Re: postscreen being exhausted?

2009-08-14 Thread Ralf Hildebrandt
* Wietse Venema : > I removed the warning for services with "process limit = 1" in the > 2.7-nonprod release series, when I added the postscreen daemon. I installed the non - non-prod-version and kept the master.cf entries :( -- Ralf Hildebrandt Geschäftsbereich IT | Ab

Re: 450 temp error when 550 perm error is possible

2009-08-17 Thread Ralf Hildebrandt
_policy_service inet:127.0.0.1:10023, permit Your problem is that you distributed the checks all ocver smtpd_sender_restrictions, smtpd_recipient_restrictions and smtpd_client_restrictions > smtpd_sender_restrictions = permit_mynetworks, > reject_unknown_sender_domain, permit --

Re: 450 temp error when 550 perm error is possible

2009-08-17 Thread Ralf Hildebrandt
xbl.spamhaus.org. Rather use zen.spamhaus.org > Mmm, I think I need to read the manual to really understand where all > those rejects/permits belong. I'd put them all into smtpd_recipient_restrictions #:) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité

Re: 450 temp error when 550 perm error is possible

2009-08-17 Thread Ralf Hildebrandt
* Martijn de Munnik : > > I'd put them all into smtpd_recipient_restrictions #:) > > http://www.postfix.org/SMTPD_ACCESS_README.html#danger Doesn't apply for your restrictions -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsm

Re: 450 temp error when 550 perm error is possible

2009-08-17 Thread Ralf Hildebrandt
reject_unauth_destination, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_rbl_client virbl.dnsbl.bit.nl check_policy_service inet:127.0.0.1:12525, check_policy_service inet:127.0.0.1:10023 -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin

Re: postfix mail queue hits a certain limit, needs restart of postfix (not aware of other choices, or root cause)

2009-08-17 Thread Ralf Hildebrandt
to figure out the root > cause. Postfix version is 2.2.7. Any clues will be much appreciated, > thanks. More analysis. What is actually happening? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 3

Re: sending large number of emails

2009-08-18 Thread Ralf Hildebrandt
y.html -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: real-world issues with smtpd_tls_ask_ccert?

2009-08-21 Thread Ralf Hildebrandt
v1 with cipher > AES128-SHA (128/128 bits) > > Why does it say "Anonymous TLS connection"? Because the TLS certificate is not signed by a trusted CA. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Fran

Re: Country IP block list

2009-08-23 Thread Ralf Hildebrandt
* Security Admin (NetSec) : > Could someone provide links to sites where IP addresses are grouped by > country? I use (the free) geoip database for that. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Fr

Re: DNSBL/RBL-Blacklist

2009-08-24 Thread Ralf Hildebrandt
g; This is not the DNSBL you're looking for. Read man, READ! I like the StarWars phrasing :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570

Re: DNSBL/RBL-Blacklist

2009-08-24 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > * Schwalbe, Oliver : > > > reject_rbl_client > > zen.spamhouse.org, <-- new Row inserted > > reject_rbl_client zen.spamhaus.org > > > <<< 554 5.7.1 Service unavaila

Re: Mail Box

2009-08-24 Thread Ralf Hildebrandt
* Roman Gelfand : > Can somebody recommend a mail box server software that would be worthy > of postfix? Dovecot > Also, if anyone knows of a cool web client. Horde Squirrelmail roundcube -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmediz

Re: Reverse DNS fails with "cannot find your hostname" when forward IP is wrong

2009-08-28 Thread Ralf Hildebrandt
;t Wietse write that code? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: Bounce on the auto fwd mail.

