Evaluation of maps in local or virtual address classes

2009-01-04 Thread Patrick Ben Koetter
Maps in $relay_recipient_maps are evaluated as lists - only the LHS is examined to determine if a recipient is listed and therefore a valid recipient. Does the same apply for local_recipient_maps, virtual_alias_maps and virtual_mailbox_maps when Postfix tries to determine if a given recipient is a

Re: Evaluation of maps in local or virtual address classes

2009-01-04 Thread Patrick Ben Koetter
* Victor Duchovni : ... > > Sending them off to a LMTP server is a transport map job: > > > > recipi...@example.com lmtp:localhost > > The correct syntax (if the default port is OK) is: > > recipi...@example.com lmtp:inet:localhost Maybe its just me, but I had not looked for t

Re: Servers High Performance and High Volume

2009-01-13 Thread Patrick Ben Koetter
* Res : >> We will install new servers to improve performance in our structure. >> Currently many accounts receiving more then 5000 msgs./hour. >> >> Two MX Postfix, two IMAP servers and more two servers with >> Spamassassin, Clamav,... >> >> Which is the best option of IMAP server to few users

Re: Using SASL - dovecot sasl

2009-01-16 Thread Patrick Ben Koetter
* secSwami : > Thomas wrote: >> secSwami wrote: >>> Thanks a bunch Thomas!! >>> >>> One more thing do you create users on the system itself or use users >>> and password from a file? >>> >>> Thanks again...much much appreciated. >> >> So far, i only use regular Unix users from /etc/passswd, nothi

Re: broken_sasl_auth_clients?

2009-01-21 Thread Patrick Ben Koetter
* Ralf Hildebrandt : > With today's clients, is broken_sasl_auth_clients = yes > still required? Which clients require it anyway? Outlook 2000 to 2003 Outlook Express ? to 6 Haven't checked Outlook 2007 yet. p...@rick -- The Book of Postfix saslfinger (debugging S

Re: No filters for authenticated users

2009-01-23 Thread Patrick Ben Koetter
* Jordi Espasa Clofent : > Hi all, > > I want to the authenticated users (who are authenticated using SASL2 and > SQL backend) don't pass to several filters detailed in master.cf file; > on the other hand, I want to still using the same filter for all the > remain world. > > My first thought

Re: sasl_passwd.db permissions?

2009-01-28 Thread Patrick Ben Koetter
* MountainX : > > I did chmod 600 on sasl_passwd. Do I need to do the same to sasl_passwd.db? > Thanks Delete sasl_passwd.db and recreate it using the postmap command. The postmap command honours permissions. p...@rick > > - > http://davestechshop.net blog > -- > View this message in

Re: sasl_passwd.db permissions?

2009-01-28 Thread Patrick Ben Koetter
John, * swilting : > > I also like the problem and I do not know how to create the database > sasl2.db all the best your problem is probably not a Postfix problem, but a SASL problem. The saslpasswd2 command usually takes care of sasl2.db. p...@rick -- The Book of Postfix

Re: SMTP AUTH failing

2009-02-03 Thread Patrick Ben Koetter
* punit jain : > Hi All, > > I have a mailserver which is getting abused by spammers. It is right now an > open relay and has been blocked by major sites. > > naughtygoo...@yahoo.in > (host f.mx.mail.yahoo.com[209.191.88.247] refused to talk to me: 421 4.7

Re: SMTP AUTH failing

2009-02-03 Thread Patrick Ben Koetter
; failed: Name or service not known > Feb 3 15:41:14 mail postfix/smtpd[11285]: connect from > > unknown[203.187.243.154] > > > > On Tue, Feb 3, 2009 at 4:08 PM, Patrick Ben Koetter > wrote: > > > * punit jain : > > > Hi All, > > > >

Re: Taking over for another admin

2009-02-04 Thread Patrick Ben Koetter
* David Bishop : > On Wed, Feb 04, 2009 at 07:31:23AM +0100, Martin Schmitt wrote: > > David Bishop schrieb: > > > > > What are my options? I don't have a lot of experience with dovecot (it's > > > been a few years for me) and thus don't really know anything about its > > > SASL implementation.

