RE: count sending email per month

2015-02-25 Thread Laurent RAYSSIGUIER
Hello >>policyd v2, postfwd, both can do this, just note postfwd does not have >>persistent db, so when posfwd is restarted it will be with resetted qoutas, >>policyd v2 have it db based, but are imho harder to get working >I use postfwd on another smtp server and i've a lot of count problems wi

Re: count sending email per month

2015-02-25 Thread Nicolas HAHN
Hello, The X-Itools ELSE (https://sourceforge.net/p/x-itools/wiki/) can also do it but it's maybe a too big thing for what you want to do. Version 0.9.19 has been released yesterday evening. Best regards Nicolas PGP fingerprint: 5F35 862E 00E1 D774 7FA4 3A71 EBED FA58 58C6 45D2 Le 25/02/2015 10

E-mail Log Search Engine and GreyLSE Postfix Policy Server v0.9.19 released

2015-02-25 Thread Nicolas HAHN
Hello, * *X-Itools E-mail Log Search Engine and Postfix Policy Server version 0.9.19 has just been released as a tar.gz archive. The archive is there: https://sourceforge.net/projects/x-itools/files/X-Itools%20releases/E-mail%20Log%20Search%20Engine/

Signing-milter - are postfix tampering with messages?

2015-02-25 Thread Sebastian Nielsen
I have a problem with signing-milter (http://www.signing-milter.org) that seem to be that postfix “sabotage” the signed mail in its post-processing by doing something with the newlines. the “nob.eml” is signed with the following command: signing-milter -g postfix -m /var/secure_files/cert/signers

Saslfinger download link

2015-02-25 Thread Masegaloeh
Hi, The postfix DEBUG README http://www.postfix.org/DEBUG_README.html provided URL to download saslfinger - a shell script to provide info about SASL configuration - in patrick.koetter website http://postfix.state-of-mind.de/patrick.koetter/saslfinger/. However, when I clicked it, the webpage give

Re: Signing-milter - are postfix tampering with messages?

2015-02-25 Thread Wietse Venema
Sebastian Nielsen: > I have a problem with signing-milter (http://www.signing-milter.org) that > seem to be that postfix ?sabotage? the > signed mail in its post-processing by doing something with the > newlines. You must make your messages well-formed BEFORE signing. That means proper line endin

Re: Signing-milter - are postfix tampering with messages?

2015-02-25 Thread Mauricio Tavares
On Wed, Feb 25, 2015 at 7:20 AM, Wietse Venema wrote: > Sebastian Nielsen: >> I have a problem with signing-milter (http://www.signing-milter.org) that >> seem to be that postfix ?sabotage? the >> signed mail in its post-processing by doing something with the >> newlines. > > You must make your m

Re: Signing-milter - are postfix tampering with messages?

2015-02-25 Thread Wietse Venema
Sebastian Nielsen: > How can this be accomplished at MTA end? Any good "Make message RFC" milter > that canonalizes the message according to RFC 5321, RFC 5322, RFC 2045 or > something? I am not interested in software that converts random garbage into RFC-compliant email. This problem needs to

Re: Signing-milter - are postfix tampering with messages?

2015-02-25 Thread Sebastian Nielsen
Why are you against fixing mail that are not fully RFC-compliant to RFC-compliant mail at MTA level? As you might know, theres lots of MUA's out of there that does not produce completely RFC compliant email. Not even Windows Live Mail, Windows Mail (the builtin Email client of Windows 8/8.1) a

Re: Signing-milter - are postfix tampering with messages?

2015-02-25 Thread Wietse Venema
Sebastian Nielsen: > Why are you against fixing mail that are not fully RFC-compliant to > RFC-compliant mail at MTA level? I encourage you to do exactly that. One challenge I see is that the MTA must understand every application layer that rides on top of email, so that it can fix a higher-laye

Re: work around broken stuff (was: Signing-milter - are postfix tampering with messages?)

2015-02-25 Thread Claus Assmann
On Wed, Feb 25, 2015, Sebastian Nielsen wrote: > Why are you against fixing mail that are not fully RFC-compliant to > RFC-compliant mail at MTA level? Because it - let's lazy programmers/users off the hook. - adds code (complexity, failures, maintenance). - introduces incompatibilities. - hides e

Re: Rate limiting

2015-02-25 Thread System Support
On 25 Feb 2015 at 0:52, Viktor Dukhovni wrote: > On Tue, Feb 24, 2015 at 07:44:53PM -0500, System Support wrote: > > > --main.cf non-default parameters-- > > mydestination = $config_directory/local_destinations.dat > > mydomain = > > myhostname = maila. > > relayhost = > > Is the traffic in

