Postscreen + Postfix configuration

2011-03-16 Thread Fernando Maior
ing, reject_multi_recipient_bounce, permit 8< Many thanks! Fernando Maior

Re: Postscreen + Postfix configuration

2011-03-16 Thread Fernando Maior
On Wed, Mar 16, 2011 at 11:39 PM, Wietse Venema wrote: > Fernando Maior: > > What is not clear for me is: do I need to change my main.cf in order to > run > > postscreen and do not duplicate its functionality in postfix? > > See: > http://www.postfix.org/POSTSCRE

Re: Postscreen + Postfix configuration

2011-03-17 Thread Fernando Maior
On Thu, Mar 17, 2011 at 1:46 AM, Noel Jones wrote: > On 3/16/2011 10:11 PM, Fernando Maior wrote: > >> On Wed, Mar 16, 2011 at 11:39 PM, Wietse Venema >> mailto:wie...@porcupine.org>> wrote: >> >>Fernando Maior: >> > What is not clear for me i

Re: Upgrading Postfix and invalid/obseleted config values.

2011-03-18 Thread Fernando Maior
gt; Well, users usually interacts with IMAP/POP servers thru their mail client programs. So, it makes sense that Dovecot takes care of the quotas, instead of Postfix. Also, Wietse's suggestion of Dovecot & Postfix with LMTP is just the default I use for new or renewed installations. Fernando Maior

Re: Windows Live problems

2011-03-18 Thread Fernando Maior
Mark, Would you kindly post to the list the output for "postconf -n" ? Fernando Maior

Re: changing relayhost based on sender

2011-08-03 Thread Fernando Maior
Hi Michael, Did you try to unset the default relayhost and then setup sender_dependent_relayhost_maps for the domains and users that should have a relayhost AND no setup maps for the domains and users that should not have a relayhost? Also, may be there is another way to accomplish what you want.

Re: Problem with postfix and amavis

2011-08-22 Thread Fernando Maior
Andrea, How did you look at the final delivered mail? Did you use cat or vi or another text editor? Cause if you just try using a webmail or mail client you may not be able to see those headers... Best regards, --- Fernando Maciel Souto Maior Projetos e Soluções de Tecnologia LPIC/1(31908), Linux

Re: Postfix NDR

2011-09-08 Thread Fernando Maior
On Thu, Sep 8, 2011 at 10:22 AM, Wietse Venema wrote: > Jean-Luc CHANDEZON: >> Hello, >> I believe my request is very simple, but I don't find how I can do that. >> When you receive a NDR from postfix server, the mail is sent by >> MAILER-DAEMON@hostname.local. >> I would to change the sender. I'v

Re: Postfix NDR

2011-09-09 Thread Fernando Maior
On Thu, Sep 8, 2011 at 6:09 PM, Jean-Luc CHANDEZON wrote: > > > 2011/9/8 Fernando Maior >> >> On Thu, Sep 8, 2011 at 10:22 AM, Wietse Venema >> wrote: >> > Jean-Luc CHANDEZON: >> >> Hello, >> >> I believe my request is very simp

Re: How should I get user/Group security right when using lots of other apps with Postfix ?

2011-09-23 Thread Fernando Maior
On Fri, Sep 23, 2011 at 7:56 AM, Wietse Venema wrote: > > daver.mail...@operamail.com: > > Should all these apps share users, maybe one of the Postfix users?  Or > > should they be left as root user, with configs in /root/., for > > example? > > As documented :-) Postfix must not share the uid or

Re: Multi-Instance-Questions

2011-09-27 Thread Fernando Maior
On Tue, Sep 27, 2011 at 6:29 AM, Thomas Trepper wrote: > Hi Stan, > > thanks a lot for your eMail und sorry for the inconvenience. Here is the > hundred feet back down big picture: :-) > > Postfix 2.5 on ubuntu 8.04.4. One physical interface with two public IPs. > > eth0 -> 10.0.0.1 -> needs relay

Re: spf configuration woes

2011-11-04 Thread Fernando Maior
run a process as root and cannot start it as a background service, the problem is that the user that is the owner of the service does not have enough permissions to open or access some resource (usually pid file, run file, socket file or config file). Try looking for: 1) which user/group is the owner of the service when you started it in background as a daemon. 2) see if that user/group has enough permissions to access the files it should access with read AND write permissions. Look for pid files, socket files and at last for config file. Fernando Maior

Re: Distribute mail based on sending domain?

