Re: Postfix with Postscreen and Fail2ban

2015-01-15 Thread Robert Schetterer
Am 15.01.2015 um 03:16 schrieb David Mehler: > Hello, > > Is anyone running Postfix 2.11 on an f21 machine? I'm using it and am > using postscreen which I really like. The system firewall is FirewallD > and I'm using fail2ban 0.9.1 to block brute force bot hits on the > machine. I've got the jail

pdf-corrupted

2015-01-15 Thread Mohammed Ejaz
Hello, All, We have some problem with one of the sender whose using Exchange 2010 with TLS option Enabled, whenever he is sending an email with pdf attachments it keeps get corrupted. up on checking postfix logs it says delivered without any problem. but our Mail application (Communigate) co

How to read anvil statistics

2015-01-15 Thread robin.wakefield
Hi, Can any explain how to read the connection information that is stored by the anvil service. I would like to analyse the information so that I can raise alerts and/or send the messages from internal clients to the HOLD queue for subsequent deletion/release. Thank you, Robin

Re: PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-15 Thread Wietse Venema
Viktor Dukhovni: > And of course with "may", we need to avoid any attempt at cleartext > fallback if we're doing wrapper-mode SMTP. Again, the client-side wrappermode implementation never speaks plaintext. It calls smtp_tls_start() upon completion of the TCP connection. Wietse

Re: PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-15 Thread Wietse Venema
Viktor Dukhovni: > As for wrapper mode, I think it should insist on the destinations > security level being neither disabled nor opportunitic as in the > revised posttls-finger. Something along the lines of: > > + if (state->wrapper_mode > + && (state->level <= TLS_LEV_NONE > +

Re: PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-15 Thread Nick Howitt
Thanks for all this attention to my problem. I would like to give a little history as to perhaps why port 465 authentication is required. VirginMedia (and NTLWorld, therefore) appear to sub out their e-mail handling to GMail. All the webmail appears the same but is branded VM. A few years ag

Re: Postfix with Postscreen and Fail2ban

2015-01-15 Thread Alan Munday
On 15/01/15 02:16, David Mehler wrote: Hello, Is anyone running Postfix 2.11 on an f21 machine? I'm using it and am using postscreen which I really like. The system firewall is FirewallD and I'm using fail2ban 0.9.1 to block brute force bot hits on the machine. I've got the jail Fail2ban for Pos

Building a spam honeypot, or need to exclude domains/users from RBLs

2015-01-15 Thread Alex Regan
Hi, I'm using postfix-2.10.5 on fedora20 with amavisd-new and spamassassin, as well as greylisting, and would like to create a spam honeypot. The problem is that postfix is configured on my system with zen, postscreen, and other methods to block spam based on IP. Is there any way to disable t

Re: Building a spam honeypot, or need to exclude domains/users from RBLs

2015-01-15 Thread li...@rhsoft.net
Am 15.01.2015 um 17:27 schrieb Alex Regan: I'm using postfix-2.10.5 on fedora20 with amavisd-new and spamassassin, as well as greylisting, and would like to create a spam honeypot. The problem is that postfix is configured on my system with zen, postscreen, and other methods to block spam based

Re: How to read anvil statistics

2015-01-15 Thread Wietse Venema
robin.wakefi...@ubs.com: > Hi, > > Can any explain how to read the connection information that is > stored by the anvil service. I would like to analyse the information > so that I can raise alerts and/or send the messages from internal > clients to the HOLD queue for subsequent deletion/release.

Re: Building a spam honeypot, or need to exclude domains/users from RBLs

2015-01-15 Thread Wietse Venema
Alex Regan: > Hi, > I'm using postfix-2.10.5 on fedora20 with amavisd-new and spamassassin, > as well as greylisting, and would like to create a spam honeypot. > > The problem is that postfix is configured on my system with zen, > postscreen, and other methods to block spam based on IP. Is there

Re: pdf-corrupted

2015-01-15 Thread Wietse Venema
Mohammed Ejaz: > Mailscanner,clamav,spamassin with postfix mail servers Postfix does not modify email, but mailscanner does. Wietse

Re: pdf-corrupted

2015-01-15 Thread Viktor Dukhovni
On Thu, Jan 15, 2015 at 01:00:48PM +0300, Mohammed Ejaz wrote: > We have some problem with one of the sender whose using Exchange 2010 with > TLS option Enabled, whenever he is sending an email with pdf attachments it > keeps get corrupted. up on checking postfix logs it says delivered without

Install oddities.

2015-01-15 Thread postfix
I am attempting to install postfix-2.11.3 on a Solaris 10 x86 machine. I want to use dovecot and postfix exclusively and not use the standard Solaris sendmail programs and such. I want to place all my postfix files in the following directory: /usr/local/tools/postfix Never mind the issue o

Re: Install oddities.

