Re: How to use direct delivery before relay?

[Dhiraj Chatpar]

What i think you can try do is try creating multiple instance of postfix
First Instance: Direct Delivery (If rejected forwarded and tried via
Instance 2)
Second Instance: Configured for only relay host

I guess this should solve the problem.

Rgds
Dhiraj



Stephen 
Leacock
- "I detest life-insurance agents: they always argue that I shall some
day
die, which is not so."

On Mon, Nov 9, 2009 at 03:00, Mike Gering wrote:

> Is there a way to configure postfix so that it will attempt to use direct
> delivery before relaying to another host?
>
> I've built my webserver on Amazon EC2 which, even with static IP addresses,
> does not handle reverse DNS lookup, causing (relatively few) recipient
> servers reject the mail. We've contracted with a mail relay service, but
> they are more expensive than the EC2 service itself! Since we're a municipal
> government, we need to reduce expenses as much as possible. The only
> solution I can think of is to have postfix attempt to deliver outgoing mail
> directly, and then for failures due to connection refusals, deliver them via
> the relay.
>
> Is there a way to do this? Or maybe there is a better solution. Any help is
> very welcome!
>
> Thanks,
> Mike
>
>

Re: Impact of SSL renegotiation attacks on SMTP mail

[Dhiraj Chatpar]

I am not able to install this which i used to in debian.. i am now using
centos. can you please tell me how to install apt-get install
libnet-server-perl on centos?


Samuel Goldwyn
- "I'm willing to admit that I may not always be right, but I am never
wrong."

On Mon, Nov 9, 2009 at 19:00, Wietse Venema  wrote:

> Andrzej Kukuła:
> > On Mon, Nov 9, 2009 at 02:29, Wietse Venema 
> wrote:
> > > Last week there was big news about a security hole in the TLS
> > > protocol that allows a man-in-the-middle to prepend data to a
> > > fully-secure TLS session.
> >
> > Thank you both gentlemen for your hard work on this. I've got possibly
> > lame question. I assume STARTTLS is affected, but is also 'wrapper
> > mode' vulnerable to this attack? I mean the mode in which client and
> > server immediately estabilish encrypted channel, before issuing any
> > SMTP command.
>
> It was left as an exercise for the reader.
>
> - At the top of the attack diagram, delete the plaintext phase (the
>  "SMTP 220 welcome", "SMTP hello" and "SMTP starttls" command and
>  reply boxes).
>
> - Insert "SMTP 220 welcome" as the first server response after the
>  renegotiation TLS handshake.
>
> This attack works when the server's TLS engine renegotiates the
> session before it encrypts the server's "SMTP 220 welcome".
>
> In the Postfix SMTP server, wrappermode would not be affected for
> the same reason that Postfix SMTP server STARTTLS is not affected.
> Also, the same SMTP client defenses apply for detecting server
> replies that are sent too soon.
>
>Wietse
>

Re: Transport map

[Dhiraj Chatpar]

Just try the following.. i think that should help.

Enter this in the main.cf
transport_maps = regexp:/etc/postfix/transport.regexp


transport.regexp should have the following content.

if !/@locally.handled.domain.com$
/
/^[a-f]/  smtp1:
/^[g-j]/  smtp2:
/^[l-q]/  smtp3:
/^[r-w]/  smtp4:
/^[x-z0-9]/   smtp5:
endif

Alternatively you can also use a transport randomizer script which is as
below

#!/usr/bin/perl

my $port = 2525;
my $max_servers = 100;
my $spooldir = "/tmp";
my $user = "nobody";
my $group = "nogroup";
my $background = "1";
my $bindhost = "127.0.0.1";

package Grinch;

use strict;
use vars qw(@ISA);
use Net::Server::PreForkSimple;
use Sys::Syslog;

my $version = "0.9";
my $syslog_ident = "grinch";
my $syslog_logopt = "pid";
my $syslog_facility = "mail";


@ISA = qw(Net::Server::PreForkSimple);

my $pidfile = "$spooldir/pid.log";

sub grinchlog {
syslog("info", shift);
}

sub process_request {
my $mode;

for (;($mode ne "once") && defined (my $cmd = );
$mode = shift unless defined ($mode)) {

my ($host) = $cmd =~ /^get ([a-z0-9\-\...@]+)/i;

if ($host eq "*") {
# we need to ignore the * query
print "500 Blissfully ignoring asterisk!\n";
# grinchlog("ignoring *");
next;
}

if ($host =~ /((mail\.)?productionunit\.info|localhost)$/) {
# we need to ignore queries involving our domains
print "500 Blissfully ignoring our domains!\n";
grinchlog("ignoring our domains");
next;
}

my $random_number = int(rand(19)) + 1;
# Returns a range of 1...5

print "200 smtp$random_number:\n";
grinchlog("$host -> smtp$random_number:");
next;
}

}

my $mode = $ARGV[0];

openlog($syslog_ident, $syslog_logopt, $syslog_facility);

if($mode eq "stop") {
open (PID, "$pidfile");
my $pid = ;
close(PID);

kill 15, $pid;
unlink ($pidfile);
} elsif ($mode eq "lookup") {
process_request ("once");
} elsif (($mode eq "start") || ($mode eq "")) {
# daemon mode, start it

Grinch->run(port => $port,
user => $user,
group => $group,
host => $bindhost,
max_servers => $max_servers,
background => $background,
pid_file => $pidfile,
log_file => "Sys::Syslog",
syslog_ident => $syslog_ident,
syslog_logopt => $syslog_logopt,
syslog_facility => $syslog_facility);
} else {
print STDERR "unknown commandline option: $mode\n";
}

closelog();


Which will run on a libnet server which will randomize the SMTP servers.

