Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Patrick Ben Koetter
* Ali Majdzadeh : > Patrick, > Thanks a lot for your help. I will test the mentioned configuration and will > post the results to the list. I hope it works. Unfortunately, I do not have > so much knowledge about LDAP, but I do know that it is possible to store > Kerberos principals in an LDAP struc

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Patrick Ben Koetter
* Ali Majdzadeh : > Viktor, > Thanks for your attention. You are right, but unfortunately we have got some > in-house developed mail clients which are bound to use cram-md5 > authentication mechanism. Well, I think I should investigate on integrating > LDAP to our architecture and figure out the ne

Re: About SMTP Auth with Mysql

2009-11-20 Thread Patrick Ben Koetter
* Vahriç Muhtaryan : > I tried without parentheses like 212.58.4.184:3306,212.58.4.247:3306 > Also tried like this 212.58.4.184:3306 212.58.4.247:3306 3306 is default for mysql. Try without. p...@rick > > -Original Message- > From: owner-postfix-us...@postfix.org > [mailto:owner-pos

Re: About SMTP Auth with Mysql

2009-11-22 Thread Patrick Ben Koetter
* Vahriç Muhtaryan : > Hi, > > (212.58.4.184,212.58.4.247) not worked > (212.58.4.184:3306,212.58.4.247:3306)query arrive to 4.247 but not to 184 > 212.58.4.184:3306,212.58.4.247:3306 query arrive to 4.184 but not to 247 > 212.58.4.184:3306 212.58.4.247:3306 query arrive to 4.184 but not to 247 >

Re: About SMTP Auth with Mysql

2009-11-24 Thread Patrick Ben Koetter
s...@postfix.org] On Behalf Of Vahriç Muhtaryan > Sent: Sunday, November 22, 2009 11:21 PM > To: 'Patrick Ben Koetter'; postfix-users@postfix.org > Subject: RE: About SMTP Auth with Mysql > > I hope that until find the right mailbox and pass it should query each > set

Re: About SMTP Auth with Mysql

2009-11-25 Thread Patrick Ben Koetter
error > retry unix - - n - - error > discard unix - - n - - discard > local unix - n n - - local > virtual unix - n n - - virtual > lmtp unix -

Re: About SMTP Auth with Mysql

2009-12-01 Thread Patrick Ben Koetter
us SASL to query all servers in a row sit down and program it yourself. p...@rick > > Regards > Vahric > > -Original Message- > From: owner-postfix-us...@postfix.org > [mailto:owner-postfix-us...@postfix.org] On Behalf Of Vahriç Muhtaryan > Sent: Thursday

Re: SASL plain authentication failed; unable to lookup user record

2009-12-04 Thread Patrick Ben Koetter
* JP : > i'll guess the solution to my problem will be something simple and > obvious, because i know i ain't the first person to do this, but i've > been staring at it for days and can't see what's wrong. > > os x snow leopard server; postfix 2.5.5; dovecot 1.1.17apple0.5 > > trying to get SMTP

Re: SASL plain authentication failed; unable to lookup user record

2009-12-04 Thread Patrick Ben Koetter
* JP : > >Your Postfix uses Dovecot SASL. Have you tried to authenticate using a telnet > >session, sending AUTH identity on command line? > > > Escape character is '^]'. > 220 osx-106.example.com ESMTP Postfix > EHLO foobie.example.com > 250-osx-106.example.com > 250-PIPELINING > 250-SIZE 10485760

Re: ldap-Trouble

2009-12-06 Thread Patrick Ben Koetter
* Jan Lühr : > Hello, > > On Sunday 06 December 2009 15:07:49 Wietse Venema wrote: > > Jan Luehr: > > > Hello, > > > > > > I've some trouble using ldap aliases. My settings are: > > > > > > server_host = localhost > > > search_base = dc=oknw > > > bind_dn = uid=postfix,cn=staff,dc=oknw > > > bind_

Re: Limited a user to 1 e-mail per minute

2009-12-10 Thread Patrick Ben Koetter
* The Doctor : > Is there a way to rate limit what a user can send? The policyd policy server can do that. -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privacy is explicitely required and jus

Re: Authenticated SMTP problem

2009-12-15 Thread Patrick Ben Koetter
* Walter Breno : > and what do you recommend to use? proc mail? i'm testing the best set of Best practise on the Postfix mailing list is to use only anti-spam tools that do not interfere with Postfix internals e.g. the queue mechanisms etc. > tools for my mail server and accepting sujestions, i'm

