Re: SASL authentication failure: All-whitespace username

2011-03-26 Thread weber
On Thu, 24 Mar 2011 18:51:16 +0100, Patrick Ben Koetter wrote: * Victor Duchovni : On Thu, Mar 24, 2011 at 02:07:43PM -0300, Odilo Schwade Junior wrote: > It is not my IP address. I don't know if it's a zombie.. I just think it may > be.. XXX.XXX.XXX.XXX = random IPs address. Most of Br

postscreen dnsbl services down ß

2011-08-31 Thread weber
Hello, annyone can acknowledge that following dnsbl services are not reachable? zen.spamhaus.org*2DOWN b.barracudacentral.orgDOWN bl.spamcop.net*2 combined.rbl.msrbl.net*2 ix.dnsbl.manitu.net*2DOWN dnsrbl.swinog.ch*2 dnsbl.njabl.org*2no-more-funn.moensted.dk db.wpbl.info

Re: postscreen dnsbl services down ß

2011-08-31 Thread weber
On Wed, 31 Aug 2011 08:01:56 -0400, John Peach wrote: On Wed, 31 Aug 2011 12:10:29 +0200 Michael Weissenbacher wrote: On Wed Aug 31 2011 12:01:20 GMT+0200 (CET), wrote: > Hello, > > annyone can acknowledge that following dnsbl services are not > reachable? > > zen.spamhaus.org*2D

Re: Webmin as an admin tool?

2011-08-31 Thread weber
Artica seems not any more under develpment since 2009 Last Changes was 2009 On Sat, 27 Aug 2011 13:33:34 +0200, David Touzeau wrote: Take a look here Open Source solution. Tried to perform Complex settings such has multiples postfix instances Postfix upgrade by compilation supported

Re: CA certificate error in outllook

2011-08-31 Thread weber
No Problem at all. Seems you are using an "self-signed" Cert. You can buy cheap domain validated ssl certs by 59€ / year i mean to remember. Then this message wont show up. Or you Accept the Cert in the mailclient , then this message also is not shown. In thunderbird you can do this, dunno how

reject_unauth_pipelining, in smtpd_recipient_restrictions

2012-09-24 Thread weber
hello, i just ask myself , is it useful to set reject_unauth_pipelining in "smtpd_recipient_restrictions"? my thought was, its used only in DATA_restrictions. am i on wrong way? thanks for any help or explanations m,arko

Rewrite of from: "header" ?

2012-11-01 Thread weber
hello list, hello everyone. is it possible to rewrite the From: header on outgoing Mails for only a few chosen accounts? thanks from windy and cloudy hamburg marko

Re: Removing Amavis as a filter

2012-11-06 Thread weber
As next your users Cry for iPads. Then you remove their Windows Workstations? ok, i would have a look "WHY" Amavis rejects these PDF's. If there are bad macros in it, you should be lucky that these pdfs dont get opened by your users. I guess Amavis uses Clamav in you Setup, right? Most PDF

Re: Postfix stable release 2.9.5 and legacy releases 2.8.13, 2.7.12, 2.6.18

2012-12-13 Thread weber
Wietse, The requested URL /announcements/postfix-2.9.5.html was not found on this server. ,-( marko Am 2012-12-13 14:08, schrieb Wietse Venema: [An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-2.9.5.html] Postfix stable releas

Re: Postfix 2.10.0 to be released soon

2013-02-05 Thread weber
Thanks from Germany. marko Am 2013-02-05 21:36, schrieb Wietse Venema: Rafael Azevedo - IAGENTE: Nice Wietse! Have you published a "what has changed list" already? As always, the RELEASE_NOTES file has the overview, and the HISTORY file has details (I'm not shouting at you; the names are r

permit_mx_backup needless when using relay_domains?