Re: Taking over for another admin

2009-02-04 Thread Patrick Ben Koetter
* Udo Rader : > Hmm, I've never heard of dovecot being able to deal with non-plaintext > passwords in connection with SASL. Are you sure that that can be done > without patching? I haven't used Dovecot like that myself, but the documentation indicates you can set a $default_pass_scheme which a

Re: postfix+ldap+virtualdomains+quota

2009-02-05 Thread Patrick Ben Koetter
* Eduardo Costa : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi everyone, > > how can I take control of quota in the field "mailQuotaSize" using postfix? You can't with Postfix. Postfix LDAs don't support quotas. Use Dovecot's deliver LDA or maildrop if you use Courier or ... p...@ri

Re: TLS certificate

2009-02-05 Thread Patrick Ben Koetter
* Tolga : > I am reading The Book of Postfix, I applied the steps CA.pl -newca, openssl > req -new -nodes -keyout privatekey.pem -out privatekey.pem -days 1825 and > openssl ca -policy policy_anything -out publiccert.pem -infiles > privatekey.pem , copied the key and cert under /etc/ssl/private and

Re: TLS certificate

2009-02-05 Thread Patrick Ben Koetter
* Tolga : > On Thu, Feb 05, 2009 at 04:25:50PM +0100, Patrick Ben Koetter wrote: > > * Tolga : > > > I am reading The Book of Postfix, I applied the steps CA.pl -newca, > > > openssl > > > req -new -nodes -keyout privatekey.pem -out privatekey.pem -da

Re: TLS certificate

2009-02-06 Thread Patrick Ben Koetter
* Tolga : > > Please show evidence of such a session. > > to...@ozses:~$ openssl s_client -starttls smtp -CApath /etc/ssl/private > -connect localhost:25 > CONNECTED(0003) > depth=0 > /C=TR/ST=Marmara/L=Istanbul/O=ozses.net/OU=ozses.net/CN=mail.ozses.net/emailaddress=to...@ozses.net > verify

Re: TLS certificate

2009-02-06 Thread Patrick Ben Koetter
* Tolga : >> Here's your error: "unable to verify the first certificate". Did you add your >> CA certificate to your CA certificate store ca-bundles.crt (in your case)? >> >> p...@rick >> > I just did that, restarted postfix, and when I did an openssl s_client > -starttls smtp -CAfile /etc/ssl

Re: Mail Annotation in Postfix

2009-02-12 Thread Patrick Ben Koetter
* Zoltan Balogh : > Hello All, > > I work on a project where we annotate emails coming through a mail server. > By annotation I mean attaching additional possibly useful information to > email body based on the email content. Annotation is enacted selectively > based on users preferences. > > Wha

Re: Integrating Lotus Domino Ldap

2009-02-28 Thread Patrick Ben Koetter
* Rich : > Do you know of any script/software that has been written to be that "glue" > you speak of? Any objections to query LDAP directly using "saslauthd -a ldap -O /etc/saslauthd.conf"? p...@rick > > On Fri, Feb 27, 2009 at 4:35 PM, Victor Duchovni < > victor.ducho...@morganstanley.com> w

Re: Ubuntu, dynamicmaps?

2009-03-11 Thread Patrick Ben Koetter
* KLaM Postmaster : > I am thinking of switching to Ubuntu 8.10 LTS server, however when I > look at the Postfix configuration it seems somewhat odd. > I don't want to start a flame war, but I would like to hear what people > think about things like "dynamicmaps" and other oddities of the Ubuntu >

Re: cyrus sasl2 and authentication [LONG]

2009-03-17 Thread Patrick Ben Koetter
* LuKreme : > OK, first question is will I be able to setup smtpd.conf so that it will > support MULTIPLE authentication methods (sql and PAM)? But first, to get > it working. > > I am running on a custom port right now to avoid mucking with 587 until > everything is working: > > 2525 inet

Re: cyrus sasl2 and authentication [LONG]

2009-03-17 Thread Patrick Ben Koetter
* LuKreme : > On 17-Mar-2009, at 03:15, Patrick Ben Koetter wrote: >> * LuKreme : >>> OK, first question is will I be able to setup smtpd.conf so that it >>> will >>> support MULTIPLE authentication methods (sql and PAM)? But first, to >>> get >

Re: cyrus sasl2 and authentication [LONG]

2009-03-17 Thread Patrick Ben Koetter
* LuKreme : > On 17-Mar-2009, at 11:47, Andreas Winkelmann wrote: >>> On 17-Mar-2009, at 03:49, LuKreme wrote: >> I've made sure that /var/run/saslauthd/ is owned by root:postfix (it was root:mail) and have removed the authdaemon_path line and am trying again. Hopefully this was it.