2011-11-08 Thread Fernando Maior
Hi, May be you should have a look at transports table, at http://www.postfix.org/transport.5.html There are some useful examples you should try. Best regards, --- Fernando Maciel Souto Maior LPIC/1(31908), LinuxCounter(391325) On Tue, Nov 8, 2011 at 3:53 AM, vr wrote: > We have Exchange 201

Re: Distribute mail based on sending domain?

2011-11-08 Thread Fernando Maior
Hi, Just when I pressed "send" I realize that may be the sender dependent relayhost maps should be useful too. Have a look at it, if you please. http://www.postfix.org/postconf.5.html#sender_dependent_relayhost_maps Atenciosamente, --- Fernando Maciel Souto Maior LPIC/1(31908), LinuxCounter(3913

Re: postmas...@mydomain.com

2011-11-18 Thread Fernando Maior
there are some examples you may learn a lot from. Try looking at http://www.postfix.org/BASIC_CONFIGURATION_README.html, at least. Fernando Maior

Re: problem with rejecting helo

2012-03-16 Thread Fernando Maior
On Fri, Mar 16, 2012 at 2:22 PM, Jack wrote: > Hello All, > > ** ** > > I’m having a problem where I am rejecting messages from one of our > servers, but I’m not clear as to why. > > ** ** > > We are using: > > check_helo_access hash:/etc/postfix/helo_access > > ** ** > > We have

Re: Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-28 Thread Fernando Maior
end you to send your initial mail to an iptables mailing list, instead of postfix. I believe the problem is with iptables statements instead of postfix. Fernando Maior

Re: always_bcc

2012-08-08 Thread Fernando Maior
y have a look at the transport table doc at http://www.postfix.org/transport.5.html Fernando Maior On Tue, Aug 7, 2012 at 9:54 AM, Alfredo Saldanha wrote: > Hi there, > > I'm trying to implement always_bcc to send a copy of all received messages > to another server. &

Re: always_bcc

2012-08-14 Thread Fernando Maior
messages and install it in the second server. Not easy task, sure... May be you should look at the source for bounce service daemon. Best regards, --- Fernando Maior On Tue, Aug 14, 2012 at 10:48 AM, Alfredo Saldanha < asalda...@infolink.com.br> wrote: > Thank you, but how about t

Re: Forward specific users to another mail server

2012-08-15 Thread Fernando Maior
Hi Brian, Best is IMHO use the transport table. Look at the docs at http://www.postfix.org/transport.5.html For example, for each user that is being migrated, you add one line like below: {username}@{domainname} smtp:{newserveripaddress} Best regards--- Fernando Maior On Wed, Aug 15, 2012 at

Re: The ultimate email server

2012-08-15 Thread Fernando Maior
sic idea behind postscreen". May be your opinion will change after that. Best regards--- Fernando Maior On Wed, Aug 15, 2012 at 9:09 AM, Mikkel Bang wrote: > I'm trying to configure "the ultimate email server" for this webapp that > needs to send and receive / forward emails to

Re: Which server is that?

2012-09-19 Thread Fernando Maior
Hi, May be it is a DirectAdmin host. Have a look at www.directadmin.com... aemsg and smtpb4pop should be customer implementations to the directadmin mail server, they are using exim, which I believe is highly configurable... BUT... I do not know for sure... Best regards, --- Fernando Maciel Sou

Re: Possible to dedicate a number of smtpd processes for OUTBOUND mail only ??

2013-02-25 Thread Fernando Maior
Hi, Let me see: 1. You have a gateway that receive the incoming connection and relays it to your 3 mail servers 2. The 3 mail servers are behind the firewall, and answers to the same domain If you are just like that, may be you need not to take care of the attacks when they arrive to

Re: is possible to use different SSL certificates for different domains?

2013-03-03 Thread Fernando Maior
May be we can put that into the Postfix documentation page, in "Specific environments" section. Also, may be DNS can be there, both are "environments" anyway... Just 2 cents... Best regards, --- Fernando Maciel Souto Maior On Wed, Feb 27, 2013 at 6:17 PM, /dev/rob0 wrote: > On Mon, Feb 25, 201

Re: LDAP canonical_maps and domain rewriting

2013-03-16 Thread Fernando Maior
Hi Patrick, If you use the hash table, and issue the postmap command, what is the output? Regards, --- Fernando Maciel Souto Maior On Sat, Mar 16, 2013 at 2:19 PM, Patrick Lists < postfix-l...@puzzled.xs4all.nl> wrote: > Hi all, > > Venturing into postfix+openldap country I bumped into a challe

Re: LDAP canonical_maps and domain rewriting

2013-03-19 Thread Fernando Maior
Hello, All this seems to be something very different from what postfix and other smtp usually does. So, may be the problem is with the concept, not with the implementation. May I ask you why you need to change the domain name part of the mail delivery address? Can you provide us with information

Re: LDAP canonical_maps and domain rewriting

2013-03-20 Thread Fernando Maior
Patrick, I do not use canonical maps at all when using LDAP. I do not need it, because I just use mailForwardingAddress (actually an alias) to map the incoming email to the real mailbox. What I do: 1. Use the qmail.schema in OpenLDAP 2. Add objectClass: qmailUser to each user account 3.