Please note that you also need to mention the SMTP in the master.cf as
follows

smtp  unix  -   -   -   -   -   smtp
   -o smtp_bind_address=

to

smtp1  unix  -   -   -   -   -   smtp
   -o smtp_bind_address=



On Tue, Nov 10, 2009 at 21:12, Stan Hoeppner  wrote:

> Marc Silver put forth on 11/10/2009 2:23 AM:
> > Hi,
> >
> > On Tue, 10 Nov 2009 09:03:56 +0200, Jack Knowlton 
> > wrote:
> >> Is it possible to have a transport map with a regular expression? What I
> >> want is to use an external relay server for all the emails to be
> >> delivered
> >> on Yahoo domains (eg, yahoo.com, yahoo.co.uk, yahoo.es, ecc).
> >> If it is possible, how can I implement this?
> >
> > I'm not an expert, but I believe this is possible by specifying your
> > transport file as "transport_maps=regexp:/etc/postfix/transport".  You
> > may also use PCRE instead of regexp if you prefer.  The only downside is
> > that the entire file needs to be set up in the regex/pcre fashion (as
> > far as I'm aware anyway).
>
> There is no downside, except the possible need for multiple transport
> maps.  He can have as many as he wants/needs, of all kinds, hash, pcre,
> regexp, dbm, etc:
>
>
> http://www.postfix.org/postconf.5.html
>
> transport_maps (default: empty)
>
>Optional lookup tables with mappings from recipient address to
> (message delivery transport, next-hop destination). See transport(5) for
> details.
>
>Specify zero or more "type:table" lookup tables. If you use this
> feature with local files, run "postmap /etc/postfix/transport" after
> making a change.
>
>For safety reasons, as of Postfix 2.3 this feature does not allow
> $number substitutions in regular expression maps.
>
>Examples:
>
>transport_maps = dbm:/etc/postfix/transport
>transport_maps = hash:/etc/postfix/transport
>
>
> Instructions above tell us to use postmap on the file after any changes.
>  I think that assumes one is using hash, not any other maps types.
> Check the use cases for postmap, as you dont use it on regexp or pcre
> maps, but do use it on hash maps.  I'm not sure WRT dbm maps as I've
> never used them.
>
> --
> 

How to reduce speed for certain domains

[Dhiraj Chatpar]

Dear All,

I need to know how to reduce the sending speed or put in a delay of like 2
seconds before delivery to some of the domains.

Namely yahoo, hotmail and a few others.

Please help me and tell me how i can achieve this in postfix.

Rgsd
Dhiraj


Stephen 
Leacock
- "I detest life-insurance agents: they always argue that I shall some
day
die, which is not so."

Re: ????: ????: who know how does initial_destination_concurrency and default_destination_concurrency_limit work?

[Dhiraj Chatpar]

Dear Sir,

I have tried default concurrency =1 and initial concurrency =1. but both of
them dont reduce the speed of delivering the emails. Can you please guide me
with a way by which i can reduce the sending of emails to very slow..

Please help

Rgds
Dhiraj


Ted Turner   -
"Sports is like a war without the killing."

On Thu, Nov 12, 2009 at 00:04, Victor Duchovni <
victor.ducho...@morganstanley.com> wrote:

> On Wed, Nov 11, 2009 at 07:30:47AM -0600, Noel Jones wrote:
>
> > In your main.cf, set "default_destination_rate_delay = 1s" and
> > leave all those other parameters at their default.
> >
> > This will instruct postfix to send no more than 60 messages
> > per minute.
>
> This will apply to all transports, not just "smtp", if all mail is
> sent to remote destinations, that's fine, otherwise, one may want
> be more selective:
>
>smtp_destination_rate_delay = 1s
>
> --
>Viktor.
>
> Disclaimer: off-list followups get on-list replies or get ignored.
> Please do not ignore the "Reply-To" header.
>
> To unsubscribe from the postfix-users list, visit
> http://www.postfix.org/lists.html or click the link below:
> 
>
> If my response solves your problem, the best way to thank me is to not
> send an "it worked, thanks" follow-up. If you must respond, please put
> "It worked, thanks" in the "Subject" so I can delete these quickly.
>

Re: 答复: ????: ????: who know how does initial_de stination_concurrency and default_destination_concurrency_li mit work?

[Dhiraj Chatpar]

Hi Sir,

If i am selecting this option
smtp_destination_rate_delay = 1s

Will this reduce delivery to all domains or just one specific domain. Will
the actual throughput to the final delivery be reduced to one email per
second from my binded IP?.. Please confirm as that is what i am looking for.

Apart from the domain throttling as mentioned by Mr. Wietse. I would like to
reduce the speed for all domains.. just general mail delivery should be 1s
per mail delivery. And if this is the case what should be the values of
default concurrency and initial concurrency to achieve the 1 email per
second module.

Rgds
Dhiraj



Ted Turner <http://www.brainyquote.com/quotes/authors/t/ted_turner.html>  -
"Sports is like a war without the killing."

2009/11/12 coofucoo zhang 

> Yes, that is what I mentioned before. It looks like concurrency setting not
> work.
>
> Best regrads!
> Coofucoo
>
> -邮件原件-
> 发件人: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.
> org] 代表 Wietse Venema
> 发送时间: 2009年11月12日 3:16
> 收件人: Dhiraj Chatpar
> 抄送: postfix-users@postfix.org; victor.ducho...@morganstanley.com
> 主题: Re: : : who know how does initial_destination_concurrency and
> default_destination_concurrency_limit work?
>
> > Ted Turner <http://www.brainyquote.com/quotes/authors/t/ted_turner.html>
> -
> > "Sports is like a war without the killing."
> >
> > On Thu, Nov 12, 2009 at 00:04, Victor Duchovni <
> > victor.ducho...@morganstanley.com> wrote:
> >
> > > On Wed, Nov 11, 2009 at 07:30:47AM -0600, Noel Jones wrote:
> > >
> > > > In your main.cf, set "default_destination_rate_delay = 1s" and
> > > > leave all those other parameters at their default.
> > > >
> > > > This will instruct postfix to send no more than 60 messages
> > > > per minute.
> > >
> > > This will apply to all transports, not just "smtp", if all mail is
> > > sent to remote destinations, that's fine, otherwise, one may want
> > > be more selective:
> > >
> > >smtp_destination_rate_delay = 1s
>
> Dhiraj Chatpar:
> > Dear Sir,
> >
> > I have tried default concurrency =1 and initial concurrency =1. but both
> of
> > them dont reduce the speed of delivering the emails. Can you please guide
> me
> > with a way by which i can reduce the sending of emails to very slow..
>
> You need to set the appropriate _destination_rate_delay parameter,
> instead the concurrency parameters.
>
> Then you need to execute "postfix reload" or else these changes
> have no effect at all.
>
>Wietse
>
>

Bug

[Dhiraj Chatpar]

Dear Sir,

I have noticed a bug in the 2.6 version of postfix where it says that cannot
find /postmulti folder. Wondering if this is a bug or a installation error
on my part. This error happens when i start postfix on centos.