Re: Rate limiting

2015-02-25 Thread Wietse Venema
System Support: > > > On 25 Feb 2015 at 0:52, Viktor Dukhovni wrote: > > > On Tue, Feb 24, 2015 at 07:44:53PM -0500, System Support wrote: > > > > > --main.cf non-default parameters-- > > > mydestination = $config_directory/local_destinations.dat > > > mydomain = > > > myhostname = maila. > >

Re: Postfix nolisting setup

2015-02-25 Thread Bill Cole
On 20 Feb 2015, at 18:05, Isaac Grover wrote: Good afternoon all, I am considering setting up a nolisting postfix server on a spare static IP so as to study the effects of nolisting for some heavy domains we host (3k total msgs/day, 200 legit). In what sense are those "heavy?" The spam/ham

Re: Rate limiting

2015-02-25 Thread System Support
On 25 Feb 2015 at 11:33, Wietse Venema wrote: > Unless you have set relay_domains, such mail will be delivered with > the "relay" transport, meaning you would need to set > relay_destination_rate_delay. I set relay_destination_rate_delay = 10s and then ran a test with an address list that had

Re: Saslfinger download link

2015-02-25 Thread jekvb
Yo, I found that saslfinger is build right into Ubuntu Otherwise you may download the rpm at filewatcher.com for rpms Masegaloeh schreef op 2/25/2015 om 11:46 AM: Hi, The postfix DEBUG README http://www.postfix.org/DEBUG_README.html provided URL to download saslfinger - a shell script to pr

SASL On Postfix/Dovecot running on Freebsd 8.1

2015-02-25 Thread jason hirsh
I was getting some relay issues when my local IP changed so I realized or thought that perhaps my SASL wasn’t working I did a bunch of tweaking which is never good but when i switched my mail to port 587 i was able to once again send with no problem BUT when i did the telnet test froth postfi

Re: Rate limiting

2015-02-25 Thread Viktor Dukhovni
On Wed, Feb 25, 2015 at 12:50:29PM -0500, System Support wrote: > and then ran a test with an address list that had 3 addresses 1 local and 2 > at gmail. I believe that > there should be a 10 second delay between the 2 gmail deliveries, but they > were delivered > together. Here is the log

Re: Rate limiting

2015-02-25 Thread System Support
On 25 Feb 2015 at 18:22, Viktor Dukhovni wrote: > On Wed, Feb 25, 2015 at 12:50:29PM -0500, System Support wrote: > > > and then ran a test with an address list that had 3 addresses 1 local and 2 > > at gmail. I believe that > > there should be a 10 second delay between the 2 gmail deliveri

Re: Rate limiting

2015-02-25 Thread Viktor Dukhovni
On Wed, Feb 25, 2015 at 02:46:29PM -0500, System Support wrote: > > No, there should be no such delay because this is a single delivery > > of a single message with two recipients. > > > > Note the identical smtp[7114] pids, with identical queue-id, delays > > down to .01s and the same remote ser

Re: Rate limiting

2015-02-25 Thread Wietse Venema
System Support: Content-Description: Mail message body > > Note the identical smtp[7114] pids, with identical queue-id, delays > > down to .01s and the same remote server queue id. > > > > You're not reading your logs correctly. Note also that your previous > > 50/s is likely due to the default r

Re: Rate limiting

2015-02-25 Thread Viktor Dukhovni
On Wed, Feb 25, 2015 at 02:58:21PM -0500, Wietse Venema wrote: > > OK. Is there any way to rate limit the traffic to the relay for > > this use case? I tried reducing the default_destination_recipient_limit > > to 1 along with the relay and smtp versions. > > If you set this to 1, you rate-limit

Re: 2.11.4: Error in post-install

2015-02-25 Thread Viktor Dukhovni
On Wed, Feb 25, 2015 at 12:13:46PM -0800, Rich Shepard wrote: > Yes, the problem can be reproduced. There seems to be a directory called > /etc/postfix files./, but I cannot access it. Tried a backslash and putting > double quotes around the string, but it's not seen. It obviously is the > cause o

Re: 2.11.4: Error in post-install

2015-02-25 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Feb 25, 2015 at 12:13:46PM -0800, Rich Shepard wrote: > > > Yes, the problem can be reproduced. There seems to be a directory called > > /etc/postfix files./, but I cannot access it. Tried a backslash and putting > > double quotes around the string, but it's not seen. It

Re: 2.11.4: Error in post-install

2015-02-25 Thread Rich Shepard
On Wed, 25 Feb 2015, Viktor Dukhovni wrote: The directory does not exist, but it looks like that's what you have set as "sample_directory", either in the existing main.cf files or in the build configuration. Viktor, Yes, there was a samples/ directory in /etc/postfix; I've no idea how long