Re: cyrus sasl2 and authentication [LONG]

2009-03-18 Thread Patrick Ben Koetter
* LuKreme : > On 17-Mar-2009, at 13:45, Patrick Ben Koetter wrote: >> smtpd_sasl_security_options = noplaintext, noanonymous >> smtpd_sasl_tls_security_options = noanonymous >> >> As for the PAM part in the sasl authentication, start saslauthd like >> this: >&

Re: cyrus sasl2 and authentication [LONG]

2009-03-18 Thread Patrick Ben Koetter
* LuKreme : > On 18-Mar-2009, at 02:38, Patrick Ben Koetter wrote: >> * LuKreme : >>> path to which socket there? >>> >>> $ ls -ls /var/run/saslauthd/ >>> total 2 >>> 0 srwxrwxrwx 1 root postfix 0 Mar 17 03:52 mux >> &g

Re: Re: How to index maildir

2009-03-22 Thread Patrick Ben Koetter
* Jeff Huang : > OK,Thanks. > > I'll try cyrus imap. > > Now I use Courier-imap as my imap/pop3 server. Try dovecot IMAP. It indexes maildir and fixes the index automatically. Cyrus IMAP doesn't ... p...@rick -- All technical answers asked privately will be automatically answered on the lis

Re: SMTP AUTH

2009-04-02 Thread Patrick Ben Koetter
* punit jain : > Hi > > I have a requirement where i need to use SMTP AUTH for specific IP addresses > only. As far as i read its applicable for server as a whole. Any ideas ? Tell more. Your server should only use SMTP AUTH when it authenticates with other specific IP addresses? Only specific IP

Re: Recommendations on mailing list managers for postfix.

2009-04-08 Thread Patrick Ben Koetter
* Charles Marcus : > On 4/8/2009, mouss (mo...@ml.netoyen.net) wrote: > > I'd say go for the popular one: mailman. > > The only thing I *don't* like about mailman is it doesn't natively > support virtual domains. It can be made to work, but it requires a lot > of hacking... This will change in Ma

Configurable replies for hardcoded REJECTS?

2009-04-17 Thread Patrick Ben Koetter
Wietse, a customer asked me to help them customize Postfix replies, so clients (better: users) can get a hint why their message is being rejected. The idea is to refer to an URL in the reply where (generic) verbose explanations on the reject reason can be found. Something along these lines: 5x

Re: Configurable replies for hardcoded REJECTS?

2009-04-17 Thread Patrick Ben Koetter
* Wietse Venema : > > a customer asked me to help them customize Postfix replies, so clients > > (better: users) can get a hint why their message is being rejected. > > > > The idea is to refer to an URL in the reply where (generic) verbose > > explanations on the reject reason can be found. Somet

Re: SMTP auth for outbound

2009-04-20 Thread Patrick Ben Koetter
* Michael : > Can postfix be set to SMTP auth for outbound mail to specified SMTP servers? Yes. See smtp_sasl_auth_enable. p...@rick -- The Book of Postfix saslfinger (debugging SMTP AUTH):

Re: Postfix SASL didn't query saslauthd whereas smtp.conf is set

2009-05-17 Thread Patrick Ben Koetter
* David Touzeau : > I use SASL connected to ldap server trough saslauthd daemon > I don't understand why postfix try to query sasldb2 instead query > saslauthd daemon in order to authenticate remote clients. It's a fallback mechanism that kicks in when other authentication methods fail. > clients

Re: SMTP AUTH for own domain users too ?

2009-05-18 Thread Patrick Ben Koetter
* Janaka Wickramasinghe : > Hi All, > >I'm new to postfix, I've currently setup the postfix with SMTP AUTH and > it works very well, when I'm sending mails outside of my own domain. > > However, when I send a mail to my own domain it doesn't ask for the > authentication which is a problem

Re: Impossible to send mail using SSL for SMTP connection.

2009-05-24 Thread Patrick Ben Koetter
* mouss : > Sthu Pous a écrit : > > Thank You for Your time and answer, Wietse: > > > >> Another possiblity is anti-virus software on the sending machine. > > > > I use Linux Debian squeeze/sid - AFAIK I have no any antivirus software. > > whatever you use, you have something that breaks ESMTP,

Re: smtp_sasl_mechanism_filter doesn't wok

2009-05-27 Thread Patrick Ben Koetter
* Zero Zeibov : > I try to limit auth mech in postfix 2.6.1 on FreeBSD 6.4. For this > I've added to main.conf: > > smtp_sasl_mechanism_filter = plain, login This does not apply to the SMTP server smtpd, but only to the SMTP client smtp. > But simple test by telnet shows following: > > Connecte

stress_expire_time

2009-06-10 Thread Patrick Ben Koetter
I scanned the Postfix documentation for stress_expire_time and could only find it in master_avail.c, where it is set to 1000s. So the stress recheck interval is 1000s, correct? Did I miss that in the official documentation? I believe it should be part of the official documentation. I can write a

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > Oops! I forgot to check SSL. > My client now seems to start a TLS session and still nothing. Here is the > log with the SSL error. TLS log. My favourite waste of time. Everything is layed out so clear... :/ There are two lines in your log that make me think (think, not know!) that

Re: Broken web link

2010-01-02 Thread Patrick Ben Koetter
* mouss : > Daniel V. Reinhardt a écrit : > > [snip] > > > > Both links work fine for me, the first one is a shell script which is full > > of text that you copy to or save link as to a directory. The second is > > the download able compressed versions I imagine. > > > > How are you accessing

