Re: recipients attribute, policy daemon.

2014-10-13 Thread Patrik Båt
On 2014-10-10 16:26, Wietse Venema wrote: > Jan P. Kessler: Or what the limitations are. >>> Note that you can not return different results for different >>> recipients at data or end_of_data stage. You can only pass or reject >>> the whole mail at all. >>> >> p.s. the policy server example

Re: Small Enhancement Request

2014-10-13 Thread Emmanuel Fusté
Le 10/10/2014 06:40, Ronald F. Guilmette a écrit : In message <20141010030256.gw13...@mournblade.imrryr.org>, Viktor Dukhovni wrote: On Thu, Oct 09, 2014 at 10:28:52AM -0700, Ronald F. Guilmette wrote: What happens if in fact the matching rules specified in the access(5) man page resulted in

Validating email address

2014-10-13 Thread Mike Cardwell
Is there any way of asking Postfix if it thinks it is capable of delivering a message to a particular email address, in real time? With Exim installed, I could just do a "sendmail -bv some.addr...@example.com" and check the exit code. With Postfix installed, the exit code is always 0 and the resul

Re: Validating email address

2014-10-13 Thread li...@rhsoft.net
Am 13.10.2014 um 11:45 schrieb Mike Cardwell: Is there any way of asking Postfix if it thinks it is capable of delivering a message to a particular email address, in real time? With Exim installed, I could just do a "sendmail -bv some.addr...@example.com" and check the exit code. With Postfix i

Re: Validating email address

2014-10-13 Thread Mike Cardwell
* on the Mon, Oct 13, 2014 at 11:51:04AM +0200, li...@rhsoft.net wrote: >> Is there any way of asking Postfix if it thinks it is capable of >> delivering a message to a particular email address, in real time? >> >> With Exim installed, I could just do a >> "sendmail -bv some.addr...@example.com" a

Re: Validating email address

2014-10-13 Thread Robert Schetterer
Am 13.10.2014 um 11:45 schrieb Mike Cardwell: > Is there any way of asking Postfix if it thinks it is capable of > delivering a message to a particular email address, in real time? > > With Exim installed, I could just do a > "sendmail -bv some.addr...@example.com" and check the exit code. > With

Re: Validating email address

2014-10-13 Thread li...@rhsoft.net
Am 13.10.2014 um 12:12 schrieb Mike Cardwell: * on the Mon, Oct 13, 2014 at 11:51:04AM +0200, li...@rhsoft.net wrote: Is there any way of asking Postfix if it thinks it is capable of delivering a message to a particular email address, in real time? With Exim installed, I could just do a "send

Re: Validating email address

2014-10-13 Thread Mike Cardwell
* on the Mon, Oct 13, 2014 at 12:22:38PM +0200, li...@rhsoft.net wrote: >> Address verification is always a guess. You're assuming that by address >> verification I'm talking about actually connecting to the remote SMTP >> server and sending "RCPT TO". I'm not talking about that, I'm talking >> ab

Re: Another policy server question...

2014-10-13 Thread Lothar Gesslein
On 10/10/2014 07:36 PM, Ronald F. Guilmette wrote: > Thank you. What you have written above does in fact clarify things a > good deal more. > > Just to make sure that I'm crystal clear however, let me ask: When you > say "terminated" what you are actually implying is just that the policy > serve

Re: OT: Fail2ban linux

2014-10-13 Thread Markus Benning
On Sun, Oct 12, 2014 at 03:27:41AM -0300, Julio Cesar Covolato wrote: > Hi People! > Anyone has a good rule for postfix smtpd whit fail2ban? > Sorry for the OT:)) The mtpolicyd policy daemon has a plugin for directly adding IPs to a fail2ban target without the logging/parsing. It directly uses the

Re: Validating email address

2014-10-13 Thread Wietse Venema
Mike Cardwell: > server and sending "RCPT TO". I'm not talking about that, I'm talking > about asking Postfix if the syntax of the address is valid and if the > DNS is set up suitably to be able to potentially be able to deliver > the message. I.e, are there valid MX records etc. That is how Exim >

Re: Another policy server question...

2014-10-13 Thread Wietse Venema
Lothar Gesslein: > As far as I understand it, $max_use is counted/incremented by the > postfix master daemon, for each new incoming connection (it is a No, that is incorrect, as are all inferences based on this. Wietse

Re: OT: Fail2ban linux

2014-10-13 Thread Koko Wijatmoko
On Mon, 13 Oct 2014 14:48:36 +0200 Markus Benning wrote: > On Sun, Oct 12, 2014 at 03:27:41AM -0300, Julio Cesar Covolato wrote: > > Hi People! > > Anyone has a good rule for postfix smtpd whit fail2ban? > > Sorry for the OT:)) > > The mtpolicyd policy daemon has a plugin for directly adding IPs

Re: Validating email address

2014-10-13 Thread Mike Cardwell
* on the Mon, Oct 13, 2014 at 08:48:56AM -0400, Wietse Venema wrote: >> server and sending "RCPT TO". I'm not talking about that, I'm talking >> about asking Postfix if the syntax of the address is valid and if the >> DNS is set up suitably to be able to potentially be able to deliver >> the messa

Re: Another policy server question...

