postfix virtual domain walking

2016-06-13 Thread James B. Byrne
We are currently subjected to a persistent penetration attempt that apparently is directed against our smtp authentication. The user names employed at the present time are all local address portions of a single user's virtual domain which have no means of authentication. So the attack is futile

Re: postfix virtual domain walking

2016-06-13 Thread Wietse Venema
James B. Byrne: > However, the question arises as to how these local delivery addresses > are being harvested? Some of these are used very infrequently and > some of them have not been active for years. It seems remarkable that > addresses that are known to only be used for one purpose, say bugzi

Re: postfix virtual domain walking

2016-06-13 Thread James B. Byrne
On Mon, June 13, 2016 14:25, Wietse Venema wrote: > James B. Byrne: >> However, the question arises as to how these local delivery >> addresses >> are being harvested? Some of these are used very infrequently and >> some of them have not been active for years. It seems remarkable >> that >> addr

Re: postfix virtual domain walking

2016-06-13 Thread Wietse Venema
James B. Byrne: > These delivery names are only found in /etc/postfix/virtual. What about an email "address book" on a user machine? Wietse

Re: postfix virtual domain walking

2016-06-13 Thread James B. Byrne
On Mon, June 13, 2016 16:42, Wietse Venema wrote: > James B. Byrne: >> These delivery names are only found in /etc/postfix/virtual. > > What about an email "address book" on a user machine? > > Wietse > It is certainly a possibility. However, my difficulty with that explanation is that: 1.

simple greylisting by geoip? milter or policy server?

2016-06-13 Thread lists42
I am considering the installation of Greylisting with Postfix. I want it only for one condition, to greylist mail originating from certain countries. I use Postfix 3.1 with postscreen. I am already using milters for dkim and dmarc and a policy server for spf. So looking through the addons and

Re: simple greylisting by geoip? milter or policy server?

2016-06-13 Thread Wietse Venema
list...@tutanota.com: > But then I also read that that 'Policy delegation is now the preferred method > for adding policies to Postfix.' Milter support was added later, because some things can't be done with policy servers. As for greylisting, you could use postscreen's deep protocol tests inst

mysql local_recipient_map

2016-06-13 Thread Paul R. Ganci
I have setup a mysql data baseto provide a list of of local email recipients for a gateway email server. The configuration file looks like this: > cat /etc/postfix/local_recipient_map.cf user = postfix password = Secret hosts = server-1.example.com dbname = postfix query = SELECT destination FR

Re: mysql local_recipient_map

2016-06-13 Thread Paul R. Ganci
I changed the line hosts = server-1.example.com to use an IP address instead hosts = 192.168.1.200 and everything started working. Does anyone know what I am missing in that it seems postfix did resolve the IP address when communicating with the mysql database? On 06/13/2016 07:52 PM, Paul R.