Re: a little bit of help with aliases

2010-01-14 Thread Ansgar Wiechers
post the output of "postconf -n" and "grep ^root /etc/aliases". Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Can't send from script and don't understand NOQUEUE error

2010-01-14 Thread Ansgar Wiechers
or before-queue filter) during the SMTP dialog. Check your master.cf and main.cf what process that is supposed to be. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Successful Delivery Notification

2010-01-18 Thread Ansgar Wiechers
ent from the remote site, and then > notifies a local process of the result? No. SMTP doesn't work that way, because the next hop isn't necessarily the final destination of the mail. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Rejecting an address with our MX

2010-01-18 Thread Ansgar Wiechers
postfix.org/postconf.5.html#relay_recipient_maps If your MX is configured to forward all mail for your domain(s) to the mailhub, and it's left to the mailhub to check if a particular address is valid, you'll be generating backscatter. Don't do that. Regards Ansgar Wiechers -- "

Re: suppress NDRs from spoofed sender

2010-01-19 Thread Ansgar Wiechers
ction of valid bounces that don't include the above mentioned headers. However, I consider those bounces useless anyway. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Error: timeout exceeded (in reply to end of DATA command)

2010-01-20 Thread Ansgar Wiechers
y (leaving little bandwidth per connection), proxy filter or policy service taking too long for checking the mail, etc. However, since the timeout occurs on the remote side, you should contact the administrator of that server about the issue. Regards Ansgar Wiechers -- "Abstractions save us tim

Re: Avoid Relaying

2010-01-20 Thread Ansgar Wiechers
t: please elaborate some more. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Avoid Relaying

2010-01-20 Thread Ansgar Wiechers
gly recommend to *not* go this route but instead reconsider using authentication. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: address_verify_sender setup

2010-01-21 Thread Ansgar Wiechers
u're trying to do something like callback verification [1]. [1] http://en.wikipedia.org/wiki/Callback_verification Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: address_verify_sender setup

2010-01-21 Thread Ansgar Wiechers
On 2010-01-21 Ralf Hildebrandt wrote: > * Ansgar Wiechers : >> Sounds to me like you're trying to do something like callback >> verification [1]. > > Yes he is. We're talking about details of that here. I meant to refer him to the "Limitations" section

Re: Best Suggestion For Blacklisting Senders

2010-01-23 Thread Ansgar Wiechers
User-Client -> MTA -> MTA -> MTA -> MTA -> Recipient mailbox A B C D In every connection (->) the sending hop is the client, and the receiving hop is the server. Of course a user's mail client (or rather Mail User Agent, MUA) is also a clie

Re: Maildir problem2

2010-01-24 Thread Ansgar Wiechers
ld be off-topic on this list. Please post the output of "postconf -n". I doubt that anyone will read through your heavily commented main.cf to find out what your actual configuration is. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Mail in Inbox

2010-02-10 Thread Ansgar Wiechers
...@mail.gmail.com> > References: <8153f3881001311541i5ec8b3a7pa24cc99ec499d...@mail.gmail.com> ><8153f3881001311542j4835d189g443c4976985e2...@mail.gmail.com> ><8153f3881002080445y11a9e370j74f65c4914c70...@mail.gmail.com> ><8153f388100210014

Re: how to allow postfix to relay a single u...@domain.com

2010-02-10 Thread Ansgar Wiechers
s? That would make your server an open relay to anyone spoofing your address as the MAIL FROM address. Don't do that. Ever. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: how to allow postfix to relay a single u...@domain.com

2010-02-10 Thread Ansgar Wiechers
hentication (and encrypted connections) anyway, if you want to relay through your MTA from anywhere in the world. See Postfix' TLS README: http://www.postfix.org/TLS_README.html Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Mail in Inbox

2010-02-10 Thread Ansgar Wiechers
On 2010-02-11 Dhiraj Chatpar wrote: > On Thu, Feb 11, 2010 at 12:02, Ansgar Wiechers wrote: >> As for how it got there: In-Reply-To and References headers suggest >> that the mail was sent from one GMail account to another. Which would >> also explain why there are only

Re: Mail in Inbox

2010-02-11 Thread Ansgar Wiechers
On 2010-02-11 Dhiraj Chatpar wrote: > On Thu, Feb 11, 2010 at 12:31, Ansgar Wiechers wrote: >> On 2010-02-11 Dhiraj Chatpar wrote: >>> On Thu, Feb 11, 2010 at 12:02, Ansgar Wiechers wrote: >>>> As for how it got there: In-Reply-To and References headers suggest >&g

