Re: separate bounced and regular email after using transport

2010-08-17 Thread Jerrale G
then go back to postfix. If you want to do multiple checks with several different processes, add an -o content_filter to each process's section until you have one that does not have a content filter. Jerrale G. SC Senior Admin

popbeforesmtp and sender_login_mismatch

2010-08-20 Thread Jerrale G
anning any specified mail log for a specified regular expression and allowing the setting of a custom grace period. Jerrale G S C Senior Admin

Re: popbeforesmtp and sender_login_mismatch

2010-08-20 Thread Jerrale G
than this, if sender authenticated header doesn't work. Thank you Jerrale G S C

Re: Postfix not create Maildir

2010-10-09 Thread Jerrale G
NOT be the default as usually people want folders automatically created. Good Luck, Jerrale G. SC Senior Admin

Re: virtual_alias_domains

2010-10-18 Thread Jerrale G
or any parameter that looks up something. Jerrale G. SC Senior Admin

Re: virtual_alias_domains

2010-10-18 Thread Jerrale G
On 10/18/2010 4:43 PM, Jeroen Geilman wrote: On 10/18/2010 10:36 PM, Jerrale G wrote: On 10/18/2010 4:29 PM, The Doctor wrote: REcently I have noted that virtual_alias_domains is growing. Is their some way for main.cf to look a file up instead of having to read a whole line? You are

Re: Fighting Backscatter

2010-10-20 Thread Jerrale G
- n n - - pipe flags=DRhu user=mail:mail argv=/usr/libexec/dovecot/deliver /*-e */-f ${sender} -d ${us...@${nexthop} -m ${extension} It doesnt matter where you put the -e as long as it is after the "argv=/usr/libexec/dovecot/deliver" and not between other parameter definitions. Jerrale G. SC Senior Admin

Re: Encrypt messages between 2 servers

2010-10-26 Thread Jerrale G
ey are _widely_ used. Have you never heard of a VPN? -- good luck! Jerrale G. SC Senior Admin

Cron Mail deliver process dying from postfix sendmail.

2010-10-29 Thread Jerrale G
departments for abuse@ postmaster@ and ad...@. ALL other mail delivers perfectly but I dont know whats with crontab on this mail server. Thanks Jerrale G. SC Senior Admin

Re: Well, everyone else using dnswl.org say bye bye to "opensource" usage.

2010-11-05 Thread Jerrale G
On 11/4/2010 5:54 AM, Jerrale G wrote: hellopostmas...@shetoncomputers.com, You are receiving this message from dnswl.org because we try to identify and notify current users of our service about upcoming changes. If you are not the right contact for issues dealing with spamfilters

Re: Mysql queries being performed for domains not in virtual_alias_domains

2010-11-21 Thread Jerrale G
this but you didnt include your postconf -n Jerrale G. SC Senior Admin

Re: NOQUEUE: reject: RCPT 450 4.7.1 Recipient address rejected: Service is unavailable

2010-11-22 Thread Jerrale G
On 11/22/2010 2:00 PM, Jason Lukasiewicz wrote: By the way, I am pretty impressed getting a response from "The Big Cheese" Oh Timo, where for art thou Timo? This guy needs help from the "Big Cheese". Thanks for your help developing, too, Wietse Venema. Jerrale G. SC Senior Admin

CC all messages relayed through postfix

2010-12-13 Thread Jerrale G
How would you store a CC of all mailings relayed through postfix, sent by our users. We have plenty of logs but they dont tell us if someone sends spam and how much, so that we may reprimand the user early before ending up on spam lists. We could even use other third party software to track and

Re: CC all messages relayed through postfix

2010-12-16 Thread Jerrale G
"from" and "to" should be stripped; the head admins can look through the logs to see who sent and received it. -- Jerrale G. SC Senior Admin

Re: CC all messages relayed through postfix

2010-12-16 Thread Jerrale G
On 12/16/2010 12:20 PM, Jerrale G wrote: Not unethical or compromising private data. If the information can be sniffed unencrypted on the wire it is already compromised. Most email administrators already have access to mail stores where the same data is stored unencrypted. A company's

Re: Change error messages returned by Postfix

2011-01-02 Thread Jerrale G
t if that is the location to change it I'll change it there. I didn't find it in the documentation (but I might have overlooked something). This is not configurable. Wietse Yeah, so the answer he was looking for is "look in the source". :) Jerrale G. SC Senior Admin

Re: Change error messages returned by Postfix

2011-01-02 Thread Jerrale G
On 1/2/2011 10:36 PM, Jerrale G wrote: On 1/2/2011 10:12 PM, Wietse Venema wrote: Mark Scholten: Hello, Should I look in the source or is there a better location to change the texts returned by Postfix after the error code for a connecting MTA? I'd like to give custom messages bac

Re: Why use EGD instead of /dev/urandom in tls_random_source?