2009-08-28 Thread Ralf Hildebrandt
s=bounced (host > cuda2.time.net.my[203.121.65.119] said: 504 Need Fully Qualified > Address (in reply to MAIL FROM command)) test.jeffreyklei...@localdomain is not a Fully Qualified Address -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin

Helo command rejected: Domain not found

2009-08-28 Thread Ralf Hildebrandt
ct_unknown_helo_hostname for that, but: # postconf |grep unknown_helo_hostname unknown_helo_hostname_tempfail_action = $reject_tempfail_action b) for a domain that does exist (ok, admittedly, NOW, it could have been differently 8 days ago) -- Ralf Hildebrandt Geschäftsber

Re: Helo command rejected: Domain not found

2009-08-28 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > Which Postfix restriction generates: "Helo command rejected: Domain not > found"? > > From the log on albatross.python.org: > > Aug 21 15:07:07 albatross postfix/smtpd[15378]: NOQUEUE: reject_warning: RCPT > from qmta09.emeryville.ca.mai

Re: Helo command rejected: Domain not found

2009-08-28 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > BTW, this log entry in itself proves that the DNS name must resolved > back and forth, because otherwise postfix would have logged > "unknown[76.96.30.96]" instead of > qmta09.emeryville.ca.mail.comcast.net[76.96.30.96] > -- which was also the HEL

Re: Helo command rejected: Domain not found

2009-08-28 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > * Ralf Hildebrandt : > > > BTW, this log entry in itself proves that the DNS name must resolved > > back and forth, because otherwise postfix would have logged > > "unknown[76.96.30.96]" instead of > > qmta09.emeryville.ca.mail.comcas

Re: legal intercept to file.

2009-08-31 Thread Ralf Hildebrandt
'always_bcc', store the email to file. always_bcc_maps -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962

Re: Custom 550 error message

2009-09-02 Thread Ralf Hildebrandt
* Richard Smits : > Hello, > > I was wondering, is it possible to change the default error message > with a 550 or 450 ? > > It is now : #5.5.0 smtp;550 : Recipient address > rejected: User unknown in virtual alias table > > Can this be changed ? Which part o

Re: Custom 550 error message

2009-09-02 Thread Ralf Hildebrandt
* Richard Smits : > Hello, > > After the "rejected" so the "User unknown in virtual alias table" > part. Or the entire message. Also O.K. show_user_unknown_table_name = no -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitäts

Re: Custom 550 error message

2009-09-02 Thread Ralf Hildebrandt
* Richard Smits : > Let me explain why I ask this, > > We want to include a message in the error message , like : > > #5.5.0 smtp;550 : Recipient address > > rejected: Please see http://telephonebook.domain.com for email info > > Is this possible ? By editing th

Re: Logging mystery

2009-09-04 Thread Ralf Hildebrandt
postfix can do. Maybe some application was abused to send mail using SMTP directly to the host that throttled the onslaught. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel.

Re: smtp restriction class

2009-09-04 Thread Ralf Hildebrandt
* Muhammed Sameer : > Hello, > > In my postfix configuration I want to apply an smtp restriction class if the > domainname of the sender and the recipient is different > for example in my main.cf i am using > You need a policy server for that -- Ralf Hildebrandt G

Re: match_list_match: host in my subnet: no match

2009-09-06 Thread Ralf Hildebrandt
o match > > which I don't understand. If I have permitted 192.168.2.0/24 and that > system is on that network (it's a wireless AP running as a gateway) > why is it unmatched? Because you forgot permit_mynetworks: > smtpd_recipient_restrictions = permit_sasl_authenticated, reject

Re: match_list_match: host in my subnet: no match

2009-09-06 Thread Ralf Hildebrandt
* Paul Beard : > > On Sep 6, 2009, at 2:31 AM, Ralf Hildebrandt wrote: > > >Because you forgot permit_mynetworks: > > > >>smtpd_recipient_restrictions = permit_sasl_authenticated, reject > > > > > Like this? > > smtpd_recipient_restrictio

python framework for a policy daemon?

2009-09-09 Thread Ralf Hildebrandt
Is there a ready to use python framework for a policy daemon? I have a nice idea for a policy daemon :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155

Re: NDR status written to headers rather than body?

2009-09-11 Thread Ralf Hildebrandt
Host or domain name not found > > then I can parse the header for this key/pair, store (probably in a > MySQL table) the who and why. I can dump the body (i don't need to > waste resources reading the body) > > Hope this makes sense, kind regards Nope. Simpl

Re: NDR status written to headers rather than body?