2013-02-08 Thread weber
hello, ist the option "permit_mx_backup" needless when i use "relay_domains" in my main.cf? my thought is, that another mailserver cant relay mails for an domain that is not listed in "relay_domains". so what is the special of "permit_mx_backkup" ? thanks marko

OpenSSL compatible Errors when openssl-1.0.1 installed (maybe for interest for others)

2013-02-08 Thread weber
hello, on my gentoo linux mail machine i use openssl 1.0.1 and postfix 2.9.5 in the logs i found: Feb 5 23:06:38 mail postfix/smtpd[25884]: warning: run-time library vs. compile-time header version mismatch: OpenSSL 1.0.1 may not be compatible with OpenSSL 1.0.0 Feb 5 23:06:39 mail postfix

do i understand tls_policy_maps right?

2013-02-10 Thread weber
hello, when i set in main.cf: smtp_tls_policy_maps= hash:/etc/postfix/tls_policy and do in /etc/postfix/tls_policy = externaldomain.com encrpyt will then every mail leaving my server to externaldomain.com forced using tls ? and when i set i

TLS Library Problem? Postfix 2.9.6

2013-02-11 Thread weber
Hi, on my backup relay server i find these lines in the logs. i rebuild openssl and postfix. i am on gentoo linux. openssl 1.0.1c postfix 2.9.6 on the final destination postfix server in the logs all is fine. this only appears on the backup relay server: Feb 11 22:52:52 fallbackhost postfix/

Re: TLS Library Problem? Postfix 2.9.6

2013-02-11 Thread weber
Am 2013-02-12 01:07, schrieb Wietse Venema: we...@zackbummfertig.de: Feb 11 22:52:52 fallbackhost postfix/smtp[18823]: warning: TLS library problem: 18823:error:04075070:rsa routines:RSA_sign:digest too big for rsa key:rsa_sign.c:127: Feb 11 22:52:52 fallbackhost postfix/smtp[18823]: warning

Re: TLS Library Problem? Postfix 2.9.6

2013-02-12 Thread weber
Viktor, thanks for the detailed reply. i checked the crt with openssl rsa -in private.key -text -noout and voila, 512 bit like you said. after generating all things new all is fine now. thanks for help. marko Am 2013-02-12 07:58, schrieb Viktor Dukhovni: On Mon, Feb 11, 2013 at 11:58:07PM

Re: TLS Library Problem? Postfix 2.9.6

2013-02-12 Thread weber
sorry for 2nd reply, and no i had openssl 1.0.1c on gentoo i see theres now 1.0.1d-r1 and the 1.0.1d is MASKED now. marko Am 2013-02-12 07:58, schrieb Viktor Dukhovni: On Mon, Feb 11, 2013 at 11:58:07PM +0100, we...@zackbummfertig.de wrote: on my backup relay server i find these lines in

Re: Bypassing amavis

2013-02-20 Thread weber
Patrick B Koetter told me some days ago you can do an sender_check_access, in the sender_check_access you can forward them to a service without amavis. sender_check_access = hash . noamavis_sender noamavis_sender = senderdomain.com FILTERsmtp:servicewithoutamavis create the serv

upstart and postfix ?

2010-06-11 Thread Marc Weber
# start the daemon: exec libexec/master Or does postfix do more "magic" on startup I don't know about? (I don't know postfix very well yet) Marc Weber [1] complex fork behaviour traced by strace running postfix start 1290 execve("/-postfix-2.2.11/sbin/postfix",

Re: The future of SMTP ?

2011-03-13 Thread Marc Weber
an expert on this area. So if any statement looks too wrong correct me, please. Marc Weber

Re: virtual domain can't recieve mail

2011-07-25 Thread Marc Weber
Excerpts from Amira Othman's message of Mon Jul 25 12:17:46 +0200 2011: > I am using postfix-2.3.3-2.3.el5_6,dovecot-1.2.17-0_115.el5 on centos 5.6.I Consider upgrading to 2.8. I tried 2.2 in the past and failed. Don't know whether 2.3.3 works much better. Marc Weber

Postscreen Blacklist

2011-09-27 Thread Marko Weber
Hello i created an etc/postfix/postscreen_access.cidr in my postfix dir. now postscreen checks on connect for the entries. i set one server in the list with reject Is it right, that the test mail goes thru postfix? i see in logs : Sep 27 16:43:30 netcogw postfix/postscreen[15206]: CONNECT f

Re: Postscreen Blacklist

2011-09-27 Thread Marko Weber
Thanks rob0, when i set postscreen_blacklist_action = drop all works like a charm. marko, from sunny hamburg Am 27.09.2011 17:08, schrieb /dev/rob0: On Tuesday 27 September 2011 09:52:16 Marko Weber wrote: Hello i created an etc/postfix/postscreen_access.cidr in my postfix dir. now

Limit amount of mails per sender a day?