Rgds
Dhiraj

Re: Bug

[Dhiraj Chatpar]

Sir, I just did a fresh installation yesterday. and fresh complied the new
version of postfix 2.6 on a centos machine and i got this error. I dont know
why it came. but it did.

Rgds
Dhiraj


Charles de 
Gaulle<http://www.brainyquote.com/quotes/authors/c/charles_de_gaulle.html>
- "The better I get to know men, the more I find myself loving dogs."

On Fri, Nov 13, 2009 at 23:47, Wietse Venema  wrote:

> Dhiraj Chatpar:
> > Dear Sir,
> >
> > I have noticed a bug in the 2.6 version of postfix where it says that
> cannot
> > find /postmulti folder. Wondering if this is a bug or a installation
> error
> > on my part. This error happens when i start postfix on centos.
>
> Wasn't this fixed recently?
>
>Wietse
>

Deferrals

[Dhiraj Chatpar]

help!!!

i am continually getting deferalls from yahoo, rediffmail which are 2 ISPs
in our country. We are a big organization and we send a good number of
emails in a day. But this deferral problem is a pain. I have implemented,
feedbackloop, PTR, Domainkeys, DKIM, etc.. but still face the same problem.
I have even reduced postfix to the bare minimum throttle speed for outgoing
mail as per instructions from Mr. Wietse. Still face the same problem.
Please tell me how to go about this problem and the solution.

Rgds
Dhiraj


Ted Turner   -
"Sports is like a war without the killing."

Re: Deferrals

[Dhiraj Chatpar]

Dear Mr. Smith,

Thank you for your reply, hmm there is no fixed number per say. but
sometimes the users in our organization send emails in good numbers.
Fortunately or unfortunately they sometimes send more emails to these
domains than others. as most of our clients or others are hosted on these
ISP's.. I am sure from my experience that the MTA has to be the only best
way to throttle the emails so that i get good deliveries. IP reputation is
clean. All looks good.. just this temp deferrals from these ISP and
sometimes others based on the kind of emails that are send from my org email
servers.

Please advice a way to get thru this issue.

Rgds
Dhiraj


Stephen 
Leacock<http://www.brainyquote.com/quotes/authors/s/stephen_leacock.html>
- "I detest life-insurance agents: they always argue that I shall some
day
die, which is not so."

On Sat, Nov 14, 2009 at 01:14, Gary Smith  wrote:

>  Dhiraj,
>
>
>
>
>
> First off, if Wietse said how to do it then it’s the right way.  The
> question I have is how many emails are you sending to these two
> organizations?  Can you quantify “a good number”?
>
>
>
> Gary Smith
>
>
>
> *From:* owner-postfix-us...@postfix.org [mailto:
> owner-postfix-us...@postfix.org] *On Behalf Of *Dhiraj Chatpar
> *Sent:* Friday, November 13, 2009 11:41 AM
> *To:* Postfix users
> *Subject:* Deferrals
>
>
>
> help!!!
>
>
>
> i am continually getting deferalls from yahoo, rediffmail which are 2 ISPs
> in our country. We are a big organization and we send a good number of
> emails in a day. But this deferral problem is a pain. I have implemented,
> feedbackloop, PTR, Domainkeys, DKIM, etc.. but still face the same problem.
> I have even reduced postfix to the bare minimum throttle speed for outgoing
> mail as per instructions from Mr. Wietse. Still face the same problem.
> Please tell me how to go about this problem and the solution.
>
>
>
> Rgds
>
> Dhiraj
>
>
> Ted Turner <http://www.brainyquote.com/quotes/authors/t/ted_turner.html> - 
> "Sports is like a war without the killing."
>

Re: Deferrals

[Dhiraj Chatpar]

Thanks larry will remember that


Mike Ditka <http://www.brainyquote.com/quotes/authors/m/mike_ditka.html>  -
"If God had wanted man to play soccer, he wouldn't have given us arms."

On Sat, Nov 14, 2009 at 01:29, Larry Stone wrote:

> On Sat, 14 Nov 2009, Dhiraj Chatpar wrote:
>
>  All looks good.. just this temp deferrals from these ISP and
>> sometimes others based on the kind of emails that are send from my org
>> email
>> servers.
>>
>> Please advice a way to get thru this issue.
>>
>
> And how long are they deferred for? My experience is Yahoo defers lots of
> mail. But, none of it stays deferred very long. Almost always goes through
> on the next attempt.
>
> Why is this a problem for you? Is it because you just don't like seeing
> deferred mail in your queues? If so, get over it. Mail gets deferred.
>
> Is it because your users expect immediate delivery? If so, they need to be
> educated that there is no guarantee of immediate delivery with e-mail. It is
> store and forward technology and in these cases, it is getting stored for a
> bit before getting forwarded.
>
> -- Larry Stone
>   lston...@stonejongleux.com
>

Re: Deferrals

[Dhiraj Chatpar]

Dear Mr. Viktor,

1. Most of the emails get through on the first try,
2. The mails is on an average retried 2-3 times
3. 1/3 of the messages bounce
4. the feedback loop looks clean as the employees of my org only send to
people they know.. thus if you are referring to spam like activity then that
is in check
5. I purge the emails every night so there is no question of age
distribution.

There is no opt in list.. employees of my org send emails to our clients in
various parts of india and abroad. Thus there is no list per say.. however,
It is certain that the mail is not marked as spam as its coming from a
trusted source.

