Re: Should I have postgrey listen on a socket?

2010-12-07 Thread lst_hoe02
Zitat von Stan Hoeppner : Noel Jones put forth on 12/6/2010 11:10 AM: If you decide that greylisting is right for you, postgrey is a popular choice -- it's flexible and reliable. ... See google for benefits and risks of using greylisting if you're not familiar with it. Interestingly, just

Re: Should I have postgrey listen on a socket?

2010-12-07 Thread lst_hoe02
Zitat von Stan Hoeppner : lst_ho...@kwsoft.de put forth on 12/7/2010 2:18 AM: Zitat von Stan Hoeppner : Noel Jones put forth on 12/6/2010 11:10 AM: If you decide that greylisting is right for you, postgrey is a popular choice -- it's flexible and reliable. ... See google for benefits and

Re: How not to reject invalid recipient domains (here: aol.com)

2010-12-21 Thread lst_hoe02
Zitat von Wolfgang Zeikat : Hi, apparently, aol.com is currently not resolved via DNS (at least in Germany). How can I have postfix queue mails to AOL and retry delivery in that case instead of bouncing the mails? As band-aid: soft_bounce=yes Regards Andreas smime.p7s Description: S/

Re: getting 'No recipient addresses found in message header'

2010-12-21 Thread lst_hoe02
Zitat von ev...@meulie.net: Hi all, Since yesterday I am suddenly seeing quite a few lines like: Dec 21 10:32:24 yips postfix/sendmail[3086]: fatal: www-data(33): No recipient addresses found in message header in my log. Is there any way I can determine which page/cron/something is causing th

Re: getting 'No recipient addresses found in message header'

2010-12-21 Thread lst_hoe02
Zitat von ev...@meulie.net: Zitat von ev...@meulie.net: Hi all, Since yesterday I am suddenly seeing quite a few lines like: Dec 21 10:32:24 yips postfix/sendmail[3086]: fatal: www-data(33): No recipient addresses found in message header in my log. Is there any way I can determine which pag

Re: Configuration help

2010-12-21 Thread lst_hoe02
Zitat von David Brophy : Hi, I'd like to set Postfix up as a high performance MTA for sending high volumes of mail. Our website (dontstayin.com) sends about 100,000 mails per day (message notifications etc.) We also send about 1-2 million bulk mails per day, in the form of newsletters and e-f

Re: OT aol.com no mx record ???

2010-12-22 Thread lst_hoe02
Zitat von Ralf Hildebrandt : * Robert Schetterer : >> [snip] yes it changed again, so there should be no problem anymore Frankly I didn't see a problem before. Less idiots on the internet, where's the problem? Na,na... Sowas kurz vor Weihnachten Gruß & fröhliches Fest Andreas smime

DSN action code "expanded" with lmtp_assume_final=yes

2010-12-22 Thread lst_hoe02
Hello we are trying to improve the DSN support of our environment and have set "lmtp_assume_final=yes" at our final mailstore using Cyrus and LMTP over socket. The resulting DSN still set Final-Recipient: rfc822; x...@kwsoft.de Original-Recipient: rfc822;x...@kwsoft.de Action: expanded Stat

Re: DSN action code "expanded" with lmtp_assume_final=yes

2010-12-22 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: Hello we are trying to improve the DSN support of our environment and have set "lmtp_assume_final=yes" at our final mailstore using Cyrus and LMTP over socket. The resulting DSN still set Final-Recipient: rfc822; x...@kwsoft.de Original-Recipient

Re: DSN action code "expanded" with lmtp_assume_final=yes

2010-12-22 Thread lst_hoe02
Zitat von Victor Duchovni : On Wed, Dec 22, 2010 at 09:35:59AM -0500, Wietse Venema wrote: 3 - Propagate ENVID, NOTIFY, RET, and ORCPT to one result from alias expansion only, and send no DSN. Postfix does this with one-to-one virtual aliases that translate one address into itself.

Re: DSN action code "expanded" with lmtp_assume_final=yes

2010-12-22 Thread lst_hoe02
Zitat von Ralf Hildebrandt : * Victor Duchovni : I am curious why the OP is eager to so faithfully support DSN. In my case I explicitly disable "DSN" in the ESMTP response at the incoming perimeter gateway. Yes, it causes nothing but grief. We had some sender who would ask for DSN, but then

Re: DSN action code "expanded" with lmtp_assume_final=yes

2010-12-22 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: we are trying to improve the DSN support of our environment and have set "lmtp_assume_final=yes" at our final mailstore using Cyrus and LMTP over socket. The resulting DSN still set Final-Recipient: rfc822; x...@kwsoft.de Original-Recipient: rfc82

