]: NOQUEUE: milter-reject: MAIL
from localhost[127.0.0.1]: 451 4.7.1 Service unavailable - try again later;
from= proto=SMTP helo=
--- In postfix-us...@yahoogroups.com, Wietse Venema wrote:
>
> Larry G. Wapnitsky:
> > 220 mailproc.domain.com ESMTP Postfix (Debian/GNU)
> >
stinking chroots! :)
--- In postfix-us...@yahoogroups.com, Wietse Venema wrote:
>
> Larry G. Wapnitsky:
> > 220 mailproc.domain.com ESMTP Postfix (Debian/GNU)
> > helo test
> > 250 mailproc.domain.com
> > mail from: root
> > 451 4.7.1 Service unavailable -
post saying it is working, I can't see how. Assuming your
local users are on machines that are part of mynetworks or they are using
SASL authentication, permit_mynetworks or permit_sasl_authenticated will OK
the message. And if they're not, then reject_unauth_destination will reject
it. E
? They're really two
separate things requiring two independent configurations. An SMTP daemon
can and will run just fine with or without an MX record pointing to it.
-- Larry Stone
lston...@stonejongleux.com
l clients (usually other mailservers but
acting as a client from the view of your mailserver). But they are all
clients. If you think of users as clients and external mailservers as
something else, you'll have trouble configuring things correctly.
--
Larry Stone
lston...
hing doesn't work as you think it should
doesn't make it a bug.
By the way, Postfix also won't mop the floor for you. That's not a bug
either. :-)
-- Larry Stone
lston...@stonejongleux.com
e mail box you drop it in (I put my home address on my
envelopes, then drop it in a post office drop box at work).
-- Larry Stone
lston...@stonejongleux.com
hope page (<http://www.gnu.org/software/mailman/index.html>) and follow
the "Discussion Lists" link.
-- Larry Stone
lston...@stonejongleux.com
have a weekly cron job that
gives me a report of RBL effectiveness (it's real crude - a simple grep
piped to wc -l) and mails it to me. I don't trust that I have anything
setup correctly until I see proof in my logs.
-- Larry Stone
lston...@stonejongleux.com
written to it). Find the relevant section and extract.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
yes, then there should be an MX
pointing mail to whatever box will receive that mail (which may or may not
be the machine called relay.example.com - that's for you to decided and
configure).
-- Larry Stone
lston...@stonejongleux.com
what you are doing with DNS before just blindly
following this advice.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
On Thu, 25 Feb 2010, LuKreme wrote:
On 25-Feb-2010, at 05:35, Larry Stone wrote:
example.com. 60 IN MX 10 mail.example.com.
where the 60 is the time-to-live in seconds and the 10 is the priority.
Er, that's not what my MX looks like at all in bind9.
side the message for particular things i must stop going
out. postqueue won't show me that stuff. so, is there a way to
pillage the queued files?
postcat and postsuper will do what you want. Check their man pages for
details.
-- Larry Stone
lston...@stonejongleux.com
ible for an unattended destination
server to be down over a weekend or be down for long periods for an upgrade,
etc.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
d
goes to wherever mail is received for your address. There is nothing special
about a bounce message that would make the downstream server send it back to
the server that sent it the message.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
or our experts: is 554 an acceptable reject code there?)
-- Larry Stone
lston...@stonejongleux.com
smtpd
-o smtpd_client_restrictions=
for smtps. Is the problem connection to the smtps port?
-- Larry Stone
lston...@stonejongleux.com
r problem
being "postfix unavailable at 5 minutes after the hour?", your problem is
"postfix is never available (but you only try at 5 minutes after the
hour)". Wietse provided a possible solution for the latter problem.
-- Larry Stone
lston...@stonejongleux.com
stfix is acting as
both client (sending) and server (receiving) for the message. So yes,
Postfix is generating that DSN but it's doing so as the sending Postfix. Try
testing with a message originating externally and you should see your local
Postfix reject the message, not accept it and then generate a DSN.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
have Wieste fix it), don't take it
personally.
-- Larry Stone
lston...@stonejongleux.com
iving dated in the future. Since my mail reader
sorts by message time (by default), I keep seeing replies before his
question. :-(
-- Larry Stone
lston...@stonejongleux.com
f it's not mynetworks,
reject. SASL authentication is never looked at in that restriction.