Re: Authenticated SMTP problem

2009-12-15 Thread Patrick Ben Koetter
* Walter Breno : > Thanks for the answers, i'm testing the implementation of a modest server, i > have only 15xx accounts near 2000, it's only one domain, i have a > centralized OpenLDAP server where my mail authenticates, i'm using > cyrus-sasl, using submission port to send emails and 25 port to

Re: OT: Postfix & ClamAV integration

2009-12-17 Thread Patrick Ben Koetter
* Vladimir Vassiliev : > > IMHO antivirus checking with milter is bad idea because of possible large > delays in processing. Some broken relays have small timeout and they don't > await even couple of minutes. Result is endless delivery of the same mail, I > had real incidents. Post-queue filterin

Re: No SMTP AUTH when TLS enabled

2010-01-01 Thread Patrick Ben Koetter
* froinds J : > Hello, > I'm having a problem with postfix in F12. > I used to have my email server setup with F10. My setup had TLS > enabled (self signed certs) with SASL using pwcheck_method=auxprop and > CRAM-MD5 DIGEST-MD5. I had virtual accounts. > Everything worked great until I installed F1

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > My problem is: if I allow TLS I cannot authenticate. Without TLS everything > works. Here is the output from saslfinger. > Thanks for your help. > > saslfinger - postfix Cyrus sasl configuration Sat Jan 2 02:12:49 EST 2010 > version: 1.0.2 > mode: server-side SMTP AUTH > > -

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
r: 12.34.56.78 ~? > 127.0.0.0/8 > > Jan 2 10:14:42 fedora postfix/smtpd[17435]: match_hostname: > adsl-012-034-567-890.sip.my.isp.net ~? 12.34.56.78 > > Jan 2 10:14:42 fedora postfix/smtpd[17435]: match_hostaddr: 12.34.56.78 ~? > 12.34.56.78 > > Jan 2 10:14:4

Re: smtp_sasl_auth_enable?

2010-01-02 Thread Patrick Ben Koetter
* john : > I understand that setting "smtp_sasl_auth_enable" to yes, enables > sasl authentication in the SMTP client, but does it make it > mandatory. It makes it mandatory only for hosts listed in a sasl password map. > If I do not have an entry in the sasl password list for a particular > smar

Re: submission port : "Client host rejected: Access denied"

2011-03-06 Thread Patrick Ben Koetter
* Jeroen Geilman : > On 03/06/2011 01:18 PM, David Touzeau wrote: > >dear > > > >i would like to use submission port for authenticate users from internet > >allowing them to the postfix smtpd server > > > >For testing purpose, i have set a network different from the LAN to be > >sure that postfix a

Re: outgoing mail IP address?

2011-03-08 Thread Patrick Ben Koetter
* Bas Mevissen : > On Tue, 2011-03-08 at 12:36 +0100, Ákos Maróy wrote: > > Hi, > > > > I wonder how postfix decides on what IP address to bind to / initiation > > IP connections from, in terms of sending outgoing mail? > > > > I have a server with 5 IP addresses, where the IP address I'm using

Re: message id is a unique number?

2011-03-09 Thread Patrick Ben Koetter
* Mauro : > On 9 March 2011 14:04, Noel Jones wrote: > > On 3/9/2011 6:57 AM, Mauro wrote: > >> > >> I my logs I have: > >> > >> > >> Feb 13 06:27:57 mail1-xen postfix/qmgr[8336]: BF683A28247: > >> from=<..> > >> > >> That number BF683A28247 is a unique number? > > > > The postfix queu

Re: SASL authentication failure: All-whitespace username

2011-03-24 Thread Patrick Ben Koetter
* Victor Duchovni : > On Thu, Mar 24, 2011 at 02:07:43PM -0300, Odilo Schwade Junior wrote: > > > It is not my IP address. I don't know if it's a zombie.. I just think it may > > be.. XXX.XXX.XXX.XXX = random IPs address. Most of Brazil, Portugal > > and US as I said earlier. > > You can restri

Re: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory

2011-04-05 Thread Patrick Ben Koetter
* David Brown : > Hello, I have recently replaced my old postfix with 2.7.0. And, for the > first time I am trying to use IMAP (dovecot). Receiving email is OK but I > cannot send because of the relay domains issue. Attempts to use SASL with > postfix presents problems I don' t know how to resolve.

Re: SASL Error on Submission port

2011-04-07 Thread Patrick Ben Koetter
* Simon Brereton : > Hi > > Running 2.3.8 Debian package (I'll be upgrading shortly), I was already > supporting TLS and SASL auth. One of my users recently moved to RCN and they > block port 25 so I'm trying to open 587. > > I added this to my master.cf > > > submission inet n -

Re: Restrict sending one mail per sasl login

2011-04-08 Thread Patrick Ben Koetter
Am 08.04.2011 14:12, schrieb ego...@ramattack.net: > Is it possible in Postfix to allow just relaying one mail (independent > of the number of rcpt) per sasl login?. I perhaps could interested on > this... and I doubt if this can be done natively by postfix. Use policyd to enforce a sender policy

Re: SASL Authentication and debugging..