Re: Postfix relays to all recepients

2010-02-11 Thread Ansgar Wiechers
That's because your relayhost isp.provider.org does not accept the mail for delivery: > Feb 11 09:57:05 local postfix/smtp[9203]: 7C81B11464: to=, > relay=isp.provider.org[xxx.xxx.xxx.xxx]:25, delay=0.43, > delays=0.05/0.02/0.29/0.06, dsn=5.0.0, status=bounced (host > isp.prov

Re: suppress NDRs from spoofed sender

2010-02-15 Thread Ansgar Wiechers
On 2010-02-14 David Koski wrote: > On Tuesday 19 January 2010, Ansgar Wiechers wrote: >> On 2010-01-18 David Koski wrote: >>> My mail server has been getting a fair amount of spam hits that have >>> been rejected but the sender address is spoofed with the recipient

Re: Postfix - Timeout While Sending End of Data (slightly OT)

2010-02-16 Thread Ansgar Wiechers
them either, and I don't think the quality of their solutions is too hot in the first place). However, that doesn't change anything about the fact that there are ways to view Experts Exchange pages without having to log in. Can we now drop this boring and entirely off-topic subject? Th

Re: Postfix - Timeout While Sending End of Data (slightly OT)

2010-02-16 Thread Ansgar Wiechers
On 2010-02-16 LuKreme wrote: > On 16-Feb-2010, at 12:11, Ansgar Wiechers wrote: >> On 2010-02-16 LuKreme wrote: >>> On 15-Feb-2010, at 03:23, Barney Desmond wrote: >>>> Experts Exchange is viewable (at least) from google searches. >>> >>> No it isn

Re: suppress NDRs from spoofed sender

2010-02-20 Thread Ansgar Wiechers
On 2010-02-19 David Koski wrote: > On Monday 15 February 2010, Ansgar Wiechers wrote: >> On 2010-02-14 David Koski wrote: >>> How about something more simple: test for From: is the same as To: >>> and is from MAILER-DAEMON: >>> >>> grep "^From

Re: Add extra headers when forwarding

2010-02-22 Thread Ansgar Wiechers
On 2010-02-23 Shameem Ahamed wrote: > Can i add this in main.cf? No. > I want to add the extra details only for the forward maps. > > Can you give me some more info on ow to add this ?. man procmail man procmailrc man procmailex Regards Ansgar Wiechers -- "Abstractions sav

Re: Saving to Sent folder

2010-03-03 Thread Ansgar Wiechers
large attachments via e-mail. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Saving to Sent folder

2010-03-03 Thread Ansgar Wiechers
On 2010-03-03 Stan Hoeppner wrote: > Ansgar Wiechers put forth on 3/3/2010 6:37 AM: >> On 2010-03-03 Jonathan Tripathy wrote: >>> I'm not sure if there is a solution to this, but maybe one of you >>> folks will know a "workaround". >>> >>&g

Re: postfix as "dispatcher"

2010-03-03 Thread Ansgar Wiechers
his behaviour in postfix? Round-Robin-DNS might help. What actual problem are you trying to solve? Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Anatomy of this simple spam.

2010-03-03 Thread Ansgar Wiechers
e be more precise/verbose about what you were actually trying. For instance: it's not clear to me if you're talking about the From: header or the envelope-from above. Also, did you follow the procedures described in the DEBUG_README? http://www.postfix.org/DEBUG_README.html Regards Ansgar

Re: Saving to Sent folder

2010-03-03 Thread Ansgar Wiechers
On 2010-03-03 Charles Marcus wrote: > On 2010-03-03 7:37 AM, Ansgar Wiechers wrote: >>> After thunderbird has sent the email, it then has to save the email ^^ >>> to the sent items folders. This can take a

Re: order in cidr_table

2010-03-03 Thread Ansgar Wiechers
ress from 192.168.0.0/16 (blacklist). If you'd put the more general rules first, they'd match first, and your more specific rules would never be evaluated. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Saving to Sent folder