2011-10-21 Thread Marko Weber
Hello, is it possible to rate the amount of sent mails per user? Goal is: each mail user should not be possible to send more then 10.000 mails each day. And is it possible to set per user (mailaccount) ? thanks marko

smtpd_sasl_type

2011-12-01 Thread Marko Weber
hello list, i set in my main.cf smtpd_sasl_type = dovecot but in the logfiles i find this: Dec 1 08:25:05 fallbackhost postfix/smtp[1204]: warning: unsupported SASL client implementation: cyrus Dec 1 08:25:05 fallbackhost postfix/smtp[1204]: fatal: SA

Postscreen Exchanger policy Question

2012-03-28 Thread Marko Weber
hi list, Under MAIL EXCHANGER POLICY TESTS i see this: By listening on both primary and backup MX addresses, postscreen(8) can deny the temporary whitelist status to clients that connect only to backup MX hosts. I dont get it at "all". When my backup MX is not on the same

250 Msg

2012-04-20 Thread Marko Weber
Hello, i see some Servers greeting with this: 250-barracuda.annonet.de Hello mail.tig.de [x8.x6.5x.1x9], pleased to meet you Is it possible to such personel Greetings in Postfix too? marko

mx_backup, main mx misuse?

2012-04-23 Thread Marko Weber
hello, i plan a postfix server as mx-backup. how can i control on this mx-backup, that people dont use this server as "main" mx? is there a way to do this? thanks from cloudy hamburg marko

Re: [SPAM] Someone is harassing my smtp.

2012-04-23 Thread Marko Weber
Am 23.04.2012 06:50, schrieb Olivier Pavilla: Hi everyone. For several months my smtp is harassing by someone located in Taiwan. This people is using any taiwanese IP. My logs are ful with this something like this: Apr 23 06:35:31 corellia postfix/smtpd[26906]: NOQUEUE: reject: RCPT from unkn

multiple check_helo_access

2012-05-02 Thread Marko Weber
hello, is there any benefit of multiple check_helo_access? i see in some configs check_helo_access is in "smtpd_helo- smtpd_sender- smtpd_recipient_restrictions". my understanding is that check_helo_access is in smtpd_helo_restrictions enough. am i wrong? thanks, marko

Postfix Configuration Update

2012-05-02 Thread Marko Weber
Hello List, is an "postfix reload" performing an "postfix upgrade-configuration" ? Or do i have to execute "postfix upgrade-configuration" seperately? when do i have to use "postfix upgrade-configuration"? normal edits in the main.cf / master.cf i can activate with postfix reload, or? tha

Re: A major fuckup on part of spamhaus:

2012-05-04 Thread Marko Weber
WTF ! Am 04.05.2012 13:12, schrieb Ralf Hildebrandt: http://www.spamhaus.org/sbl/query/SBL138067 The evidence section lists "inetnum: 95.218.0.0 - 95.219.255.255", yet spamhaus listed 93.218.0.0/15 (93 instead of 95)! 93.218.0.0/15 includes large parts of german Deutsche Telekom dialups :|

Re: PostScreen taking too long time to send greeting

2012-05-15 Thread Marko Weber
You can try with the default: postscreen_greet_wait = ${stress?3}${stress:8}s you still get error message then ? marko Am 15.05.2012 13:20, schrieb vishesh kumar: Hi Members, I have following setup related to postscreen greeting  --- po

smtpd_reject_footer wrong error code

2012-05-29 Thread Marko Weber
hello, on our mx01 and mx02 we validate recipient adresses with 'reject_unverified_recipient'. now i one case, the mx01 or mx02 connects on the destination machine and tries to validate the recipient. the result is: 550 5.1.1 : Recipient address rejected: undeliverable address: host 192.168