Re: Broken web link

2010-01-02 Thread Patrick Ben Koetter
* Patrick Ben Koetter : > > $ wget http://ftp.wl0.org/SOURCES/postfinger > > --2010-01-02 20:10:37-- http://ftp.wl0.org/SOURCES/postfinger > > Resolving ftp.wl0.org... 141.42.206.35 > > Connecting to ftp.wl0.org|141.42.206.35|:80... connected. > > HTTP request

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
and we will have a look at the config. p...@rick > > Thanks so much. > > > > On Sat, Jan 2, 2010 at 4:02 PM, Patrick Ben Koetter > wrote: > > > * froinds J : > > > Oops! I forgot to check SSL. > > > My client now seems to start a TLS sess

Re: No SMTP AUTH when TLS enabled

2010-01-03 Thread Patrick Ben Koetter
eak processors (cell phone) to use them. > Should I leave the passwords blank? Create them with and remove the passwords when you export the certificates. Why? The server (Postfix smtpd) can't type it it when it needs to be unlocked for usage. ;) p...@rick > Thanks > > On S

Re: 3000 recipients

2010-01-03 Thread Patrick Ben Koetter
* richard lucassen : > I want to send once a week a simple mail to a list of 3000 recipients. I > can set smtpd_recipient_limit and smtpd_recipient_overshoot_limit to > higher limits, but is there a better way to handle this? Chosse a client/write a script that breaks the list of 3.000 recipients

Re: 3000 recipients

2010-01-03 Thread Patrick Ben Koetter
* richard lucassen : > On Sun, 3 Jan 2010 14:28:11 -0600 > Kenneth Marshall wrote: > > [mlm] > > > I will second that using a real MLM is usually a much, much better > > option that will allow you to prevent collateral damage to your mail > > reputation when there is a delivery problem. For exam

Re: 3000 recipients

2010-01-03 Thread Patrick Ben Koetter
* Glenn English : > > On Jan 3, 2010, at 1:14 PM, richard lucassen wrote: > > >> 3000 recipients is waaay too many to do in a single > >> shot using Bcc. > > > > Ok, but a mlm is quite some overkill IMHO, just wondering if there was > > an intermediate solution. This is for a blind person w

Re: PostFix & Trac - known issues?

2010-01-17 Thread Patrick Ben Koetter
* William Jordan : > Hi Folks, > I came across an add-on for Trac that allows tickets to be updated using > mail. > > Email2trac is what it's called and the Postfix install is here: > https://subtrac.sara.nl/oss/email2trac/wiki/Email2tracMta > > It has instructions on how to integrate with Post

Re: OT: Alternative for Spamassassin

2010-01-17 Thread Patrick Ben Koetter
* Michael Reck : > Hi List, > > I`m looking for a SA replacement in an large scale enviroment. > DSPAM seems to use filesystem (--with-userdir=) for various > functions which is not what i want. dspam also needs per user > activation. > Anything except Mailstorage is placed in DB and i don`t want

Re: OT: The Book of Postfix

2010-01-27 Thread Patrick Ben Koetter
* JORGE CARMINATI : > Hi! I just want to know if the authors of this book are planning to release > an updated revision with erratas fixes, etc and when (if applies). Thanks > in advance. Good news: We are in the middle of it. There will be new chapters, fixes for errors etc. Todays count: 10 cha

Re: OT: The Book of Postfix

2010-01-27 Thread Patrick Ben Koetter
* Julien Vehent : > On Wed, 27 Jan 2010 19:29:17 +0100, Patrick Ben Koetter > wrote: > > * JORGE CARMINATI : > >> Hi! I just want to know if the authors of this book are planning to > >> release > >> an updated revision with erratas fixes, etc and when (if

Re: [SASL]: Recipient address rejected: Access denied while SASL/TLS are really enabled

2010-01-28 Thread Patrick Ben Koetter
* David Touzeau : > Dear > > I don't understand why but i think that Postfix did want to send the > authentication request in the SMTP protocol. > In this case , the client (thunderbird) cannot send authentication > parameters trough Internet. > When executing saslfinger, there is not information

Re: create new email address in postfix

2010-01-31 Thread Patrick Ben Koetter
* dd1313 : > > Actually I am taking over a server with postfix already installed , So I am > struggling to find my way > please help What do you already know about email in general? Do you need to create a new mail account or do you need to add another address for an existing account? p...@rick

OFFTOPIC: Re: create new email address in postfix

2010-01-31 Thread Patrick Ben Koetter
ilaccount: # adduser To add an alias name for an existing user read man aliases and edit /etc/aliases. The run "newaliases" once you're done. For long time success you probably need to learn more about Linux and Ubuntu. p...@rick > > > > Patrick Ben Koetter wrote: >