2010-03-04 Thread Ansgar Wiechers
On 2010-03-03 Stan Hoeppner wrote: > Ansgar Wiechers put forth on 3/3/2010 9:01 AM: >> I was under the impression that his Postfix and Dovecot are running >> on the same (remote) host, and he's using Postfix as a smarthost for >> his outbound mail. If that's the c

Re: Saving to Sent folder

2010-03-04 Thread Ansgar Wiechers
On 2010-03-04 Ansgar Wiechers wrote: > On 2010-03-03 Stan Hoeppner wrote: >> I suppose it might be possible to hack together a solution in the MTA >> or IMAP server, manually dropping copies of sent messages in the >> user's IMAP Sent Items folder. That would be one

Re: Saving to Sent folder

2010-03-04 Thread Ansgar Wiechers
On 2010-03-04 Charles Marcus wrote: > On 2010-03-03 4:49 PM, Ansgar Wiechers wrote: >> Read again. The "sent items" folder is in the user's mailbox, which >> Thunderbird most certainly does *not* access via SMTP, but via IMAP. > > My point was, if you want th

Re: postfix as "dispatcher"

2010-03-08 Thread Ansgar Wiechers
my mail..I imagine a > keyword similar to "relay" that allow to specify a list of mail server > addresses and not only one Use DNS. Seriously. And please keep your mails on-list, so others can benefit from the discussion as well. Regards Ansgar Wiechers -- "Abstractions save us

Re: Problem with Postfix/Cyrus-imap setup

2010-03-10 Thread Ansgar Wiechers
think you're supposed to use $virtual_mailbox_maps rather than $virtual_alias_maps for virtual mailboxes. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Sender and recipient dependant header checks

2010-03-11 Thread Ansgar Wiechers
ve the "spam box" act as the MX for your domains? That way all inbound mail would go through that box. I'd rather not rely on the presence of some header for the decision whether or not to spam-check an incoming mail. For relaying of outbound mail you could enable submission on th

Re: Two virtual domains

2010-03-16 Thread Ansgar Wiechers
unreasonable virtual_alias_maps map nesting for us...@domain1. > > Is this a serious problem? Yes. > How to resolve it? Make the virtual aliases explicit. 8< us...@domain2 us...@domain1 us...@domain2 us...@domain1 us...@domain1 us...@domain2 us...@domain1 us...@domain2

Re: Two virtual domains

2010-03-16 Thread Ansgar Wiechers
On 2010-03-16 Oleksii Krykun wrote: > 2010/3/16 Ansgar Wiechers >> On 2010-03-16 Oleksii Krykun wrote: >>> I set up two domain aliases: >>> @domain1 @domain2 >>> and >>> @domain2 @domain1 >> >> This makes you a backscatterer, because Pos

Re: MDN and mupliple recipients

2010-03-18 Thread Ansgar Wiechers
st likely the one who read the original mail. That said, the handling of read receipts is entirely up to the (receiving) client. Postfix has nothing to do with this aside from being the messenger. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Greylist server recommendations?

2010-03-23 Thread Ansgar Wiechers
On 2010-03-22 Bas Mevissen wrote: > Why catch-all? Because I often use the part before the "@" as a key to > see the origin of the e-mail when subscribing. That's what address extension was invented for. See the respective section of man 8 local. Regards Ansgar Wiechers --

Re: All email forward a copy to testing server

2010-03-24 Thread Ansgar Wiechers
d to refer to. /^(.*)@sub\.domain\.com$/ $...@new.domain.com Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Small amount of spam still routed through server and another problem with spam

2010-03-24 Thread Ansgar Wiechers
le to find the page to put the rules back in. Put what rules back where? > (below is my postfix config file)(kinda messed up abit because of what I > used to copy it) Please post the output of "postconf -n" instead of the contents of main.cf, so we can see the actual configura

Re: Small amount of spam still routed through server and anotherproblem with spam

2010-03-24 Thread Ansgar Wiechers
rom address matches > up. The ip does not. I think what you want can be done with a policy daemon or a proxy filter. I seem to recall a discussion about this very topic not too long ago, but was unable to find it when sifting through the list archive. [1] http://www.postfix.org/DEBUG_README.ht

Re: Directing SPAM mail to a Junk Folder

2010-03-25 Thread Ansgar Wiechers
r's home directory. Junk > mail folder is inside the Maildir as ".Junk". Amavisd-new tags the > spam mails as "[SPAM]" Configure either the MDA or the user's MUA to put tagged mail into the Junk folder. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: update: Small amount of spam still routed through server and another problem with spam