-- Larry Stone
lston...@stonejongleux.com
On Tue, 8 Jun 2010, Phil Howard wrote:
On Tue, Jun 8, 2010 at 09:47, Larry Stone wrote:
On Tue, 8 Jun 2010, Phil Howard wrote:
On Fri, Jun 4, 2010 at 18:31, Sahil Tandon wrote:
On Fri, 04 Jun 2010, Dan Burkland wrote:
Relevant configuration entries:
---main.cf
On Tue, 8 Jun 2010, Phil Howard wrote:
On Tue, Jun 8, 2010 at 13:06, Larry Stone wrote:
And did you even read what I wrote? I am well aware you made a typo earlier.
I understand what you meant and said nothing about the mistake.
I think this is a case of users being mixed up. I did not
es it with Yahoo and
with no-one else.
Because it's Yahoo. Yahoo's defers mail for all sort of unfathomable
reasons. As Wieste just posted, the OP should jump through Yahoo's hoops
to become white-listed.
-- Larry Stone
lston...@stonejongleux.com
ntrols in place, you
should be (or soon will be) rejecting hundreds if not thousands of
messages per day.
-- Larry Stone
lston...@stonejongleux.com
mail is undeliverable,
it is returned to the return address. Once returned, the post office is done
with it; the post office does not archive a copy. If the mail cannot be
returned to the return address, it is for all practical purposes discarded.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
away very valuable, carefully crafted messages, with
> no way to recover them, even if the misconfiguration is detected
> very quickly.
Then the sender should save a copy. I do that the same as I make copies of
important documents before sending them off in snail mail.
--
as calling all
MTAs "Postfixes". :-)
-- Larry Stone
lston...@stonejongleux.com
swl zone servers.
Exactly. Access of a DNS based whitelist is not natively supported by
Postfix.
> Be glad it's still free and that you simply have to add some software to
> your system to make it work again.
Care to provide some pointers to such software? Or do you just as
On 11/4/10 7:06 AM, Ronald MacDonald at ron...@rmacd.com wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>
> On 4 Nov 2010, at 11:54, Larry Stone wrote:
>
>>>
>>> Be glad it's still free and that you simply have to add some software
On Thu, 4 Nov 2010, /dev/rob0 wrote:
On Thu, Nov 04, 2010 at 06:54:05AM -0500, Larry Stone wrote:
On 11/4/10 5:46 AM, Stan Hoeppner at s...@hardwarefreak.com wrote:
Be glad it's still free and that you simply have to add some
software to your system to make it work again.
Care to pr
ere; try searching for "iphone
install certificate". But in short, e-mail the certificate to your iphone
and then double-"click" it just like opening any other attachment. The
iPhone will then open an "install certificate" dialog.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
On 11/8/10 8:45 PM, Victor Duchovni at victor.ducho...@morganstanley.com
wrote:
> On Mon, Nov 08, 2010 at 07:32:25PM -0600, Vernon A. Fort wrote:
>
>> On Tue, 2010-11-09 at 11:53 +1100, Voytek Eymont wrote:
>>> On Tue, November 9, 2010 11:35 am, Larry Stone wrote:
>>
e from
84.45.228.40, not from some hostname. Postfix knows the TCP/IP address the
connection comes from and translates that to a hostname for logging and
restriction purposes. The way you wrote the above says (at least to me)
that you think Postfix gets a hostname and turns that into a TCP
olving the relay host
to the external address instead of the internal address) rather than a
Postfix issue.
-- Larry Stone
lston...@stonejongleux.com
other needed Postfix services are in master.cf
as 10.6 has a later version of Postfix than 10.4.
However, you have a second problem in the definition of one of your
restrictions as one of those warnings is telling you you have an absolute
permit and then follow it with more restrictions. Pr
needs to
be done by whoever owns the address space and is completely independent of
the DNS where you have your domain name registered. So it is not that the
"ISP where I register my DNS have problem" but rather I would guess that you
have never asked the owner of the address space to se
directly. Thanks Apple!