Multi-recipient bounce 550 5.5.3

2012-06-07 Thread Marko Weber
Hello, i try to send mails to postmaster@ + abuse@ to the mailserver i work on. I get these log messages on the server when mails arrive for postmaster/abuse: Multi-recipient bounce 550 5.5.3 Jun 7 10:14:01 mail postfix/lmtp[18106]: C976F11C688: to=, relay=mail.test.de[/var/run/dspam/dspam

Re: Multi-recipient bounce 550 5.5.3

2012-06-07 Thread Marko Weber
Am 07.06.2012 14:40, schrieb Ralf Hildebrandt: * Marko Weber : Hello, i try to send mails to postmaster@ + abuse@ to the mailserver i work on. I get these log messages on the server when mails arrive for postmaster/abuse: Multi-recipient bounce 550 5.5.3 Jun 7 10:14:01 mail postfix/lmtp

virtual_alias_maps ignored when used dovecot-lda?

2012-06-08 Thread Marko Weber
Hello, i use virtual user and virtual domains in postfix with mysql. to existing users the mails will be delivered. but when i create a alias (postfixadmin), the mail is bounced. Jun 8 10:50:40 mail dovecot: auth-worker: sql(postmas...@zbfxxx.de): Unknown user Jun 8 10:50:40 mail postfix/pip

Re: virtual_alias_maps ignored when used dovecot-lda?

2012-06-12 Thread Marko Weber
used parameter: virtual_maildir_limit_message=Sorry, the user's maildir has overdrawn his diskspace quota, please try again later. postconf: warning: /etc/postfix/main.cf: unused parameter: transport_destination_recipient_limit=1 Am 08.06.2012 11:03, schrieb Marko Weber: Hello, i use virtual

[SOLVED] virtual_alias_maps ignored when used dovecot-lda

2012-06-12 Thread Marko Weber
0.0/8 -o mynetworks_style=host -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks,no_milters all works as expected. maybe this helps another one with same problem any day. marko Am 12.06.2012 13:00, schrieb Marko Weber: hello list, back again ;-) on the dovecot

Fallback if Amavisd-new not reachbale?

2012-07-02 Thread Marko Weber
hello list, is there a way to give postfix a fallback if amavid-new is not reachable? situation: when amavis is down or not reachable, postfix should skip to deliver to amavis and skip this step. is there a way for this? thank you, marko

postfix reload shows unused parameter.

2012-07-03 Thread Marko Weber
hello, when i do on console # postfix reload i get: /usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_create_maildirsize=yes /usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_mailbox_extended=yes /usr/sbin/postconf: warning: /etc/postfix

Re: Milter reply

2012-07-13 Thread Marko Weber
Rene, why dont u use POLICYD for that? It can do the things u need and much more. have a look on http://policyd.sf.net/ dont reinvent the whhel. marko Am 12.07.2012 16:12, schrieb Wietse Venema: Ren? Klomp: Thanks. So that is the problem. What is the difference between smtp and the "pickup

Re: Milter reply

2012-07-13 Thread Marko Weber
rene, sorry, look here http://www.policyd.org/content/features Am 13.07.2012 09:23, schrieb Marko Weber: Rene, why dont u use POLICYD for that? It can do the things u need and much more. have a look on http://policyd.sf.net/ dont reinvent the whhel. marko Am 12.07.2012 16:12, schrieb

mail-to-script messages id and from lines

2021-11-23 Thread Jürgen Weber
: Sun, 21 Nov 2021 19:11:19 +0100 (CET) From: Jürgen Weber body

Re: mail-to-script messages id and from lines

2021-11-23 Thread Jürgen Weber
;maild@my.virtual'), ('Delivered-To', 'ma...@host.my.tld'), ('Received', 'by host.my.tld (Postfix, from userid 1001)\n id D3DFD783; Sun, 21 Nov 2021 19:11:19 +0100 (CET)'), ('To', 'maild@my.virtual'), ('Subject', '