2015-01-15 Thread Viktor Dukhovni
On Thu, Jan 15, 2015 at 11:59:29AM -0700, post...@outputservices.com wrote: > gmake tidy > > /usr/sfw/bin/gmake makefiles CC=/usr/sfw/bin/gcc \ > CCARGS="-DEF_CONFIG_DIR=\"/usr/local/tools/postfix/etc\" \ > -DEF_COMMAND_DIR=\"/usr/local/tools/postfix/bin\" \ > -DEF_DAEMON_DIR=\"/usr/local/tools/p

address_verify_map and lmdb database

2015-01-15 Thread Quanah Gibson-Mount
Hi, I see on , it recommends using a btree database for the address verify map. For example: # Default setting for Postfix 2.7 and later. # Note 1: Be sure to read the "Caching" section below! # Note 2: Avoid hash files here.

RE: Behavior when mailbox limit is reached

2015-01-15 Thread Mullis, Josh (CCI-Atlanta)
Thanks for the fast reply Wietse... If we switch to maildir mode, there is still no option to have postfix cleanup old messages, correct? -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Wietse Venema Sent: Wednesday, Januar

Re: Behavior when mailbox limit is reached

2015-01-15 Thread Wietse Venema
Mullis, Josh (CCI-Atlanta): > Thanks for the fast reply Wietse... > If we switch to maildir mode, there is still no option to have > postfix cleanup old messages, correct? Managing mailboxes is outside the scope of Postfix. Wietse > > > -Original Message- > From: owner-postfix-u

Re: address_verify_map and lmdb database

2015-01-15 Thread Wietse Venema
Quanah Gibson-Mount: > Hi, > > I see on , it > recommends using a btree database for the address verify map. For example: > > > # Default setting for Postfix 2.7 and later. > # Note 1: Be sure to read the "Caching" section below!

Re: address_verify_map and lmdb database

2015-01-15 Thread Quanah Gibson-Mount
--On Thursday, January 15, 2015 4:43 PM -0500 Wietse Venema wrote: Quanah Gibson-Mount: Hi, I see on , it recommends using a btree database for the address verify map. For example: # Default setting for Postfix 2.7 and later.

Re: Install oddities.

2015-01-15 Thread postfix
On 01/15/15 12:30, Viktor Dukhovni wrote: > On Thu, Jan 15, 2015 at 11:59:29AM -0700, post...@outputservices.com wrote: > >> gmake tidy >> >> /usr/sfw/bin/gmake makefiles CC=/usr/sfw/bin/gcc \ >> CCARGS="-DEF_CONFIG_DIR=\"/usr/local/tools/postfix/etc\" \ >> -DEF_COMMAND_DIR=\"/usr/local/tools/post

Re: Install oddities.

2015-01-15 Thread Viktor Dukhovni
On Thu, Jan 15, 2015 at 03:07:56PM -0700, post...@outputservices.com wrote: > >> gmake tidy > >> > >> /usr/sfw/bin/gmake makefiles CC=/usr/sfw/bin/gcc \ > >> CCARGS="-DEF_CONFIG_DIR=\"/usr/local/tools/postfix/etc\" \ > >> -DEF_COMMAND_DIR=\"/usr/local/tools/postfix/bin\" \ > >> -DEF_DAEMON_DIR=\"/

Re: Behavior when mailbox limit is reached

2015-01-15 Thread Stephen Satchell
On 01/15/2015 12:43 PM, Mullis, Josh (CCI-Atlanta) wrote: > Thanks for the fast reply Wietse... If we switch to maildir mode, > there is still no option to have postfix cleanup old messages, > correct? As Wietse currectly points out, the mail exchanger is not the place where mail needs to be manag

Re: Install oddities.

2015-01-15 Thread Wietse Venema
Viktor Dukhovni: > > > Read carefully: > > > > > > $ make makefiles CCARGS='-DDEF_CONFIG_DIR=\"/some/where\"' > > > $ make > > > > That worked a little. Thanks. I missed the single quote double quote thing. > > And the "-D" in front of each "DEF_MUMBLE" override. The upcoming Postfix sta

Re: postscreen stopped working today for a few hours

2015-01-15 Thread Viktor Dukhovni
On Thu, Jan 15, 2015 at 09:57:53PM -0500, b...@bitrate.net wrote: > i happened to notice that on one of our two mxes, no postscreen activity was > logged between 06:25:09 and 11:54:42: > > Jan 15 06:25:09 mta2 postfix/postscreen[22371]: DISCONNECT > [103.242.116.92]:37543 > Jan 15 11:54:42 mta2

Re: Postfix with Postscreen and Fail2ban

2015-01-15 Thread Markus Benning
On Wed, Jan 14, 2015 at 09:16:37PM -0500, David Mehler wrote: > If anyone has this working I'd appreciate knowing how you did it. I'm blocking bad IPs with an policyd based on a scoring. I have several RBLs configured. If multiple RBLs match i do a reject and block the IP with fail2ban. The mtpol