2009-09-11 Thread Ralf Hildebrandt
ion-To: sender+$1...@charite.de Read-Receipt-To: sender+$1...@charite.de Registered-Mail-Reply-Requested-By: sender+$1...@charite.de Return-Receipt-Requested: sender+$1...@charite.de X-Confirm-Reading-To: sender+$1...@charite.de Subject: Test $...@$2 some text EOF -- Ralf Hildebrandt Geschäftsb

Re: NDR status written to headers rather than body?

2009-09-11 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > * Paul Cockings : > > > That seems like a much better idea - Thanks! > > A bit of code sends mail to $...@$2: > > /usr/sbin/sendmail -N failure,success -f sender+$1...@charite.de $...@$2 < From: sender > To: $...@$2 > Errors-To: sender+

[OT] krb5 authorization and special characters

2009-09-30 Thread Ralf Hildebrandt
I'm aware of http://tools.ietf.org/html/draft-ietf-krb-wg-kerberos-set-passwd-06 which addresses usernames & passwords with special characters (which we germans have plenty of). Is this still a draft or has an RFC replaced it in the meantime? -- Ralf Hildebrandt Geschäftsb

Re: Simple mailing list for virtual domain

2009-09-30 Thread Ralf Hildebrandt
this > address. Obviously I'm an idiot and I need some assistance. Please show the log entry. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155

Re: Simple mailing list for virtual domain

2009-09-30 Thread Ralf Hildebrandt
* Thomas Pfaff : > Sep 30 11:53:40 gw postfix/qmgr[25164]: 079B412A5D1: removed > > On Wed, 30 Sep 2009 11:50:35 +0200 > Ralf Hildebrandt wrote: > > > * Thomas Pfaff : > > > Hi. > > > > > > I'm trying to get mail sent to l...@foo.com

Re: Simple mailing list for virtual domain

2009-09-30 Thread Ralf Hildebrandt
/postfix > sendmail_path = /usr/local/sbin/sendmail > setgid_group = _postdrop > unknown_local_recipient_reject_code = 550 > virtual_alias_domains = foo.com > > $ head -n 1 /etc/postfix/virtual > l...@foo.com u...@domain1.com, u...@domain2.com /etc/postfix/virtual is not being us

Re: postfix outgoing mail delay

2009-09-30 Thread Ralf Hildebrandt
nds, and the 3rd task, the outgoing mail took 4 mins and 4 > seconds to finish. > The application server schedule fetch mail every 5 mins. > I have no ideals why this happen. Any suggestion? Without log? No. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Unive

sender_canonical_maps vs. smtpd_proxy_filter

2009-09-30 Thread Ralf Hildebrandt
P helo= -- it would rewrite the envelope, but not the header. mail_version = 2.7-20090828-nonprod -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49

Re: Specifying 'check_sender_access' during 'smtpd_recipient_restrictions' filters recipient as well?

2009-10-01 Thread Ralf Hildebrandt
t a known MX for > 'configcast.com'. > > Since there is a seperate 'check_recipient_access' as well, I was > expecting 'check_sender_access' to work for 'MAIL FROM' only, but the > above example suggests it is consulted during the recipient stage

Re: Fall back when dovecot SASL is unavailable?

2009-10-01 Thread Ralf Hildebrandt
n > that case, so that mail for local recipients can still be received. Is > this possible? It's the one problem we're having here as well: When updating dovecot, postfix won't work due to that... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Unive

Re: content_filter for outbound messages

2009-10-01 Thread Ralf Hildebrandt
* Darvin Denmian : > Hello, > > Currently I'm using "content_filter" to filter inbound messages. How? > Now I need to know if is possible to do something like content_filter > for outbound messages. Every outbound message was inbound once, no? -- Ralf Hil

Re: snowshoe spammers at zen

2009-10-04 Thread Ralf Hildebrandt
* ghe : > I see that spamhaus is adding a 127.0.0.3 IP response for snowshoe > spammers. Will postfix block these? That depends of how you configured postfix! > Just how does postfix process zen responses? That depends of how you configured postfix! How did you configure postfix?