Issues with a Rewriting Gateway

2017-04-23 Thread Dennis Weber
I need them. * Is it possible at all to create a black box rewrite gateway the way I need it or do I need the internal mail servers to know the external domain in any case? Thank you all a lot in advance for your thoughts and ideas about my problems! With best regards Dennis Weber

AW: Issues with a Rewriting Gateway

2017-04-25 Thread Dennis Weber
;From" Field and "Return-To" are rewritten by generic and the mail is delivered fine, only the way incoming won't work. This is exactly the same behavior I experienced with using canonical_maps und even with the header_checks... :( Any idea on what I am doing wrong? With

AW: Issues with a Rewriting Gateway

2017-04-25 Thread Dennis Weber
is going to the wrong address. With best regards Dennis Weber -Ursprüngliche Nachricht- Von: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] Im Auftrag von Viktor Dukhovni Gesendet: Dienstag, 25. April 2017 18:04 An: postfix-users@postfix.org Betreff: Re: Issues wi

AW: Issues with a Rewriting Gateway

2017-04-26 Thread Dennis Weber
"To" is rewritten and the mail is looped back to the GW by my Exchange server. Logfile with additional activated verbose output on "smtp" and "relay": http://webertec.net/fileshare/maillog_26042017_1126.txt Do I get this log the right way, that I rewrite the incoming "To" field and write it back with "generic" when the mail is relayed to my internal servers? Or can you see another source for my errors? With best regards Dennis Weber

AW: Issues with a Rewriting Gateway

2017-05-10 Thread Dennis Weber
ft: When I send an appointment from an Exchange server, relayed over the Postfix gateway, there are no generic rules for rewriting applied. Do you have a last hint for me, in which direction I should focus my research on, why appointments are not rewritten? With best regards, Dennis Weber -Urs

Re: is possible to use different SSL certificates for different domains?

2013-02-25 Thread Marko Weber | ZBF
The "one" Mailserver, that is doing mailing for N Domains, only need "one" Certificate. Other thing is with "websites", they need each one. connect multiple ip´s to the server for multiple websites ssl certs. but the mailserver only one for himself. the other mailserver dont look "what domain"

Re: is possible to use different SSL certificates for different domains?

2013-02-25 Thread Marko Weber | ZBF
certificate". I know is a very special case and not's typical to do, and for this I prefer to comment to this list. If anyone knows how to create this rule, be grateful Thanks On 25/02/2013 10:46, Marko Weber | ZBF wrote: The "one" Mailserver, that is doing mailing for N Domains,

Postscreen dnsblog logentries

2013-03-20 Thread Marko Weber | ZBF
hello, i see alot of entries from postfix/dnsblog in my logs like this: postfix/dnsblog[30381]: warning: dnsblog_query: lookup error for DNS query 140.99.145.217.xx.zen.dq.spamhaus.net: Host or domain name not found. Name service error for name=140.99.145.217..zen.dq.s

TLS Question, untrusted connection

2013-03-26 Thread Marko Weber | ZBF
i sometimes mail with the deutschebank. when i send mails i use a tls_policy_map: db.com secure match=loninmrp23.uk.db.com:nyjinsmp07.us.db.com:loninmrp22.uk.db.com:loninmrp14.uk.db.com:nyginsmp02.us.db.com:nyjinsmp01.us.db.com .db.com secure match=loninmrp23.uk.db.com:nyjinsmp07.us.db.com

Re: Dont add the $myorigin domain to the FROM header field

2013-03-26 Thread Marko Weber | ZBF
Am 2013-03-22 18:50, schrieb Noel Jones: On 3/22/2013 11:44 AM, Victor d'Agostino wrote: Hi all, I use postfix as relay server to several internal domains. xxx is the main one. postconfig | grep domain prints : append_dot_mydomain = no mydomain = xxx myorigin = $mydomain relay_domains = $my