Rgds
Dhiraj


Pablo Picasso<http://www.brainyquote.com/quotes/authors/p/pablo_picasso.html>
- "Computers are useless. They can only give you answers."

On Sat, Nov 14, 2009 at 01:41, Victor Duchovni <
victor.ducho...@morganstanley.com> wrote:

> On Sat, Nov 14, 2009 at 01:11:18AM +0530, Dhiraj Chatpar wrote:
>
> > i am continually getting deferalls from yahoo, rediffmail which are 2
> ISPs
> > in our country. We are a big organization and we send a good number of
> > emails in a day. But this deferral problem is a pain. I have implemented,
> > feedbackloop, PTR, Domainkeys, DKIM, etc.. but still face the same
> problem.
> > I have even reduced postfix to the bare minimum throttle speed for
> outgoing
> > mail as per instructions from Mr. Wietse. Still face the same problem.
> > Please tell me how to go about this problem and the solution.
>
> This problem report is content free, because it neither quantifies the
> problem, nor gives specific examples. To report and get help with
> performance issues, you must compile detailed statistics, and post
> these along with related sample log entries.
>
>- What fraction of email gets through on the first try
>
>- What is the average number of retries for mail that gets delayed
>
>- What fraction eventually bounces
>
>- How much mail is reported as spam by recipients via the various
>  feedback loops you've signed up for
>
>- What is the age distribution of deferred mail ("qshape deferred"
>  output)
>
> Are you sending email only to users who requested to receive said email,
> or are you running "opt-out" lists?
>
> --
>Viktor.
>
> Disclaimer: off-list followups get on-list replies or get ignored.
> Please do not ignore the "Reply-To" header.
>
> To unsubscribe from the postfix-users list, visit
> http://www.postfix.org/lists.html or click the link below:
> <mailto:majord...@postfix.org?body=unsubscribe%20postfix-users>
>
> If my response solves your problem, the best way to thank me is to not
> send an "it worked, thanks" follow-up. If you must respond, please put
> "It worked, thanks" in the "Subject" so I can delete these quickly.
>

postfix definitive guide

[Dhiraj Chatpar]

Hi,

I am looking for a definitive guide to setting up postfix on a system where
i have a domain for eg. xyz.com configured. and i setup the mail server as
mail1.xyz.com. Request you to please send me a complete guide to settings up
DNS for a perfect mail server setup as i am only able to find the setting up
for postfix but not the DNS settings required which is most essential.

Thanks in advance

Dhiraj

ERROR in tcp protocol

[Dhiraj Chatpar]

HI,

I am getting this error when i am trying to connect my postfix
via transport_maps = tcp:localhost:2525

Nov 16 13:48:34 mail postfix/trivial-rewrite[4403]: fatal: unsupported
dictionary type: tcp
Nov 16 13:48:35 mail postfix/master[4145]: warning: process
/usr/libexec/postfix/trivial-rewrite pid 4403 exit status 1
Nov 16 13:48:35 mail postfix/master[4145]: warning:
/usr/libexec/postfix/trivial-rewrite: bad command startup -- throttling


Please help me with a solution.

Rgds
Dhiraj

Re: ERROR in tcp protocol

[Dhiraj Chatpar]

Hi Mr. Wietse,

I using Centos now.. and this is the output

[r...@lsdinkindia ~]# postconf -m
btree
cidr
environ
hash
nis
proxy
regexp
static
unix


It does not show tcp. How do i get the tcp activated on this centos machine
as it alwayz used to be there on my ubuntu machine by default?

Rgds
Dhiraj

On Tue, Nov 17, 2009 at 01:26, Wietse Venema  wrote:

> Dhiraj Chatpar:
> > HI,
> >
> > I am getting this error when i am trying to connect my postfix
> > via transport_maps = tcp:localhost:2525
> >
> > Nov 16 13:48:34 mail postfix/trivial-rewrite[4403]: fatal: unsupported
> > dictionary type: tcp
>
> Use "postconf -m" to see what types of map are supported.
>
>Wietse
>

Relayhost to multiple hosts

[Dhiraj Chatpar]

Hi,

I am looking for a solution where i would be able to configure one postfix
instance in such a way that it rotates multiple relayhosts and acts as a
host that relays emails to multiple hosts. For eg. we currently have the
option of entering just one relayhost = xx.xx.xx.xx. However i need a
solution where i shuld be able to map multiple relayhosts and make postfix
relay via those list of hosts.

P.S. The ports also might be different in some cases.

Rgds
Dhiraj

Re: Relayhost to multiple hosts

[Dhiraj Chatpar]

can you please give me a tutorial to achieve this?


Joan Crawford<http://www.brainyquote.com/quotes/authors/j/joan_crawford.html>
- "I, Joan Crawford, I believe in the dollar. Everything I earn, I
spend."

On Wed, Nov 18, 2009 at 17:57, Eero Volotinen  wrote:

> Quoting Dhiraj Chatpar :
>
>  Hi,
>>
>> I am looking for a solution where i would be able to configure one postfix
>> instance in such a way that it rotates multiple relayhosts and acts as a
>> host that relays emails to multiple hosts. For eg. we currently have the
>> option of entering just one relayhost = xx.xx.xx.xx. However i need a
>> solution where i shuld be able to map multiple relayhosts and make postfix
>> relay via those list of hosts.
>>
>> P.S. The ports also might be different in some cases.
>>
>
> You can use iptables for that or make dns round robin entry and point
> relayhost to that hostname.
>
> --
> Eero
>
>
>

Re: Relayhost to multiple hosts

[Dhiraj Chatpar]

I believe there is an option within postfix too to achieve this?


Ogden Nash <http://www.brainyquote.com/quotes/authors/o/ogden_nash.html>  -
"The trouble with a kitten is that when it grows up, it's always a cat."