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
With the "sleep 1" being necessary to deal with launchd not liking programs
that daemonize. It wants things it starts to stick around so it can monitor
them. But with OnDemand set to true, it does not do anything when that
script dies. And as Wietse said, he's never seen Postfix die
#x27;t work...
Permit_mynetworks will permit anyone sending from an address in mynetworks
to send without authentication. Once that evaluates to OK, the rest of the
restriction is skipped.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
you don't use answering machines either. After all, if there's
no one there to immediately answer the call, it's pointless to take a
message.
-- Larry Stone
lston...@stonejongleux.com
e's a problem, it sits on my system where I can see it and deal with
it, not on my ISP's server where it's invisible to me.
-- Larry Stone
lston...@stonejongleux.com
xpect immediate delivery? If so, they need to be
educated that there is no guarantee of immediate delivery with e-mail. It
is store and forward technology and in these cases, it is getting stored
for a bit before getting forwarded.
-- Larry Stone
lston...@stonejongleux.com
d by someone who is
trying to help you.
--
Larry Stone
lston...@stonejongleux.com
Hello postfix-users,
For a selected time period today, the postfix/postscreen DNSBL rank
log entries are summarized as:
1744 DNSBL rank 2
12458 DNSBL rank 3
5113 DNSBL rank 4
1099 DNSBL rank 5
1 DNSBL rank 7
Q1: Given the postscreen invocation in main.cf below the sig, what is
t
On Sun, Mar 13, 2011 at 11:01 AM, Ralf Hildebrandt
wrote:
> * Larry Vaden :
>> Hello postfix-users,
>>
>> For a selected time period today, the postfix/postscreen DNSBL rank
>> log entries are summarized as:
>
> By which tool?
Hi Ralf,
Sorry about the subject l
On Sun, Mar 13, 2011 at 12:38 PM, Ralf Hildebrandt
wrote:
>
>> I would like to thank the author of postscreen --- who was that?
>
> Wietse?
As always, THANKS Weitse!
--
Larry Vaden, CoFounder
Internet Texoma, Inc.
Serving Rural Texomaland Since 1995
We Care About Your Connection!
On Sun, Mar 13, 2011 at 12:35 PM, Wietse Venema wrote:
>>
>> Q1: Given the postscreen invocation in main.cf below the sig, what is
>> the meaning of DNSBL rank 7?
>
> Uncorrected multi-bit memory error?
The boxen are Compaq DL380s with ECC; I'll leave it to you to discern
their capabilities as I
On Sun, Mar 13, 2011 at 12:43 PM, Wietse Venema wrote:
> Ralf Hildebrandt:
>> $ host 197.251.232.190.zen.spamhaus.org
>> 197.251.232.190.zen.spamhaus.org has address 127.0.0.11
>> 197.251.232.190.zen.spamhaus.org has address 127.0.0.4
>>
>> 2*2 = 7?
>
> Surely you have enough logs of your own that
On Sun, Mar 13, 2011 at 1:16 PM, Larry Vaden wrote:
> On Sun, Mar 13, 2011 at 12:43 PM, Wietse Venema wrote:
>> Ralf Hildebrandt:
>>> $ host 197.251.232.190.zen.spamhaus.org
>>> 197.251.232.190.zen.spamhaus.org has address 127.0.0.11
>>> 197.251.232.190.ze
On Sun, Mar 13, 2011 at 1:47 PM, Wietse Venema wrote:
> Larry Vaden:
>> Weitse,
>
> That is not my name.
Dr. Venema, my most sincere apologies.
OMG, my son is correct, 9 stents and a pacemaker later, I should avoid
public discourse.
>> Please let me try to advance the re
8) has changed.
>
> Also fixed with postfix-2.9-20110313.
>
> Wietse
THANKS/ldv
--
Larry Vaden, CoFounder
Internet Texoma, Inc.
Serving Rural Texomaland Since 1995
We Care About Your Connection!
your simple questions are easily found with your favorite search
engine.
-- Larry Stone
lston...@stonejongleux.com
without the requested information, we're guessing.
