Re: Selective greylisting

2014-05-14 Thread D';Arcy J.M. Cain
received and This is a huge downside especially with the size of some of these attachments. If you can block it before it fills your pipe you soften any effect that the greylisting delay adds. Don't forget about postscreen as well. It's easy to apply and does a great job. -- D'Arcy

Whitelisting individual addresses with postscreen

2014-05-14 Thread D';Arcy J.M. Cain
It looks like hotmail is on two DNSBLs and postscreen is blocking them. I would like to offer my users a way to whitelist individual addresses but it looks like I can only whitelist CIDR blocks. Is that the case or do I have another option? Cheers. -- D'Arcy J.M. Cain System Administ

Re: Whitelisting individual addresses with postscreen

2014-05-14 Thread D';Arcy J.M. Cain
On Wed, 14 May 2014 10:09:19 -0500 Noel Jones wrote: > On 5/14/2014 9:59 AM, D'Arcy J.M. Cain wrote: > > It looks like hotmail is on two DNSBLs and postscreen is blocking > > them. I would like to offer my users a way to whitelist individual > > addresses but it looks

Re: Whitelisting individual addresses with postscreen

2014-05-14 Thread D';Arcy J.M. Cain
s to figure out how to whitelist hotmail. The answer is to figure out how to push back on hotmail to manage their users better and control spam. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: policy daemon failure

2014-06-03 Thread D';Arcy J.M. Cain
both of them build from mail that hits them. It might slow down a few emails but if all you have are two mail servers this may be acceptable. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: Sometimes losing mails when using Procmail as content filter

2014-06-11 Thread D';Arcy J.M. Cain
sgid.cache If something similar is happening with those programs but with a common database (e.g. /var/db/msgid.cache) that might have the effect that you are seeing. Just spitballing here. The procmail log might shed more light. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://ww

Re: Regarding "reject_authenticated_sender_login_mismatch" domain matching

2014-06-19 Thread D';Arcy J.M. Cain
rks and don't bother with authentication. I suggest authentication though so that your users can get their email no matter where they are. People are mobile. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: Regarding "reject_authenticated_sender_login_mismatch" domain matching

2014-06-19 Thread D';Arcy J.M. Cain
On Thu, 19 Jun 2014 09:23:45 -0500 (CDT) Larry Stone wrote: > On Thu, 19 Jun 2014, D'Arcy J.M. Cain wrote: > > I don't know how to do that but I wonder why you want to. The whole > > point of authentication is to allow your users to get email without > > havi

Re: thunderbird

2014-06-22 Thread D';Arcy J.M. Cain
> something else that really solved the problem. The OP didn't really give enough context but he also changed the order of the two lines. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: thunderbird

2014-06-23 Thread D';Arcy J.M. Cain
On Mon, 23 Jun 2014 13:49:09 +0200 "li...@rhsoft.net" wrote: > where do you see any changed order in that two lines? My mistake. I am so used to unified diffs that I misread the OP. It looked like this to me. @@ -1,4 +1,4 @@ line 1 -line 2 line 3 +line 2 line 4 -- D'Arc

Why "lost connection after RCPT" when we reject?

2014-07-11 Thread D';Arcy J.M. Cain
sender passes some reasonable threshold. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: Why "lost connection after RCPT" when we reject?

2014-07-11 Thread D';Arcy J.M. Cain
umber three which is the one I want to isolate. Actually, number three can also look like number one when they try an invalid address so grepping for the lost connection log line would be fine if I could ignore number two. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: Why "lost connection after RCPT" when we reject?

2014-07-12 Thread D';Arcy J.M. Cain
le > artifact by sending QUIT after their payload is rejected rather than > just dropping the connection. They already know this. Apparently > (for now) they would rather save a few milliseconds and move on to > the next target. This is what I am worried about. Right now I am just co

Re: Unexpected failure, please try later (in reply to end of DATA command)

2014-07-23 Thread D';Arcy J.M. Cain
ces. Keep an eye on the mail queue if the time to bounce (maximal_queue_lifetime) is too long or reduce that but not too much. I find 3d long enough these days. Also, have you checked to see if you are on any blacklists? -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: verify database

2014-08-08 Thread D';Arcy J.M. Cain
On Fri, 8 Aug 2014 10:32:18 -0400 Rich wrote: > Its says to rename or delete it and restart the postfix. It will > rebuild. He doesn't want to delete all the entries, only one of them. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.