Re: snowshoe spammers at zen

2009-10-04 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > How did you configure postfix? To shorten the riddle: reject_rbl_client zen.spamhaus.org uses the snowshoes automatically, reject_rbl_client zen.spamhaus.org=127.0.0.1 etc. doesn't. But people using above syntax usually know what they're doing (since th

Re: Using Postfix WARN Action Properly

2009-10-06 Thread Ralf Hildebrandt
y, if I use the HOLD option instead, where are > those messages held until I can examine them? What exactly is it that you want to do. In real life almost ALL mails are base64 encoded... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Camp

Re: sender_canonical_maps vs. smtpd_proxy_filter

2009-10-08 Thread Ralf Hildebrandt
* Victor Duchovni : > This parameter is clearly documented to have the syntax of a restriction > class. (It has "check_address_map" as the implicit restriction for bare > tables). Didn't know that. It works now. -- Ralf Hildebrandt Geschäftsbereich IT | Abte

Re: Postfix snapshot 20091008 with postscreen

2009-10-09 Thread Ralf Hildebrandt
ffic > multi-cpu/core MX, and excluding all other processes from that cpu/core? I don't find postscreen to be CPU intensive, so what's the point? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenbur

Re: Not receive mail error

2009-10-09 Thread Ralf Hildebrandt
4.4.3, status=deferred (Host or domain name not found. Name service > error for name=varsitygold.com type=MX: Host not found, try again) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Be

Re: Not receive mail error

2009-10-09 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > > Oct 9 10:17:34 smtpmailer postfix/smtp[27126]: 47E79249AA4: > > to=, relay=none, delay=20, delays=0.07/0/20/0, > > dsn=4.4.3, status=deferred (Host or domain name not found. Name service > > error for name=varsitygold.com type=MX: Host not foun

Re: Outgoing Mail Moderation

2009-10-10 Thread Ralf Hildebrandt
mbination of HOLD in header_checks or access maps and the pfqueue program -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 r

Re: Using unix domain socket to send mail?

2009-10-11 Thread Ralf Hildebrandt
* Srdan Dukic : > Hi, > > I have a program which currently uses the '/usr/sbin/sendmail' command to > send mail through postfix, but am looking for a replacement for this command > as it is slow. Use direct SMTP to port 25, localhost -- Ralf Hildebrandt Geschä

Re: invalid sender - domain but no username

2009-10-13 Thread Ralf Hildebrandt
^^^^ header Solution: Specifiy a correct envelope sender. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: Postfix Sender Verify

2009-10-21 Thread Ralf Hildebrandt
way? address_verify_sender # postconf -d address_verify_sender address_verify_sender = $double_bounce_sender # postconf -d double_bounce_sender double_bounce_sender = double-bounce So I don't see postmaster here. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Univ

Re: Postfix Sender Verify

2009-10-21 Thread Ralf Hildebrandt
26] /etc/postfix: postconf -d address_verify_sender > address_verify_sender = postmaster -d displays the default - always! please show postconf -n output. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 3

Re: Postfix Sender Verify

2009-10-21 Thread Ralf Hildebrandt
domain.co.uk > myhostname = spam.domain.co.uk > relay_domains = domain.co.uk That makes no sense. Is domain.co.uk relay_domain or mydestination? Decide! The solution is: address_verify_sender = postmas...@domain.co.uk -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Un

Re: Accept null HELO/EHLO

2009-10-21 Thread Ralf Hildebrandt
how do I do this ? I already have smtpd_helo_required = no Find out what rejects it now. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fa

Re: Postfix Sender Verify

2009-10-21 Thread Ralf Hildebrandt
* Mark Goodge : > I agree. Sender verification has its uses, but it is *not* suitable > for use as an anti-spam tool on inbound email. At least one major > webmail provider is known to blacklist hosts that employ it > excessively. So use it selectively only. -- Ralf

Re: How Can I Wipe Out Emails From Specific Sender

2009-10-21 Thread Ralf Hildebrandt
m REJECT "Stop spamming our users" > eric.soul...@bell.net REJECT "Stop spamming our users" > ... But this checks the recipient, not the sender. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Fra

Re: bug? virtual_alias_maps, virtual_mailbox_maps locan non local sender differenceu

