Reliably distinguishing authorized vs unauthorized users

2011-01-19 Thread Ron Garret
I am working on a spam filter. I want both incoming and outgoing messages to go through the filter, not because the outgoing messages need to be filtered, but because I want the filter to know who my authorized users have sent messages to because that is a very reliable indicator of non-spam. M

Re: Reliably distinguishing authorized vs unauthorized users

2011-01-19 Thread Ron Garret
On Jan 19, 2011, at 12:06 PM, John Adams wrote: > Am 19.01.2011 21:03, schrieb Ron Garret: >> I am working on a spam filter. I want both incoming and outgoing messages >> to go through the filter, not because the outgoing messages need to be >> filtered, but because I wa

Relay host auth not working

2011-07-11 Thread Ron Garret
I'm trying to set up a relay host with authentication according to these instructions: http://anothersysadmin.wordpress.com/2009/02/06/postfix-as-relay-to-a-smtp-requiring-authentication/ but it's not working. I know my SMTP server is set up properly because I can send mail using various other

Re: Relay host auth not working

2011-07-11 Thread Ron Garret
On Jul 11, 2011, at 9:31 PM, Stan Hoeppner wrote: > On 7/11/2011 8:12 PM, Ron Garret wrote: >> I'm trying to set up a relay host with authentication according to these >> instructions: >> >> http://anothersysadmin.wordpress.com/2009/02/06/postfix-as-relay-to

Re: Relay host auth not working

2011-07-11 Thread Ron Garret
On Jul 11, 2011, at 11:03 PM, Jeroen Geilman wrote: > On 2011-07-12 07:12, Ron Garret wrote: >> On Jul 11, 2011, at 9:31 PM, Stan Hoeppner wrote: >> >>> On 7/11/2011 8:12 PM, Ron Garret wrote: >>>> I'm trying to set up a relay host with authenticat

Re: Relay host auth not working

2011-07-11 Thread Ron Garret
On Jul 11, 2011, at 11:07 PM, Stan Hoeppner wrote: > On 7/12/2011 12:12 AM, Ron Garret wrote: >> >> On Jul 11, 2011, at 9:31 PM, Stan Hoeppner wrote: >> >>> On 7/11/2011 8:12 PM, Ron Garret wrote: >>>> I'm trying to set up a relay host with authe

Re: Relay host auth not working

2011-07-11 Thread Ron Garret
On Jul 11, 2011, at 11:17 PM, Mike Morris wrote: > On 07/11/2011 10:12 PM, Ron Garret wrote: >> >> On Jul 11, 2011, at 9:31 PM, Stan Hoeppner wrote: >> >>> On 7/11/2011 8:12 PM, Ron Garret wrote: >>>> I'm trying to set up a relay host with authe

Re: Relay host auth not working

2011-07-12 Thread Ron Garret
On Jul 12, 2011, at 12:13 AM, Stan Hoeppner wrote: > On 7/12/2011 1:37 AM, Ron Garret wrote: >> >> On Jul 11, 2011, at 11:17 PM, Mike Morris wrote: > >>> Configure smtp_tls_security_level and/or smtp_tls_policy_maps, using at >>> least a setting of '

Re: Relay host auth not working

2011-07-12 Thread Ron Garret
On Jul 11, 2011, at 11:37 PM, Ron Garret wrote: > > On Jul 11, 2011, at 11:17 PM, Mike Morris wrote: > >> On 07/11/2011 10:12 PM, Ron Garret wrote: >>> >>> On Jul 11, 2011, at 9:31 PM, Stan Hoeppner wrote: >>> >>>> On 7/11/2011 8:12 PM

Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
I have recently come under a backscatter spam attack from one specific domain. This domain has blacklisted my server’s IP address, and so bounce replies sent to this domain are piling up in my mail queue and I have to go through periodically and manually delete them. I don’t want to disable bo

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
On Jul 11, 2021, at 9:58 AM, Wietse Venema wrote: > Ron Garret: >> I have recently come under a backscatter spam attack from one >> specific domain. This domain has blacklisted my server?s IP >> address, and so bounce replies sent to this domain are piling up >> in

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
On Jul 11, 2021, at 10:12 AM, Wietse Venema wrote: > Ron Garret: > [ Charset windows-1252 converted... ] >> >> On Jul 11, 2021, at 9:58 AM, Wietse Venema wrote: >> >>> Ron Garret: >>>> I have recently come under a backscatter spam attack fr

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
On Jul 11, 2021, at 9:58 AM, Wietse Venema wrote: >>> Ron Garret: >>>> I have recently come under a backscatter spam attack from one >>>> specific domain. This domain has blacklisted my server?s IP >>>> address, and so bounce replies sent to this domain are p

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
On Jul 11, 2021, at 12:22 PM, Matus UHLAR - fantomas wrote: > >> The problem is that a rejected recipient produces a mailer-daemon reply. > > only if you accept mail for such recipient. Ah. That may be my problem then. I’m using Dovecot via LMTP for local delivery. I thought that postfix