2010-03-25 Thread Ansgar Wiechers
reject_rbl_client cbl.abuseat.org, reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client combined.rbl.msrbl.net, reject_rbl_client rabl.nuclearelephant.com smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce, permit Regards Ansgar Wiechers -- "

Re: Postfix redirection after aliase resolution

2010-03-26 Thread Ansgar Wiechers
On 2010-03-26 Bob Sauvage wrote: > I have a postfix server and I want to redirect my mails to another > server (Spam filter) after the aliase resolution. Because this spam > filter can only filter 100 adresses. > > When the other server has completed its work, it sends this mail to my > Postfix se

Re: Spam from the same domain

2010-03-26 Thread Ansgar Wiechers
s sending mail over your infrastructure? Do you force > them to use SMTP AUTH/SASL? If so then you might have a look at > reject_sender_login_mismatch to stop forgeries from your own domain. The OP wants to block external, not internal senders. Regards Ansgar Wiechers -- "Abstractions s

Re: All email forward a copy to testing server

2010-03-29 Thread Ansgar Wiechers
e this: if /@sub\.domain\.com/ /^...@sub\.domain\.com$/ $...@new.domain.com endif into this: /^(.*)@sub\.domain\.com$/ $...@new.domain.com I had considered it quite clear that an if-condition without the if-keyword wouldn't make any sense. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: pop-before-smtp should not put localhost/server ip in the list then?

2010-04-06 Thread Ansgar Wiechers
s listed in the pop-before-smtp database? (i.e. who is doing POP3 on the server itself) BTW, if you absolutely *must* use some broken mail client that handles neither In-Reply-To nor References header, could you *at least* leave the subject alone? So that non-broken mail clients have a chance to associat

Re: Pop-Before-Smtp let spam through Answered More on Firewall with postfix?

2010-04-06 Thread Ansgar Wiechers
t a section of log file with the -v and it seems > to be not completed or done wrong. So I tried to post the section that > fitted my question. Perhaps you should try posting what fits *our* questions. That would save yourself and us a lot of time. Regards Ansgar Wiechers -- "Abst

Re: Mailgateway

2010-04-08 Thread Ansgar Wiechers
to reach that goal? > Or do i need to add one line for each user in every domain? The postconf man-page [1] isn't too clear about this, but I think you need to specify full addresses (us...@example.com OK). I have a script somewhere that will generate a list of valid recipients

Re: Mailgateway

2010-04-08 Thread Ansgar Wiechers
On 2010-04-08 Thomas wrote: > Ansgar Wiechers schrieb: >>> Where /etc/postfix/mydomains lists all domains to be relayed >> >> You may want to use a more "speaking" name for your relay domains (like, >> /etc/postfix/relay_domains ;). > > I need a file

Re: Configuration Backup Script

2010-04-09 Thread Ansgar Wiechers
. mysqldump for MySQL). You can't simply copy the files of a running database. Also I'd suggest to use "rsync -a" instead of "cp -Rp" for performing file backups. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Configuration Backup Script

2010-04-09 Thread Ansgar Wiechers
ns. > > http://osx.topicdesk.com/content/view/41/57/ mailbfr was developed for Mac OS X, not for SuSE Linux. IIRC it's a Python script, so it should be possible to modify it to be usable on Linux as well. However, right now mailbfr is distributed as a .pkg, so one would have to go to som

Re: RBL Usage questions

2010-04-10 Thread Ansgar Wiechers
>> one RBL says something bad, it doesn't influence it as much as if >> many of them do. > > That works for small sites who can afford to content filter all mail. > For other sites, this is no more an option. policyd-weight does the same without content filtering. Re

Re: Trouble with virtual_alias_maps and mailman stopped working

2010-04-15 Thread Ansgar Wiechers
ot your $mydestination: is it defined as a virtual mailbox domain? Also post the output of "postconf -n" rather than your main.cf. Regards Ansgar Wiechers -- "Another option [for defragmentation] is to back up your important files, erase the hard disk, then reinstall Mac OS X and your b

Re: block specific IP addresses

2010-04-16 Thread Ansgar Wiechers
On 2010-04-15 groups wrote: > Syntax follow up question... > > 1.2.3.4 REJECT > or > 1.2.3.4 REJECT 1.2.3.4 REJECT Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: how to restrict mail to only one recipient?

