I have Postfix set up using virtual domains with sasl enabled such that to
send an e-mail they need to login with "usern...@domain.com".
As it is, however, when a user logs in to the smtpd, they can thereafter
treat my mail server as an open relay & forge their "Mail From" address to
come from any
> Patrick wrote:
>> I have Postfix set up using virtual domains with sasl enabled such that
>> to
>> send an e-mail they need to login with "usern...@domain.com".
>>
>> As it is, however, when a user logs in to the smtpd, they can thereafter
>> tr
same end result.) I realize security measures would also need to be taken
to lock down the machine from which the mail is being sent, but that's not
my problem ;)
Thanks,
Patrick
Hi Dominik,
I believe envelope senders is what he's wanting, though SASL authenticated
users could probably work, too.
Patrick
On Tue, Feb 12, 2013 at 4:31 PM, Dominik George wrote:
> Hi Patrick,
>
> > I have a customer who would like to configure the Postfix server he u
2
maxretry = 1
bantime = 86400
It works like a charm and requested IPs are banned within seconds of
my request, automatically expiring after the "bantime" passes.
Patrick
On Wed, Apr 3, 2013 at 7:10 AM, Chad M Stewart wrote:
>
> Before I go and write my own solution I though
smtp_fallback_relay the correct method to do this? Any help would be
greatly appreciated. Thanks.
Patrick Saweikis
>> Patrick Saweikis wrote:
>>
>> Hello
>>
>>
>>
>> We are using postfix 2.3.8 and have it integrated with
>> mysql and transport maps are set on a per domain basis this way
>> (transport_maps = mysql:/etc/postfix/mysql-transport
ook up in tons of threads in many places but haven't found a
real solution.
I just found that Postfix could send 1 million emails per hour when I
send less than a half million in 24 hours.
Please help
Patrick
Le 07/01/2010 20:03, Barney Desmond a écrit :
2010/1/8 Patrick Chemla
Incoming messages are entering very fast (500 smtp processes declared) and
the active queue is actually of 2 millions messages waiting for delivery.
here is my main.cf file:
That's some very thorough inform
Le 07/01/2010 20:00, Wietse Venema a écrit :
Patrick Chemla:
Hi,
I am running Postfix 2.5.6 on a Fedora 11 Linux system on a hardware
based Intel I5/750 Quad Core, 8 Gb memory, 160Gb SSD hard disk.
Incoming messages are entering very fast (500 smtp processes declared)
and the active
Le 07/01/2010 23:47, Stefan Caunter a écrit :
On Thu, Jan 7, 2010 at 1:25 PM, Patrick Chemla
wrote:
said "I just found that Postfix could send 1 million emails per hour
when I send less than a half million in 24 hours", but I can't make
sense of that, sorry.
I h
Le 07/01/2010 20:37, Victor Duchovni a écrit :
On Thu, Jan 07, 2010 at 08:29:44PM +0200, Patrick Chemla wrote:
Here the logs:
This is just the qmgr(8) warnings about a clogged queue. Other than
telling us that all the mail is going to "localpc2105.com", this
is not v
Le 08/01/2010 03:03, Wietse Venema a écrit :
Patrick Chemla:
But the CPU of the box is idle more than 80%. It is clear that it is not a
matter of CPU, nor memory, nor disk. Something in the number of
processes/users/simultaneous tasks is blocking.
Indeed, the symptom of blocking
Le 08/01/2010 00:43, Victor Duchovni a écrit :
On Fri, Jan 08, 2010 at 12:30:34AM +0200, Patrick Chemla wrote:
Jan 7 22:02:57 postfix postfix/qmgr[26441]: 5B91F873F6: removed
Jan 7 22:02:57 postfix postfix/smtp[27180]: 375DDD5923:
to=, relay=a139.localpc2105.com[10.0.0.139]:25,
conn_use
h one.
Am I correct ? or I am dreaming of another mail transport package?