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Ron Garret
PM, Bill Cole wrote: > On 2021-07-11 at 15:46:45 UTC-0400 (Sun, 11 Jul 2021 12:46:45 -0700) > Ron Garret > is rumored to have said: > >> On Jul 11, 2021, at 12:22 PM, Matus UHLAR - fantomas >> wrote: >> >>> >>>> The problem is that a rejec

Re: Stopping backscatter spam to a specific domain

2021-07-12 Thread Ron Garret
For the record: On Jul 11, 2021, at 1:06 PM, Claus R. Wickinghoff wrote: > I think this can be achieved with reject_unverified_recipient to query > dovecot via lmtp but I've no practical experience with this. Probably you've > to do some googling... That turned out to be the Right Answer. I

Re: Stopping backscatter spam to a specific domain

2021-07-14 Thread Ron Garret
th this. Probably >>> you've to do some googling... > > On 12.07.21 10:19, Ron Garret wrote: >> That turned out to be the Right Answer. I simply added >> reject_unverified_recipient to smtpd_recipient_restrictions and that fixed >> the problem. >>

How to set up a shadow server

2021-08-17 Thread Ron Garret
Is there an easy way to tell postfix to send a copy of every message it receives to a “shadow server” in a way that preserves the SMTP envelope? I’m trying to tune a spam filter on actual data, but I don’t want to do it on my production server because the tuning is likely to break things. Than

Re: Logging - Handling of Aliases

2021-08-18 Thread Ron Garret
On Aug 18, 2021, at 11:55 AM, Viktor Dukhovni wrote: > If you want different processing for inbound and outbound mail, > use separate Postfix instances configured appropriately to the > task at hand. There is a useful distinction to be made between mail that is injected into the system by an

Re: Logging - Handling of Aliases

2021-08-18 Thread Ron Garret
On Aug 18, 2021, at 12:13 PM, Viktor Dukhovni wrote: >> On 18 Aug 2021, at 3:07 pm, Ron Garret wrote: >> >>> If you want different processing for inbound and outbound mail, >>> use separate Postfix instances configured appropriately to the >>>

HELO and nothing else

2021-02-10 Thread Ron Garret
Hello (not helo :-) I am working on a spam filter and so I find myself spending a lot more quality time with mail logs than I used to. One of the things I have noticed is that I will get a lot of connections that send a HELO command and then disconnect. Sometimes I get this repeated several t

What is the right way to update a postfix sqlite database?

2021-02-22 Thread Ron Garret
I ran into the sqlite locked database problem discussed in these threads: https://marc.info/?l=postfix-users&m=160096626120296&w=2 https://marc.info/?l=postfix-users&m=151561295721906&w=2 The problem occurs (AFAICT) because the database file was shared with a spam filter which was writing to th

Re: What is the right way to update a postfix sqlite database?

2021-02-23 Thread Ron Garret
On Feb 22, 2021, at 4:56 PM, Ron Garret (gmail) wrote: > > On Feb 22, 2021, at 2:57 PM, Wietse Venema wrote: > >> Ron Garret: >> [ Charset windows-1252 converted... ] >>> I ran into the sqlite locked database problem discussed in these threads: >>> &

Re: What is the right way to update a postfix sqlite database?

2021-02-23 Thread Ron Garret
On Feb 23, 2021, at 10:19 AM, Wietse Venema wrote: > Ron Garret: >>>> Isn't SQLite supposed to deal with concurrent access? >>>> https://sqlite.org/lockingv3.html >>> >>> Yes, it does, but the way it ?deals? with it is to throw an error &

Re: What is the right way to update a postfix sqlite database?

2021-02-23 Thread Ron Garret
On Feb 23, 2021, at 11:41 AM, Richard Damon wrote: > On 2/23/21 2:18 PM, Wietse Venema wrote: >> Ron Garret: >>>> If we take this route, then there needs to be a new field in the >>>> Postfix sqlite config file that controls the time limit. >>> No

Spawning milter processes

2016-01-31 Thread Ron Garret
Hello, What is the usual way to start a milter process? Can postfix be configured to spawn it automatically, or does the milter have to be set up as a separate service? If the former, how do you do it? Thanks, rg

Re: Spawning milter processes

2016-01-31 Thread Ron Garret
On Jan 31, 2016, at 1:28 AM, Robert Schetterer wrote: > Am 31.01.2016 um 09:56 schrieb Ron Garret: >> Hello, >> >> What is the usual way to start a milter process? Can postfix be configured >> to spawn it automatically, or does the milter have to be set up as a &

Re: Spawning milter processes

2016-01-31 Thread Ron Garret
OK, that’s exactly what I needed to know. Thanks! On Jan 31, 2016, at 9:16 AM, Steve Jenkins wrote: > On Sun, Jan 31, 2016 at 9:04 AM, Ron Garret wrote: > OK, but is there any way to get Postfix to restart a milter if it goes down? > By default, if a milter goes down, it takes pos

[pfx] Postfix as an SMTP front end

2023-11-15 Thread Ron Garret via Postfix-users
I am running postfix on the same machine as my IMAP server, but this is a security risk because having two different services on the same machine increases the attack surface. My IMAP server doesn't need to be publicly visible, so I would like to move that service to a separate machine, and hav