2011-04-12 Thread Patrick Ben Koetter
* Simon Brereton : > Probably not the best place for this, but hopefully someone will tell me > what I'm doing wrong anyway.. > > I've gotten the TLS up and working. And SASL auth seemed to be working. I > installed saslfinger and everything was fine there. But when trying to > locally inject m

Re: SASL Authentication and debugging..

2011-04-13 Thread Patrick Ben Koetter
* Simon Brereton : > > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > > us...@postfix.org] On Behalf Of Patrick Ben Koetter > > * Simon Brereton : > > > Probably not the best place for this, but hopefully someone will > > tell > > > me what

Re: acquire Postfix statistics

2011-04-15 Thread Patrick Ben Koetter
Am 15.04.2011 15:06, schrieb James Seymour: > I'm curious: How might one gather and process mail server statistics > *other* than parsing and processing the mail server's log file(s)? Query amavis snmp agent. It keeps track of Postfix queue status if it finds Postfix queues. p@rick -- state o

Re: Multiple Transport files

2011-04-21 Thread Patrick Ben Koetter
* Luis Esteves : > > Hi everybody, > > We have a Postfix server that route mail for a specific domain to a remote > host. > > The confugration is set in the transport file : > > domain1.com relay:[@IP] > > > I need to configure Postfix to route messages for a lot of users from > domain1

Re: How to send Maximum Mails using Postfix

2011-04-22 Thread Patrick Ben Koetter
* Johan Pappu : > How can I send 10 mails using postfix in 5 minutes. That's about 33 msg/sec. Disc IO and DNS lookup speed limit SMTP. To get the disc performance people use (good) RAID controllers and more than 4 discs (the more spindles the better) running as RAID 10 to put the /var/spool/

Re: How to send Maximum Mails using Postfix

2011-04-22 Thread Patrick Ben Koetter
* Patrick Ben Koetter : > * Johan Pappu : > > How can I send 10 mails using postfix in 5 minutes. > > That's about 33 msg/sec. Sorry, make that 333 msg/sec. I that case it all depends on what you do with the message. Should each message be virus scanned or even be sp

Re: need help for controlling authenticated realy

2011-04-24 Thread Patrick Ben Koetter
* mallah.raj...@gmail.com : > i am using policyd but it looks like it has no control once the initial > connection is established , authenticated and pipelining is being used to > pump spam . Is it really so?. At least version 1 of policyd can throtte SASL authenticated senders. I don't know about

Re: mimedefang and sid-filter

2011-04-30 Thread Patrick Ben Koetter
* fakessh : > hi wieste If you use vim, please put this line in your ~/.vimrc: ab wieste Wietse p@rick -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privacy is explicitely required and justified. saslfinger (debuggi

RFE: Make instance name visible in ps output

2011-04-30 Thread Patrick Ben Koetter
I have two instances of Postfix (2.7.1) running on a server, but I can't tell which is which: % ps axf ... 31383 ?Ss 0:00 /usr/lib/postfix/master 31627 ?S 0:00 \_ pickup -l -t fifo -u -c 31628 ?S 0:00 \_ qmgr -l -t fifo -u 31505 ?Ss 0:00 /usr/lib

Re: RFE: Make instance name visible in ps output

2011-04-30 Thread Patrick Ben Koetter
* Victor Duchovni : > On Sat, Apr 30, 2011 at 06:07:46PM +0200, Patrick Ben Koetter wrote: > > > I have two instances of Postfix (2.7.1) running on a server, but I can't > > tell > > which is which: > > > > % ps axf > > ... > > 31383 ?

Re: RFE: Make instance name visible in ps output

2011-05-02 Thread Patrick Ben Koetter
* Victor Duchovni : > On Sat, Apr 30, 2011 at 10:08:40PM +0200, Patrick Ben Koetter wrote: > > > > So to find which master is which instance you need to look in the > > > master.pid > > > files or in /proc, ... If you do look in /proc, each child process has >

Re: RFE: Make instance name visible in ps output

2011-05-02 Thread Patrick Ben Koetter
* Victor Duchovni : > > > Is this useful? > > > > Definitely! I ran it on a machine that has four instances of whom two > > weren't > > running and it failed on the first one not running. Could it be the script > > does not handle such situations? > > You of all people should be able to better e

Patched Postfix?