Re: LDAP canonical_maps and domain rewriting

2013-03-20 Thread Fernando Maior
> Hi Fernando, > > > On 03/20/2013 05:40 PM, Fernando Maior wrote: > >> Patrick, >> >> I do not use canonical maps at all when using LDAP. I do not need it, >> because I just use mailForwardingAddress (actually an alias) to map the >> incoming email to t

Re: Too much traffic

2013-04-02 Thread Fernando Maior
Hi, I am not an specialist in Postfix, just a common admin. Yet, I can see two things from your message: 1. You sure have a DNS resolution problem. No external server should be resolved to 192.168.x.x, that is an internal network. Also, the last two octets (255.255) are almost allways us

Re: Forward internal RHEL6 server local user emails to postfix mailrelay

2013-04-02 Thread Fernando Maior
Hi, I would use transport maps. Just look at the /etc/postfix/transport file, there are instructions about how to config it. You may also need to change /etc/postfix/main.cf to activate the transport map. Try using these lines at the end of transport. example.com smtp:bar.example:25 .exampl

Re: Too much traffic

2013-04-02 Thread Fernando Maior
ks for your help. > > ** ** > > Ceyhun > > ** ** > > *From:* Fernando Maior [mailto:fernando.souto.ma...@gmail.com] > *Sent:* Tuesday, April 02, 2013 5:25 PM > *To:* Ceyhun Ganioglu > *Cc:* postfix users > *Subject:* Re: Too much traffic > > ** ** > > Hi,***

Re: tls question to viktor,

2014-01-29 Thread Fernando Maior
Did you try "file /etc/ssl/zbfmail-cert/2013/mail.server.de.intermediate. crt"? May be you will be surprised by the results... :-) Fernando On Wed, Jan 29, 2014 at 12:21 PM, nano wrote: > On 30/01/2014 12:51 AM, Marko Weber | ZBF wrote: > >> >> hello, >> viktor or any other. >> >> in the postf

Re: are these 'good and reliable' adls/dynamic pcre rejects?

2014-01-31 Thread Fernando Maior
On Fri, Jan 31, 2014 at 11:00 AM, li...@rhsoft.net wrote: > > > Am 31.01.2014 13:41, schrieb Larry Stone: > > On Jan 30, 2014, at 10:21 PM, Noel Jones wrote: > > > >> On 1/30/2014 7:17 PM, li...@sbt.net.au wrote: > >>> my pre configured Postfix inluded these helo_access.pcre rejects; > >>> > >>>

Re: Blocking Nessus Scans

2015-11-30 Thread Fernando Maior
Hi, May be you should not relay messages for "nobody" to "root"... How are you doing this relaying? If you are using aliases, just delete the line "nobody: root" and rerun postconf. It will be delivered locally, so you can gain access to the emails. But it will not be delivered to root and forward

Re: 53% of Postfix servers are black-listed (DNSBL)

2015-12-29 Thread Fernando Maior
To configure a smtp server is not easy task. It takes long, and you should be allways looking for new troubles. So, it is not only because lazy or not capable admins. Some of them just do not have the time to do it properly, because they have too much work to do already. Also, if the server is used

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
Hello, What about using iptables or other firewall ruling to rule out connections for SMTP from those CIDR ranges? Atenciosamente, --- Fernando Maciel Souto Maior Projetos e Soluções de Tecnologia (31) 9226-9440 TIM On Tue, Sep 2, 2014 at 8:45 AM, Noel Jones wrote: > On 9/2/2014 5:39 AM, Lubo

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
server sends e-mails, because he is successfully > authenticated." > > I have to receive e-mails also from Asia... > > Lubo M. > -- > > http://LuMaX.acom.sk > > > Dňa 2. 9. 2014 14:50 Fernando Maior wrote /