Re: DSN action code "expanded" with lmtp_assume_final=yes

2010-12-23 Thread lst_hoe02
To summarize: DSN as of RFC 3461 is only recommended as internal status indicator for message relayed out of the own scope. End-to-end status is neither supported nor technical possible at the moment. So with this DSN is useless for us, as we don't have a complex or unreliable internal n

Re: Postfix and Postgrey Part II

2011-01-01 Thread lst_hoe02
Zitat von jason hirsh : OK Everyone was such a help that I am back.. I got a new server and thought things were going great The issue is Postgrey keeps bouncingh the same message i have tried to debug using my mac.com, comcast.net hotmail.com in all instances it kept boucing the mail until

Re: Reject unencrypted messages

2011-01-06 Thread lst_hoe02
Zitat von IT geek 31 : On 6 January 2011 19:49, Jerry wrote: On Thu, 6 Jan 2011 19:21:56 + IT geek 31 articulated: I think you've nailed it there Tom - I'm trying to teach better etiquette.  Ideally I'd like a plugin for his mail client (Outlook) that automatically detects the recipient

Re: DSN action code "expanded" with lmtp_assume_final=yes

2011-01-06 Thread lst_hoe02
Zitat von Victor Duchovni : On Thu, Dec 23, 2010 at 02:39:23PM +0100, lst_ho...@kwsoft.de wrote: To summarize: DSN as of RFC 3461 is only recommended as internal status indicator for message relayed out of the own scope. End-to-end status is neither supported nor technically possible at the

Re: another stupid question about exporting valid users from windows 2008 domain to postfix valid users map

2011-01-09 Thread lst_hoe02
Zitat von Eero Volotinen : Does this still works for windows 2008 ad? : http://postfix.state-of-mind.de/patrick.koetter/mailrelay/#d0e149 or is there better way to do it? In most cases it would be best to query Windows AD by LDAP without the need for script magic and without syncronisation

Re: Ignoring "certificate verification failed ... untrusted issuer"

2011-01-09 Thread lst_hoe02
Zitat von "Mike A. Leonetti" : I set up postfix with: smtp_tls_policy_maps = hash:/etc/postfix/tls_policy And a list of domains with "may" as the policy for each of them. The problem is postfix hates the certificate (because I don't have it listed as a trusted issuer anywhere). So I get this

Re: MS AD integration

2011-01-09 Thread lst_hoe02
Zitat von K bharathan : On Sun, Jan 9, 2011 at 7:41 PM, Jan Johansson wrote: >hi all >is there any way to postfix could query the mail users directly from Active Directory? >what is required for this >Thanks Sure, plenty of ways, but do you _*really*_ want this? The reason I mysel

RE: MS AD integration

2011-01-09 Thread lst_hoe02
Zitat von Dudi Goldenberg : is there any way to postfix could query  the mail users directly from Active Directory? Another reason not to use direct queries is that is for some reason the AD is down, postfix will reject emails destined to it. If use query the AD say once an hour into a ha

Re: another stupid question about exporting valid users from windows 2008 domain to postfix valid users map

2011-01-10 Thread lst_hoe02
Zitat von Ansgar Wiechers : On 2011-01-09 lst_ho...@kwsoft.de wrote: Zitat von Eero Volotinen : Does this still works for windows 2008 ad? : http://postfix.state-of-mind.de/patrick.koetter/mailrelay/#d0e149 or is there better way to do it? In most cases it would be best to query Windows AD

Re: Success story: smtpd_reject_footer

2011-01-11 Thread lst_hoe02
Zitat von Ralf Hildebrandt : smtpd_reject_footer = Contact postmaster at charite.de for assistance caused a SIGNIFICANT increase in postmaster tickets :| Uh, what *kind* of tickets??? So users do read. Most of the times, but its really hard to follow their wooly thoughts... Regards Andre

Re: Postfix 2.8 stable release soon

2011-01-14 Thread lst_hoe02
Zitat von Wietse Venema : Stan Hoeppner: Wietse Venema put forth on 1/13/2011 9:00 AM: > postscreen should be ready for prime time on *BSD, Linux and Solaris > systems (Solaris support was completed last week). AIX? AIX and HP-UX are not tested. Both use a BSD-derived TCP/UP stack, and will

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: Zitat von Wietse Venema : > Stan Hoeppner: >> Wietse Venema put forth on 1/13/2011 9:00 AM: >> >> > postscreen should be ready for prime time on *BSD, Linux and Solaris >> > systems (Solaris support was completed last week). >> >> AIX? > > AIX and