On Wed, Nov 18, 2009 at 18:50, Eero Volotinen  wrote:

> Quoting Dhiraj Chatpar :
>
>  can you please give me a tutorial to achieve this?
>>
>
> See the:
> http://cormander.com/blog/2008/05/round-robin-balancing-with-iptables/
> and http://www.zytrax.com/books/dns/ch9/rr.html
>
> --
> Eero
>
>

Re: Relayhost to multiple hosts

[Dhiraj Chatpar]

What do you think about this?? will this work?

http://souptonuts.sourceforge.net/postfix_sbr.html


Ted Turner <http://www.brainyquote.com/quotes/authors/t/ted_turner.html>  -
"Sports is like a war without the killing."

On Wed, Nov 18, 2009 at 19:08, Barney Desmond wrote:

> 2009/11/19 Dhiraj Chatpar :
> > I believe there is an option within postfix too to achieve this?
>
> I'm fairly sure there's not. If you don't like the idea of using
> iptables, the alternative would be a customised DNS entry for your
> relayhost.
>
> Create a "virtual" relayhost A-record (eg. relayhost.mydomain.com)
> that returns multiple IP addresses, this will produce a rudimentary
> form of round-robin. Then just set relayhost=relayhost.mydomain.com in
> main.cf
>

Re: Relayhost to multiple hosts

[Dhiraj Chatpar]

We have 5 different servers.. all of them are mailing servers for our main
company domain, I wish to Balance the mails across these 5 servers.


Ogden Nash <http://www.brainyquote.com/quotes/authors/o/ogden_nash.html>  -
"The trouble with a kitten is that when it grows up, it's always a cat."

On Wed, Nov 18, 2009 at 19:34, Wietse Venema  wrote:

> Dhiraj Chatpar:
> > Hi,
> >
> > I am looking for a solution where i would be able to configure one
> postfix
> > instance in such a way that it rotates multiple relayhosts and acts as a
> > host that relays emails to multiple hosts. For eg. we currently have the
> > option of entering just one relayhost = xx.xx.xx.xx. However i need a
> > solution where i shuld be able to map multiple relayhosts and make
> postfix
> > relay via those list of hosts.
>
> What problem are you trying to solve? State the problem, not
> the solution of multiple relayhosts and ports.
>
>Wietse
>

Re: Relayhost to multiple hosts

[Dhiraj Chatpar]

Yes the DNS is a good idea..

However what will i achieve if i implement the following?


# Changes in /etc/postfix2/main.cf
 sender_based_routing = yes


 relay unix  -   -   n   -   -   smtp
  -o fallback_relay=
  smtp_act1  unix  -   -   n   -   -   smtp
  -o smtp_sasl_password_maps=hash:/etc/postfix2/sasl_passwd_act1
  smtp_act2  unix  -   -   n   -   -   smtp
  -o smtp_sasl_password_maps=hash:/etc/postfix2/sasl_passwd_act2
  smtp_act3  unix  -   -   n   -   -   smtp
  -o smtp_sasl_password_maps=hash:/etc/postfix2/sasl_passwd_act3
  smtp_act4  unix  -   -   n   -   -   smtp
  -o smtp_sasl_password_maps=hash:/etc/postfix2/sasl_passwd_act4



#/etc/postfix2/sasl_passwd_act1

domainname.com



Mike Ditka <http://www.brainyquote.com/quotes/authors/m/mike_ditka.html>  -
"If God had wanted man to play soccer, he wouldn't have given us arms."

On Wed, Nov 18, 2009 at 20:10, Wietse Venema  wrote:

> Dhiraj Chatpar:
> > We have 5 different servers.. all of them are mailing servers for our
> main
> > company domain, I wish to Balance the mails across these 5 servers.
>
> Isn't that what the DNS was invented for? You specify the domain
> and its servers, and then all standards-compliant mail systems
> will distribute the load according to MX preferences.
>
>Wietse
>

Re: Relayhost to multiple hosts

[Dhiraj Chatpar]

Well sir its our friend yahoo which is going to get me kicked off my job as
an administrator. I had an issue where a email sent to a yahoo email address
from My CEO didnt end up delivering. Ever since i have been wondering for
solutions. And this is something i could think of. Since when did spammers
start posting on legit forums?


Mike Ditka <http://www.brainyquote.com/quotes/authors/m/mike_ditka.html>  -
"If God had wanted man to play soccer, he wouldn't have given us arms."

On Wed, Nov 18, 2009 at 23:14, Stan Hoeppner  wrote:

> Wietse Venema put forth on 11/18/2009 9:25 AM:
> > Dhiraj Chatpar:
> >> Yes the DNS is a good idea..
> >>
> >> However what will i achieve if i implement the following?
> >
> > The solution is to have multiple MX records in the DNS.
> >
> > All standards-compliant MTAs will spread the load WITHOUT
> > ANY SENDER SIDE CONFIGURATION.
> >
> >   Wietse
>
> That master.cf with all the sasl makes me think he's wanting to spread
> spam load out over 5 broadband smtp submission servers over 5 dsl lines
> or similar.  His resistance to using DNS, which is the proper (and easy)
> solution for a legit operation, and the fact that he's spreading the
> load of only one server across 5 also smells of a spammer.
>
> Are we assisting a spammer or a legit operation?  Dhiraj?  What's the
> skinny?
>
> --
> Stan
>
>

Error in postmulti

[Dhiraj Chatpar]

r...@campaignindia:/etc# postmulti -I postfix-1 -G mta -e create
postfix: warning: dict_open_dlinfo: cannot open /etc/postfix-1/
dynamicmaps.cf.  No dynamic maps will be allowed.


wondering why am i getting this error

Re: Ratelimits for outgoing smtp

[Dhiraj Chatpar]

Hi Mr Ram,

Here is the solution...

http://www.postfix.org/QSHAPE_README.html

Look at the example with _destination_rate_delay

Rgds
Dhiraj


Stephen 
Leacock
- "I detest life-insurance agents: they always argue that I shall some
day
die, which is not so."

On Mon, Nov 23, 2009 at 14:48, ram  wrote:

>  At one of our locations I need to throttle outgoing , due to bandwidth
> constraints
> Can I specify maximum number of outgoing messages sent via smtp in a minute
> or hour
>
> Something similar to *smtpd_client_message_rate_limit . *
>
>
>
>
>
>
> Thanks
> Ram
>
>

Re: Ratelimits for outgoing smtp

[Dhiraj Chatpar]

Dear Mr. Ram,

Incase you want to slow all the mails to 1s.. Please select this option

smtp_destination_rate_delay = 1s
and/or
destination_destination_rate_delay = 1s

Rgds
Dhiraj


Marie von 
Ebner-Eschenbach
- "Even a stopped clock is right twice a day."