2009-10-22 Thread Ralf Hildebrandt
;al...@ulgsm.ru" -- ignored > > > > Fix that. > It is not problem. > al...@ulgsm.ru not exists in mysql:/usr/local/etc/postfix/aliases.mysql It exists: it returns an empty result. Fix that. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Univer

Re: smtpd_restrictions sanity check

2009-11-01 Thread Ralf Hildebrandt
* Alex : > reject_maps_rbl, That's deprecated, for years. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450

Re: Adding spam attack IP's to DNSRBL providers

2009-11-03 Thread Ralf Hildebrandt
t it added with the following DNSRBL provider list: > > 1. Spamcop > 2. Spamhaus Check their websites. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570

Re: reject based on attachment

2009-11-03 Thread Ralf Hildebrandt
Unerwuenschter Anhang $1.$2 -- http://webmail.charite.de/doku/faq/#3 /name=\"(.*)\.(pif|reg|rm|scr|shb|shm|shs|sys|vbe|vbs|vxd|xl|xsl)\"$/ REJECT Unwanted attachment/Unerwuenschter Anhang $1.$2 -- http://webmail.charite.de/doku/faq/#3 -- Ralf Hildebrandt Geschäftsbereich IT

Re: reject based on attachment

2009-11-03 Thread Ralf Hildebrandt
exp or pcre format? I usually use PCRE -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: DB files across machines

2009-11-12 Thread Ralf Hildebrandt
* Gaby Vanhegan : > Is there a portable way to share postmapped file across machines? Yes: 1) share the text files, then use a Makefile to convert them on the target systems 2) Use compatible BerkeleyDB versions 3) Don't use BerkeleyDB, use CDB -- Ralf Hildebrandt Geschäftsbe

Re: DB files across machines

2009-11-12 Thread Ralf Hildebrandt
* Gaby Vanhegan : > I was under the impression that there was a performance penalty using > CDB with Postfix? A negative penalty, yes -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D

Re: DB files across machines

2009-11-12 Thread Ralf Hildebrandt
* Gaby Vanhegan : > I guess I was just misleading myself with respect to CDB and > performance: > > http://www.postfix.org/CDB_README.html I've been using it for years, no problems... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universit

Re: differences between _check options

2009-11-12 Thread Ralf Hildebrandt
headers body_checks = check the body (everything that's NOT a header!) mime_header_checks = check the MIME headers (which specify the MIME structure of the mail) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Frankl

Re: DB files across machines

2009-11-12 Thread Ralf Hildebrandt
* Ansgar Wiechers : > > My setup currently copies the plain text versions and creates a flag > > file. A cron job then looks for the flag file and postmaps the files if > > needed. > > Use incron instead of cron. Yes, it's a bit tricky to get right, b

Re: differences between _check options

2009-11-12 Thread Ralf Hildebrandt
* Victor Duchovni : > On Thu, Nov 12, 2009 at 09:09:22PM +0100, Ralf Hildebrandt wrote: > > > mime_header_checks = check the MIME headers (which specify the MIME > > structure of the mail) > > Primary headers = headers of the top-level message > Nested he

Re: advice on source route

2009-11-19 Thread Ralf Hildebrandt
rite.de --> loginn...@mailboxserver.charite.de -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: 4KB of disk space burning on a single email

2009-11-20 Thread Ralf Hildebrandt
* Arora, Sumit : > You are right Joost, 4KB will be the block size... > But my question is who is taking this disk space, because email is deleted > already. How EXACTLY is the email being deleted ? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitä

Re: 4KB of disk space burning on a single email

2009-11-20 Thread Ralf Hildebrandt
* J. Roeleveld : > The log-entries you sent me are nowhere near 4KB in size. > How do you check that the "maillog" increases by 4KB per message? My guess is the mails are marked as deleted. Nothing more. They never get deleted, thus the space never gets free. Furthermore it

Re: pcre:table & client_restrictions

2009-11-21 Thread Ralf Hildebrandt
e > > the debuging rule is working instead the of first one. > > Why does the postfix ignore the first rule? I'd think the regexp is wrong -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: pcre:table & client_restrictions