Patrick
lookup hits=0 miss=2492 success=0%
Jan 9 19:15:21 postfix postfix/scache[18038]: statistics: max
simultaneous domains=1 addresses=4 connection=4
What means miss=89 success=55%, miss=2492 success=0%?
Thanks
Patrick
Hi Stan,
Thanks for your interest.
Le 09/01/2010 20:21, Stan Hoeppner a écrit :
Patrick Chemla put forth on 1/9/2010 11:17 AM:
Hi all,
I got these statistics:
Jan 9 19:15:21 postfix postfix/scache[18038]: statistics: start
interval Jan 9 19:09:03
Jan 9 19:15:21 postfix postfix/scache
Le 09/01/2010 20:54, Stan Hoeppner a écrit :
Patrick Chemla put forth on 1/9/2010 12:37 PM:
I wen t there but did not find explanations about miss address lookup or
miss domain lookup.
While I have 122,000 messages in active queue I still don't understand
why statistics sho
fork.
Of course, if you want me to post my conf, I will with pleasure.
Many thanks to you, to Victor and Stan.
Patrick
l database where he keeps all
unsubscribe messages. He said he has the right filters not to send
unwanted emails.
Thanks
Patrick
Le 11/01/2010 01:13, Wietse Venema a écrit :
Patrick Chemla:
Wietse,
Please try the following, as asked half a week ago:
postconf -e smtp_connection_cache_on_demand=no
postfix reload
and report if this makes a difference.
Wietse
I have tested this
Le 11/01/2010 09:27, Stan Hoeppner a écrit :
Patrick Chemla put forth on 1/11/2010 1:02 AM:
Le 10/01/2010 23:58, Stan Hoeppner a écrit :
On a technical level I'm happy you got it working. Just please tell
us you're
not sending mass spam with this setup.
--
Stan
k
rcpt to: patr...@ootbcomp.com
451 4.3.5 Server configuration problem
rcpt to: patrick
451 4.3.5 Server configuration problem
rcpt to: patr...@ootbcomp.com.
451 4.3.5 Server configuration problem
quit
221 2.0.0 Bye
Connection closed by foreign host.
I can email from my machine using firefox to the same addre
Patrick Horgan wrote:
I'm setting up a python script to do some sysadmin stuff and if it
detects a problem I want it to email. It does the email, but the
server rejects it. Taking python out of the picture, I did this:
I've "fixed" this. postgrey was not running, but
While investigating why postgrey wasn't running on our fedora box, I
checked to see what run levels it was set to run at, and indeed it
wasn't set up to run at any. Then, since there wasn't any useful
information in the /etc/init.d/postgrey file about what run levels it
should start at, I che
"less random"
solution and a more scientific one
I did this to load balanced among 40 mail servers. It works very very
fine with a load difference of less than 2% among the 40 servers. I
don't think it is too random.
Patrick
recision in the load balancing.
I don't think there is a need for keepalive, or any expensive device to
do it.
Patrick
think spamassassin is for local delivery, not relay.
So I have a file of more than 100,000 email addresses and another made
of bad domains.
I can write scripts in shell, php, perl,
Your help will be welcomed.
Patrick
like :
sender_dependent_relayhost_maps = hash:/etc/postfix/senderdomainroutes ?
Thanks for help
Patrick
*
*
wonder it will be routed according to the route table through the
default interface.
Is there a way to send through separate interfaces ?
Thanks for help
Patrick
Le 27/04/2010 10:54, Patrick Ben Koetter a écrit :
* Israel Garcia:
> I have about 20 debian servers send all mail through a loadbalancer
> (haproxy) with 2backend smarthosts which send emails to internet. I
> have pflogsumm running only on every smarhost. As every smarthost
he server side, with grep and awk extract from all qstatXXX files
the data you want to show for each graph, you can generate with whatever
tool. There I do it with a munin script, it's simple.
Patrick
bin/sendmail ?
/var/qmail/bin/sendmail ?
What will arrive if qmail uses /usr/sbin/sendmail or postfix uses
/var/qmail/bin/sendmail ?