2011-05-19 Thread Patrick Ben Koetter
Today I've come across a Sophos PureMesssage server that puts "ignore_policy_error" as restriction option: smtpd_client_restrictions = ignore_policy_error, check_policy_service inet:localhost:4466 I've looked up the postconf man page, but couldn't find that option. Sophos OTOH ha

Re: Patched Postfix?

2011-05-20 Thread Patrick Ben Koetter
* /dev/rob0 : > On Thu, May 19, 2011 at 09:23:28PM +0200, Patrick Ben Koetter wrote: > > Today I've come across a Sophos PureMesssage server that puts > > "ignore_policy_error" as restriction option: > > > > smtpd_client_restr

Do "Successful timing attacks on elliptic curve cryptography" affect Postfix?

2011-05-23 Thread Patrick Ben Koetter
I've just come across the article "Successful timing attacks on elliptic curve cryptography" and I am trying to figure out if the problem described affects Postfix and what I would nee

Re: SASL LOGIN authentication failed generic failure on localhost

2011-06-01 Thread Patrick Ben Koetter
* kibirango moses : > Hullo Users, > I setting up a mailserver with smtp authentication and the backend > database is mysql 5.1.53 with pam_mysql and cyrus-sasl2 2.1.23 on > slackware linux 13.1.When i telnet to test my server side > authenication it gives me the error > below: > > rootxx:/etc

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Can anyone help me setting postfix plain authentication with SASL. > I've spent a complete week on this already. > Any help appreciated. Sure. Send debug output as required by Postfix debug readme and I will help you. p@rick -- All technical questions asked privatel

Re: Postfix plain text authentication with SASL

2011-06-08 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > here is the output from saslfinger command. > > saslfinger - postfix Cyrus sasl configuration Wed Jun 8 11:42:39 MSD 2011 > version: 1.0.2 > mode: server-side SMTP AUTH > > -- basics -- > Postfix: 2.3.3 > System: CentOS release 5.6 (Final) > > -- smtpd is linked to

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > No one is there to help me You started your thread ignoring the list policy which tells how to ask for help. When I asked you to follow the rules you replied to me offlist. I looked at your configuration and replied to the list. You replied offlist again. You d

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > [root@quranmail postfix]# saslfinger -s > saslfinger - postfix Cyrus sasl configuration Thu Jun 9 11:24:25 MSD 2011 > version: 1.0.2 > mode: server-side SMTP AUTH > > -- basics -- > Postfix: 2.3.3 > System: CentOS release 5.6 (Final) > > -- smtpd is linked to -- >

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
Stephen, * Stephen Ingram : > On Thu, Jun 9, 2011 at 12:16 AM, Suresh Kumar Prajapati > wrote: > > Hi, > > > > and i dont find any saslauthd.conf file > > > > here is the /etc/sasl2/smtpd.conf > > > > pwcheck_method: saslauthd > > mech_list: plain login > > That's a problem. In that file (/etc/s

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > I've follow all the info you have give and the command show the following > output > > [root@hostname postfix]# testsaslauthd -u tom -p redhat > 0: NO "authentication failed" IIRC you use saslauthd with PAM as backend. Please try this: % testsaslauthd -s pam -u tom -

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Here is the interactive session output > > [root@quranmail postfix]# telnet 217.23.4.146 25 > Trying 217.23.4.146... > Connected to 217.23.4.146. > Escape character is '^]'. > 220 ESMTP > ehlo google.com > 250- > 250-PIPELINING > 250-SIZE 10485760 > 250-VRFY > 250-E

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Hi > following is the output from the command you have > [root@ ~]# testsaslauthd -s pam -u tom -p redhat > 0: NO "authentication failed" > > and then i change /etc/sysconfig/saslauthd > fiel MECH=shadow > and then run the following command > > [root@ ~]# testsaslauth

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
cause compromised accounts would only affect your mail service but not the system (if you use different usernames and passwords...). Which way do you want to go? p@rick > > > > On Thu, Jun 9, 2011 at 2:12 PM, Patrick Ben Koetter > wrote: > > > * Suresh Kumar Prajapati : &g

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
your previous test. Send PLAIN like this: AUTH PLAIN AGZvbwBiYXI= It *should* work... p@rick > > > > On Thu, Jun 9, 2011 at 2:23 PM, Patrick Ben Koetter > wrote: > > > * Suresh Kumar Prajapati : > > > Both are system users and I've assigned password to

Re: Postfix plain text authentication with SASL

2011-06-09 Thread Patrick Ben Koetter
* Suresh Kumar Prajapati : > Followed your steps and this is output > > warning: SASL authentication failure: Password verification failed > Jun 9 13:12:26 domain.com postfix/smtpd[1391]: warning: > fdsakjfhbdskj.fdsakjfhbdskj.com[ip_address]: SASL plain authentication > failed: authentication fa

