config check for proper use of proxy_interfaces?

2014-08-11 Thread terrygalant . lists
Greetings! I have 3 servers connected via lan & vpn. SERVER-1 is a hosted VM in the cloud EXTIF eth0 (198.51.100.1, 198.51.100.2, 10.0.1.1) TUNIF tun1 (192.168.1.1) SERVER-2 is my LAN's router/firewall EXTIF eth0 (203.0.113.1) TUNIF tun1 (192.168.1.2) INTIF eth1 (10.0.2.1, 172.16.2.1

Re: config check for proper use of proxy_interfaces?

2014-08-11 Thread terrygalant . lists
Hi Noel On Mon, Aug 11, 2014, at 09:11 AM, Noel Jones wrote: > proxy_interfaces should list any external IPs that *this* postfix is > connected to on the other side of a NAT. Any IPs that are not > "local" on this box that connect to postfix should be listed here. By 'connect' you do mean 'repon

Re: config check for proper use of proxy_interfaces?

2014-08-11 Thread terrygalant . lists
Perfect, thanks! On Mon, Aug 11, 2014, at 09:26 AM, Noel Jones wrote: > Yes, that sounds right.

postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-18 Thread terrygalant . lists
Im having a heck of a time figuring this one out! I'm betting I missed something in config but "hellifikno"! Mail's working for me in both directions. But when I start postfix I get in my logs ==> mail.warn <== Aug 18 13:19:51 tgdesktop postfix/postfix-script[11288]: warning:

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-18 Thread terrygalant . lists
Hi On Mon, Aug 18, 2014, at 07:38 PM, Viktor Dukhovni wrote: > Note, the "maildrop" in question is the group specified with > "setgid_group" and is unrelated to the "maildrop" LDA. Well that helps some! > > The only mention of maildrop I can find in any of the postfix configs is > > Check the

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-18 Thread terrygalant . lists
Hi On Mon, Aug 18, 2014, at 08:06 PM, Viktor Dukhovni wrote: > > and is running > > > > ps ax | grep postfix > > 11303 ?Ss 0:00 /usr/lib/postfix/master > > And this is unlikely to be the same Postfix whose config_directory > is /usr/local/etc. I appear to have a lega

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-18 Thread terrygalant . lists
This is weird, my message keeps getting bounced :-/ This message was sent by a program, not by a human person. Your submission to the postfix-users mailing list was rejected for the following reason: BOUNCE postfix-users@postfix.org: Admin req

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-19 Thread terrygalant . lists
Hi On Tue, Aug 19, 2014, at 04:11 AM, Wietse Venema wrote: > You are running the daemons from the new Postfix installation, but > you are submitting mail through the *wrong* Postfix sendmail program. > > Do: > > # find / | egrep 'sendmail|postfix' > > and report output. find / | egrep "sendmai

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-19 Thread terrygalant . lists
On Tue, Aug 19, 2014, at 06:44 AM, Viktor Dukhovni wrote: > On Tue, Aug 19, 2014 at 06:37:05AM -0700, terrygalant.li...@fastest.cc wrote: > > > find / | egrep "sendmail|postfix" | egrep -v "share/doc" > > /usr/lib/sendmail > > [ Legacy symlink for applications that find sendmail(1) in /usr/

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-19 Thread terrygalant . lists
On Tue, Aug 19, 2014, at 07:07 AM, Wietse Venema wrote: ls -ld `postconf -h command_directory`/postdrop -rwxr-sr-x+ 1 root postdrop 257K Aug 19 06:23 /usr/local/sbin/postdrop* ls -ld `postconf -h queue_directory`/maildrop drwx-wx--- 2 postfix postdrop 4.0K Aug 19 07:09 /var/spo

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-19 Thread terrygalant . lists
On Tue, Aug 19, 2014, at 07:21 AM, Wijatmoko U. Prayitno wrote: > exclude them into your whatever pkg-manager conf... Exclude what? THe packages that depend on & require /usr/sbin/sendmail? It's even part of http://refspecs.linuxbase.org/LSB_4.1.0/LSB-Core-generic/LSB-Core-generic/baselib-sen

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-19 Thread terrygalant . lists
On Tue, Aug 19, 2014, at 07:47 AM, Wietse Venema wrote: > In that case, it should be possible to submit an email mesage (whether > it delivers properly depends on correct configuration in > /usr/local/etc/postfix): Thorugh this entire biz, I've been able to submit/deliver mail. Just the logs' p

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-19 Thread terrygalant . lists
On Tue, Aug 19, 2014, at 08:15 AM, Wijatmoko U. Prayitno wrote: > what linux distro do you use? if redhat/centos/scientific > you can use CentALT repository which has latest postfix. It's opensuse. The point is I don't WANT to use the distro's postfix. Not the least of the reasons is that we've

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-19 Thread terrygalant . lists
On Tue, Aug 19, 2014, at 07:48 AM, Viktor Dukhovni wrote: > Yes, but mail(1) and other software will still use /usr/sbin/sendmail. II think that's a key question. Do they use /usr/sbin/sendmail only & always? Or, do they -- instead -- use /etc/alternatives/sendmail if it exists & is configure

Re: postfix-script maildrop permission errors, but not using maildrop for delivery

2014-08-19 Thread terrygalant . lists
> They use /usr/sbin/sendmail, on correctly configured systems, with > "alternatives", you have: > > /usr/sbin/sendmail -> /etc/alternatives/sendmail > /etc/alternatives/sendmail -> /usr/sbin/sendmail.postfix > > and similar, e.g. > > /usr/sbin/sendmail -> /etc/alternatives/se

Re: FYI: blocking attachment extensions

2014-09-18 Thread terrygalant . lists
I've been reading the discussion here and the various approaches to blocking extensions I'd gotten this from a friend awhile ago, and have been using it With postfix_header_checks = pcre:/path/to/custom_header_checks smtpd_sasl_authenticated_header = yes cat /path/to/custom_hea

correct string termination in smtpd_sender_restrictions hash:-es?

2014-11-06 Thread terrygalant . lists
Hi, I've added a sender restriction postconf -n ... smtpd_sender_restrictions = hash:/path/to/reject_senders, check_sender_access ... ... It's convenient for early rejection of lists of senders, and seems to work as expected for,

Re: correct string termination in smtpd_sender_restrictions hash:-es?

2014-11-06 Thread terrygalant . lists
Noel On Thu, Nov 6, 2014, at 02:25 PM, Noel Jones wrote: ... > The above deprecated syntax assumes "check_sender_access > hash:/path/to/reject_senders" Don't leave out the > "check_sender_access" part. Yep. Bad cut and paste on my part, sorry. It's in there. > > @domain2.com