Re: Leak looking for an emails pro :)

2014-08-15 Thread D';Arcy J.M. Cain
block lists right away. On the other hand, if you decide to start a proper opt-in anonymous service contact me. That would be a great service and I have some ideas about that. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: Leak looking for an emails pro :)

2014-08-15 Thread D';Arcy J.M. Cain
On Fri, 15 Aug 2014 09:17:19 -0500 /dev/rob0 wrote: > On Fri, Aug 15, 2014 at 09:51:36AM -0400, D'Arcy J.M. Cain wrote: > > On Fri, 15 Aug 2014 14:19:31 +0200 > > Sebastien wrote: > > > our emails are sent to non opt-in people, but we deliver personal > >

Re: Killing user's session

2014-08-24 Thread D';Arcy J.M. Cain
n account > is hijacked: > > sasl-access: > lu...@example.com REJECT 5.7.1 Your login is compromised. This is a particularly good solution as it allows the user to continue receiving email so that you can send them them a message explaining exactly what the problem is.

Re: Discard all emails containing the text "#364811"?

2016-02-11 Thread D';Arcy J.M. Cain
On Thu, 11 Feb 2016 09:50:36 -0500 (EST) wie...@porcupine.org (Wietse Venema) wrote: > - Rejecting mail on the basis of a short string is likely to result > in false matches. For example, it would block this thread. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex

Re: Telnet auth

2016-05-18 Thread D';Arcy J.M. Cain
ch suspected spam after it is accepted. Look at spam-fighting sites for some ideas. If you do find a way to block 100% of all spam please tell us how. Better yet, package it and sell it. You will be a billionaire. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: Somehow hacked?

2016-07-06 Thread D';Arcy J.M. Cain
ce: > > abj...@mydomain.com > lwoei...@mydomain.com How are they getting queued up? If the address doesn't exist on your system you should not be accepting it in the first place. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: newbie department

2016-08-25 Thread D';Arcy J.M. Cain
all to /dev/null) this is still a bad idea. If someone sends you an important message at li...@lazygranch.com it will be silently ignored. If you don't have a catch-all the message will bounce and the sender will realize that he made a typo and resend it. -- D'Arcy J.M. Cain System Admini

Re: newbie department

2016-08-25 Thread D';Arcy J.M. Cain
ender. Anything else is a failure. I don't want to hear that my client missed a big sale because of a typo on their prospective client's part. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Blocking nobody - sometimes

2016-10-01 Thread D';Arcy J.M. Cain
their system password on the web server for all to read. So has anyone else had to deal with this issue? -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: Blocking nobody - sometimes

2016-10-03 Thread D';Arcy J.M. Cain
mail on > to the real sendmail or providing an error back to php. I can't control if they use sendmail or SMTP directly to the mail server. I do block port 25 to anywhere else though so at least I can force them through my mail server. Thanks for the suggestions. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Does local mail bypass milter?

2014-09-11 Thread D';Arcy J.M. Cain
to be any action taken. Is there any way in postfix to determine that the milter is actually being run? I tried setting syslog to debug but that didn't show anything. Is it possible that mail arriving locally is bypassing the milter? postconf -n attached. I only removed the tls lines. --

Re: Does local mail bypass milter?

2014-09-11 Thread D';Arcy J.M. Cain
x.org/MILTER_README.html#plumbing Is there something specific I should be looking at. I did check that page before and I am sure that what I am doing follows everything there. What did I miss? Mailman is sending by SMTP, not the sendmail command line so the SMTP-only Milter application should work,

Re: Does local mail bypass milter?

2014-09-12 Thread D';Arcy J.M. Cain
On Fri, 12 Sep 2014 09:17:19 -0500 /dev/rob0 wrote: > On Thu, Sep 11, 2014 at 10:09:34PM -0400, D'Arcy J.M. Cain wrote: > > On Thu, 11 Sep 2014 16:38:45 -0500 > > Is there something specific I should be looking at. I did check > > I was thinking, as I be

Re: Corrupted messages...

2014-11-04 Thread D';Arcy J.M. Cain
Unless someone else has a Postfix answer I would look at your system first. I may be wrong but this doesn't smell like a Postfix problem to me. Start by diagnosing your slow logins. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net

Re: port 25 465 and 587 confusion.

2015-04-05 Thread D';Arcy J.M. Cain
lse is as convoluted as FTP and that FTP is being deprecated in favour of cleaner and more secure protocols. -- D'Arcy J.M. Cain System Administrator, Vex.Net http://www.Vex.Net/ IM:da...@vex.net VoIP: sip:da...@vex.net