2010-04-17 Thread Ansgar Wiechers
nd smtpd_*_restrictions don't apply to pickup. > How can I restrict my server to send mail TO u...@domain? # /etc/postfix/main.cf transport_maps = hash:/etc/postfix/transport # /etc/postfix/transport u...@domain : * error:destination prohibited Regards Ansgar Wiechers -- &quo

Re: Postfix sending NDR instead of rejecting in SMTP session

2010-04-21 Thread Ansgar Wiechers
livery. It is your job as a mail server admin to ensure that your MTA does not have invalid mappings. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Postfix sending NDR instead of rejecting in SMTP session

2010-04-22 Thread Ansgar Wiechers
On 2010-04-22 Vegard Svanberg wrote: > * Ansgar Wiechers [2010-04-21 13:11]: > >>> Example 2: u...@example.invalid is forwarded to r...@example2.invalid. >>> r...@example2.invalid does not exist; neither as an alias nor a mailbox. >>> >>> SMTP d

Re: mailbox_command

2010-04-23 Thread Ansgar Wiechers
Apr 23 10, /dev/rob0 : >> >> PS: Danny does not inspire much confidence in the aviation industry. >> A bit of unsolicited personal advice to him: tone down the bragging. http://slash7.com/2006/12/22/vampires/ Reply-To set to myself, as this is getting off-topic. Regards Ansgar

Re: Allow specific IP to send mail without username/password

2010-04-26 Thread Ansgar Wiechers
e able to send e-mails without logging in. I suppose you're talking about relaying through your MTA. mynetworks = ..., a.b.c.d/32 You need to permit_mynetworks in smtpd_*_restrictions (this is the default). Regards Ansgar Wiechers -- "Abstractions save us time working, but they don&

Re: Out of Office auto reply setting

2010-05-01 Thread Ansgar Wiechers
e language + sieve plugin on mailclient? > > Thanks but this does not work In case you actually want someone to assist you in solving your problem, you may want to elaborate on how exactly this "does not work" for you (i.e. provide error messages, log excerpts, etc.). You may also wan

Re: Postfix inbound message configuration

2010-05-03 Thread Ansgar Wiechers
e solutions for this > configuration? Set up a catch-all mailbox on the Postfix host. Use procmail to store all mail to that mailbox in Maildir format. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Stopping spammers extreme

2010-05-04 Thread Ansgar Wiechers
es they're not supposed to listen on: configure the services to not listen on those interfaces. Do NOT let the services listen on all interfaces and then block access with a packet filter. inet_interfaces = loopback-only Regards Ansgar Wiechers -- "Abstractions save us time working, but

Re: Stopping spammers extreme

2010-05-04 Thread Ansgar Wiechers
) mail transaction from submission to delivery to demonstrate the issue. Also post the output of "postconf -n". Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: regular expression in header_check question

2010-05-04 Thread Ansgar Wiechers
ler" > > > here is what i want to use , is this the correct syntax or do I need to > double quote those quotes somehow. > > /^From: "Viagra US supplier"/ DISCARD viagra foo > /^From: "Viagra US dealer"/ DISCARD viagra foo /^Fro

Re: Stopping spammers extreme

2010-05-05 Thread Ansgar Wiechers
What for? AFAICS he's not relaying for any other domain, but only forwarding particular (local/virtual) addresses to gmail mailboxes. And we still don't know how the supposed spams are entering Postfix in the first place. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Postfix, SASL sending mail through Postfix.

2010-05-10 Thread Ansgar Wiechers
vided... Since the OP wants to send SASL-authenticated e-mail, I'd suggest to start with Postfix' SASL Howto [1]. Debugging comes as a second step when he encounters problems while following the documentation. [1] http://www.postfix.org/SASL_README.html Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Postfix, SASL sending mail through Postfix.

2010-05-10 Thread Ansgar Wiechers
ow the procedure described here: http://www.postfix.org/DEBUG_README.html#mail Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: two domains on one server

2010-05-10 Thread Ansgar Wiechers
il from u...@other_domain.com as spam, then this has nothing to do with your Postfix. It may be related to your DNS setup, though. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Postfix, SASL sending mail through Postfix.