On Mon, Nov 23, 2009 at 14:48, ram  wrote:

>  At one of our locations I need to throttle outgoing , due to bandwidth
> constraints
> Can I specify maximum number of outgoing messages sent via smtp in a minute
> or hour
>
> Something similar to *smtpd_client_message_rate_limit . *
>
>
>
>
>
>
> Thanks
> Ram
>
>

Re: Ratelimits for outgoing smtp

[Dhiraj Chatpar]

> > > In your main.cf, set "default_destination_rate_delay = 1s" and
> > > leave all those other parameters at their default.
> > >
> > > This will instruct postfix to send no more than 60 messages
> > > per minute.
> >
> > This will apply to all transports, not just "smtp", if all mail is
> > sent to remote destinations, that's fine, otherwise, one may want
> > be more selective:
> >
> >smtp_destination_rate_delay = 1s


Ted Turner <http://www.brainyquote.com/quotes/authors/t/ted_turner.html>  -
"Sports is like a war without the killing."

On Mon, Nov 23, 2009 at 15:15, ram  wrote:

>  Thanks but that is throttling by introducing a  delay between messages,
> not by controlling the actual number of messages sent
>
> So with that I cannot control the max messages to be sent per minute.
> ( I know I can get an approximate throttle .. though )
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> On Mon, 2009-11-23 at 14:53 +0530, Dhiraj Chatpar wrote:
>
> Hi Mr Ram,
>
>
>
>  Here is the solution...
>
>
>
>  http://www.postfix.org/QSHAPE_README.html
>
> Look at the example with _destination_rate_delay
>
>
>
>  Rgds
>
>  Dhiraj
>
>
> Stephen 
> Leacock<http://www.brainyquote.com/quotes/authors/s/stephen_leacock.html> - 
> "I detest life-insurance agents: they always argue that I shall some day
> die, which is not so."
>
>  On Mon, Nov 23, 2009 at 14:48, ram  wrote:
>
>  At one of our locations I need to throttle outgoing , due to bandwidth
> constraints
> Can I specify maximum number of outgoing messages sent via smtp in a minute
> or hour
>
> Something similar to *smtpd_client_message_rate_limit . *
>
>
>
>
>
>
> Thanks
> Ram
>
>
>
>
>

Re: How to test server and stop test messages being sent out

[Dhiraj Chatpar]

Hi,

What is the right solution to achieve this?

Rgds
Dhiraj


Pablo Picasso
- "Computers are useless. They can only give you answers."

On Tue, Nov 24, 2009 at 00:56, Victor Duchovni <
victor.ducho...@morganstanley.com> wrote:

> On Tue, Nov 24, 2009 at 12:49:49AM +0530, vijay ahire wrote:
>
> > Hiee Kevin
> >
> >  if you set this option - disable_dns_lookups = yes
> >
> > ur postfix will stop sending mail
> >
> > but it will continue recieveing mails
>
> This is wrong.
>
> --
>Viktor.
>
> Disclaimer: off-list followups get on-list replies or get ignored.
> Please do not ignore the "Reply-To" header.
>
> To unsubscribe from the postfix-users list, visit
> http://www.postfix.org/lists.html or click the link below:
> 
>
> If my response solves your problem, the best way to thank me is to not
> send an "it worked, thanks" follow-up. If you must respond, please put
> "It worked, thanks" in the "Subject" so I can delete these quickly.
>

Re: How to test server and stop test messages being sent out

[Dhiraj Chatpar]

Dear Mr. Wietse,

Can we achieve this by temporarily blocking port 25?

Rgds
Dhiraj


Jonathan Swift
- "May you live every day of your life."

On Tue, Nov 24, 2009 at 01:09, Wietse Venema  wrote:

> Kevin Bailey:
> > Hi,
> >
> > I need to test the move of a mailing list to another server.
> >
> > What I'd like to do is to stop the Postfix server on the new server from
> > sending out any mails but still put them into the queue.
> >
> > I could then test the mail list (which actually only has 43 members) and
> > then see what emails appear in the queue.  The I want to be able to
> > delete all those mails - and then re-enable the Postfix server.
> >
> > Any pointers gratefully received.
>
> Postfix 2.6 and later:
> # postconf -e master_service_disable=qmgr
> # postfix reload
>
> Older Postfix:
> Comment out the queue manager in master.cf and do "postfix reload".
>
> You didn't say that you want to continue other mail deliveries.
>
>Wietse
>

Re: possible hack to postfix

[Dhiraj Chatpar]

i do now


Samuel Goldwyn
- "I'm willing to admit that I may not always be right, but I am never
wrong."

On Thu, Dec 3, 2009 at 01:18, fakessh  wrote:

> hello all
> hello list
>
> I think there is a problem in the basic configuration of Postfix
> the basic configuration of Postfix is included in the rpm and sources
>
> I accessed the standard configuration file
>
> # Alternatively, you can specify the mynetworks list by hand, in
> # which case Postfix ignores the mynetworks_style setting.
> #
> # Specify an explicit list of network/netmask patterns, where the
> # mask specifies the number of bits in the network part of a host
> # address.
> #
> # You can also specify the absolute pathname of a pattern file instead
> # of listing the patterns here. Specify type:table for table-based lookups
> # (the value on the table right-hand side is not used).
> #
> #mynetworks = 168.100.189.0/28, 127.0.0.0/8
> #mynetworks = $config_directory/mynetworks
> #mynetworks = hash:/etc/postfix/network_table
>
>
> it is then possible to make a 'helo 168.100.189.5' and after this command
> to bounce to anyone even with the new postfix
>
>
> I think it is probably possible. when do you?
>
>

Bounces

[Dhiraj Chatpar]

Dear All,

What string or what configuration to use in postfix in order to not receive
any bounces at all. I mean incase there is a bounce it should not be
returned back to the sender who initiated the mail.