Re: postfix 2.7 release date

2010-02-08 Thread Patrick Ben Koetter
* Robert Schetterer : > Hi Wietse, is their any > fixed release date for version 2.7 ? famous last words ... :) -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privacy is explicitely required and justified. saslfinger (

Re: fatal: no SASL authentication mechanisms

2010-02-11 Thread Patrick Ben Koetter
* Jeff Lacki : > > Im trying to setup SASL+TLS+dovecot. Overall Ive > gotten things somewhat working, but have a couple questions > since Im new to this aspect of postfix. > > I get 'fatal: no SASL authentication mechanisms' in maillog > I ran saslfinger and it showed no mechanisms, > > my /usr

Re: fatal: no SASL authentication mechanisms

2010-02-13 Thread Patrick Ben Koetter
* Неворотин Вадим : > I have same problem. When I try to add smtpd_sasl_security_options = > noanonymous, noplaintext to my config smptd start to say FATAL ERROR))) Auth > throw dovecot, works perfectly with > > smtpd_tls_auth_only = yes > > but then I only replace it with > > smtpd_sasl_securit

Re: fatal: no SASL authentication mechanisms

2010-02-13 Thread Patrick Ben Koetter
* Jeff Lacki : > >> smtpd_sasl_security_options = noanonymous, noplaintext > >> smtpd_tls_sasl_security_options = noanonymous > >> SMTPD crashed. I really can't understand where is a problem. > > > Blind guess: There are no other mechanisms installed. > > > If that doesn't fix it, send debug outp

Re: fatal: no SASL authentication mechanisms

2010-02-13 Thread Patrick Ben Koetter
* Jeff Lacki : > >> Are these yum packages (which I tried under the names above > >> with no luck)? Where do I acquire them? > > > For which SASL provider? > > Im assuming digest-md5 is good enough, unless > you think another mechanism is better? plain and login are plaintext mechanisms. You ca

Re: Deny SASL authentication not from local IP

2010-02-17 Thread Patrick Ben Koetter
* Неворотин Вадим : > How can I deny SASL authentication not from local (192.168.0.0/16) IP? Now I > have restrictions in smtpd_recipient_restrictions and other parameters, > which allow send mails to relayhost only from local IPs and only after > authentication. But client from Internet still can

Re: host suddenly not found ...

2010-02-25 Thread Patrick Ben Koetter
* Frank Bonnet : > Hello > > I get this error since few hours : > > (Host or domain name not found. Name service error for > name=bart.esiee.fr type=A: Host not found, try again) > > the machine bart.esiee.fr has a FQDN and is > on my LAN , any idea of what happen ? Are /etc/hosts and /var/spo

Re: Feature request: configurable dnsbl scores in postscreen

2010-03-13 Thread Patrick Ben Koetter
* Wietse Venema : > Stefan Foerster: > > Now, "feature request" is actually not the right word - it's more an > > idea, and probably somebody just needs to tell me it's a bad one. > > > > With the postscreen_dnsbl_sites setting, each site administrator can > > configure a list of DNS blacklists th

Counting clients in smtpd_client_recipient_rate_limit with XFORWARD

2010-03-19 Thread Patrick Ben Koetter
When a message reenters from an instance that uses XFORWARD, for example amavis, will Postfix count the IP used twice and, for example, add that to smtpd_client_recipient_rate_limit? p...@rick -- All technical questions asked privately will be automatically answered on the list and archived fo

Re: monitoring sevreal postfix serevrs.

2010-04-27 Thread Patrick Ben Koetter
* Israel Garcia : > I have about 20 debian servers send all mail through a loadbalancer > (haproxy) with 2backend smarthosts which send emails to internet. I > have pflogsumm running only on every smarhost. As every smarthost see > on IP source (haproxy) I can not get email stats from every debian

Re: PostFix Mail Delivery to Different Hosts

2010-05-07 Thread Patrick Ben Koetter
* Simon Croome : > On 05/05/2010 17:42, Victor Duchovni wrote: > >On Wed, May 05, 2010 at 04:21:37PM +0100, Simon Croome wrote: > > > >>We are replacing sendmail as our MTA to Postfix and our internal mail relay > >>receives mail from our edge MTA server<#> in the DMZ, once mail is > >>received th

Re: PostFix Mail Delivery to Different Hosts

2010-05-07 Thread Patrick Ben Koetter
* Simon Croome : > >Take a look at the "TABLE SEARCH ORDER" in man 5 transport. Here's an > >example: > > > ># main.cf > >transport_maps = hash:/etc/postfix/transports > > > ># /etc/postfix/transports > >firstname.lastn...@example.com relay:lotus.notes.server:25 > >firstname1.lastna...@ex

Re: Postfix, SASL sending mail through Postfix.