2010-05-10 Thread Ansgar Wiechers
_README.html#mail> did you fail to understand? Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Modifying body content before delivering

2010-05-20 Thread Ansgar Wiechers
antastic little util called "mailtextbody" - it does > just that: strips off all non-text parts and leaves a clean, > text-only message. Sounds interesting, but how does it handle html-only mails (i.e. mails with no text/plain MIME part) or mails that are declared text/plain, bu

Re: wildcard domains

2010-05-25 Thread Ansgar Wiechers
>> .ru REJECT *.ru rejected by sender_checks > > in my sender checks. I think there was (is?) a need for the double > entry (one with '.') That's controlled by presence/absence of the string smtpd_access_maps in $parent_domain_matches_subdomains. See "man 5 access&

Re: I've inherited a botnet target

2010-05-26 Thread Ansgar Wiechers
> mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128 > smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination I usually recommend to add local_recipient_maps = $alias_maps and add explicit mappings for those local users that should be able to receive mail. Otherwis

Re: I've inherited a botnet target

2010-05-26 Thread Ansgar Wiechers
On 2010-05-26 Ralf Hildebrandt wrote: > Shouldn'T you use at least ONE RBL? Probably wouldn't hurt, but unless he's trying to fight off spam sent to valid users (which according to his description doesn't seem to be the case) he could go without as well. Regards Ansgar Wie

Re: I've inherited a botnet target

2010-05-26 Thread Ansgar Wiechers
On 2010-05-26 brian wrote: > On 10-05-26 03:21 PM, Ansgar Wiechers wrote: >> The connections are being rejected, so unless your server resources >> are being exhausted by the delivery attempts I don't think you have >> to worry about it. > > As mentioned in another

Re: I've inherited a botnet target

2010-05-26 Thread Ansgar Wiechers
On 2010-05-26 brian wrote: > On 10-05-26 03:24 PM, Ansgar Wiechers wrote: >> On 2010-05-26 Ralf Hildebrandt wrote: >>> Shouldn'T you use at least ONE RBL? >> >> Probably wouldn't hurt, but unless he's trying to fight off spam sent >> to valid use

Re: Spampd proxy bypassed by some mails

2010-05-26 Thread Ansgar Wiechers
st that one address, maybe body_checks will do the trick: /etc/postfix/main.cf: body_checks = regexp:/etc/postfix/body_checks /etc/postfix/body_checks: /^http:\/\/.+\..+\/\?email=jan\.muenn...@dotplex\.de/ REJECT Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: smtpd_reject_unlisted_recipient

2010-06-11 Thread Ansgar Wiechers
On 2010-06-10 Jerrale Gayle wrote: > On 6/10/2010 6:31 PM, Sahil Tandon wrote: >> On Thu, 10 Jun 2010, Jerrale Gayle wrote: >>> I want to accept all mail to non-existent users, then bounce, so >>> that people can't probe for valid users to know wherer to start a >>> brute force. >> >> This is

Re: Multiple Users

2010-06-30 Thread Ansgar Wiechers
On 2010-06-30 Jonathan Tripathy wrote: > Does postfix support multiple users using aliases? Yes. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: set a catch-all for users that not exists in database

2010-06-30 Thread Ansgar Wiechers
ain.tld > use...@domain.tld use...@domain.tld > @domain.tld noexist...@domain.tld > > is there is way to do this ? The above should do what you want, provided that noexistant is an existing mailbox. If it doesn't work: please supply the output of "postconf -n" and a

Re: set a catch-all for users that not exists in database

2010-06-30 Thread Ansgar Wiechers
On 2010-06-30 Charles Marcus wrote: > On 2010-06-30 10:00 AM, Ansgar Wiechers wrote: >> On 2010-06-30 David Touzeau wrote: >>> I would like to redirect messages that recipient are not listed in >>> aliases to a single mailbox >>> >>> have set >>

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-10 Thread Ansgar Wiechers
ions? what's the smartest thing to do?? I don't know about "best strategy", but if you can route your outbound mail through one server, you could try the proxy filter I wrote a while ago to take care of this problem. http://www.planetcobalt.net/sdb/backscatter.shtml WFM, but

Re: client certificate?

2010-07-10 Thread Ansgar Wiechers
ould be on any network). > I think I need to do something with client certificates? No. You need a server certificate, enable submission (port 587/tcp, SASL authentication), and point your clients to that port. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don&#x

Re: Negation in header_checks doesn't work as expected?