Re: signing multiple domains with dkim

2011-06-20 Thread Patrick Ben Koetter
Am 20.06.2011 07:50, schrieb Suresh Kumar Prajapati: > Hi, > > Can anyone tell me how to sign mails for multiple domains . My recommendation: Drop dkim-milter because IIRC it is unmaintained. Get the followup opendkim instead. If you follow dkim-filter read into KeyList:

Re: signing multiple domains with dkim

2011-06-20 Thread Patrick Ben Koetter
Am 20.06.2011 10:04, schrieb kshitij mali: > Will u share some doc how to get opendkim work with postfix MTA. > Such has installation and administration , configuration , > troubleshooting etc. I don't have any. Opendkim is based on dkim-milter. IIRC the configuration interface hasn't changed. Y

Re: new postfix mysql dovecot sasl server "relay access denied"

2011-06-26 Thread Patrick Ben Koetter
* Brian Shanahan : > I know the subject seems trivial, but i launched a new mail server Friday > night and have been fighting this all weekend. Very desperate now. I truly > think it boils down to SASL configs. I've made so many changes in past 72 > hours I can't even remember my name. Please help.

Re: postfix mysql dovecot cyrus-sasl "relay access denied"

2011-06-26 Thread Patrick Ben Koetter
* brian shanahan : > -- basics -- > Postfix: 2.7.4 > System: Fedora release 14 (Laughlin) > > -- smtpd is linked to -- > libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x7f646f313000) > > -- active SMTP AUTH and TLS parameters for smtpd -- > broken_sasl_auth_clients = yes > smtpd_sasl_aut

Re: TLS yes, but no SSL connection

2011-07-14 Thread Patrick Ben Koetter
* Axel Braun : > I have set up a mailserver for our company on openSUSE 11.4, TLS enabled > with self-signed certificates. server maintenance is done via ISPConfig. > > smtpd_sender_restrictions = check_sender_access mysql:/etc/postfix/mysql- > virtual_sender.cf > smtpd_client_restrictions = chec

Re: TLS yes, but no SSL connection

2011-07-14 Thread Patrick Ben Koetter
* Axel Braun : > Am Donnerstag, 14. Juli 2011 schrieb Patrick Ben Koetter: > > > What is the problem? How can I enable SSL additionally? > > > > p@p:~$ grep smtps /etc/services > > ssmtp 465/tcp smtps # SMTP over SSL > > Than

Re: Large ISP which use Postfix

2011-07-14 Thread Patrick Ben Koetter
* Peter Tselios : >     I need to prepare a presentation for my company because we plan to > deploy a new mail system. I need to know the names of some medium to large > ISPs that uses Postfix as their SMTP server. Do you know where I can find > that information? We run Postfix at python.org:

Re: IPv6, backup MX and 4XX deferrals

2011-08-17 Thread Patrick Ben Koetter
* Wietse Venema : > It's not spammers that destroy the infrastructure, it's the > well-meaning people with their broken solutions. +1 p@rick -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privacy is explicitely requir

Re: Problem with postfix and amavis

2011-08-22 Thread Patrick Ben Koetter
* Andrea Cappelli : > Hi, > I have installed a new mailserver with Postfix (2.7.1) as MTA, > Amavisd.-new (2.6.4) as content scanner and Docevot (1.2.15) as > delivery agent. > > I have some default values for amavis and a policy for each mailbox. > > Some mailbox have alias (defined in a mysql t

Re: Bind Postfix to outgoing IP address

2011-08-23 Thread Patrick Ben Koetter
* Mark Goodge : > How can I bind Postfix to only send outgoing mail via one IP address > (ie, always use the same ethernet interface)? smtp_bind_address -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privacy is explici

Re: postscreen stats

2011-08-23 Thread Patrick Ben Koetter
* Wietse Venema : > Stan Hoeppner: > > On 8/23/2011 9:10 AM, Kov?cs J?nos wrote: > > > Thanks Ralf! It's amazing how much spam the pregreet test and a good RBL > > > can catch. > > > Do you have any data on how many spam emails survived postscreen? > > > > Overall, Postscreen is no better nor wor

Re: Issue integrating with Cyrus-SASL

2011-09-04 Thread Patrick Ben Koetter
* Crazedfred : > Hello, > I'm having trouble with authentication on Debian 6. > > > I've set up Postfix to use Cryus-SASL to authenticate against LDAP. > The SASL configuration is a success: > sudo testsaslauthd -u "t...@example.com" -p "notRightPassword" > 0: NO "authentication failed" > sudo te