2009-11-21 Thread Ralf Hildebrandt
* Eugene V. Boontseff : > >>eug...@mail [/usr/local/etc/postfix]# postmap -fq > >>" >I'd think the regexp is wrong > Why this regexp is "wrong" for postfix, but isn't wrong for postmap? postfix matches the HOSTNAME: ppp92-100-127-177.pppoe.avangarddsl.ru and/or the IP 92.100.127.177 not http://w

Re: always_bcc

2009-11-23 Thread Ralf Hildebrandt
* Paweł Burzyński : > how can i make copy custiom user mail > because always_bcc = make copy all mails i need custiom copy of mail postconf |grep bcc -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenbu

Re: always_bcc

2009-11-23 Thread Ralf Hildebrandt
t of "postconf |grep bcc" -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: sender check

2009-11-26 Thread Ralf Hildebrandt
reject_unauth_destination > > but it seems from the log that spammer still send me and to other > local users spam mails. > Humm...strange Not strange. Look at the difference in the two configs. The solution is right there. -- Ralf Hildebrandt Geschäftsbereich IT | Abt

Re: Postfix Deployment

2009-11-27 Thread Ralf Hildebrandt
Is there a configuration > in postfix that would ignore the localhost and show original source ip > address? That depends on which software you using. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenbur

Re: Postfix Deployment

2009-11-27 Thread Ralf Hildebrandt
* Roman Gelfand : > On Fri, Nov 27, 2009 at 3:00 AM, Ralf Hildebrandt > wrote: > > * Roman Gelfand : > > > >> Is it preferable that machine running postfix should have publlic > >> address as opposed NATed address? > > > > That depends on what you

Re: What Is Causing This Failure

2009-12-01 Thread Ralf Hildebrandt
mx.premore.net. > > ;; ADDITIONAL SECTION: > a.mx.premore.net. 3093IN A 198.186.193.20 > > However my mail server wont send to this destination address and I > have no idea why. Can someone tell me how I can better examine this > situation to understand whe

Re: What Is Causing This Failure

2009-12-01 Thread Ralf Hildebrandt
er on that IP isn't answering. # telnet 198.186.193.20 25 Trying 198.186.193.20... Connected to 198.186.193.20. Escape character is '^]'. 220 share.docforge.org ESMTP Postfix -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Ben

Re: What Is Causing This Failure

2009-12-01 Thread Ralf Hildebrandt
o connect to remote host: No route to host What is the output of traceroute 198.186.193.20 ? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 |

Re: Mysterious error

2009-12-03 Thread Ralf Hildebrandt
* Luciano Mannucci : > Dec 3 14:21:51 baobab postfix/smtpd[15814]: warning: unknown smtpd > restriction: "`" Some (map) lookup returns "`" -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Frankl

Re: Bounce at SMTPD level

2009-12-11 Thread Ralf Hildebrandt
heir > message has been tossed and not delivered. For obvious reasons you > can't do this as a bounce to the From: or Reply-To: header emails so it > has to happen during the initial MTA transaction. Can someone point me > to a how to for this? Thanks, Tom Run amavisd-new as

Re: Bounce at SMTPD level

2009-12-11 Thread Ralf Hildebrandt
* Marty Anstey : > I don't think you can pass messages directly to spamc/spamd in a > before-queue scenario. Yes, that's because it doesn't speak SMTP -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Cam

Re: Local Mails not working

2009-12-11 Thread Ralf Hildebrandt
* Alexander : > Mr Rob0, > I really take exception to your insulting language. Which insulting language? He simply told you to send plain text mail and even answered your question. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin

Re: Bounce at SMTPD level

2009-12-12 Thread Ralf Hildebrandt
hrough > the first transaction. Or does amavisd reference postfix's > configuration at all? Postfix doesn't accept mail to non-existing recipients by default. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Fran

Re: OT: Postfix & ClamAV integration

2009-12-17 Thread Ralf Hildebrandt
* JORGE CARMINATI : > Hi all! I'm trying to integrate Postfix (chrooted) with ClamAV and am > looking for some information about this. It seems that the old > fashioned style of configuring Postfix + amavisd-new now days is not > recommended (performance) Says who? --