Re: TLS Question, untrusted connection

2013-03-26 Thread Marko Weber | ZBF
Am 2013-03-26 10:30, schrieb Reindl Harald: Am 26.03.2013 09:44, schrieb Marko Weber|ZBF: Mar 25 14:04:35 mail postfix/smtpd[31103]: Untrusted TLS connection established from loninmrp15.uk.db.com[160.83.44.131]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) why is on incoming mails

Re: dictionary-attack

2013-03-28 Thread Marko Weber | ZBF
"The table was created many years ago over an extended period of time,...::" so, its outdated? i think its better to use postscreen and a regular updated file like DROP from spamhaus. i refresh this DROP every hour. so maybe wrong listed candidates are deleted in the refreshe

Re: Graphical stats by domain

2013-04-04 Thread Marko Weber | ZBF
Am 2013-04-04 10:12, schrieb Muzaffer Tolga Özses: On 04/04/2013 10:30 AM, Antoine Nguyen wrote: Muzaffer Tolga Özses wrote: Good morning everyone :) Do you guys know of a tool that will act like pflogsumm, only based on domain and graphical? Regards, Hi, take a look at modoboa (http

Re: Postscreen config

2013-04-29 Thread Marko Weber | ZBF
Am 2013-04-24 15:59, schrieb Tony Nelson: After reading through the recent Postscreen DNSBL threads I decided to give it a try. I used Rob's example from http://rob0.nodns4.us/postscreen.html [1] as a leaping off point, but chose to leave pipelining disabled until I'm sure I understand what I

postfix ssl errors in log, what does they mean?

2013-05-16 Thread Marko Weber | ZBF
hello , i find many of these in my mail.log: May 16 14:27:33 mail opendkim[2926]: 119CA2FB20: s=dktest d=porcupine.org SSL error:04091068:rsa routines:INT_RSA_VERIFY:bad signature is my openssl broken or something else glitchy? or does this mean the dkim from porcupine.org ist invalid? th

Re: problem, pass bad header thru amavis and dont quarantine them

2013-05-17 Thread Marko Weber | ZBF
Hi Patrick, Am 2013-05-17 00:20, schrieb Patrick Ben Koetter: Marko, * Marko Weber | ZBF : hello, i set in amavid.conf : $final_bad_header_destiny = D_PASS; but in logs i see this lines; May 16 23:22:11 mail amavis[15703]: (15703-13) Passed BAD-HEADER-1 {RelayedOpenRelay,Quarantined

Re: problem, pass bad header thru amavis and dont quarantine them

2013-05-17 Thread Marko Weber | ZBF
Hi Patrick, i did it like described in your blog. (bit changed for my structure) @local_domains_maps = ( ".$mydomain", read_hash('/etc/postfix/lookups/hash/virtual_domains_amavis') ); # list of all local domains # ### weber stop the result in logfile is now: May 17

ssl errors in log. error on remote or local side?

2013-05-22 Thread Marko Weber | ZBF
hello list, i find error entries like these in my logs: postfix/smtp[16790]: warning: TLS library problem: 16790:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340: does that mean openssl or something is broken on my machine? thanks marko

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Marko Weber | ZBF
Am 2013-05-22 17:54, schrieb Viktor Dukhovni: On Wed, May 22, 2013 at 03:57:49PM +0200, Marko Weber | ZBF wrote: I find error entries like these in my logs: postfix/smtp[16790]: warning: TLS library problem: 16790:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340

Re: postfix need reload after cidr changes?

2013-05-23 Thread Marko Weber | ZBF
hey wietse, Am 2013-05-23 21:33, schrieb wie...@porcupine.org: Marko Weber | ZBF: when i change a cidr map, do i have to "reload" postfix like on chnages by texthash? i was on http://www.postfix.org/cidr_table.5.html and cant find that info. It is safe to assume that if you cha

Re: 2.10 problem

2013-06-04 Thread Marko Weber | ZBF
Am 2013-06-04 15:00, schrieb Benny Pedersen: Grant skrev den 2013-06-04 01:45: The big config change I see referenced with regard to 2.10 is smtpd_relay_restrictions but I don't see how that could be related. My smtpd_relay_restrictions is blank. suggest to make it not in main.cf, but use t