2010-05-10 Thread Patrick Ben Koetter
BABEDH-DHRA, * BABEDH-DHRA : > Ok I can start over can you please tell me if this is going to be the right > place to start. please describe in detail which goal you want to accieve. As far as I understand it at the moment you want your Postfix to offer SMTP AUTH and you want to use a MySQL datab

Re: Postfix, SASL sending mail through Postfix.

2010-05-12 Thread Patrick Ben Koetter
* BABEDH-DHRA : > My mail server uses Postfix 2.5.5 amd-64 driven virtual mailbox domains > stored in a MySQL database, managed by PostfixAdmin and phpMyAdmin > > Postfix and Dovecot SASL > > My question / fear is if I should I just add the example excerpt to the > bottom of the original file or

Re: Postfix, SASL sending mail through Postfix.

2010-05-13 Thread Patrick Ben Koetter
* BABEDH-DHRA : > "I understand you want to use Dovecot as SASL provider. In this case the > configuration (see below) you are currently trying to use is leading you > completely the wrong way. > > Take a look at the section "Configuring Dovecot SASL" in the SASL_README > (/usr/share/doc/postfix/S

Re: Postfix, SASL sending mail through Postfix.

2010-05-15 Thread Patrick Ben Koetter
* BABEDH-DHRA : > I understand you want to use Dovecot as SASL provider. In this case the > configuration (see below) you are currently trying to use is leading you > completely the wrong way. > > Take a look at the section "Configuring Dovecot SASL" in the SASL_README > (/usr/share/doc/postfix/SA

Re: Postfix, SASL sending mail through Postfix.

2010-05-16 Thread Patrick Ben Koetter
* BABEDH-DHRA : > I have done the Dovecot additions "So I think" as well as the Postfix ones. > I think I am missing something since I have not added a DB for my username > and password. If you can log into Dovecot the Dovecot config should be okay. If not, the Dovecot mailing list is the right pl

Re: Postfix, SASL sending mail through Postfix.

2010-05-16 Thread Patrick Ben Koetter
* BABEDH-DHRA : > mail:~# postconf -n > broken_sasl_auth_clients = yes ... > smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, > reject_unauth_destination, ... ... > smtpd_sasl_auth_enable = yes > smtpd_sasl_authenticated_header = yes > smtpd_sasl_local_domain = $myhostna

Re: Postfix, SASL and LDAPDB

2010-05-19 Thread Patrick Ben Koetter
* Julien Vehent : > On Wed, 19 May 2010 14:36:24 -0400, Victor Duchovni > wrote: > > > > This looks different from my recollection of the the smtpd.conf you > > posted, you may want to make sure that the "sasl_ldapdb_id" and > > passwords are the same, and I don't know what "auto_transition" > >

Re: Postfix, SASL and LDAPDB [definitely solved]

2010-05-24 Thread Patrick Ben Koetter
* Julien Vehent : > Final solution provided by the Openldap mailing list: > > > Just change your authz-regexp line to > > > > authz-regexp "^uid=([^,]+).*,cn=[^,]*,cn=auth$" > > "ldap:///dc=linuxwall,dc=info??sub?(|(uid=$1)(mail=$1))" > > > And the authentication works. > I think

Re: SQLite support in Postfix

2010-06-18 Thread Patrick Ben Koetter
* Wietse Venema : > Last weekend I talked with one of the creators of SQLite and was > impressed by the thoroughness of their code quality process. > > I brushed up a patch that was circulated two years ago and spent > a day or so adding error checks and updating documentation. > > Right now thi

Re: SQLite support in Postfix

2010-06-18 Thread Patrick Ben Koetter
* Wietse Venema : > Victor Duchovni: > > On Fri, Jun 18, 2010 at 05:58:02PM +0200, Patrick Ben Koetter wrote: > > > > > > Right now this is a read-only implementation (like mysql/pgsql) > > > > but it may be worthwhile to add update support. SQLite impl

Re: Monitoring SASL authenticated users

2010-06-24 Thread Patrick Ben Koetter
* Stan Hoeppner : > Michael put forth on 6/24/2010 3:07 AM: > > I want to be able to monitor SASL users to get quick notification if > > something > > is out of the ordinary - like a spammer using a compromised account to send > > emails. > > > > What tool(s) can be used to achieve this? > > G

Re: Monitoring SASL authenticated users

2010-06-24 Thread Patrick Ben Koetter
* Michael : > On Thu, 24 Jun 2010 20:48:04 Patrick Ben Koetter wrote: > > * Stan Hoeppner : > > > Michael put forth on 6/24/2010 3:07 AM: > > > > I want to be able to monitor SASL users to get quick notification if > > > > something is out of the ord