I am sure there is a way to achieve this in postfix

Rgds
Dhiraj

Re: Bounces

[Dhiraj Chatpar]

Yes, But which parameter to use in order to stop bounces totally and how?


Pablo Picasso<http://www.brainyquote.com/quotes/authors/p/pablo_picasso.html>
- "Computers are useless. They can only give you answers."

On Thu, Jan 14, 2010 at 02:59, Stan Hoeppner  wrote:

> Dhiraj Chatpar put forth on 1/13/2010 3:21 PM:
> > Dear All,
> >
> > What string or what configuration to use in postfix in order to not
> > receive any bounces at all. I mean incase there is a bounce it should
> > not be returned back to the sender who initiated the mail.
> >
> > I am sure there is a way to achieve this in postfix
>
> http://www.postfix.org/bounce.8.html
>
> --
> Stan
>

Re: Bounces

[Dhiraj Chatpar]

How do i make the changes in postfix so that it stops sending out bounced
mail totally?


Jonathan Swift<http://www.brainyquote.com/quotes/authors/j/jonathan_swift.html>
- "May you live every day of your life."

On Thu, Jan 14, 2010 at 03:49, Wietse Venema  wrote:

> Dhiraj Chatpar:
> > Dear All,
> >
> > What string or what configuration to use in postfix in order to not
> receive
> > any bounces at all. I mean incase there is a bounce it should not be
> > returned back to the sender who initiated the mail.
> >
> > I am sure there is a way to achieve this in postfix
>
> See:
>   RFC 3461 (SMTP DSN Extension)
>
> The DSN option controls how to request bounces with SMTP mail.
>
> See:
>   http://www.postfix.org/sendmail.1.html
>
> The -N command-line option controls how to request bounces with
> the Postfix sendmail command.
>
>Wietse
>

Re: Bounces

[Dhiraj Chatpar]

Is it possible to # out the bounce line in master.cf? Will that stop all
bounces?


Samuel Goldwyn<http://www.brainyquote.com/quotes/authors/s/samuel_goldwyn.html>
- "I'm willing to admit that I may not always be right, but I am never
wrong."

On Thu, Jan 14, 2010 at 03:53, Dhiraj Chatpar  wrote:

> How do i make the changes in postfix so that it stops sending out bounced
> mail totally?
>
>
> Jonathan 
> Swift<http://www.brainyquote.com/quotes/authors/j/jonathan_swift.html> - "May 
> you live every day of your life."
>
> On Thu, Jan 14, 2010 at 03:49, Wietse Venema  wrote:
>
>> Dhiraj Chatpar:
>> > Dear All,
>> >
>> > What string or what configuration to use in postfix in order to not
>> receive
>> > any bounces at all. I mean incase there is a bounce it should not be
>> > returned back to the sender who initiated the mail.
>> >
>> > I am sure there is a way to achieve this in postfix
>>
>> See:
>>   RFC 3461 (SMTP DSN Extension)
>>
>> The DSN option controls how to request bounces with SMTP mail.
>>
>> See:
>>   http://www.postfix.org/sendmail.1.html
>>
>> The -N command-line option controls how to request bounces with
>> the Postfix sendmail command.
>>
>>Wietse
>>
>
>

Re: postfix 2.7 release date

[Dhiraj Chatpar]

I think 2.7 is already released in the stable candidate.


Pablo Picasso
- "Computers are useless. They can only give you answers."

On Mon, Feb 8, 2010 at 15:46, Robert Schetterer wrote:

> Hi Wietse, is their any
> fixed release date for version 2.7 ?
>
> --
> Best Regards
>
> MfG Robert Schetterer
>
> Germany/Munich/Bavaria
>

Error with postmulti

[Dhiraj Chatpar]

Dear All,

Need assistance.. getting an error with postmulti as follows.. is there a
fix.?

r...@smtp:/etc/postfix# postmulti -e init
r...@smtp:/etc/postfix# postmulti -I postfix-1 -G mta -e create
postfix: warning: dict_open_dlinfo: cannot open /etc/postfix-1/
dynamicmaps.cf.  No dynamic maps will be allowed.


Rgds
Dhiraj

Error no. 2 postmulti

[Dhiraj Chatpar]

Dear All,

Please note that i am getting another error on ubuntu 9.10 machine with
postfix 2.6.5 as below

r...@smtp:/etc/postfix# postmulti -i postfix-1 -e enable
r...@smtp:/etc/postfix# postmulti -i postfix-1 -p start
/usr/lib/postfix/postfix-script: 373: /etc/postfix-1/postfix-script: not
found
postfix-1/postfix-script: starting the Postfix mail system

Mail in Inbox

[Dhiraj Chatpar]

I got this email in my gmail inbox. i was wondering how it reached there..
can anyone tell me. There is no MTA defined.