Re: postfix munin graphs

2013-06-19 Thread Marko Weber | ZBF
Am 2013-06-19 09:56, schrieb Grant: I think I need to tell munin where my postfix logs are (/var/log/mail/current) since I use metalog. How can I do that? Instead of searching online, use the built-in pod based format, e.g.: $ munindoc postfix_mailstats You just improved my life. You mig

Re: ratelimiting outgoing mail

2013-07-11 Thread Marko Weber | ZBF
hi, Am 2013-07-11 12:58, schrieb wie...@porcupine.org: Przemys?aw Orzechowski: Hi I need to setup server that will ratelimit outgoing mail but will accept all messages from authenticated users regardles of ratelimit. I know its somewhat strange approach but ... its higherups decission post

Re: DSPAM Integration

2013-07-25 Thread Marko Weber | ZBF
hello, Am 2013-07-23 10:19, schrieb Phil Daws: Hello, I would love to integrate DSPAM with AmaViS and read somewhere that the best way for retraining would be to use a custom hook. My thinking is that the custom hook should check the SA score and if that believes it is SPAM then it would pass

Re: How to send more than 1 email per sec per domain?

2013-08-14 Thread Marko Weber | ZBF
Hi, Am 2013-08-13 18:10, schrieb DTNX Postmaster: On Aug 13, 2013, at 17:34, Noel Jones wrote: On 8/13/2013 10:26 AM, Philippe Bloix wrote: What i would like is : For example, my postfix relay accepts about 1000 emails (1 shot) from a SMTP client, then the postfix server relays them with th

postscreen postscreen_dnsbl_sites order

2013-09-04 Thread Marko Weber | ZBF
hello postfix list, maybe an easy quest for you. when i use multiple rbls in 'postscreen_dnsbl_sites' postscreen_dnsbl_sites = 1.list.org anotherlist.org nsafools.org obamaisadrama.org at example. are the entries of 'postscreen_dnsbl_sites' used in order like listed? or is postscreen us

Re: postscreen postscreen_dnsbl_sites order

2013-09-18 Thread Marko Weber | ZBF
Hi Wietse, Am 2013-09-04 23:45, schrieb wie...@porcupine.org: Marko Weber | ZBF: hello postfix list, maybe an easy quest for you. when i use multiple rbls in 'postscreen_dnsbl_sites' Yes... postscreen_dnsbl_sites = 1.list.org anotherlist.org nsafools.org obamaisadra

dnsblog dnswl problem ?

2013-09-19 Thread Marko Weber | ZBF
hello, i use list.dnswl.org in postscreen_dnsbl_sites . in the logfiles i see: Sep 19 12:17:18 mail postfix/dnsblog[15318]: warning: dnsblog_query: lookup error for DNS query 35.64.91.217.list.dnswl.org: Host or domain name not found. Name service error for name=35.64.91.217.list.dnswl.org

Re: requiring TLS on a pool of servers

2013-10-16 Thread Marko Weber | ZBF
Hello, Am 2013-10-14 14:12, schrieb Dan Langille: I have a group of Postfix servers. I want communications between these servers to be TLS and clients must present a known certificate. These servers are also public-facing and accept incoming mail from servers not under my control. I just start

LDAP Fallback Question

2013-11-13 Thread Marko Weber | ZBF
hello list, we use LDAP in Postfix for User Management. Now i should setup a second LDAP server and postfix should use the second LDAP server when the first is not longer available. i searched inet but didnt really find a solution. can u help me or guide me? thank you marko

Re: LDAP Fallback Question

2013-11-13 Thread Marko Weber | ZBF
hallo patrick, Am 2013-11-13 10:29, schrieb Patrick Ben Koetter: * Marko Weber | ZBF : hello list, we use LDAP in Postfix for User Management. Now i should setup a second LDAP server and postfix should use the second LDAP server when the first is not longer available. i searched inet but

copy incoming mails to other account and strip out attachements?