Re: migrate from qmail to postfix

2010-07-04 Thread Patrick Ben Koetter
* Asif Iqbal : > Currently our qmail uses QMAILQUEUE, qmail-scanner, clamd, > spamassassin, rbldnsd, greylite, qmail-pop, qmail-ldap, virtuals and > ezmlm. > (I hope I did not miss anything) Here's the typical way most people go: qmail -> postfix

Re: migrate from qmail to postfix

2010-07-04 Thread Patrick Ben Koetter
Asif, * Asif Iqbal : > well, I am looking for suggestions on how people took care of the > dot-qmail part when > they migrated from qmail to postfix. going back to my original email, > I saw some suggestions > how people did just that. but bringing that up to see if those steps > are relevant. ca

Re: Convert an attachment to a link

2010-07-07 Thread Patrick Ben Koetter
* Jorge Armando Medina : > On 07/07/2010 01:16 PM, Asif Iqbal wrote: > > Where do I look in postfix to introduce the following behavior. > > > > When mail arrives to the mail server, > > I like to convert any attachment to link if it is bigger than say 1M and add > > a footer in the body like belo

Re: Problems by integration of spamassassin into Postfix

2010-07-20 Thread Patrick Ben Koetter
* sebast...@debianfan.de : > Hello, > > i used the tutorial > > http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix > > to integrate Spamassassin into Postfix. > > It works fine - but i want to put the spammails into an separate folder. Use a LDA (procmail, maildrop, deliver) to filte

Re: Postfix queue on ramdisk: Insufficient system storage

2010-07-22 Thread Patrick Ben Koetter
* Stan Hoeppner : > Wietse Venema put forth on 7/21/2010 2:22 PM: > > Ram: > >> One server of ours just accepts the mails from clients and then relays > >> the mails to other servers. > >> Since there is almost no mail queued on the server , I think it is will > >> be good to mount /var/spool/post

Feature request: postsuper release but don't delete (cloning?)

2010-07-22 Thread Patrick Ben Koetter
I can put a mail on HOLD and release it later with the postsuper command. That's great for debugging purposes, but only if I need to send the message just once. Would it be possible to expand the postsuper command with an optional command line parameter that releases the message, but does not dele

Re: Feature request: postsuper release but don't delete (cloning?)

2010-07-22 Thread Patrick Ben Koetter
* Ralf Hildebrandt : > * Wietse Venema : > > Patrick Ben Koetter: > > > I can put a mail on HOLD and release it later with the postsuper command. > > > That's great for debugging purposes, but only if I need to send the > > > message > > > just

Re: Debugging Routing

2010-07-22 Thread Patrick Ben Koetter
* Jerry : > Exim, supposedly, has a "-bt" option that when combined with the debug > flag option produces a detailed routing output useful for debugging. > How would one go about duplicating that in Postfix? sendmail -bv ? p...@rick -- All technical questions asked privately will be automatic

Re: Feature request: postsuper release but don't delete (cloning?)

2010-07-22 Thread Patrick Ben Koetter
* Victor Duchovni : > On Thu, Jul 22, 2010 at 02:35:14PM +0200, Ralf Hildebrandt wrote: > > > > Consider using RSYNC to COPY the file from the hold queue to the > > > incoming queue, using the same file name. > > > > Once it's there, will it take the same path as the initial mail (on > > HOLD) wo

Re: Virtualdomains and LDAP

2010-07-24 Thread Patrick Ben Koetter
* Pavel Dimow : > Hello, > > > I know that this is maybe question for more LDAP oriented users, but I hope > someone here can help me. I have a postfix with one "primary" domain and > dozen virtual domains. The problem is that users from primary domain use only > their username (without domain pa

Re: Virtualdomains and LDAP

2010-07-24 Thread Patrick Ben Koetter
hen use auth_default_realm in dovecot and problem should be solved. All roads lead to Rome. ;) p...@rick > > On Sat, Jul 24, 2010 at 2:38 PM, Patrick Ben Koetter > wrote: > > * Pavel Dimow : > >> Hello, > >> > >> > >> I know that this is maybe qu

Re: Postfix on Cloud

2010-08-07 Thread Patrick Ben Koetter
* Stan Hoeppner : > Julio Cesar Covolato put forth on 8/7/2010 12:37 AM: > > > Is there anyone using postfix in cloud, like Amazon ec2? > > Dunno about Postfix specifically, but there are/were many spammers operating > out of the Amazon cloud as well as the Rackspace cloud. Even if they are > cl

Re: Postfix on Cloud

2010-08-07 Thread Patrick Ben Koetter
* Jonathan Tripathy : > On 07/08/10 21:10, Patrick Ben Koetter wrote: > >* Stan Hoeppner: > >>Julio Cesar Covolato put forth on 8/7/2010 12:37 AM: > >> > >>>Is there anyone using postfix in cloud, like Amazon ec2? > >>Dunno about Postfix specific