2011-01-05 Thread Jerrale G
On 12/23/2010 1:02 AM, micah wrote: Obviously it is well understood that the security of cryptographic software, such as TLS, depends on good random numbers. Postfix's tlsmgr(8) maintains a PRNG pool, which is fed from an external source, configured via tls_random_source, typically /dev/urandom (

Re: MX Priority

2011-01-11 Thread Jerrale G
not be in effect for 36 hours at least and 72 hours at most. Jerrale G. SC Senior Admin

Re: "Standard" options when compiling Postfix from source?

2011-01-16 Thread Jerrale G
all OTHER rpm packages that come with the centos repository, as dependencies for compiling above. These packages, in addition to the standard development libraries, include: mysql-devel cyrus-sasl (if you want to use other than dovecot sasl) cyrus-sasl-devel openssl-devel openssl Jerrale G. SC Senior Admin

potential postfix_bare_newline_wait configuration param

2011-01-21 Thread Jerrale G
, really, they may try to connect many times within 1 minute, fooling postscreen_bare_newline as it currently is. Jerrale G SC Senior Admin

postfix 2.8 & spamassassin/clamav

2011-01-21 Thread Jerrale G
bl.nszones.com, bogusmx.rfc-ignorant.org postscreen_dnsbl_threshold=2 postscreen_cache_cleanup_interval=24h postscreen_cache_retention_time=2d Any suggestions would be appreciated but please hold any obscene comments. Thanks, Jerrale G. SC Senior Admin

Re: potential postfix_bare_newline_wait configuration param

2011-01-21 Thread Jerrale G
On 1/21/2011 12:05 PM, Noel Jones wrote: On 1/21/2011 10:26 AM, Jerrale G wrote: postscreen_bare_newline_wait = time that must be waited in between NEW connection state and the reconnect, for example, 20m before the connection is considered from a normal smtp server I don't see any

Re: potential postfix_bare_newline_wait configuration param

2011-01-21 Thread Jerrale G
On 1/21/2011 12:41 PM, Wietse Venema wrote: Jerrale G: I explained why it is needed, as the bare_newline is a good idea and the same principal we used about 4 years ago, before we moved to postfix. it is to deter bottlers, on the idea that bottlers and spammers with non rfc-complian smtp bots

Re: postfix 2.8 & spamassassin/clamav

2011-01-21 Thread Jerrale G
On 1/21/2011 12:54 PM, Noel Jones wrote: On 1/21/2011 10:39 AM, Jerrale G wrote: With 2.7 and prior, we would use -o content_filter under the first transport to check for viruses and then pipe to spamassassin: # line 5 of master.cf #smtp inet n - n - - smtpd # -o content_filter=scan:[127.0.0.1

Re: potential postfix_bare_newline_wait configuration param

2011-01-21 Thread Jerrale G
On 1/21/2011 4:16 PM, Will Fong wrote: On Jan 21, 2011, at 9:14 AM, Jerrale G wrote: time at random intervals, usually a time more or less than a real, "accredited" smtp server would wait before retrying delivery. So, we need a postscreen_bare_newline_m

Re: postfix 2.8 & spamassassin/clamav

2011-01-21 Thread Jerrale G
On 1/21/2011 11:39 AM, Jerrale G wrote: With 2.7 and prior, we would use -o content_filter under the first transport to check for viruses and then pipe to spamassassin: # line 5 of master.cf #smtp inet n - n - - smtpd # -o content_filter=scan

Re: postfix 2.8 & spamassassin/clamav

2011-01-21 Thread Jerrale G
On 1/21/2011 7:18 PM, Wietse Venema wrote: Jerrale G: Thanks to Wietse and Noel for their help; however, what is this about? NOQUEUE: reject: RCPT from [x.x.x.x]:59439: 550 5.5.1 Protocol error; The explanation is the logfile, right before this. The description of those messages (DNSBL

Re: I think that thing smtpd_recipient_restrictions does not work

2011-01-21 Thread Jerrale G
header,hostname, or etc checks in this class; permit would override everything, causing open relay! Speaking of access lists, a question Mike Morris may also have for 2.8, we tried putting postscreen_access_list = permit_mynetworks, permit_sasl_authenticated but it doesn't allow "permit_sasl_authenticated". Jerrale G. SC Senior Admin

Re: Milter for handling messages bound for non-TLS-capable hosts?

