Virtual users and local users in the same domain?

2019-06-11 Thread @lbutlr
Given that I have two users, lo...@example.com and s...@example.com who are currently both local users and given that mydomain=example.com, is it possible to configure postfix such that one of them is in the mysql database and one is still local? It appears that once I add a domain to the mysql

Re: Virtual users and local users in the same domain?

2019-06-11 Thread Wietse Venema
@lbutlr: > Given that I have two users, lo...@example.com and s...@example.com who = > are currently both local users and given that mydomain=3Dexample.com, is = > it possible to configure postfix such that one of them is in the mysql = > database and one is still local? It appears that once I add

Re: postfix aliases not functioning with dovecot LDA; want to forward to command

2019-06-11 Thread Philippe Chaintreuil
On 6/10/2019 10:19 AM, Noel Jones wrote: > This is expected. /etc/aliases support is provided by the > postfix/local delivery agent, which you are no longer using. > > Implement your external commands in sieve. Thanks. That's kind of what I suspected, but I had run into several p

Re: postfix aliases not functioning with dovecot LDA; want to forward to command

2019-06-11 Thread Wietse Venema
Philippe Chaintreuil: > On 6/10/2019 10:19 AM, Noel Jones wrote: > > This is expected. /etc/aliases support is provided by the > > postfix/local delivery agent, which you are no longer using. > > > > Implement your external commands in sieve. > > Thanks. > > That's kind of what I sus

Postfix audit

2019-06-11 Thread Rafael Azevedo
Hi guys, We're in an audit process here and this is giving us a headech. Is there anyway to log the MTA to MTA transactions one per file? For example, client requests to send a message, the MTA says OK, sends the message and keep a log of the MTA to MTA transaction. Thanks in advance. BR, Raf

Re: Postfix audit

2019-06-11 Thread @lbutlr
On Jun 11, 2019, at 7:55 AM, Rafael Azevedo wrote: > Is there anyway to log the MTA to MTA transactions one per file? You can use rsyslog to log based on the queueid? But queueid could not be a single line. With rsyslog the trick is to find something unique in the log lines you want. Maybe 're

Re: Postfix audit

2019-06-11 Thread @lbutlr
On Jun 11, 2019, at 8:30 AM, @lbutlr wrote: > Maybe 'relay=.*\]:25’? Looking at my logs it looks like '\]:25:’ is enough. -- ...but the senator, while insisting he was not intoxicated, could not explain his nudity.

Re: Postfix audit

2019-06-11 Thread Rafael Azevedo
I need the full SMTP transaction, commands such as EHLO, MAIL FROM:, RCPT TO:, and DATA... Em ter, 11 de jun de 2019 às 11:50, @lbutlr escreveu: > > On Jun 11, 2019, at 8:30 AM, @lbutlr wrote: > > Maybe 'relay=.*\]:25’? > > Looking at my logs it looks like > > '\]:25:’ is enough. > > -- > ...but

Re: Postfix audit

2019-06-11 Thread Wietse Venema
Rafael Azevedo: > I need the full SMTP transaction, commands such as EHLO, MAIL FROM:, > RCPT TO:, and DATA... Postfix can log SMTP commands and responses, but not the message content because that would consume huge amounts of resources. If you need the entire SMTP session, your options are - A

Re: Virtual users and local users in the same domain?

2019-06-11 Thread Viktor Dukhovni
> On Jun 11, 2019, at 7:12 AM, Wietse Venema wrote: > > /etc/postfix/main.cf: >transport_maps = hash:/etc/postfix/transport ># Add virtual users table for address validation. >local_recipient_maps = proxy:unix:passwd.byname $alias_maps > mysql:virtual_domains_maps.cf >my

Re: Postfix audit

2019-06-11 Thread Rafael Azevedo
Hi Wietse, Could you please give me more details about option 2 (SMTP-level splitter) ? Thanks in advance. BR, Em ter, 11 de jun de 2019 às 12:37, Wietse Venema escreveu: > > Rafael Azevedo: > > I need the full SMTP transaction, commands such as EHLO, MAIL FROM:, > > RCPT TO:, and DATA... > >

Re: Postfix audit

2019-06-11 Thread Wietse Venema
Wietse: > If you need the entire SMTP session, your options are > > - A network-level sniffer (tcpdump -s 0 -w /file/name ...). > > - An SMTP-level splitter (configured using Postfix's smtpd_proxy_filter) > that sends one copy of the SMTP stream to an archival server, and > one copy to Postfix itse

Re: Postfix audit

2019-06-11 Thread Viktor Dukhovni
> On Jun 11, 2019, at 1:31 PM, Wietse Venema wrote: > > This is work that Viktor Dukhovni (also on this mailing list) did > some 10+ years ago. > > The basic idea is a small "y" splitter that is configured as a > content filter (using smtpd_proxy_filter or content_filter). This > receives SMTP c