Re: postfix load handling

2010-08-10 Thread Patrick Ben Koetter
* Bjorn Mork : > can POSTFIX handle load of 120k mailboxesWhat would be required > additional with postfix to bear such load You can run multiple Postfix machines to deal with the load. But more imporant with all, but especially with 120k mailboxes the questions are not load alone: - Wha

Re: postfix load handling

2010-08-10 Thread Patrick Ben Koetter
* Bjorn Mork : > i have tried to answer your queris, (Please correct, if I am wrong in > understanding your question...) > > We do have multiple IBM Blade server with 2.4 Xeon + 16GB + NAS over iSCSI > protocol.. > > How many blades will be involved for such load??? I would have to specu

Re: Postfix integration: Oracle or LDAP?

2010-08-25 Thread Patrick Ben Koetter
* Zhou, Yan : > We want to implement SMTP authentication in Postfix and support multiple > virtual domains. Rather than having user/domain/endpoint in different > files, we prefer them either in database (Oracle) or LDAP. I am trying > to weigh the pros and cons of both options. I have not seen exa

Re: Postfix integration: Oracle or LDAP?

2010-08-25 Thread Patrick Ben Koetter
* Wietse Venema : > Zhou, Yan: > > Hi there, > > > > We want to implement SMTP authentication in Postfix and support multiple > > virtual domains. Rather than having user/domain/endpoint in different > > files, we prefer them either in database (Oracle) or LDAP. I am trying > > to weigh the pros

Re: super selective spamassassin via filter

2010-08-25 Thread Patrick Ben Koetter
* Stan Hoeppner : > Would anyone happen to have an example guide showing the proper > master.cf and main.cf parameters for setting up daemonized spamassassin > to run super selectively via FILTER? > > I've reached the point that I'm killing about 98% of my spam load but > I'm tired of the few phis

Re: local_recipient_maps with LDAP

2010-08-28 Thread Patrick Ben Koetter
* Marco Rebsamen : > I wan't to have my local recipeints checked against my Active Directory. > So I have created the .cf file with the LDAP parameters: > > bind_dn = u...@domain.local > bind_pw = ** > server_host = 192.168.8.254 > #Global Catalog port > server_port = 3268 > search_base = DC=d

Re: local_recipient_maps with LDAP

2010-08-28 Thread Patrick Ben Koetter
oxyaddresses...@domain.local) Virtual domains: query_filter = (proxyAddresses=%s) > > -Ursprüngliche Nachricht- > Von: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] > Im Auftrag von Patrick Ben Koetter > Gesendet: Samstag, 28. August 201

Re: local_recipient_maps with LDAP

2010-08-29 Thread Patrick Ben Koetter
> -Ursprüngliche Nachricht- > Von: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] > Im Auftrag von Patrick Ben Koetter > Gesendet: Samstag, 28. August 2010 18:25 > An: Postfix Users > Betreff: Re: local_recipient_maps with LDAP > > * Marco Reb

Re: local_recipient_maps with LDAP

2010-08-30 Thread Patrick Ben Koetter
* Victor Duchovni : > On Sun, Aug 29, 2010 at 01:20:39AM +0200, Marco Rebsamen wrote: > > > query_filter = proxyaddresses=...@domain1.ch* > > DO NOT use wildcard "*" patters to match recipients. The correct query > is: > > query_filter = proxyAddresses=smtp:%...@domain1.ch > > or, more

Re: local_recipient_maps with LDAP

2010-08-30 Thread Patrick Ben Koetter
* Patrick Ben Koetter : > Is "smtp:%s" sufficient? IIRC the main mail address is noted as "SMTP:%s". A > query that catches those too would be this: > > query_filter = (|(proxyAddresses=smtp:%s)(proxyAddresses=SMTP:%s)) On second thought... A query that ma

Re: local_recipient_maps with LDAP

2010-08-30 Thread Patrick Ben Koetter
* Victor Duchovni : > > Is "smtp:%s" sufficient? IIRC the main mail address is noted as "SMTP:%s". A > > query that catches those too would be this: > > The proxyAddresses field is matched case-insensitively. No fancy gymnastics > required: > > > query_filter = (|(proxyAddresses=smtp:%s)(pro

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Patrick Ben Koetter
I just started to follow this thread and had deleted the rest before. If I can be of any assistance in terms of Cyrus SASL let me know. Mac OS X runs its own special Cyrus SASL and I might not be able to help all the way. Anyway... p...@rick * Wietse Venema : > Wietse Venema: > > Jean-Yves Aven

  1   2   3   4   5   6   7   >