Re: OT: Postfix & ClamAV integration

2009-12-17 Thread Ralf Hildebrandt
he writer. Neither do I. Virus scanning takes the least amount of time here. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570

Re: Trouble with clamav-milter

2009-12-23 Thread Ralf Hildebrandt
And a side note: It doesn't matter how well (or not) clamav-milter performs if you can't get it running... But you'll probably get it running, fear not. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Be

Re: Random Source Parameter Error

2009-12-29 Thread Ralf Hildebrandt
* Dennis Putnam : > I'm trying to set up TLS on Postfix 2.5.5 and 'tlsmgr' keeps getting a fatal > error on this statement: > > tls_random_source = dev:/dev/urandom Which error exactly? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité -

Re: Code burn-in: postscreen/verify cache cleanup

2009-12-29 Thread Ralf Hildebrandt
109892 dropped=648105 entries -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: Transport sintax for 2 backend servers of the same domain

2009-12-30 Thread Ralf Hildebrandt
ant to > do the same for internal servers, so I would like to now if it´s > possible to set primary and backup internal servers on the transport > configuration file Setup an MX interally :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin

Re: Transport sintax for 2 backend servers of the same domain

2009-12-30 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > * Luis Conrado Andrade : > > > > Hi, > > > > I have this situation > > > > 2 postfix accting as a relay for  domain.com and 2 internal exchange > > servers as mailbox server. I have MX records pointing to both postfix > >

Re: Broken web link

2010-01-01 Thread Ralf Hildebrandt
DAV/2 SVN/1.5.4 PHP/5.2.6-3ubuntu4.4 with > Suhosin-Patch mod_python/3.3.1 Python/2.6.2 Server at ftp.wl0.org Port > 80 > > I don't know who to report this to since there is no 'contact' or > 'webmaster' address on the page. I fixed it. -- Ral

smtpd crashes

2010-01-02 Thread Ralf Hildebrandt
100101 these minutes; maybe something changes. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: smtpd crashes

2010-01-02 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > I updated to postfix-2.7-20100101 these minutes; maybe something > changes. postfix-2.7-20091228-nonprod was the old version that caused all the logentries. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin

Re: smtpd crashes

2010-01-02 Thread Ralf Hildebrandt
* Wietse Venema : > Introduced 20091227, fixed 20091230 (dangling pointer in event manager). Yes, I'm not seeing those in 20100101 > Sometimes non-production software has a defect. That's why I'm reporting them... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilu

Re: Berkeley DB warnings (was: smtpd crashes)

2010-01-02 Thread Ralf Hildebrandt
ed to 4.8.24-1 (debian version numbers). Let's see what happens. If I'm still getting the errors, I'll turn off the automatic cache cleanup -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin H

Re: 3000 recipients

2010-01-04 Thread Ralf Hildebrandt
* richard lucassen : > Hello list, > > I want to send once a week a simple mail to a list of 3000 recipients. I > can set smtpd_recipient_limit and smtpd_recipient_overshoot_limit to > higher limits, but is there a better way to handle this? Use an MLM -- Ralf Hildebrandt Gesc

Re: header_checks problem

2010-01-04 Thread Ralf Hildebrandt
e=791, nrcpt=1 (queue active) That's the envelope, not the header > From: testm...@library.state.or.us There's no " " behind "testm...@library.state.or.us" > Output of postconf -n : it lists no header_checks > Can someone help with th

Re: header_checks problem

2010-01-04 Thread Ralf Hildebrandt
/ REJECT ^space Look at the space after testm...@library.state.or.us Remove it. A nice twist for analysis is this: /^From:/ WARN /^From: testm...@library.state.or.us/ REJECT That way you can see how postfix percieves the headers. -- Ralf Hildebrandt Geschäft

Re: postdrop?

2010-01-06 Thread Ralf Hildebrandt
* Port Able : > Hi, > > What is the proper command that a client can use to send an email using > Postfix? sendmail -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berli

<    4   5   6   7   8   9   10   11   >