2010-07-14 Thread Ansgar Wiechers
ple: > > !/^To: (.*)-keyword@(.*)$/ REJECT => all mails get rejected That's probably because there are a *lot* headers in any given mail that don't match this pattern. ;) Try something like this: if /^To: ....@example\.com$/ !/^To: (.*)-keyword@(.*)$/ REJECT endi

Re: What is the proper way to deal with non-existing e-mail addresses?

2010-07-21 Thread Ansgar Wiechers
deliver, bounce messages you find yourself unable to deliver after accepting them, and to make sure the latter does not happen much. > What about backscatter? Doesn't bouncing generate a lot of > backscatter? Bouncing does. Rejecting doesn't. Regards Ansgar Wiechers -- "

Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Ansgar Wiechers
lf via TCP > and UDP Flood Protection on your IDS and HIPS systems or other > firewall tools. The issue with this attack is that it might exhaust CPU resources on the server without having to saturate the bandwidth, due to cryptographic operations required by SSL. And that it seems to use

Re: OT: ISP Blocking of port 25

2010-07-21 Thread Ansgar Wiechers
e one thing about the violation. Sorry to burst your bubble. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: OT: ISP Blocking of port 25

2010-07-21 Thread Ansgar Wiechers
by > authorities if a user is found to be doing something illegal. If you actually believe that, I suggest you move to China or someplace. Now. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: specify local and non local destination

2010-08-17 Thread Ansgar Wiechers
ate more. Where do you want the roaming user's mail to go, and where are they supposed to be able to send from? Regards Ansgar Wiechers -- "All vulnerabilities deserve a public fear period prior to patches becoming available." --Jason Coombs on Bugtraq

Re: newbie question: rbl checking

2010-08-17 Thread Ansgar Wiechers
mail would be blocked as the originating > IP is listed at njabl.org AFAICS your approach is likely to generate backscatter and perhaps even violations of your clients's contracts. Don't do that. RBL filtering in your scenario should be done either at your clients' mail servers

Re: Rewriting Date header for local senders, or something like that.

2010-08-23 Thread Ansgar Wiechers
ook a quick look at the docs, and found nothing on > this matter, nevertheless, if someone can point me to a doc where this > is explained, that will be enough for me. > > What do you think on this? Fix the problem rather than the symptom. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Want description

2010-08-27 Thread Ansgar Wiechers
tistics: domain lookup > hits=1 miss=10 success=9% > Aug 27 04:23:21 dell860-504 postfix/scache[20225]: statistics: max > simultaneous domains=1 addresses=1 connection=10 http://www.postfix.org/CONNECTION_CACHE_README.html Regards Ansgar Wiechers -- "Abstractions save us time working

Re: Problem telnet postfix from a network segment not local

2010-08-31 Thread Ansgar Wiechers
o the Postfix server. tcptraceroute may help narrowing down that something. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Problem telnet postfix from a network segment not local

2010-09-02 Thread Ansgar Wiechers
private IP address ranges? Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: main.cf sanity check request

2010-10-28 Thread Ansgar Wiechers
om > outside your network. Huh? Please elaborate. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: i get User unknown for legit users

2010-11-17 Thread Ansgar Wiechers
On 2010-11-17 Jay G. Scott wrote: > now -- my relay_recipient_maps parameter points to pfknown_users > which has the form: > ttt OK > do i have to have ...@arlut.utexas.edu OK ? Yes. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't

Re: Tons of Delivery Status Notifications from random places.

2010-11-24 Thread Ansgar Wiechers
[1] http://www.planetcobalt.net/sdb/backscatter.shtml Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: How Do I Reject Spam To 'mail' user?

2010-11-24 Thread Ansgar Wiechers
..@? What should I do? You can set "local_recipient_maps = $alias_maps" to prevent any local account not listed in $alias_maps from receiving mail. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky

Re: Tons of Delivery Status Notifications from random places.

2010-11-25 Thread Ansgar Wiechers
On 2010-11-25 Patric Falinder wrote: > Ansgar Wiechers skrev 2010-11-24 18:11: >> On 2010-11-24 Patric Falinder wrote: >>> lst_ho...@kwsoft.de skrev 2010-11-24 11:08: >>>> Be sure to limit the usage of the list to the affected account and maybe >>>> e

  1   2   3   4   >