Whenever, postfix starts, all instances, and I can process messages. Is
this a correct production environnement?
Thanks for help
Patrick
ch one before I move completly.
So, should I change the links to sendmail?
Patrick
a new connexion for each message.
Some ISPs told me they prefer to receive for example 50 messages to
different recipients during one connexion, than getting 50 different new
connexion.
Maybe there is some parameters to manage persistent connexions?
Thanks for help.
Patrick
tain To: ... (the full email address) that was
specifically used to register with the TLD in From: ... is accepted,
otherwise REJECT.
Hope this makes sense. Anyone know if this is possible and how I can
implement this? Pointers most welcome and appreciated.
Thanks and regards,
Patrick
that.
-- Noel Jones
Thanks Noel. I was hoping I could do it within Postfix to keep things
lean & mean. Will check out your suggestions.
Kind regards,
Patrick
pt/include/openssl -I/opt/include
-I/opt/include/sasl \
-DUSE_TLS \
-DHAS_DB \
-DHAS_PCRE \
-DUSE_SASL_AUTH \
-DUSE_CYRUS_SASL" \
AUXLIBS="-L/opt/lib -R/opt/lib -lssl -lcrypto -ldb -lpcre -lsasl2 -L/lib
-lpthread"
With regards,
Patrick
I was able to fix this. It would appear that the rpath was not being picked
up for some reason in the AUXLIBS via the -R flag. I was able to overcome
this by setting the environment variable LD_RUN_PATH=/opt/lib
On Thu, May 20, 2010 at 2:25 PM, Patrick Baker wrote:
> Hello,
>
> I
will happen. At least, not what I want.
I made something wrong, but what?
Thanks for help.
Patrick
Le 23/05/2010 18:20, Wietse Venema a écrit :
Patrick Chemla:
Hi,
I am managing my emails on 2 Postfix 2.7 servers.
A front smtpd server receives all messages from outside and inside
users, and a back server handles email boxes for local domains deliveries.
I am trying to send directly
look at the maillog and I can find the IP address of the external
server where it tries to deliver.
Patrick
Le 23/05/2010 22:03, Wietse Venema a écrit :
> Obviously you have something like...
>
> transport_maps = hash:/etc/postfix/transport
>
> in your "main.cf", don't you?
This was my problem.
Sorry for wasting your time.
Thanks for help Gian Carlo
Patrick
cleanup[79669]: 008D71714FA:
message-id=<33219176.10166.1275486674403.javamail.r...@co4>
Jun 2 15:51:22 ru postfix-mailgw/qmgr[71565]: 008D71714FA:
from=, size=5598, nrcpt=1 (queue active)
Jun 2 15:51:22 ru postfix-mailgw/smtp[79016]: 008D71714FA:
to=, orig_to=,
relay=192.168.0.76[192.168.
not afraid about a bug in
postfix, I was more concerned about a change in postfix that I could have
overlooked and that would explain the change in SMTP session between my servers.
thanks to Victor, this particular "problem" is solved now.
regards,
Patrick PRONIEWSKI
--
Administr
Hi Victor,
On 2 juin 2010, at 18:49, Victor Duchovni wrote:
> On Wed, Jun 02, 2010 at 05:14:45PM +0200, Proniewski Patrick wrote:
>
>> So it appears that the connection between MAILGW and LB is not always
>> properly closed. Am I wrong?
>
> http://www.pos
ore an upgrade,
because I can't risk to break a production server. But this time, I was
creating a new server from scratch, with what I think was plenty of time to
test it before switching to prod. Not reading release notes was just a huge
mistake.
regards,
Patrick PRONIEWSKI
--
Adm
others have been
confronted to this issue. Any idea other than patching amavisd?
thanks,
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER - Université Lumière Lyon 2
smime.p7s
Description: S/MIME cryptographic signature
ption is to use the Postfix 2.7 smtpd_command_filter feature
> to replace the RCPT TO command very carefully.
It works perfectly. Thank you very much.