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: fslnx.hq.kwsoft.de[10.1.70.1] Jan 17 12:05:44 hpux2 postfix/postscreen[16003]: fatal: watchdog timeout Jan 17 12:05:45 hpux2 postfix/master[15998]: warning: process /usr/libexec/postfix/postscreen pid 16003 exit status 1 Looks like the same probl

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: Zitat von Wietse Venema : > lst_ho...@kwsoft.de: >> fslnx.hq.kwsoft.de[10.1.70.1] >> Jan 17 12:05:44 hpux2 postfix/postscreen[16003]: fatal: watchdog timeout >> Jan 17 12:05:45 hpux2 postfix/master[15998]: warning: process >> /usr/libexec/postfix/

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: With both changes it looks ok now (first blacklisted, second whitelisted): Jan 17 16:28:23 hpux2 postfix/master[28899]: daemon started -- version 2.8.0-RC1, configuration /etc/postfix Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: CONNECT from

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: [ Charset ISO-8859-1 unsupported, converting... ] Zitat von Wietse Venema : > lst_ho...@kwsoft.de: >> With both changes it looks ok now (first blacklisted, second whitelisted): >> >> >> Jan 17 16:28:23 hpux2 postfix/master[28899]: daemon starte

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : Wietse Venema: lst_ho...@kwsoft.de: > Zitat von Wietse Venema : > > > lst_ho...@kwsoft.de: > >> With both changes it looks ok now (first blacklisted, second whitelisted): > >> > >> > >> Jan 17 16:28:23 hpux2 postfix/master[28899]: daemon started -- version > >> 2.8.

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: > This is what I expect to see (default_process_limit = 100): > > Jan 17 11:32:56 tail postfix/postscreen[17566]: > postscreen_command_time_limit: stress=10 normal=300 lowat=70 hiwat=90 > > hiwat=90 means enter stress mode with 90 or more connectio

Re: About website www.postfix.org

2011-01-17 Thread lst_hoe02
Zitat von Buzai Andras : Actually he is right. "www" is just a sub-domain. The common practice (although it is not mandatory) is to have "www" setup as a CNAME for "domain.tld". Personally I think it would be nice to have "postfix.org" and "www.postfix.org" point to the same location. Actually

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: Zitat von Wietse Venema : > lst_ho...@kwsoft.de: >> > This is what I expect to see (default_process_limit = 100): >> > >> > Jan 17 11:32:56 tail postfix/postscreen[17566]: >> > postscreen_command_time_limit: stress=10 normal=300 lowat=70 hiwat=90

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : Victor Duchovni: On Mon, Jan 17, 2011 at 02:56:57PM -0500, Wietse Venema wrote: > Well this is the code: > > psc_lowat_check_queue_length = .7 * var_psc_pre_queue_limit; > psc_hiwat_check_queue_length = .9 * var_psc_pre_queue_limit; Is the compiler first conv

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : Wietse Venema: lst_ho...@kwsoft.de: > Zitat von Wietse Venema : > > > Victor Duchovni: > >> On Mon, Jan 17, 2011 at 02:56:57PM -0500, Wietse Venema wrote: > >> > >> > Well this is the code: > >> > > >> > psc_lowat_check_queue_length = .7 * var_psc_pre_queue_limit;

Re: Postfix 2.8 stable release soon

2011-01-17 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: >> If you have time, can you try: >> >> stuff = 0.7 * ((double) var_psc_pre_queue_limit); >> stuff = 0.9 * ((double) var_psc_pre_queue_limit); >> >> Thanks, > > In case that does not help, declaring the hiwat and lowat variables > as double

Re: Postfix 2.8 stable release soon

2011-01-20 Thread lst_hoe02
Zitat von lst_ho...@kwsoft.de: Zitat von Wietse Venema : lst_ho...@kwsoft.de: If you have time, can you try: stuff = 0.7 * ((double) var_psc_pre_queue_limit); stuff = 0.9 * ((double) var_psc_pre_queue_limit); Thanks, In case that does not help, declaring the hiwat and lowat variab

Re: Postfix 2.8 not alone in enabling ECDHE ciphers.

