Timeout 30s but message sent

2014-12-18 Thread HugoH
Hello, I'm facing a timeout issue on one of my server, which seems to slow message delivery. There is a 30s (exactly 30s) delay while connecting to gmail, gandi, yahoo... servers. But some others haven't this timeout. Here is a sample from my logs : Dec 18 09:07:48 sd-60799 postfix/pickup[84

Re: Timeout 30s but message sent

2014-12-18 Thread Christian Rößner
> Am 18.12.2014 um 09:26 schrieb HugoH : > > Dec 18 09:08:18 sd-60799 postfix/smtp[17808]: connect to > gmail-smtp-in.l.google.com[2a00:1450:400c:c00::1a]:25: Connection timed out > Dec 18 09:08:19 sd-60799 postfix/smtp[17808]: 4176314805C0: If I follow this list correctly, there recently was so

Re: Timeout 30s but message sent

2014-12-18 Thread HugoH
Hello Christian, Thanks for your reply. I check on my working server and... There's this message : Dec 18 11:09:27 sd- postfix/smtp[3501]: connect to gmail-smtp-in.l.google.com[2a00:1450:400c:c01::1b]:25: No route to host It seem's that my 2nd server detects that ipv6 is not available and use i

Adding hostname to addresses

2014-12-18 Thread Robert Fitzpatrick
We use Postfix on our gateways that only transport to destination servers, they do not have any local users except for standard system/root/admin accounts. How can I get Postfix to not allow senders to use the hostname in their email address. Would it work and is it safe to add such a REJECT to

Re: Adding hostname to addresses

2014-12-18 Thread li...@rhsoft.net
Am 18.12.2014 um 13:38 schrieb Robert Fitzpatrick: We use Postfix on our gateways that only transport to destination servers, they do not have any local users except for standard system/root/admin accounts. How can I get Postfix to not allow senders to use the hostname in their email address. Wo

Re: Timeout 30s but message sent

2014-12-18 Thread Wietse Venema
HugoH: > Hello Christian, > Thanks for your reply. > > I check on my working server and... There's this message : > Dec 18 11:09:27 sd- postfix/smtp[3501]: connect to > gmail-smtp-in.l.google.com[2a00:1450:400c:c01::1b]:25: No route to host > > It seem's that my 2nd server detects that ipv6 is

Re: SMTP scanning server pool

2014-12-18 Thread Wietse Venema
Daniel Hopkirk: > * XCLIENT passes through LOGIN for SASL username rather > than original SMTP-AUTH credentials. Does postfix take this username > and assume it's authenticated, or does the fact that the original > credentials aren't passed through remove the ability to apply > 'permit_sasl

Re: Adding hostname to addresses

2014-12-18 Thread Robert Fitzpatrick
li...@rhsoft.net wrote: in general: postconf -n missing Yes, of course, forgot to add, this is for one of our two gateways I need to set this up on: root@mx2:~ # postconf -n address_verify_map = btree:$data_directory/verify address_verify_negative_cache = no address_verify_poll_count = 1 al

Re: SMTP scanning server pool

2014-12-18 Thread Bennett Todd
The design sounds familiar. I've a couple of little thoughts, neither specific to your design sketch. Maintaining perfectly consistent distributed configuration without any risk of race conditions is hard; I try to design away from that requirement. So, for instance, I've avoided having serve

Re: Why does SPF fail sometimes?

2014-12-18 Thread Mark Martinec
Peter wrote: On 12/16/2014 05:25 AM, Darren Pilgrim wrote: It's extra fun when they do so to an email with a DKIM signature covering the From: header. MLMs should strip the DKIM header anyways and add their own if appropriate. There is (and must not be) any semantic or practical difference

DMARC and AOL

2014-12-18 Thread James B. Byrne
CentOS-6.6 Postfix-2.11.1 OpenDKIM-2.9.0 We are set up to use SPF, DKIM and DMARC and have been using our present settings since last June. Our DMARC policy is this: 2014/12/17 17:49:12 :Your DMARC record for '_dmarc.harte-lyne.ca' is 'v=DMARC1; p=quarantine; pct=100; ri=86400; rua=mailto:dm

Re: DMARC and AOL

2014-12-18 Thread Wietse Venema
James B. Byrne: > : host mailin-02.mx.aol.com[152.163.0.99] said: 521 5.2.1 : > (DMARC) This message failed DMARC Evaluation and is being refused due to > provided DMARC Policy (in reply to end of DATA command) > ---> > > > Has anyone have any idea what AOL might be complaining about WRT

Re: DMARC and AOL

2014-12-18 Thread Wietse Venema
Wietse Venema: > James B. Byrne: > > : host mailin-02.mx.aol.com[152.163.0.99] said: 521 5.2.1 > > : > > (DMARC) This message failed DMARC Evaluation and is being refused due to > > provided DMARC Policy (in reply to end of DATA command) > > ---> > > > > Has anyone have any idea what AOL

Re: DMARC and AOL

2014-12-18 Thread James B. Byrne
On Thu, December 18, 2014 19:19, Wietse Venema wrote: > Wietse Venema: >> James B. Byrne: >> > : host mailin-02.mx.aol.com[152.163.0.99] said: 521 >> 5.2.1 : >> > (DMARC) This message failed DMARC Evaluation and is being refused due >> to >> > provided DMARC Policy (in reply to end of DATA

Smtp auth from a hash or cdb file

2014-12-18 Thread Ram
Can I use postfix smtpauth with a hash or cdb file sasldb2 file is unfriendly , because that requires command line to add / modify. I want to have this fully automated using a UI Currently the users are authenticating against a remote mysql table , but I want to remove the DB dependency in rea