Re: 2.11.4: Error in post-install

2015-02-25 Thread Rich Shepard
On Wed, 25 Feb 2015, Wietse Venema wrote: I have added a test to the post-install script so that it terminates with an error message when a Postfix pathname contains whitespace. To override a broken pathname in your case one would use: # make upgrade some_directory=/path/without/space ... In t

Re: 2.11.4: Error in post-install

2015-02-25 Thread Viktor Dukhovni
On Wed, Feb 25, 2015 at 12:42:37PM -0800, Rich Shepard wrote: > >The directory does not exist, but it looks like that's what you have > >set as "sample_directory", either in the existing main.cf files or > >in the build configuration. > > Yes, there was a samples/ directory in /etc/postfix; I've n

SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
We're looking to implement SRS support along the lines of . The primary issue I see when looking at this is we already have sender_canonical_maps set to do an ldap lookup for supporting alias domains: zimbra@zre-ldap002:~$ postconf sender_can

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Viktor Dukhovni
On Wed, Feb 25, 2015 at 12:59:59PM -0800, Quanah Gibson-Mount wrote: > We're looking to implement SRS support along the lines of > . SRS is for rewriting envelope senders *external* to your domain, when their email reaches a mailbox that forwards

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Wietse Venema
Quanah Gibson-Mount: > We're looking to implement SRS support along the lines of > . The primary issue I > see when looking at this is we already have sender_canonical_maps set to do > an ldap lookup for supporting alias domains: ... > So I'm n

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Benny Pedersen
On February 25, 2015 10:00:50 PM Quanah Gibson-Mount wrote: So I'm not sure how to get this lookup to succeed AND have it then go through SRS. Is something like: sender_canonical_maps = proxy:ldap:/opt/zimbra/conf/ldap-scm.cf, lmdb:/etc/postfix/pfix-no-srs.cf, tcp:127.0.0.1:10001 Workable?

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Feb 25, 2015 at 12:59:59PM -0800, Quanah Gibson-Mount wrote: > > > We're looking to implement SRS support along the lines of > > . > > SRS is for rewriting envelope senders *external* to your domain, > when their email

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
--On Wednesday, February 25, 2015 4:17 PM -0500 Wietse Venema wrote: Quanah Gibson-Mount: We're looking to implement SRS support along the lines of . The primary issue I see when looking at this is we already have sender_canonical_maps set

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
--On Wednesday, February 25, 2015 9:17 PM + Viktor Dukhovni wrote: --- Editorial --- Firstly, I've always strongly discouraged "sender_canonical_maps". Use canonical_maps instead. In the headers of an email message the canonical form of an address must not depend on which header it is fo

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Wietse Venema
Quanah Gibson-Mount: > The general issue is when someone sets up forwarding within Zimbra: > > Imagine al...@example.com e-mails b...@zimbra.com, but bob has set up e-mail > forwarding to char...@bbc.com > > al...@example.com -> b...@zimbra.com -> char...@bbc.com The sender is al...@example.com

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
--On Wednesday, February 25, 2015 5:16 PM -0500 Wietse Venema wrote: Without someth...@zimbra.com, that email could not have entered your zimbra.com server. So what is the deal here, why can alice send mail to bbc.com through your server? b...@zimbra.com has a forwarding address of char...@b

Re: Rate limiting

2015-02-25 Thread System Support
On 25 Feb 2015 at 19:56, Viktor Dukhovni wrote: > On Wed, Feb 25, 2015 at 02:46:29PM -0500, System Support wrote: > > > > No, there should be no such delay because this is a single delivery > > > of a single message with two recipients. > > > > > > Note the identical smtp[7114] pids, with iden

Question regarding null senders and smtpd restrictions

2015-02-25 Thread Research
Hello, I have recently begun deploying Postfix on a web server. Postfix is configured to handle the e-mail for the web server domain (i.e.: receives e-mail for example.com), and then has virtual tables configured to route that mail to Gmail accounts. I have mappings for all RFC required e-mail

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Wietse Venema
Quanah Gibson-Mount: > Imagine al...@example.com e-mails b...@zimbra.com, but bob has set up e-mail > forwarding to char...@bbc.com > > al...@example.com -> b...@zimbra.com -> char...@bbc.com Standard scenario. > But then... the e-mail is forwarded outside, to mx.bbc.com. > Because the envelop