I use smtpd_command_filter to replace invalid "MAIL FROM" and "RCPT TO"
commands.
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER -
onfigurable in amavisd-new, I would have to patch the
code, and that would have become a pain to maintain.
smtpd_command_filter is the easiest solution. I've already 3 postfix instances
(postmulti), I don't want to add another one just for one appliance.
thanks,
Patrick PRONIEWSKI
--
A
I was attempting to set soft_bounce=yes on the smtpd service in
master.cf only to find that it didnt work. This was unexpected as the
man pages indicate otherwise. 'man 8 smtpd' lists soft_bounce under
'trouble shooting controls'. But I've found that instead it works when
placed on the 'smtp' s
very fast, but it works. In France, we have a similar
limitation: it's illegal to destroy a communication (mail, email…). With BQCF
spam is rejected, not destroyed.
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER - Université Lumière Lyon 2
smime.p7s
Description: S/MIME cryptographic signature
regex foo is pretty non-existant. Does anyone know what regexp line
would block such a hostname?
Thanks for any pointers.
Regards,
Patrick
hanks Stan. Much appreciated.
Regards,
Patrick
ot;smtp-liste" to "eat" every possible connexion to
"smtp" during a local emailing, I've set it's
smtp_destination_concurrency_limit to 1, so that other more legitimate clients
(3 physical users) can still send emails during a local emailing.
Let me know if you n
quot;smtp" and "smtp-liste" postfix instances are sending local domain emails
to "mailgw", "smtp-liste" send huge bursts of emails (like 3 recipients in
2-3 minutes), and it can greatly impact normal email delivery. So I throttle
"smtp-liste" so that physical users emails posted via "smtp" are not delayed by
a (useless) corporate emailing.
Thank you very much for your reply
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER - Université Lumière Lyon 2
smime.p7s
Description: S/MIME cryptographic signature
"smtp" or "smtp"->"mailgw"->"smtp" or
"smtp-liste"->"mailgw"->"smtp" (recipient address in our domain, but finally
rewritten into an external address) is very low.
These days, this traffic is higher, because addresses of +2000 users are
aliased to a remote domain (it's 7% of our active users, 3% of our total users
list), so we have many emails going from "mailgw" to "smtp". But I don't see
how few more emails can wreak havoc in amavisd.
That would be a good idea to plug "mailgw"-to-"smtp" traffic on an smtpd
without filtering.
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER - Université Lumière Lyon 2
smime.p7s
Description: S/MIME cryptographic signature
without high machine load...
I'll double check my settings, but in theory, I don't use RBL for inside email
traffic filtering.
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER - Université Lumière Lyon 2
eyDB perl module).
enable_db=0 does the trick, for now.
I've found this about amavisd and BDB performance problem on FreeBSD:
<http://www.mail-archive.com/amavis-u...@lists.sourceforge.net/msg15381.html>
I'll test ASAP.
regards,
Patrick PRONIEWSKI
--
Administrateur
tination.
Any idea about where I should start looking?
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER - Université Lumière Lyon 2
smime.p7s
Description: S/MIME cryptographic signature
re Tools.
I'll try to get some support from VMWare (and FreeBSD users), but if someone
here has an idea (vmware issue? bios tuning? freebsd tuning?...) I'd be happy
to read about it.
thanks,
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER - Université Lumière Lyon 2
smime.p
igher.
I'm running Postfix 2.7.1 on top of FreeBSD 7.3-RELEASE-p2 #0, amd64, on top of
ESXi 4
But if it's linked to virtualization, it might be a vmware tools problem...
Patrick PRONIEWSKI
--
Administrateur Système - SENTIER - Université Lumière Lyon 2
smime.p7s
Description: S/MIME cryptographic signature
Victor Duchovni wrote:
Postfix is not Psychic.
Have you tried postfix --psychic?
other mail servers will relay mail to us for delivery to our domain. Is
there any way to make this work?