--
Larry Stone
lston...@stonejongleux.com
On 3/19/11 9:22 AM, David Touzeau at da...@touzeau.eu wrote:
> Le samedi 19 mars 2011 à 08:46 -0500, Larry Stone a écrit :
>> On 3/19/11 8:29 AM, David Touzeau at da...@touzeau.eu wrote:
>>
>>> The problem is not really inbound mails but growing the queue by
>>>
to prevent that, Postfix helpfully
removes any BCC headers it finds. By the time the message gets to
header_checks, the BCC header has already been removed.
-- Larry Stone
lston...@stonejongleux.com
On Sat, Apr 23, 2011 at 8:45 PM, Rajesh Kumar Mallah
wrote:
>
> Any help would be greatly appreciated.
I second your motion.
listed by Microsoft's live.com
without notice to abuse@
What are the URLs which describe BCP for this situation?
THANKS for your response(s).
kind regards/ldv
--
Larry Vaden, CoFounder
Internet Texoma, Inc.
Serving Rural Texomaland Since 1995
We Care About Your Connection!
Larry Vaden texoma.net> writes:
>
> What are the URLs which describe BCP for this situation?
>
> THANKS for your response(s).
>
> kind regards/ldv
I note Ralf encountered a very similar problem (see
<<http://old.nabble.com/Rate-
limiting--td20671270.html>>), but he's apparently not in today :(
anage
a Postfix installation.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
) Postfix passes the message to content filter #1 (e.g. on port 10025)
2) Content filter #1 passes the message to content filter #2 (e.g on port
10026)
3) Content filter #2 passed the message back to Postfix (e.g. on port
10027)
-- Larry Stone
lston...@stonejongleux.com
options needed but I am not enough of a Postfix expert to help you with
that.
On Thu, Oct 13, 2011 at 4:17 PM, Larry Stone
wrote:
On Thu, 13 Oct 2011, Roland de Lepper wrote:
I tried all sorts of examples in documentation, but
can't seem to get this
, but in the end it worked.
I think you posted to the wrong list. This is the Postfix list.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
t;http://mail.python.org/mailman/listinfo/mailman-users> for information and to
subscribe.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
ase tell us what is the problem you are
trying to solve". In other words, why do you suddenly need SMTP AUTH (and
I'm assuming here you want it even for clients in $mynetworks) and what
is the problem you think making it required will solve?
-- Larry Stone
lston...@stonejongleux.com
hought is the need to enable access to the MTA from other
> networks too, so, I need the SMTP AUTH.
How does that affect hosts in $mynetworks? You can have SMTP AUTH turned on but
still allow unauthenticated mail from hosts within $mynetworks.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
In one sense, switching from an Apple version of postfix to the
macports version is the same as switching from another MTA to Postfix. While
they're both called Postfix, one cannot just be dropped in in place of the
other. I think the OP needs to figure out how the macports version handles
authentication.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
ly to a
message in another thread as that messes up archiving and threaded MUAs.
2) Do not top post in this group.
3) Follow instructions. From your initial welcome email: TO REPORT A PROBLEM
see http://www.postfix.org/DEBUG_README.html#mail
You have failed to provide us with any us
done non-standard which may be related to your relay denied
problem.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
to edit main.cf; I've always used
a text editor. And I consider that a plus since it lets me add comments
and group things in a logical fashion.
-- Larry Stone
lston...@stonejongleux.com
.
-- Larry Stone
lston...@stonejongleux.com
timate words (particularly place names) that contain sex (just off
the top of my head, as a former New Jersey, USA resident, there are three
counties ending in sex: Essex, Middlesex, and Sussex; lots more elsewhere in
the world). Your check will reject legitimate mail that con
7;t, that would
certainly explain a "relay access denied" reject when attempting to send
from outside your network to outside your network. Note that
permit_sasl_authenticated must be ahead of reject_unauth_destination.
-- Larry Stone
lston...@stonejongleux.com
riction that was in the way of
what they were trying to do. To the extent it makes you actually
understand SMTP and Postfix better, it's probably good not to be too
specific.
-- Larry Stone
lston...@stonejongleux.com
auth_destination so the OP
should probably just remove check_relay_domains from his configuration.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
tocol to talk to an SMTP server.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
tally break the
definition of BCC.
(perhaps part of the problem is younger folk, rarely if ever exposed to
traditional office paper communications, are not familiar with why the
term is "carbon copy", when "blind carbon copies" were used, and perhaps
have never even seen carb
in their hands, you can't tell them what to do with them.