Re: Issue integrating with Cyrus-SASL

2011-09-05 Thread Patrick Ben Koetter
* Crazedfred : > > If you use the pass above, change it now that you have sent it to public. > > I am substituting in fake accounts and passwords to show what's going on, > these do not match what I am actually using :) > > > Where did you put smtpd.conf? On Debian it should be in > > /etc/postf

Re: Setting different smtpd_sasl_security_options depending on connecting IP

2011-09-06 Thread Patrick Ben Koetter
* Heiko Wundram : > As the title says: is there a possibility to set different > smtpd_sasl_security_options depending on the connecting IP (or > rather subnet) of the client that tries to do authentication? No, you can't. Which problem are you trying to solve? Maybe there's another way to do it.

Re: Setting different smtpd_sasl_security_options depending on connecting IP

2011-09-06 Thread Patrick Ben Koetter
* Heiko Wundram : > Am 06.09.2011 11:24, schrieb Patrick Ben Koetter: > >* Heiko Wundram: > >>As the title says: is there a possibility to set different > >>smtpd_sasl_security_options depending on the connecting IP (or > >>rather subnet) of the client that t

Re: DKIM milter

2011-09-07 Thread Patrick Ben Koetter
* Kirill Bychkov : > Hello, > > I'm using OpenDKIM lilter for DKIM signature. > > main.cf: > smtpd_milters = inet:localhost: > > And i'm using > always_add_missing_headers = yes > > Test emails to many public mail servers (i.e. gmail) and test service > port25.com are checked and DKIM signa

Re: Issue integrating with Cyrus-SASL

2011-09-13 Thread Patrick Ben Koetter
Sorry for the delay. * Crazedfred : > I ran "saslfinger -c" and "saslfinger -s" and it does appear that many of > the relevant services are chrooted. I wasn't quite sure, however, so I > attached the full output of both commands. You want server-side debug output, which is 'saslfinger -s'. > Of

Re: Issue integrating with Cyrus-SASL

2011-09-15 Thread Patrick Ben Koetter
* Crazedfred : > > What is the result of:find / -name smtpd.conf > > sudo find / -name smtpd.conf > /usr/lib/sasl2/smtpd.conf read the debian documentation! p@rick -- All technical questions asked privately will be automatically answered on the list and archived for public access unless privac

Re: Restrict access for SASL authenticated senders

2011-09-15 Thread Patrick Ben Koetter
* Matt : > First of all, thank you for reading this! I have the following two > goals: > To a) only allow relaying mail when SASL authenticated, and b) to only > accept local (virtual) domains in the "MAIL FROM" address when relaying. Read into $smtpd_sender_login_maps. p@rick -- All tec

Re: Re: Restrict access for SASL authenticated senders

2011-09-15 Thread Patrick Ben Koetter
* Matt : > >* Matt : > >>First of all, thank you for reading this! I have the following two > >> goals: > >> To a) only allow relaying mail when SASL authenticated, and b) to only > >> accept local (virtual) domains in the "MAIL FROM" address when relaying. > > > >Read into $smtpd_sender_login

Re: Re: Re: Restrict access for SASL authenticated senders

2011-09-15 Thread Patrick Ben Koetter
* Matt : > >> >> First of all, thank you for reading this! I have the following > >> >> two goals: > >> >> To a) only allow relaying mail when SASL authenticated, and b) to only > >> >> accept local (virtual) domains in the "MAIL FROM" address when relaying. > >> > > >> >Read into $smtpd_s

Re: Issue integrating with Cyrus-SASL

2011-09-16 Thread Patrick Ben Koetter
* Crazedfred : > >  Crazedfred : > > > > What is the result of:find / -name smtpd.conf > > > > > > sudo find / -name smtpd.conf > > > /usr/lib/sasl2/smtpd.conf > > > read the debian documentation! > > Could you elaborate? > Am I looking for the wrong file? > That search above was ran at the behe

Re: DKIM signing problem

2011-09-17 Thread Patrick Ben Koetter
* alex : > Hi > > I have a problem with messages signed by my server. All messages > send from any email client(tb, webmail) , fail verification with : > dkim=softfail (fail, message has been altered) > except messages send from command line (telnet, sendmail). > > Software use is: centos 6

Re: SASL problem

2011-10-02 Thread Patrick Ben Koetter
* Tolga : > Oct 2 12:35:18 vps postfix/smtpd[16201]: warning: SASL: Connect to > private/auth failed: Permission denied > Oct 2 12:35:18 vps postfix/smtpd[16201]: fatal: no SASL authentication > mechanisms > Oct 2 12:35:19 vps postfix/master[9841]: warning: process > /usr/lib/postfix/smtpd pid 1