Patrick
I'd like email from localhost to not require certificates or
authentication--especially since we assume that people on the machine,
or tunneling to the machine have already passed some level of
authentication. How do I do it?
Patrick
nticated the same as
permit_sasl_authenticated,permit_mynetworks?
Patrick
rification because I'm so surprised! (And because it seems to be
working just fine right now!)
patrick
on2.frpublic-addr...@univ-lyon2.fr
...
The first line looks pretty silly to me. Is there any way to tell that
addresses not listed in virtual aliases map are to be forwarded "as is" ?
Thanks,
Patrick PRONIEWSKI
--
Administrateur Système - DSI - Université Lumière Lyon 2
On 8 juin 2011, at 18:15, Victor Duchovni wrote:
> On Wed, Jun 08, 2011 at 11:33:48AM +0200, Patrick Proniewski wrote:
>
>> After the period of double delivery is over, we will deliver emails only to
>> Google servers. So the virtual aliases map is to look like:
>>
>
On 9 juin 2011, at 17:46, Victor Duchovni wrote:
> On Thu, Jun 09, 2011 at 10:12:17AM +0200, Patrick Proniewski wrote:
>
>> On 8 juin 2011, at 18:15, Victor Duchovni wrote:
>>
>>> On Wed, Jun 08, 2011 at 11:33:48AM +0200, Patrick Proniewski wrote:
>>>
>
d mail in the delivery process of postfix (to force
> the retry of the delivery)
>
> - postsuper -r ALL
-r is not for retry, it's for requeue. Don't use it unless you really want the
requeue process to be done. Use postqueue -f instead.
Patrick PRONIEWSKI
--
Administrateu
client certificate authentication with self-signed certificates
with Thunderbird 3, Postfix and Dovecot that come with CentOS 5. Worked
fine.
Regards,
Patrick
ilguard.nl (sender_access)
Thanks!
Patrick
Thank you very much Noel. Setting inet_protocols = ipv4 solved the
errors right away. Your help is much appreciated!
Have a good weekend.
Regards,
Patrick
On 09/29/2011 12:00 PM, Tolga wrote:
mydestination = vps.ozses.net, localhost.ozses.net, , localhost
To my untrained eye the two comma's (".net, , localhost") don't seem
right and the error seems to suggest that you need to install, configure
and start cyrus-sasl.
Regards,
Patrick
On 11/04/2011 02:13 PM, Frank Bonnet wrote:
Hello
Does anyone has ever use Plesk or another graphical interface
to manage Postfix ?
Maybe http://sourceforge.net/projects/postfixadmin/
Regards,
Patrick
a hole in Plesk which Plesk fixed but I guess
some hosters or admins are slow to update. Once the security issue
became public the dark side has been searching the Interwebs for
vulnerable servers. Guess they found some to send you their crap.
Regards,
Patrick
Quoting Wietse Venema :
Patrick Ben Koetter:
- Do not delay on port 25 for MTA to MTA communication
With this. the sysadmin has no clue about what mail is blocked.
Even postscreen goes through great efforts to report the
sender and recipient of blocked mail.
Along these lines, would
Quoting Henrik K :
On Tue, Apr 17, 2012 at 11:04:43AM +0100, Sam Jones wrote:
Just imagine whitelisting a shared, spammy server because a domain is
hosted on it. Naturally it will probably come through greylisting in the
end anyway, but I'd not go out of my way to make it easy on them!
A shar
Quoting Alex :
Hi,
I have a few postfix-2.8.7 systems on fedora15 that connect with
another postfix-2.8.7 system. I'm receiving the following messages
periodically in the logs:
Apr 24 16:24:43 mailrelay postfix/smtpd[8814]: timeout after DATA
(9832 bytes) from mail02.example.com[68.XXX.YYY.4
Hello,
I'd like to know if there are any plans to enable LMTP with the
smtpd_proxy_filter?
Regards
Patrick
d the example header_checks [1] from the BACKSCATTER_README which
work fine except that they also block my own email. What is the proper
way to block forged From: addresses in the DATA section?