Delivered-To: dchat...@gmail.com
Received: by 10.220.45.205 with SMTP id g13cs9092vcf;
Wed, 10 Feb 2010 03:26:10 -0800 (PST)
Return-Path: 
Received-SPF: pass (google.com: domain of mycoolcabmarket...@gmail.com
designates 10.141.106.5 as permitted sender) client-ip=10.141.106.5;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of
mycoolcabmarket...@gmail.com designates 10.141.106.5 as permitted
sender) smtp.mail=mycoolcabmarket...@gmail.com; dkim=pass
header.i=mycoolcabmarket...@gmail.com
Received: from mr.google.com ([10.141.106.5])
by 10.141.106.5 with SMTP id i5mr58323rvm.152.1265801170088
(num_hops = 1);
Wed, 10 Feb 2010 03:26:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:in-reply-to:references
 :date:message-id:subject:from:content-type;
bh=leUaw6Fmeu4mfzZdwUr1+2yuEaPaYFF1uYO2luOUGw0=;
b=U1aeesE99QZ9AeW0NmdmJ+Ere/hVOhE71nlVXd/743uusurIen3nlEeO699Uo4axAS
 A54KJyvCWpa8UDl0lbHPSURbq9rNt9iT3k5YrQREpSAGYsFyJ2gDe9oE/7Dleok+NHm1
 gk4+7S7JEv9bVXA8q5QYUJi1VyY+q1lRInhuc=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from
 :content-type;
b=qKsV4B+qUB4LI7TYeHexMzDFmP/56VQuDUm8Krj83j8Jx00KmXR6C6Shl4b1gcPnVw
 Aj0QXsM94jCmjMp6kWcAsS2YpPMs6a7JU8WdrS+BnuI/s9UBztc6ifxuoz1DcMs+JGhL
 q5hcbvcmlp2da5weboB8MuGN5A31J641DeyD4=
MIME-Version: 1.0
Received: by 10.141.106.5 with SMTP id i5mt58323rvm.152.1265795433660; Wed, 10
Feb 2010 01:50:33 -0800 (PST)
In-Reply-To: <8153f3881002100148h3ac3aa76o7915583be461f...@mail.gmail.com>
References: <8153f3881001311541i5ec8b3a7pa24cc99ec499d...@mail.gmail.com>
 <8153f3881001311542j4835d189g443c4976985e2...@mail.gmail.com>
 <8153f3881002080445y11a9e370j74f65c4914c70...@mail.gmail.com>
 <8153f3881002100148h3ac3aa76o7915583be461f...@mail.gmail.com>
Date: Wed, 10 Feb 2010 15:20:33 +0530
Message-ID: <8153f3881002100150y1b7bb4d1k462ce466a2ae2...@mail.gmail.com>
Subject: RE: Mumbai Pune/ Pune Mumbai Oneway Cab Service At Rs. 1500/- Onwards
From: MYCOOL CAB 
Content-Type: multipart/alternative; boundary=000e0cd1387a195947047f3d4de0

--000e0cd1387a195947047f3d4de0
Content-Type: text/plain; charset=ISO-8859-1

[image: Mycoolcab]

--000e0cd1387a195947047f3d4de0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable


























http://www.mycoolcab.com/images/MycoolcabBrochure.jpg"; width=3D"762" us=
emap=3D"#126b747953811c55_126ad9d2497a0222_12686c3d682d4049_12686c27267d44f=
3_12683ae0a58f1639_12683aafab40a346_12683a8930afcbf1_126799aa0cb7d78e_12679=
96feab89174_1267994fe526c3b4_1267618e69d89c68_12676150466e1bbf_12676134da1e=
a223_12669d6315aaba05_12669d2371856db5_12669d141ede48d3_12f7880edd90_12=
6651afd18e7c30_126651a81a36457b_1266518ae2f290d3_1266518585fc_1266517f3=
26625a6_1266517761b9e728_1266516be7997df9_126651626fad43fd_1266514b977985dc=
_12665140f2ffa5c2_12665138d8b39844_1266512a4e07c1a9_126650bc07b4827d_map1">=
 

http://www.mycoolcab.com";><=
br>
<=
/div>=


--000e0cd1387a195947047f3d4de0--

Re: Mail in Inbox

[Dhiraj Chatpar]

Received: from mr.google.com ([10.141.106.5])

Doesnt even exist. did you try checking what this IP or the host is?


Stephen 
Leacock<http://www.brainyquote.com/quotes/authors/s/stephen_leacock.html>
- "I detest life-insurance agents: they always argue that I shall some
day
die, which is not so."

On Thu, Feb 11, 2010 at 12:02, Ansgar Wiechers wrote:

> On 2010-02-11 Dhiraj Chatpar wrote:
> > I got this email in my gmail inbox. i was wondering how it reached
> there..
> > can anyone tell me. There is no MTA defined.
>
> Both Received headers disagree with you:
>
> > Received: by 10.220.45.205 with SMTP id g13cs9092vcf;
> > Wed, 10 Feb 2010 03:26:10 -0800 (PST)
> [...]
> > Received: from mr.google.com ([10.141.106.5])
> > by 10.141.106.5 with SMTP id i5mr58323rvm.152.1265801170088
> > (num_hops = 1); Wed, 10 Feb 2010 03:26:10 -0800 (PST)
>
> The receiving MTA that added the topmost header just didn't bother
> logging the sending MTA as well.
>
> As for how it got there: In-Reply-To and References headers suggest that
> the mail was sent from one GMail account to another. Which would also
> explain why there are only private IP addresses involved.
>
> > In-Reply-To: <
> 8153f3881002100148h3ac3aa76o7915583be461f...@mail.gmail.com>
> > References: <8153f3881001311541i5ec8b3a7pa24cc99ec499d...@mail.gmail.com
> >
> ><8153f3881001311542j4835d189g443c4976985e2...@mail.gmail.com>
> ><8153f3881002080445y11a9e370j74f65c4914c70...@mail.gmail.com>
> ><8153f3881002100148h3ac3aa76o7915583be461f...@mail.gmail.com>
>
> Regards
> Ansgar Wiechers
> --
> "Abstractions save us time working, but they don't save us time learning."
> --Joel Spolsky
>

Re: Mail in Inbox

[Dhiraj Chatpar]

Received: from mr.google.com ([10.141.106.5])


Marie von 
Ebner-Eschenbach<http://www.brainyquote.com/quotes/authors/m/marie_von_ebnereschenbac.html>
- "Even a stopped clock is right twice a day."

On Thu, Feb 11, 2010 at 12:31, Ansgar Wiechers wrote:

> On 2010-02-11 Dhiraj Chatpar wrote:
> > On Thu, Feb 11, 2010 at 12:02, Ansgar Wiechers wrote:
> >> As for how it got there: In-Reply-To and References headers suggest
> >> that the mail was sent from one GMail account to another. Which would
> >> also explain why there are only private IP addresses involved.
> [...]
> > Received: from mr.google.com ([10.141.106.5])
> >
> > Doesnt even exist. did you try checking what this IP or the host is?
>
> Which part of "private IP addresses" did you fail to understand?
>
> Regards
> Ansgar Wiechers
> --
> "Abstractions save us time working, but they don't save us time learning."
> --Joel Spolsky
>