Re: SASL problem

2011-10-02 Thread Patrick Ben Koetter
Harald, * Reindl Harald : > > Am 02.10.2011 10:50, schrieb Tolga: > > Hi, > > > > Oct 2 12:36:52 vps postfix/smtpd[16208]: warning: SASL: Connect to > > private/auth failed: Permission denied > > > > From these logs I understand that auth permissions return to the way it > > used to be, becau

Question regarding example for smtpd_command_filter

2011-10-05 Thread Patrick Ben Koetter
I have a question regarding the "Bounce-never mail sink" regexp: postconf(5) gives this example: /^(RCPT\s+TO:.*?)\bNOTIFY=\S+\b(.*)/ $1 NOTIFY=NEVER $2 Isn't there a '>' missing before the '?'. As I understand it the '?' makes the preceeding character optional e.g. example.com and ex

Re: Fw: Using Postfix for email retention

2011-10-11 Thread Patrick Ben Koetter
* andreas : > >>I want to know if postfix can be used to save a copy of every > >>e-mail sent and received (including attachments) by a mail > >>server for email retention. If it could indexed for easier > >>searching that would be great! > >>Thnks Just in case: If you want to do data retention fo

Re: using postfix for smarthost?

2011-10-17 Thread Patrick Ben Koetter
* lupin...@gmx.net : > is it possible to configure postfix as "smarthost" in the sense, that it > 1) accepts mails from the internet and then forwards them to the "real" > mailserver? Yes. Read into . > and 2) sends mails off i

Re: Postfix, Sasl & Pam

2011-10-22 Thread Patrick Ben Koetter
* Jack Fredrikson : > Hi; > I get this error: > dovecot: pop3-login: Disconnected (no auth attempts): rip > In googling this, it indicated that the problem might be in postfix. So I > poked around and became puzzled as to how postfix discovers my > /etc/postfix/sasl/sasl.conf file, since it's not r

Re: Postfix, Sasl & Pam

2011-10-22 Thread Patrick Ben Koetter
* Jack Fredrikson : > > > From: Robert Schetterer > To: postfix-users@postfix.org > Sent: Saturday, October 22, 2011 4:32 PM > Subject: Re: Postfix, Sasl & Pam > > First up, my bad. The conf file is: > /etc/postfix/sasl/smtp.conf And that is wrong too. I suggest

Re: Spammers attempting SASL auth.

2011-10-26 Thread Patrick Ben Koetter
* Duane Hill : > On Mon, 17 Oct 2011, Simon Brereton wrote: > >This is a new one on me - I've never seen spammers attempt to use to SASL > >Auth to inject spam. Has anyone else seen this? > > > >Oct 17 15:07:16 mail postfix/smtpd[14422]: connect from > >unknown[208.86.147.92] > >Oct 17 15:07:16

Re: upgrading postfix

2011-10-30 Thread Patrick Ben Koetter
* amira : > I was using postfix 2.3 on centos 5.7 and using sasl authentication. When I > tried to upgrade to postfix 2.7 I got error when sending mail using outlook > client smtpd_sasl_auth_enable is true, but SASL support is not compiled in > while it sends normally using telnet. > > I am using

Re: Autoresponder

2011-11-02 Thread Patrick Ben Koetter
* pch0317 : > Hi list, > > I would like to create autoresponder functionality in my mail > system, but I don't know how to start. > User should turn on/off autoresponder from client application and > set message text which will be send in autoreply message. > > My system work on RHEL 6.1: postfix

Re: Plesk or equivalent to manage Postfix ?

2011-11-04 Thread Patrick Ben Koetter
* Frank Bonnet : > On 11/04/2011 03:48 PM, /dev/rob0 wrote: > >On Friday 04 November 2011 08:13:59 Frank Bonnet wrote: > >>Does anyone has ever use Plesk or another graphical interface > >>to manage Postfix ? > >I'm sure they have. > > > >>If yes any infos/advices welcome > >Don't. Such a GUI can o

Re: Postscreen statistics gathering

2011-11-05 Thread Patrick Ben Koetter
* Julien Vehent : > Hi Folks, > > Like others before me, I'm curious about how well postscreen > performs in the real world. > > I'm writing an article on Postscreen for the french issue of linux > magazine. I got the setup part covered fine, but miss some > statistics on how it runs. > I have lo

Re: sasldb or PAM

2011-11-07 Thread Patrick Ben Koetter
* gaby : > I use PAM authentication method for send emal via postfix with Cyrus Sasl. > If use sasldb2 method instead PAM,it is more secure, or more Ok?Sasdb is > more usable? There are two sections you need to pay attention for: 1. Transmission of identification data over the network 2. Stor