2014-10-13 Thread Viktor Dukhovni
On Mon, Oct 13, 2014 at 02:48:14PM +0200, Lothar Gesslein wrote: > > Just to make sure that I'm crystal clear however, let me ask: When you > > say "terminated" what you are actually implying is just that the policy > > server process receives EOF on stdin, correct? > > AFAIK normal unix process

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-13 Thread Wietse Venema
Viktor Dukhovni: > On Sun, Oct 12, 2014 at 09:20:41PM +0200, A. Schulze wrote: > > > >How would Postfix know that "relay" ends at line 2? Comments may > > >appear IN THE MIDDLE of a master.cf entry. > > > > Technically correct. > > I read "line 3" but should read "the entry starting somewhere an

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-13 Thread Wietse Venema
Wietse Venema: > I have a version that reports the first and last non-empty, non-comment > line numbers of a master.cf entry, or just one line number if the > two are the same: ... > But I'll drop the "last" line number because it is unnecessary given > that we now have a precise start line number

Re: valid email addresses being rejected

2014-10-13 Thread Robert Lopez
On Fri, Oct 10, 2014 at 10:56 PM, Viktor Dukhovni wrote: > On Fri, Oct 10, 2014 at 03:35:09PM -0600, Robert Lopez wrote: > >> > Please see: >> > http://www.postfix.org/DATABASE_README.html#safe_db >> >> The question "So these errors happen while the file is being rebuilt, >> right?" is a very good

Re: valid email addresses being rejected

2014-10-13 Thread Wietse Venema
Robert Lopez: > Today is the first time I have paid any attention to CDB. > In looking at it, questions come to mind: > Is D.J.B. version 0.75 considered production ready or development? Yes. The code is stable. There is also Michael Tokarev's implementation. > Is the new database created with CD

Re: valid email addresses being rejected

2014-10-13 Thread Viktor Dukhovni
On Mon, Oct 13, 2014 at 06:30:56PM -0400, Wietse Venema wrote: > > Is D.J.B. version 0.75 considered production ready or development? > > Yes. The code is stable. There is also Michael Tokarev's implementation. Many users (myself included) use Michael Tokarev's Tinycdb. -- Viktor.

Postfix stable release 2.11.2 and legacy releases 2.10.4, 2.9.10, and 2.8.18

2014-10-13 Thread Wietse Venema
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-2.11.2.html] Bugfixes for Postfix 2.11, 2.10, 2.9 and 2.8: * Fix for DMARC implementations based on SPF policy plus DKIM Milter. The PREPEND access/policy action added headers ABOVE

Is it possible to require authentication based on specific properties of the MUA or its connection?

2014-10-13 Thread Ben Johnson
Hello! Is it possible to require authentication based on specific properties of an MUA or its connection? I would like to require all connections that originate from the php-fpm daemon (or its children) on the server in question to be forced to authenticate when sending mail through Postfix. At

Re: Is it possible to require authentication based on specific properties of the MUA or its connection?

2014-10-13 Thread Noel Jones
On 10/13/2014 6:54 PM, Ben Johnson wrote: > Hello! > > Is it possible to require authentication based on specific properties of > an MUA or its connection? > > I would like to require all connections that originate from the php-fpm > daemon (or its children) on the server in question to be forced

Re: Is it possible to require authentication based on specific properties of the MUA or its connection?

2014-10-13 Thread Stephen Satchell
On 10/13/2014 04:54 PM, Ben Johnson wrote: > If there is a better way to deal with this nuisance than resorting to > stricter authentication protocols, I would love to hear alternate > suggestions. [php direct mailing] Have you considered adding "system" to the list of disallowed function calls?

Re: Compile errors on Mac "Undefined symbols for architecture x86_64: "_pcre_free_study""

2014-10-13 Thread James Brown
> On 17 Jul 2014, at 11:41 am, James Brown wrote: > > >> On 16 Jul 2014, at 5:10 pm, Viktor Dukhovni >> wrote: >> >> On Wed, Jul 16, 2014 at 04:49:49PM +1000, James Brown wrote: >> >>> So change to: >>> >>> AUXLIBS=?-L/usr/local/lib -llber -lresolv -L/usr/lib ? ? >> >> Something like that

Re: Compile errors on Mac "Undefined symbols for architecture x86_64: "_pcre_free_study""

2014-10-13 Thread Viktor Dukhovni
On Tue, Oct 14, 2014 at 03:16:17PM +1100, James Brown wrote: > > Victor, changing the order so that it is: > > > > make -f Makefile.init makefiles \ > > CCARGS='-arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH \ > > -DDEF_SERVER_SASL_TYPE=\"dovecot\" \ > > -DDEF_COMMAND_DIR=\"/usr/local/sbin\" \ > > -DDEF_

Re: Compile errors on Mac "Undefined symbols for architecture x86_64: "_pcre_free_study""

2014-10-13 Thread James Brown
> On 14 Oct 2014, at 4:13 pm, Viktor Dukhovni > wrote: > > On Tue, Oct 14, 2014 at 03:16:17PM +1100, James Brown wrote: > >>> Victor, changing the order so that it is: >>> >>> make -f Makefile.init makefiles \ >>> CCARGS='-arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH \ >>> -DDEF_SERVER_SASL_TYPE=\"d

Re: Compile errors on Mac "Undefined symbols for architecture x86_64: "_pcre_free_study""

2014-10-13 Thread Viktor Dukhovni
On Tue, Oct 14, 2014 at 05:19:34PM +1100, James Brown wrote: > Thanks for your help Victor. > > make -f Makefile.init makefiles \ > CCARGS='-arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH \ > -DDEF_SERVER_SASL_TYPE=\"dovecot\" \ > -DDEF_COMMAND_DIR=\"/usr/local/sbin\" \ > -DDEF_CONFIG_DIR=\"/usr/local/etc