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
.. Important in this case is that > through my server was not sent e-mails from foreign... > > Thanks > Kind regards > -- > Lubo M. > > > http://LuMaX.acom.sk > ~~~~ > > Dňa 2. 9. 2014 15:57 Fernando Maior wrote / napísal(a): >

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
Hello, Also, I should be wary about using negates (!) on rules. I understand you know the use of postmap command. I suggest using both notations (with ! and without ! before the cidr ip ranges) and using postmap extensively to test the real behaviour of the

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
On Tue, Sep 2, 2014 at 11:47 AM, Viktor Dukhovni wrote: > On Tue, Sep 02, 2014 at 09:15:32AM -0500, Noel Jones wrote: > > > > and the 'file.CIDR' contains: > > > > > > ! 195.98.0.0/19OK > > > ! 195.98.128.0/19OK > > > ! ...OK > > > ! ...OK > > > ! 212.26.160.0/19OK > > > 0.0.0

Re: Postfix incompatibility safety net

2014-10-02 Thread Fernando Maior
Wietse, That safety net of yours should be a fantastic tool, and I congratulate you for the idea and implementation. Also, I am happy for using postfix, it seems it is the only smtp service with so much valuable and good contributions from the developers and contributors net. Best regards, --- Fe

Re: What is "HyperSendmail v2007.08"??

2015-03-16 Thread Fernando Maior
Hi, If this is coming thru the initial dialog between MTAs, may be someone just changed the default string to something else. Is there a company called HyperMail? If so, that may be it. You may also look at this page in Wikipedia: http://en.wikipedia.org/wiki/Hypermail Regards, --- Fernando Mac

Re: What is "HyperSendmail v2007.08"??

2015-03-16 Thread Fernando Maior
Hi, Look at main.cf parameter smtpd_banner, that is the parameter I was talking about in my previous e-mail. If you change that to "HyperSendmail v2007.08" that is what you will see in your log. Regards, --- Fernando Maciel Souto Maior On Mon, Mar 16, 2015 at 10:03 AM, Fern

Re: How to allow each user on an Ubuntu server use his/her google email and password to send the email via google smtp?

2015-03-18 Thread Fernando Maior
You also may try sendemail. Look at http://caspian.dotconf.net/menu/Software/SendEmail. I use it to send emails from scripts directly to gmail accounts I use for servers backup control. --- Fernando Maciel Souto Maior On Wed, Mar 18, 2015 at 7:29 AM, Koko Wijatmoko wrote: > On Wed, 18 Mar 2015

Re: How to allow each user on an Ubuntu server use his/her google email and password to send the email via google smtp?

2015-03-19 Thread Fernando Maior
de Tecnologia (31) 9226-9440 TIM On Wed, Mar 18, 2015 at 1:17 PM, Viktor Dukhovni wrote: > On Wed, Mar 18, 2015 at 07:38:33AM -0300, Fernando Maior wrote: > > > You also may try sendemail. Look at > > http://caspian.dotconf.net/menu/Software/SendEmail. I use it to send > em

Re: How to set Postfix to accept all mail on domain and forward mail for accounts not hosted to another MTA

2015-04-22 Thread Fernando Maior
Hi Daniel, Here we use another technique. For each user that we transfer from the old server to the new one, I just add a line in transport.cf saying the complete mailbox name for that user and the IP or DNS name of the new server. For example: ferna...@test.com : newserver.test.com Also, it mak

Re: Newbie question: purpose of mydomain

2015-06-29 Thread Fernando Maior
On Mon, Jun 29, 2015 at 7:49 AM, Wietse Venema wrote: > John Gateley: > > Another newbie question: > > > > I am setting up Postfix to replace a long-standing qmail system. > > My plan is for all domains to be Virtual Mailbox domains. > > > > My question: what do I set mydomain to? > > > > I have

Re: telnet hangs when I enable sasl

2017-06-05 Thread Fernando Maior
Hello, Roelof, >From this: totaal 16 drwxr-xr-x. 2 rootroot 24 5 jun 13:42 . drwxr-xr-x. 76 rootroot 8192 5 jun 15:26 .. -rw-r--r--. 1 postfix root 47 5 jun 13:42 smtpd.conf I believe you do not need to change owner/group of smtpd.conf; because postfix user already has access to

Re: How to reject mails where from address and to address is myself.

2019-06-04 Thread Fernando Maior
Dear Anant, Systems architecture is your friend... I usually have the following servers: 1) E-mail firewall - a real/virtual computer, connected by one interface to the internet and by another interface to the local network, who only receives e-mail from outside, and don´t permit unwanted e-mail