2011-01-21 Thread Jerrale G
a good example so I don't have to start from scratch? Thank you kindly in advance! YOU HIJACKED A THREAD. DO NOT REPLY TO A THREAD IN AN ATTEMPT TO START A NEW ONE; THE HEADERS OF THE EMAIL IS HOW THE MAILING LIST DAEMON KEEPS TRACK OF THREADS AND REPLYING TO ONE KEEPS THE SAME THREAD

Re: why is messaging relaying happening

2011-01-22 Thread Jerrale G
mputer system. you didnt include your entire postfix main.cf Jerrale G. SC Senior Admin

Re: Sender and recipient restrictions

2011-01-23 Thread Jerrale G
appending it in smtpd_data_restrictions: smtpd_data_restrictions = reject_multi_recipient_bounce, reject_unauth_pipelining, permit_auth_destination ... (more) Jerrale G. SC Senior Admin

Text Substitution with pcre:

2011-01-28 Thread Jerrale G
mail.sheltoncomputers.com What is wrong with the above? It is not replacing all instances of 127.0.0.1 OR localhost with mail.sheltoncomputers.com. You can see where we want these replaced in our headers. Jerrale G. SC Senior Admin

Re: Text Substitution with pcre:

2011-01-28 Thread Jerrale G
On 1/28/2011 1:13 PM, Brian Evans - Postfix List wrote: On 1/28/2011 12:51 PM, Jerrale G wrote: We want the headers to correct show the mail system, with a bug in centos, it shows localhost or 127.0.0.1 where it should show mail.sheltoncomputers.com for PROPER, correct tracking. /etc/postfix

Re: Text Substitution with pcre:

2011-01-28 Thread Jerrale G
On 1/28/2011 2:55 PM, Noel Jones wrote: On 1/28/2011 12:24 PM, Jerrale G wrote: This is fine as long as I know how to keep the other part of the line in a variable, like $1 or $3 and know how to put it all back together afterwards. Could someone help me with this, please? An example

Re: Text Substitution with pcre:

2011-01-28 Thread Jerrale G
On 1/28/2011 3:43 PM, Jerrale G wrote: On 1/28/2011 2:55 PM, Noel Jones wrote: On 1/28/2011 12:24 PM, Jerrale G wrote: This is fine as long as I know how to keep the other part of the line in a variable, like $1 or $3 and know how to put it all back together afterwards. Could someone help me

Re: Text Substitution with pcre:

2011-01-28 Thread Jerrale G
On 1/28/2011 3:43 PM, Jerrale G wrote: On 1/28/2011 2:55 PM, Noel Jones wrote: On 1/28/2011 12:24 PM, Jerrale G wrote: This is fine as long as I know how to keep the other part of the line in a variable, like $1 or $3 and know how to put it all back together afterwards. Could someone help me

Re: Text Substitution with pcre:

2011-01-28 Thread Jerrale G
On 1/28/2011 3:49 PM, Jerrale G wrote: On 1/28/2011 3:43 PM, Jerrale G wrote: On 1/28/2011 2:55 PM, Noel Jones wrote: On 1/28/2011 12:24 PM, Jerrale G wrote: This is fine as long as I know how to keep the other part of the line in a variable, like $1 or $3 and know how to put it all back

Re: Text Substitution with pcre:

2011-01-28 Thread Jerrale G
On 1/28/2011 5:05 PM, Kris Deugau wrote: Jerrale G wrote: sorry for not including. Centos automatically puts 127.0.0.1 as $hostname in /etc/hosts. could you not fix /etc/hosts? (So far as I'm concerned, the only hostname legitimately associated with 127.0.0.1 is localhost. Any

Re: Text Substitution with pcre:

2011-01-29 Thread Jerrale G
On 1/29/2011 9:30 AM, Wietse Venema wrote: Noel Jones: On 1/28/2011 4:29 PM, Jerrale G wrote: Here is what I have tried so far: /(^X-Spam-Status:\sYes,\sscore=\d\d(\.\d)?\s)/gi DISCARD High Potential for Spam That's overly complicated. /^X-Spam-Status: Yes/ DISCARD High Spam Score wi

Re: Text Substitution with pcre:

2011-01-29 Thread Jerrale G
On 1/29/2011 7:51 PM, Wietse Venema wrote: Jerrale G: /^(.*)127\.0\.0\.\d+(.*)$/ REPLACE $1173.50.101.12$2 Surely, you will see warnings that $1173 is not a valid index. You need to read the section titled "TEXT SUBSTITUTION" in the pcre_table manpage TEXT SU

Re: Text Substitution with pcre:

2011-01-29 Thread Jerrale G
On 1/29/2011 7:51 PM, Wietse Venema wrote: Jerrale G: /^(.*)127\.0\.0\.\d+(.*)$/ REPLACE $1173.50.101.12$2 Surely, you will see warnings that $1173 is not a valid index. We dont get any warnings with our OWN. We only get warnings using any examples that have been given to us through

Re: Postfix with virtual domains and the username

2011-02-02 Thread Jerrale G
SER=$(sed ${USER}) endif You're not limited to bash, just to stdin stdout :) This was really ingenious of Timo, one maintainer of dovecot as it allowed us to store a bunch of criteria for security, such as the ip address logging in, the last login time, etc. Jerrale G. SC Senior Admin