2011-01-22 Thread lst_hoe02
Zitat von Victor Duchovni : The Postfix 2.8 SMTP server will not be alone in enabling server-side Elliptic Curve Diffie-Hellman key-agreement. Hosted domains served by smtproutes.com (e.g. saybrook.edu) have ECDHE ciphers enabled: Trusted TLS connection established to saybrook.edu.pri

Re: ip reputation

2011-01-25 Thread lst_hoe02
Zitat von Bissio2000 : Hi all, we have some problem with our ip reputation on other provider. We are using our postfix server as delivery server for some mailing lists (about 5000/8000 users); after a few days the destination providers (as hotmail, or yahoo) block any message coming from our m

Re: Operating Postfix with IPv6 (dual-stack)

2011-02-01 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: Hello we are on the way to IPv6 and some question arise about Postfix IPv6 behaviour in dual stack setup. You mean dual-protocol. Unlike some versions of Linux, there exist systems that have a single unified TCP/IP stack implementation (the prot

Re: Operating Postfix with IPv6 (dual-stack)

2011-02-01 Thread lst_hoe02
Zitat von Wietse Venema : Wietse Venema: > >> 2.) Do /ip6.arpa lookup occur on client connects from IPv4 > >> addresses or only when a client connects by IPv6 (name/reverse lookups)? > > > > The Postfix SMTP server's FCRDNS lookups use the getnameinfo() and > > getaddrinfo() system libra

Re: Delivering Mail with priority based on domain

2011-02-04 Thread lst_hoe02
Zitat von Victor Duchovni : On Fri, Feb 04, 2011 at 12:51:36AM +0100, Jeroen Geilman wrote: That will create a separate queue from the outgoing mail which is using the "smtp" transport, There is one queue. Physically, yes. Logically, and this is what matters more: no. Each transport has a

Re: Question about: postfix/smtpd[ ]: connect from unknown[unknown]

2011-02-04 Thread lst_hoe02
Zitat von Reindl Harald : Am 04.02.2011 11:20, schrieb J4K: I agree. I have plenty of colleagues who run their own mail servers from residential connections and they know how to set-up their machines. Maybe, but if they are running a mailserver form dial-up ranges mail seems not to be impor

Re: postfix and dns lookup

2011-02-04 Thread lst_hoe02
Zitat von Matteo Cazzador : Than'k a lot and excuse me if i'm not so clear: my local dns server , that is postfix server to, is used to filter navigation of client (by domain black list) so my local dns is under pressure and often mail give me error resolving dns while sending mail to exter

Re: Experiences with Fortimail and postfix

2011-02-07 Thread lst_hoe02
Zitat von "Ralf W." : Hello all, Can somebody give me some feed back on putting a postfix mail cluster behind one off these new Fortimail appliances? We are getting 75 emails a day and are currently using Cisco ironport devices. The biggest problem is spam. Postfix properly configure

Re: domain-aliases / recipient_canonical_maps / vrfy

2011-02-07 Thread lst_hoe02
Zitat von Reindl Harald : hi i have a little problem implementing alias-domains the backend is dbmail with some additional tables and a inhouse developed webui for dbmail/postfix/dovecot-proxy i'm using "recipient_canonical_maps" as follows what works but RCPT-Verify for "inva...@aliasdomain.t

Re: domain-aliases / recipient_canonical_maps / vrfy

2011-02-07 Thread lst_hoe02
Zitat von Reindl Harald : Am 07.02.2011 11:51, schrieb lst_ho...@kwsoft.de: Zitat von Reindl Harald : hi i have a little problem implementing alias-domains the backend is dbmail with some additional tables and a inhouse developed webui for dbmail/postfix/dovecot-proxy i'm using "recipient

Re: domain-aliases / recipient_canonical_maps / vrfy

2011-02-07 Thread lst_hoe02
Zitat von Reindl Harald : Am 07.02.2011 22:56, schrieb lst_ho...@kwsoft.de: This is your source of recipient checking... So it matters what you get from this by querying with "postmap -q mysql:/etc/postfix/mysql-recipients.cf exactly this is the reason why i need a working domain-alias

Re: domain-aliases / recipient_canonical_maps / vrfy

2011-02-08 Thread lst_hoe02
Zitat von Reindl Harald : Hm, OK, i will start my IDE and develop something nice local_recipient_maps = mysql:/etc/postfix/mysql-recipients.cf virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias.cf Can i use both as above because "mysql-recipients.cf" are from the dbmail-alias-table an

Re: domain-aliases / recipient_canonical_maps / vrfy

2011-02-08 Thread lst_hoe02
Zitat von Ralf Hildebrandt : * lst_ho...@kwsoft.de : virtual_alias_maps is used for domains listed in virtual_alias_domains (= virtual alias domain class) No, it's always applied! Upps, yes. This has confused me some time ago already... Regards Andreas smime.p7s Description: S/MIME C

Re: domain-aliases / recipient_canonical_maps / vrfy

2011-02-08 Thread lst_hoe02
Zitat von Victor Duchovni : On Tue, Feb 08, 2011 at 09:25:06AM +0100, lst_ho...@kwsoft.de wrote: local_recipient_maps is used for recipients with domain part listed in mydestination (= local domain class) virtual_alias_maps is used for domains listed in virtual_alias_domains (= virtual alias d

Re: info greylist mechanism

2011-02-21 Thread lst_hoe02
Zitat von Matteo Cazzador : Hello i've read something about grey list and i've a question about it: Is it better to use postgrey or i can use directly postfix greylist mechanism (http://www.postfix.org/SMTPD_POLICY_README.html#greylist) to realize greylist system? what the difference ? As

Re: separate backend for different domains

2011-02-21 Thread lst_hoe02
Zitat von Erwan Loaëc : Hello, We have a postfix system which handle many alias and users with virtual transport. The backend used is LDAP. Now, I have to use mysql backend for some other specific domains. How can I set this to make postfix looking to ldap for a "list of domain" and look

Re: Attempting delivery to wrong domain?