Thanks for any pointers or which FMTR.
Regards,
Patrick
/etc/postfix/header_checks:
/^(From|Return
; there is no proper way
>
> simply because it is legitimate that From: is not the same as
> the envelope sender - if you are trying to block such mails
> you would block many regular mails!
Thank you for making that clear.
Regards,
Patrick
anything I'm missing?
Does postfix know that is is responsible for subdomain.devels.es?
Regards
Patrick
lately? In this case your problem could be
caused by outdated cached records.
Regards
Patrick
user2_a...@example.com smtp:asia.example.com #remote user
On asia.example.com it should work with one fixed transport (e.g.
relay_transport = virtual) for all users handled by this server.
Patrick
y question - do I need or want to configure a "dovecot-lmtp" in
master.cf as well?
No, you don't as lmtp:unix:private/dovecot-lmtp is a unix socket
provided by dovecot.
Patrick
On 10/18/2012 10:24 PM, mouss wrote:
you can try
http://countries.nerd.dk/more.html
you can also try GeoIP.
Also check out http://ipdeny.com/
Regards,
Patrick
On 10/22/2012 04:56 PM, Morten Stevens wrote:
[snip]
> I have backported Postfix 2.9.x for my company and I am also package
maintainer for Fedora.
Here are my latest builds for el6:
http://mstevens.fedorapeople.org/el6/postfix/
Would you mind making the SRPM also available?
Regards,
Patrick
On 10/22/2012 05:29 PM, Patrick Lists wrote:
On 10/22/2012 04:56 PM, Morten Stevens wrote:
[snip]
> I have backported Postfix 2.9.x for my company and I am also package
maintainer for Fedora.
Here are my latest builds for el6:
http://mstevens.fedorapeople.org/el6/postfix/
Would you m
er side, the From: address would get
an delivery error message, right?
Any help greatly appreciated!
Patrick
I'm running Postfix 2.9.x on
MX and training servers, so it should be ok.
Thank you very much for your help.
Patrick
t of Office
responders and afaik both use Postfix as MTA.
Regards,
Patrick
S 6.3 x86_64 box libmdb compiles with a simple make and make
install puts it by default in /usr/local. It contains manpages too.
Is that what you are looking for or do you need an actual packaged
version like an RPM?
Regards,
Patrick
liblmdb is not yet available in Fedora, RHEL/CentOS. So I just
created an RPM for RHEL6/CentOS6. Spec file attached. You can download
the x86_64 RPMs & SRPM at http://pjl.home.xs4all.nl/downloads/liblmdb/
Regards,
Patrick
%define gitrev cbc4664
Name: liblmdb
Version: 0
Release: 0.1.git%{gi
tweb.cgi?p=openldap.git;a=commitdiff;h=13f3bcd59c2055d53e4759b0c3356b001eca44b0
So the correct name is lmdb (liblmdb.so and lmdb.h).
Regards,
Patrick
one could
give me a hint or point me to some fine material to read how to make
this work (if possible).
Thanks and regards,
Patrick
cessing
of an email I feed through my email client on my workstation via an ssh tunnel
are very different.
On workstation side, I'm using an on demand tunnel, everything is piped into nc
targeting localhost:25.
Any idea that would allow DKIM to sign emails I'm sending via my ssh tunnel?
Patrick
Hi Fernando,
On 03/16/2013 07:43 PM, Fernando Maior wrote:
Hi Patrick,
If you use the hash table, and issue the postmap command, what is the
output?
Here is the output:
$ cat /etc/postfix/canonical
@domainA.org@domainB.org
$ postmap -q t...@domaina.org hash:/etc/postfix/canonical
I
would have guessed it does, but perhaps I overlooked something.
You really should not do this. Instead take the high road:
query_filter = mailDeliveryAddress=%s
result = mail
Will try that.
Wildcard rewrites break recipient validation.
Good to know. Thank you for your feedback.
Regards,
Patrick
1 - 100 of 868 matches
Mail list logo