Re: Fw: sasldb or PAM

2011-11-07 Thread Patrick Ben Koetter
secure. It depends on your PAM backend. p@rick > > - Original Message - > From: Patrick Ben Koetter > To: postfix-users@postfix.org > Sent: Monday, November 07, 2011 11:06 AM > Subject: Re: sasldb or PAM > > > * gaby : > > I use PAM authentication meth

Re: SMTP auth for relayhost

2011-11-09 Thread Patrick Ben Koetter
* Robert Hass : > Hi > I'm using Postfix at my server. I would like to relay all outgoing > e-mails via my main SMTP server (relayhost = ... in main.cf). > But my main SMTP server needs SMTP authorization. Where I can > configure authentication (login and password) for relayhost ?

Re: Architecture design for frontend postfix server

2011-11-09 Thread Patrick Ben Koetter
* bsd : > I am trying to figure out what is the best solution in order to filter > incoming e-mail on a front-end relay server quite heavily loaded (100.000 > messages / day). Even if you assume that all those messages will be sent within 8 hours (business time) it will boil down to ~ 3.5 msg/sec

Re: Architecture design for frontend postfix server

2011-11-09 Thread Patrick Ben Koetter
* bsd : > > Good idea. Reject any message that can't be delivered immediately. That's > > cheap. It takes place in the SMTP session before the payload has been sent > > and > > before a content filter, such as amavis, does ressource intensive filtering. > > Shall I do that using the "Postfix Befo

Re: Architecture design for frontend postfix server

2011-11-09 Thread Patrick Ben Koetter
* bsd : > > Le 9 nov. 2011 à 14:24, Patrick Ben Koetter a écrit : > > > * bsd : > >>> Good idea. Reject any message that can't be delivered immediately. That's > >>> cheap. It takes place in the SMTP session before the payload has been >

Re: Migration from one server to another - best practices?

2011-11-17 Thread Patrick Ben Koetter
* Simon Brereton : > On 17 November 2011 14:02, Dennis Carr wrote: > > I'm about to do a migration from one server to another - old server runs > > Debian Lenny, new one runs Squeeze, both with respective current versions of > > postfix. > > > > Long and short is that I'm basically preparing to mi

Re: aliases

2011-11-18 Thread Patrick Ben Koetter
* peng...@sepserver.net : > I have in my /etc/aliases the text "postmaster: root". I sent an email to > postmas...@mydomain.com. I checked the log files of the server but do not > see any indication of any email being received. Would there be a log of > mail reveived in mail.log? I checked /root/Ma

Re: rambo

2011-11-19 Thread Patrick Ben Koetter
* Tõnu Samuel : > On Sat, 2011-11-19 at 00:23 +, peng...@sepserver.net wrote: > > Pasted at the bottom of my message is my telnet session. Where is my mail? > > It is not in /var/mail nor is it in /root/Mail. It was supposed to have > > been delivered yet I do not see it. Is this maybe because

Re: Plesk or equivalent to manage Postfix ?

2011-11-20 Thread Patrick Ben Koetter
* john : > >Modoboa stores its data in a SQL backend (like MySQL or PostgreSQL). Using > >this database, you can integrate Modoboa with other mail components, such as > >Postfix or Dovecot. > > > >It is written in Python and uses the Django and Mootools frameworks. > > > >And last but not least, Mo

Re: Per-Recipient Data Responses (was: ... per-recipient treatment of messages in a milter environment)

2011-11-23 Thread Patrick Ben Koetter
* Claus Assmann : > Per RCPT filtering is a feature that is often asked by ISPs who > offer anti-spam/virus for their customers: some pay for additional > filtering. In Germany you either reject globally in session, and stick with the law, or you reject post-queue per recipient. Adding functional

Re: memcache client for Postfix

2011-12-13 Thread Patrick Ben Koetter
* Wietse Venema : > Wietse Venema: > > Mueller, Martin (Messaging): > > > Thanks for all the work making memcache support available, any > > > thoughts on the potential use of this for anvil? > > > > As documented, anvil blocks a client that overwhelms the server. > > For that, there is no need to

Re: postfix devnull mailbox

2011-12-20 Thread Patrick Ben Koetter
* Roberto Greiner : > I'm trying to create a /dev/null mailbox, but didn't get much > success following the recipe at > http://www.serverwatch.com/columns/article.php/3844371/Forwarding-a-Postfix-Virtual-Alias-to-devnull.htm > > What I did was following: > - Add a "blackhole" alias in /etc/aliase

<    1   2   3   4   5   6   7   >