2011-02-21 Thread lst_hoe02
Zitat von D G Teed : I suspect there is a simple explanation to this I've overlooked. We have a problem delivering to one address @eastlink.ca The odd thing is that the bounce is from google mail, and this Canadian ISP does not use google mail services. I've tested that 'host -t mx eastlnk.ca

Re: smtp timeout

2011-02-23 Thread lst_hoe02
Zitat von Ralf Hildebrandt : * Richard Smits : Hello, We have a problem in SMTP communication with some external mailservers. I will explain. If i do a telnet to port 25 on a remote server, I get no greeting message, it just waits. I suppose this is some greeting delay for anti spam. It come

Re: smtp timeout

2011-02-23 Thread lst_hoe02
Zitat von Richard Smits : On 02/23/2011 11:56 AM, lst_ho...@kwsoft.de wrote: Zitat von Ralf Hildebrandt : * Richard Smits : Hello, We have a problem in SMTP communication with some external mailservers. I will explain. If i do a telnet to port 25 on a remote server, I get no greeting messag

Re: Starting postfix

2011-02-25 Thread lst_hoe02
Zitat von Victor Duchovni : On Fri, Feb 25, 2011 at 12:58:22AM +0100, Christian Roessner wrote: I am currently preparing an upstart script for Ubuntu. I tried several ways do use /usr/sbin/postfix, but I never would get the master PID. So I looked at the postfix.c code. There is a no single

Re: ESMTP extension (was: Re: Encrypted connection from mta to mta?)

2011-02-25 Thread lst_hoe02
Zitat von Bernhard Rohrer : This gave me an idea: what do people think about an ESMTP extension that enforces TLS? MTA1 --> MTA2 -> MTA3 TLS TLS with the idea of having an X-header that basically says "do not forward if no TLS available" so MTA1 sends to MTA2 encrypted.

Re: Starting postfix

2011-02-25 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: The "problem" is more of that distribution like Ubuntu and Redhat are moving to "upstart" for boot and starting services/daemons. The main difference for the started services is that upstart need the program to *not* daemonize or terminate itself b

Re: Starting postfix

2011-02-25 Thread lst_hoe02
Zitat von Wietse Venema : Wietse Venema: lst_ho...@kwsoft.de: > Zitat von Wietse Venema : > > > lst_ho...@kwsoft.de: > >> The "problem" is more of that distribution like Ubuntu and Redhat are > >> moving to "upstart" for boot and starting services/daemons. The main > >> difference for the start

Re: Starting postfix

2011-02-25 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: Zitat von Wietse Venema : > Wietse Venema: >> lst_ho...@kwsoft.de: >> > Zitat von Wietse Venema : >> > >> > > lst_ho...@kwsoft.de: >> > >> The "problem" is more of that distribution like Ubuntu and Redhat are >> > >> moving to "upstart" for boo

Re: Starting postfix

2011-02-25 Thread lst_hoe02
Zitat von Wietse Venema : Christian Roessner: This is, what I learned. So now my question: what do you have in mind Wietse, if you say, you may provide something? Do not get me wrong I have written a "postfix upstart" command as described below. This can automatically respawn Postfix in sing

Re: posfix rejected from google server

2011-03-01 Thread lst_hoe02
Zitat von kapetr : So you mean, that this is not problem of bad postfix config ? So I can nothing do to get it working ? Maybe must every, who wants to send mails to Google, have contract with Google ? It seems to be too improbable to be possible. Is this sure or is there another possibility ?

