface lo0. I stumbled onto this error message while sifting through /var/log/maillog: Apr 13 03:01:06 mail postfix/smtp[22641]: 4F6CD41BB: to=, relay=none, dela

Re: Problems with local mail delivery

2014-04-26 Thread Wietse Venema
Sebastian: > Hello! > I?m running Postfix 2.11.0,1 on FreeBSD 10.0-RELEASE-p1 inside of a jail. > The jail is bound to an alias of the hosts loopback interface lo0. > > I stumbled onto this error message while sifting through /var/log/maillog: > > Apr 13 03:01:06 mail postfix/smtp[22641]: 4F6CD41

both ssl and tls authentification in postfix

2014-04-26 Thread vicafk
*Hi folks !* I have a small problem with my postfix configuration. I'm trying to enable both SSL and TLS support and disable plain auth, however i can only make one of them work at the same time. If i enable SSL than TLS stops working, if i enable TLS, SSL stops working. (the error i receive in ou

Re: both ssl and tls authentification in postfix

2014-04-26 Thread Viktor Dukhovni
On Sat, Apr 26, 2014 at 07:23:38AM -0700, vicafk wrote: > I have a small problem with my postfix configuration. > I'm trying to enable both SSL and TLS support and disable plain auth, > however i can only make one of them work at the same time. You're using dumbed-down MUA terminology. In mail c

RE: both ssl and tls authentification in postfix

2014-04-26 Thread Victor Faur
Well, I tried this : 25 inet n - n - - smtpd -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,permit_mynetworks,check_ relay_domains,reject_unauth_destination,reject 587 inet n - n - - smtpd -o smtpd_enforce_tls=yes -o smtpd_tls_security

Re: both ssl and tls authentification in postfix

2014-04-26 Thread li...@rhsoft.net
Am 26.04.2014 18:04, schrieb Victor Faur: > 25 inet n - n - - smtpd -o smtpd_enforce_tls=yes -o > smtpd_sasl_auth_enable=yes -o > smtpd_client_restrictions=permit_sasl_authenticated,permit_mynetworks,check_ > relay_domains,reject_unauth_destination,reject > 587 inet n - n - - smtpd -o smtpd_enfor

Re: both ssl and tls authentification in postfix

2014-04-26 Thread li...@rhsoft.net
why do you reply off-list and top-posting? Am 26.04.2014 18:32, schrieb Victor Faur: > Ok, I get it now. I left the wrapper on port 587 and used starttls on 465, I > had no idea that the two don't mix that's why you should start with reading the manuals before acting > (ps, for port 25 I just co

Re: both ssl and tls authentification in postfix

2014-04-26 Thread Viktor Dukhovni
On Sat, Apr 26, 2014 at 06:40:02PM +0200, li...@rhsoft.net wrote: > Am 26.04.2014 18:32, schrieb Victor Faur: > > Ok, I get it now. I left the wrapper on port 587 and used starttls on 465, I > > had no idea that the two don't mix That's backwards. Wrappermode should be off with port 587 and on w

Re: Cassandra/NoSQL table support

2014-04-26 Thread John Fawcett
On 24/04/14 16:50, Wietse Venema wrote: > List: >> On 4/23/14, 3:24 PM, Wietse Venema wrote: >>> List: Are there any plans or existing projects that support connecting Postfix to a Cassandra cluster to execute CQL queries for table lookups? Or any other NoSQL databases? >>> If someo

Re: Problems with local mail delivery

2014-04-26 Thread Sebastian
Wietse: > Typically, this means chroot is enabled on in master.cf but you > don’t have the required files under /var/spool/postfix. I checked my master.cf for this and as per default, none of my processes runs chrooted. > Please show how you tested name resolution from inside a jail. > Use the "s

Re: Problems with local mail delivery

2014-04-26 Thread Wietse Venema
Sebastian: [ Charset windows-1252 unsupported, converting... ] > Wietse: > > Typically, this means chroot is enabled on in master.cf but you > > don?t have the required files under /var/spool/postfix. > > I checked my master.cf for this and as per default, none of my processes > runs chrooted. Pl

Re: Receiving one mail at a time

2014-04-26 Thread Mehmet Tolga Avcioglu
Wietse Venema: > RFC 5321 defines the SMTP protocol. This requires that the server > can receive at least 100 recipients. This document is available at > no cost beyond that of a network connection. You should read it. Thank you for the information. I usually do search for those before going to

Re: Receiving one mail at a time

2014-04-26 Thread li...@rhsoft.net
Am 27.04.2014 00:01, schrieb Mehmet Tolga Avcioglu: > Wietse Venema: > > RFC 5321 defines the SMTP protocol. This requires that the server > can receive at least 100 recipients. This document is available at > no cost beyond that of a network connection. You should read it. > > Than

Re: Receiving one mail at a time

2014-04-26 Thread Wietse Venema
Mehmet Tolga Avcioglu: > Wietse Venema: > > > RFC 5321 defines the SMTP protocol. This requires that the server > > can receive at least 100 recipients. This document is available at > > no cost beyond that of a network connection. You should read it. > > Thank you for the information. I usually

Re: Receiving one mail at a time

2014-04-26 Thread Mehmet Tolga Avcioglu
On Sun, Apr 27, 2014 at 1:13 AM, Wietse Venema wrote: > > Thank you for the information. I usually do search for those before going > > to the lists, but googling "smtp rfc" didn't reveal the right one easily. > > When I type 'smtp rfc' into a google search window it suggests > the following quer

sender ip in smtp log line

2014-04-26 Thread Marius Gologan
Hi, I have an email gateway that filters spam for third-parties. I usually use fail2ban to reduce cases when particular IPs are flooding the gateway and record Hits: 35-100 points, by injecting "SMTP REJECT/DEFER explicit" to reduce the queue on the sender's side, help the exploited ISP/ESP

Re: sender ip in smtp log line

2014-04-26 Thread Wietse Venema
Marius Gologan: > Can I add, in any way, the sender ip on the postfix/smtp log line? No. You can extract the SMTP client IP address from Postfix logging with the same queue ID. This works best when you enable long queue IDs that never repeat. # postconf -e "enable_long_queue_ids = yes"

Re: sender ip in smtp log line

2014-04-26 Thread Wietse Venema
Wietse Venema: > Marius Gologan: > > Can I add, in any way, the sender ip on the postfix/smtp log line? > > No. > > You can extract the SMTP client IP address from Postfix logging > with the same queue ID. This works best when you enable long queue > IDs that never repeat. > > # postconf -e

Re: sender ip in smtp log line

2014-04-26 Thread /dev/rob0
On Sat, Apr 26, 2014 at 08:50:49PM -0400, Wietse Venema wrote: > Wietse Venema: > > Marius Gologan: > > > Can I add, in any way, the sender ip on the postfix/smtp > > > log line? > > > > No. > > > > You can extract the SMTP client IP address from Postfix > > logging with the same queue ID. This

RE: sender ip in smtp log line

2014-04-26 Thread Marius Gologan
I made a test (log below). The warning header appears in "cleanup" log line. Not in the same line with the smtp client log, with Exchange rejection. Apr 27 03:14:03 gateway postfix/cleanup[10319]: 76D2343520: warning: header X-SMTP-Client-Addr: ip.add.re.ss from host.s-domain.com[ip.add.re.ss]; fr