-- Larry Stone
lston...@stonejongleux.com
e the non-word "listserv". Listserv is a registered trademark for a
competing mailing list server and is not a generic term for any mailing list
server.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
.
Information about the list including a subscription sign-up form can be
found at <http://mail.python.org/mailman/listinfo/mailman-users/>
There are lots of Mailman users there who have it integrated with Postfix
so you should be able to get your questions answered there.
-- Larry Stone
to us. The
language you are using is a bit awkward. What do you mean by "turn off the
email distributions" if it doesn't mean "unsubscribe".
As for the second question, receiving your own post back does an adequate job
of acknowledging the post. Unless, of course, you mean something different when
you say "post acknowledgements".
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
post
postconf -n output, not main.cf contents (in other words, the
configuration postfix is actually using, not the one you think it is
using).
-- Larry Stone
lston...@stonejongleux.com
Apple's provided Postfix) with
everything in /usr/local (which Apple so far does not touch) so that I am
not at the whim of their changes.
-- Larry Stone
lston...@stonejongleux.com
PORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail";. Had you
read that, you would found that we need postconf -n output as well as relevant
non-verbose logging. It's probably a simple configuration issue. Reinstalling
software rather than correcting the conf
IMAP
with no conversion or client reconfiguration (other than SquirrelMail)
required.
-- Larry Stone
lston...@stonejongleux.com
. If true, that is very wrong behavior on the part of site3.
Your example says "m...@site3.com" so I assume you are the site3 recipient. Are
you running some sort of script on the received message that might be doing
this? Do you control the site3 SMTP server or are you just a user t
save every message and would not have
your initial statement of the problem.
-- Larry Stone
lston...@stonejongleux.com
e-id=
Mar 14 10:27:41 mail postfix/qmgr[2179]: 4B9A3E1C0A:
from=, size=7049, nrcpt=3 (queue active)
And comes back from a content filter with 3 recipients.
Seeing your master.cf might help too. But it's most likely the content
filter listening to port 10026.
-- Larry Stone
lston...@stonejongleux.com
gh less technical) who have
heard of Linux since it's been a "cool" buzz-word but have no idea what Unix is.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
t;make upgrade" will work when the upgrade is in a
different location than the previous version.
-- Larry Stone
lston...@stonejongleux.com
see about upgrading to Mountain Lion.
Otherwise, "make install".
Thanks. I had a feeling that was the answer.
-- Larry Stone
lston...@stonejongleux.com
On Apr 30, 2013, at 2:27 PM, Reindl Harald wrote:
> Am 30.04.2013 21:20, schrieb Larry Stone:
>> FWIW, I consider Lion (10.7) to be the last version of OS X for which the
>> Apple provided Postfix is usable. For
>> Mountain Lion (10.8), they changed a lot of the default
way
to route external mail to it. I do have a second IP address I can use so the
final test will be to make a good backup, switch the router to the alternate IP
address (thereby stopping legitimate outside mail from getting in), install in
production, test, and if all seems OK, switch back to the regular IP address.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
er than as
a decimal point.
No doubt no matter what you do, some people will get confused. So stick with
what we have which fits with much other software.
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
smime.p7s
Description: S/MIME cryptographic signature
l_auth"
> 451 4.3.5 Server configuration error
permit_sasl_auth <> permit_sasl_authenticated
--
Larry Stone
lston...@stonejongleux.com
http://www.stonejongleux.com/
smime.p7s
Description: S/MIME cryptographic signature
plicitly set to?
Works fine for me. I very much doubt your iPhone in question is actually set to
use 587 only. IIRC, that is not the default.
-- Larry Stone
Sent from my iPhone
587 only. IIRC, that is not the default.
>>
>> -- Larry Stone
>>Sent from my iPhone
> OK, so perhaps just refusing AUTH on port 25 will solve the problem. I've
> set the Server Port in Outgoing mail settings on iPhone to 587, so I don't
> really unders
n. However, don't just do what we suggest; make
sure you understand it and that it is doing what YOU want.
-- Larry Stone
lston...@stonejongleux.com
1 - 100 of 212 matches
Mail list logo