Re: mysql GPL/postfix IPL incompatibility

2011-03-01 Thread lst_hoe02
Zitat von Matthias Andree : Am 28.02.2011 23:57, schrieb Quanah Gibson-Mount: The main issue I see at the moment really is the inability to legally link Postfix to MySQL, removing a valuable piece of Postfix functionality. Not a loss. If MySQL and Postfix turn out to be incompatible license

Re: posfix rejected from google server

2011-03-02 Thread lst_hoe02
Zitat von kapetr : Thanks all for replays. Just few remarks: 1. RDNS - e.g. for den...@bestcheer.com, li...@dguhl.org, ... that's what I had try to correct with myhostname = 108.234.broadband4.iol.cz yes - it is what I get with dig -x , so then dig 108.234.broadband4.iol.cz == this address

Re: posfix rejected from google server

2011-03-03 Thread lst_hoe02
Zitat von kapetr : And the: http://cbl.abuseat.org/lookup.cgi?ip=85.71.234.108+&.submit=Lookup says -as you wrote: IP Address 85.71.234.108 is listed in the CBL. It appears to be infected with a spam sending trojan or proxy. It was last detected at 2011-03-01 07:00 GMT (+/- 30 minutes), approxi

Re: Kernel Oops

2011-03-04 Thread lst_hoe02
Zitat von Wietse Venema : Steve Jenkins: On Fri, Mar 4, 2011 at 8:01 AM, Denis Shulyaka wrote: > Thanks! I will try to do this and will update you with the result. When I read Denis' first post I thought "WHAT? Postfix on a WRT54G? He's crazy!" But now I'm rooting for you, Denis! I hope y

Re: backscatter

2009-07-04 Thread lst_hoe02
Zitat von R Johnson : On Fri, 2009-07-03 at 10:23 +0100, kj wrote: --kj What I suggest you do is set up some kind of forwarding for Postscatter so it is sent to: wie...@porcupine.org. I wish everyone who suffers Postscatter would do it. Then perhaps the ignorant retarded f&ckwit may get the fh

Re: postscreen test

2009-07-17 Thread lst_hoe02
Zitat von Victor Duchovni : On Thu, Jul 16, 2009 at 05:21:13PM -0400, Rob Foehl wrote: Possible substitutes include concierge or valet, or perhaps any of the less specific guard, sentry, sentinel, ... I think "sentry" is short, and simple, and can even be thought of as a contraction of "smtp

Re: openldap-2.3.39 crash

2009-08-14 Thread lst_hoe02
Zitat von 承磊 : Hi list I have been using postfix since a few weeks. The setup is currently: Redhat As4.4 (Linux 2.6.9-42 SMP), Postfix 2.3.39, openldap-2.3.39, BerkeleyDB 4.5. 20 , courier-authlib-0.56. Now, the ldap service crashes frequently once the ldap connection raises about 300(the datab

Re: postfix mail queue hits a certain limit, needs restart of postfix (not aware of other choices, or root cause)

2009-08-17 Thread lst_hoe02
Zitat von Richard Wurman : I support a couple postfix servers that do a high volume of sending mail (not "direct marketing" :) for billing, invoicing and account update confirmations). On one machine, when the mailq is over 5000, things seem to get "stuck" where I need to restart postfix. If I d

Re: safe way to retire postfix gateway

2009-08-19 Thread lst_hoe02
Zitat von Robert Lopez : Having built new email gateways, it is time to retire the old ones. I have removed one email gateway running postfix from the MX records for our college. It still has a few hundred mail in the queues and some spam is still coming in. What is the best way to stop the

Re: Country IP block list

2009-08-23 Thread lst_hoe02
Zitat von Daniel L'Hommedieu : On Aug 23, 2009, at 8:08, Byung-Hee HWANG wrote: At Sat, 22 Aug 2009 08:56:28 -0700, Security Admin (NetSec) wrote: [1 ] Could someone provide links to sites where IP addresses are grouped by country? ASNs would work too but would prefer IP lists that I co

Re: Relay access denied, but I think it shouldn't be.

2009-08-23 Thread lst_hoe02
Zitat von Boyd Lynn Gerber : Hello, I have a mental block and need an other set of eyes to maybe spot it. I have replaced the gmail username with user below. So below is the mail log and my postconf -n Aug 23 11:25:55 suse104 postfix/smtpd[16378]: NOQUEUE: reject: RCPT from localhost[::1

Re: deflecting attacks

2009-08-24 Thread lst_hoe02
Zitat von AMP Admin : Does anyone use iptables or something to defend against attacks? Like if x amount of requests per x amount of time send away. If so I would love some examples. Thanks! We use the following : $IPTABLES -N SMTP-BLOCK $IPTABLES -A SMTP-BLOCK -m limit --limit 1/m --limit

Re: latest postfix vs. postfix 2.3 package?