2013-12-12 Thread Marko Weber | ZBF
hello list, its me again from hamburg. i googled some time to find a solution for following scene: incoming mails for import...@dingdong.com , should be copied to mob...@dingdong.com AND if Attachements are in the mail, they should be stripped out. Only in the account import...@dingdong.com s

Re: Puzzling problem

2014-01-09 Thread Marko Weber | ZBF
Hello, Am 2014-01-09 05:26, schrieb Seann: Paul, First thing that caught my eye, is it looks like the reason for the bounce was the filter shell script died: Command died with status 1: "/usr/local/bin/filter.sh". Command output: Jan 9 02:49:28.913 [29829] warn: netset: cannot in

Limitation on outgoing mails

2014-01-17 Thread Marko Weber | ZBF
hi list, sorry to ask, but i CANT remember how the option is named in the main / master cf. theres an option to limit outgoing mails, lets say the mailserver has to send 1000 mails to google.com, u can say with this option "not more then 10 mails at once" to deliver. does any know what i mea

tls question to viktor,

2014-01-29 Thread Marko Weber | ZBF
hello, viktor or any other. in the postfix tls readme:" In order to use TLS, the Postfix SMTP server generally needs a certificate and a private key. Both must be in "PEM" format. " i have setup this way in my main.cf: smtpd_tls_CAfile= /etc/ssl/zbfm

ldap help needed.

2014-06-17 Thread Marko Weber | ZBF
hello list, on debian 7.5 i installed postfix 2.9.6 with postfix-ldap package. in the main.cf: ... ldap_transport_result_filter = smtp:%s.24t.loc:25 virtual_mailbox_maps = ldap:ldap_users ## wichtig!! ldap:ldap_users muss hier mit aufgefuehrt werden, sonst werden alle Mails

Re: ldap help needed.

2014-06-20 Thread Marko Weber | ZBF
hi wietse, Am 2014-06-17 15:39, schrieb wie...@porcupine.org: Wietse Venema: > [] Stopping Postfix Mail Transport Agent: postfix/usr/sbin/postconf: > warning: /etc/postfix/main.cf: unused parameter: > ldap_transport_result_filter=smtp:%s.24t.loc:25 Apparently, postconf 2.9-2.12 error chec

Allowing email addresses with % in them

2020-02-21 Thread Stephen Paul Weber
I have reason to allow email addresses with % in them. If I do this: allow_percent_hack = no Then I still get "relay access denied" because it seems that Postfix considers % a relay attempt, even with the rewriting disabled? So, if I do this as well: allow_untrusted_routing

Re: postscreen log scanner script updated

2014-10-08 Thread Marko Weber | ZBF
Hi, Am 2014-09-29 18:18, schrieb Mike.: On 9/29/2014 at 10:44 AM Mike. wrote: |I cleaned up my pslogscan.sh script a bit. Aside from some general |cleanup, I did some re-formatting of the output to make it look a bit |cleaner, and allow for some flexibility in display widths. I also |went fr

[pfx] SMTP Smuggling disclosure process & VINCE

2023-12-22 Thread Tim Weber via Postfix-users
Hi Postfix team, there is some debate online about the disclosure process by SEC Consult regarding the SMTP Smuggling vulnerability. The timeline on starts on December 18, the day the article describing the attack in detail has been released by SEC

[pfx] Re: SMTP Smuggling disclosure process & VINCE

2023-12-22 Thread Tim Weber via Postfix-users
Hi Wietse, thanks for getting back to me so quickly. Please rest assured that I'm not looking for someone to blame. My motivation is to try to find out whether SEC's release process really has been as responsible as they claim: > We strictly adhere to our responsible disclosure processes > (ht

[pfx] Re: SMTP Smuggling disclosure process & VINCE

2023-12-23 Thread Tim Weber via Postfix-users
Hi Vijay, thank you very much for this detailed explanation. I found it especially useful to learn about CERT/CC's workflow, since people like me, who are neither security researchers nor maintainers of well-known software projects, have little insight into this. While I was able to reach VINCE