Re: Question regarding null senders and smtpd restrictions

2015-02-25 Thread Noel Jones
On 2/25/2015 4:53 PM, Research wrote: > Hello, > > I have recently begun deploying Postfix on a web server. > > Postfix is configured to handle the e-mail for the web server domain (i.e.: > receives e-mail for example.com), and then has virtual tables configured to > route that mail to Gmail ac

Re: Question regarding null senders and smtpd restrictions

2015-02-25 Thread Research
On Feb 25, 2015, at 5:56 PM, Noel Jones wrote: > On 2/25/2015 4:53 PM, Research wrote: >> Hello, >> >> I have recently begun deploying Postfix on a web server. >> >> Postfix is configured to handle the e-mail for the web server domain (i.e.: >> receives e-mail for example.com), and then has vi

Re: Rate limiting

2015-02-25 Thread Wietse Venema
System Support: > The reason for working on this is because the relay host is complaining about > excessive traffic > (>5msg/s) and freezing the connection after the first 50 deliveries, so > apparently they do not Use "whatever_rate_delay = 1" and do NOT set the whatever_destination_recipient

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
--On Wednesday, February 25, 2015 5:55 PM -0500 Wietse Venema wrote: Quanah Gibson-Mount: Imagine al...@example.com e-mails b...@zimbra.com, but bob has set up e-mail forwarding to char...@bbc.com al...@example.com -> b...@zimbra.com -> char...@bbc.com Standard scenario. But then... the

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Viktor Dukhovni
On Wed, Feb 25, 2015 at 02:03:52PM -0800, Quanah Gibson-Mount wrote: > --On Wednesday, February 25, 2015 9:17 PM + Viktor Dukhovni > wrote: > > > >--- Editorial --- > >Firstly, I've always strongly discouraged "sender_canonical_maps". > >Use canonical_maps instead. In the headers of an ema

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Viktor Dukhovni
On Wed, Feb 25, 2015 at 03:58:59PM -0800, Quanah Gibson-Mount wrote: > It sounds like my original thought should work, due to recurrsion, so I'll > give that a go. Thanks! Generally not, because sender rewriting for internal users is likely intended to rewrite headers, while SRS *must not* rewri

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Wietse Venema
Quanah Gibson-Mount: > --On Wednesday, February 25, 2015 5:55 PM -0500 Wietse Venema > wrote: > > > Quanah Gibson-Mount: > >> Imagine al...@example.com e-mails b...@zimbra.com, but bob has set up > >> e-mail forwarding to char...@bbc.com > >> > >> al...@example.com -> b...@zimbra.com -> char...

Forward local account mail to virtual user

2015-02-25 Thread Xylia Cipriano
Hello list, I have setup Postfix with virtual users and MySQL. I have a few domains and they all work great. I also added and alias "r...@example.com" and sending a mail to the local root account results in a message in the forwarding inbox (perfect). However, when sending mail to the local

Re: Forward local account mail to virtual user

2015-02-25 Thread Wietse Venema
Xylia Cipriano: > Hello list, > > I have setup Postfix with virtual users and MySQL. I have a few domains > and they all work great. I also added and alias "r...@example.com" and > sending a mail to the local root account results in a message in the > forwarding inbox (perfect). > > However, w

Re: Forward local account mail to virtual user

2015-02-25 Thread Viktor Dukhovni
On Thu, Feb 26, 2015 at 02:08:53AM +0100, Xylia Cipriano wrote: > I have setup Postfix with virtual users and MySQL. I have a few domains and > they all work great. I also added an alias "r...@example.com" and sending a > mail to the local root account results in a message in the forwarding inbox

Re: Forward local account mail to virtual user

2015-02-25 Thread Xylia Cipriano
On 02/26/2015 02:23 AM, Viktor Dukhovni wrote: Put an explicit domain on the RHS of the alias, making sure that the domain in question is a virtual alias domain, or in any case not listed in mydestination. aliases: postmaster: root@virtual.invalid virtual: root@vir

Re: Forward local account mail to virtual user

2015-02-25 Thread Xylia Cipriano
On 02/26/2015 02:16 AM, Wietse Venema wrote: What happens is: postmaster@{any domain in $mydestination} is aliased to root@$myorigin Thanks, this explains the current behavior! I didn't notice this because $myorigin is set to /etc/mailname (which, however, contains the domain, as you suspect

Re: Forward local account mail to virtual user

2015-02-25 Thread Viktor Dukhovni
On Thu, Feb 26, 2015 at 02:46:47AM +0100, Xylia Cipriano wrote: > >In particular, I > >try to make sure that $myorigin is not one of the "local" domains. > > One final question though: Is it possible (at all) to change only one alias > and get the all? Because the /etc/aliases file is mostly main