2009-09-07 Thread lst_hoe02
Zitat von Seth Mattinen : Dave wrote: Hello, I'm running postfix 2.3 via rpm package. This is on a centos box. I know that there are later versions out, and am wondering if there's a feature add-ons page, not just a changelog, something very detailed version to version, that goes in to

Re: How to deliver to Cyrus imapd mailboxes

2009-10-20 Thread lst_hoe02
Zitat von Raimund Eimann : Hi, I'm running Cyrus imapd and postfix on a box. I would like postfix to deliver incoming mail not to /var/spool/mail/, but rather to /var/spool/imap//Inbox, where the latter is apparently not a flat file, but rather a typical imap directory structure ("maildir"?) C

Re: How to deliver to Cyrus imapd mailboxes

2009-10-20 Thread lst_hoe02
Zitat von Mark Goodge : Raimund Eimann wrote: Hi, I'm running Cyrus imapd and postfix on a box. I would like postfix to deliver incoming mail not to /var/spool/mail/, but rather to /var/spool/imap//Inbox, where the latter is apparently not a flat file, but rather a typical imap directory struc

Re: Limits of map files length my machine can take

2009-10-28 Thread lst_hoe02
Zitat von ram : We need to design a mail system where postfix transport maps file will grow based on the inputs. . This may grow to a million lines I need to know what will be the max entries in transport map that the machine can handle ( 4 GB Ram , Quad Xeon) .. given that the system is runnin

Re: Limits of map files length my machine can take

2009-10-28 Thread lst_hoe02
Zitat von ram : On Wed, 2009-10-28 at 10:46 +0100, lst_ho...@kwsoft.de wrote: Zitat von ram : > We need to design a mail system where postfix transport maps file will > grow based on the inputs. . This may grow to a million lines > > I need to know what will be the max entries in transport ma

Re: How to reduce memory footpring?

2009-10-28 Thread lst_hoe02
Zitat von Rene Bartsch : On Wed, Oct 28, 2009 at 08:28:35PM +0100, Rene Bartsch wrote: smtpd needs 24 MByte per client connection. You may not be measuring correctly, are you sure you are not counting shared executable pages or otherwise mapped read-only pages. Output of "top": PID USER

Re: How to reduce memory footpring?

2009-10-29 Thread lst_hoe02
Zitat von Rene Bartsch : Rene Bartsch: PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 7159 postfix 20 0 79960 24m 3332 S 0 12.4 0:00.14 smtpd 7897 postfix 20 0 79204 23m 2736 S 0 11.7 0:00.10 smtpd Please report what portions of th

Re: SMTP-AUTH *without* SASL/PAM?

2009-10-29 Thread lst_hoe02
Zitat von Keith Palmer : OK, thanks... but that doesn't answer my question. Is it possible to configure Postfix for SMTP-AUTH *without* using SASL/PAM? I'd like to *not run SASL at all* rather than have it do the lookups. Postfix has no user management at its own. You have to use either

Re: How to reduce memory footpring?

2009-10-29 Thread lst_hoe02
Zitat von Wietse Venema : Rene Bartsch: r...@www:~# pmap 23976 pmap is a command that originates from Solaris, but that is also available on Linux (except that the Linux version is very light on documentation). 23976: smtpd -n :smtp -t inet -u -o stress ... 7f2936d45000 36K r-x-

Re: Backscatter email

2009-10-30 Thread lst_hoe02
Zitat von Wietse Venema : Matt Richards: Hello, I just want to check up on something ... I run my own mail servers, using postfix and a few years ago I use to get quite a lot of backscatter due to spam messages being sent out with forged from addresses. Today I still run my own mail server b

Re: postfix + dns ldap srv

2009-11-04 Thread lst_hoe02
Zitat von Victor Duchovni : On Wed, Nov 04, 2009 at 02:39:06PM -0200, maximatt wrote: Postfix support dns srv registers... for ldap service? If you need to define your LDAP servers in SRV records, you can run a cron job that queries DNS, and rebuilds your "map.cf" files based on an updated s

Re: mycingular.net verification failed: Name or service not known

2009-11-04 Thread lst_hoe02
Zitat von Dan Schaefer : One of my coworkers would like to send emails from her blackberry using the work mail server and her work address. Whenever she attempts to send a message, I get the following error messages in the mail log: Nov 4 13:28:35 pony postfix/smtpd[26853]: warning: 32.144

Re: outbound spam filtering

2009-11-06 Thread lst_hoe02
Zitat von Alex : Hi The trust in my own users led me to his post. The users are ignorant (not all, but..). No one care about how send , what send, where send , thei just wnat to send more and more . I don't trust anyone and my server too. I know that the outbound filtering is d

Re: newaliases problem with root user

2009-11-10 Thread lst_hoe02
Zitat von Manoj Burande : Hello There, Can anybody please suggest me on the below error while adding new aliases to the root user. I am just trying to forward all emails of the root user to my own account but #newaliases command result with the below error. I am a newbie on postfix please

Re: DB files across machines

2009-11-12 Thread lst_hoe02
Zitat von Gaby Vanhegan : Is there a portable way to share postmapped file across machines? I have one postfix server running OpenBSD and another running CentOS, I want the CentOS server to provide secondary services for for the BSD box. The OpenBSD box uses virtual delivery: /etc/postfi

Creation of Message-ID

2009-11-13 Thread lst_hoe02
Hello as far as i know Postfix does not alter a Message-ID beside when it creates a missing one. Is there some way one could find out later in the logfile if Postfix has created one? Is it sufficient if the Message-ID looks like "@" or is there some other thing to check? Many Thanks An

Re: increase queue lifetime

2009-11-16 Thread lst_hoe02
Zitat von "Kammen van, Marco, Springer SBM NL" : Hi All, Because of a crashed exchange server we need to queue messages longer on our smarthost then usual. I want to increase the time messages are queued to at least 2 weeks... Is changing the 'maximal_queue_lifetime' in main.cf sufficient

Re: Attempt MX, fallback to relay in case of error only

2009-11-18 Thread lst_hoe02
Zitat von "cont...@rusanu.com" : Is there a way to configure postfix to use a relay only if direct delivery is rejected? The case being a web application that has to send notification to subscribers, but some servers reject the connection (app IP originates from AWS EC2). I want those cases

Re: postfix - postgrey - lost connection after RSET

2009-11-27 Thread lst_hoe02
Zitat von Braun Björn : Hiho, I'm using debian 4.0r6 / postfix / postgrey ... This works really fine for 99+% of emailsenders From time to time I get Nov 11 09:01:54 grey2 postfix/smtpd[28926]: lost connection after RSET from unknown[xxx.xxx.xxx.xxx] This has probably nothing to do with

Re: AW: postfix - postgrey - lost connection after RSET

2009-11-27 Thread lst_hoe02
Zitat von Braun Björn : My logs (mail.log) Nov 5 10:07:56 grey2 postfix/smtpd[7153]: connect from unknown[ddd.dd.ddd.dd] Nov 5 10:07:56 grey2 postfix/smtpd[7153]: NOQUEUE: reject: RCPT from unknown[ddd.dd.ddd.dd]: 450 4.7.1 : Recipient address rejected: Greylisted, see http://isg.ee.e

Re: AW: postfix - postgrey - lost connection after RSET

2009-11-27 Thread lst_hoe02
Zitat von Eero Volotinen : Braun Björn wrote: My logs (mail.log) Nov 5 10:07:56 grey2 postfix/smtpd[7153]: connect from unknown[ddd.dd.ddd.dd] Nov 5 10:07:56 grey2 postfix/smtpd[7153]: NOQUEUE: reject: RCPT from unknown[ddd.dd.ddd.dd]: 450 4.7.1 : Recipient address rejected: Greylisted

Force matching envelop MAIL FROM and "From" header

2009-12-02 Thread lst_hoe02
Hello is it possible to force a matching "From" header in the mail if reject_sender_login_mismatch is used so the "From" header is the same as the checked MAIL FROM address? The goal is to prevent spoofing of the "From" header for SASL authenticated clients. Many Thanks Andreas smime.p

Re: new server, same conf files

2009-12-02 Thread lst_hoe02
Zitat von LuKreme : OK, in preparation for moving to new hardware I've copied all the mail from the working machine to the new machine, installed postfix and copied over my /usr/local/etc/postfix folder so that I have identical configs on both machines. Now, I haven't changed the MX recor

Re: Force matching envelop MAIL FROM and "From" header

2009-12-02 Thread lst_hoe02
Zitat von Wietse Venema : lst_ho...@kwsoft.de: Hello is it possible to force a matching "From" header in the mail if reject_sender_login_mismatch is used so the "From" header is the same as the checked MAIL FROM address? The goal is to prevent spoofing of the "From" header for SASL authenticat

Re: sender_dependent_relayhost_maps and ldap with multivalue attribute

2009-12-03 Thread lst_hoe02
Zitat von Jerry : On Wed, 2 Dec 2009 20:51:16 -0500 (EST) Wietse Venema replied: Wietse: You must return a result that satisfies the documented syntax. http://www.postfix.org/postconf.html#relayhost Wietse, maybe it is something local to my machine; however that URL yields this result here

Re: LDAP configuration issue

2009-12-07 Thread lst_hoe02
Zitat von Javier Henderson : Greetings, I am trying to configure Postfix to gracefully deal with the failure of the LDAP server it uses for alias resolution. It's working fine, using the LDAP server to resolve u...@domain.com to u...@somehost.domain.com, but if the LDAP server dies or bec

<    1   2   3   4   >