Re: Strange behaviour of smtpd_mumble_restrictions

2009-02-03 Thread Martin Schmitt (Schmitt Systemberatung)
Ralf Hildebrandt schrieb:

> smtpd_mumble_restrictions = hash:/foo
> is equivalent to:
> smtpd_mumble_restrictions = check_mumble_access hash:/foo

Oh dear. :-/

Thanks for your time and your support!

Kind regards,

-martin

-- 
Martin Schmitt - Schmitt Systemberatung - http://www.scsy.de
DE 35415 Pohlheim, Gießener Str. 18
DE 65307 Bad Schwalbach, Am Bräunchesberg 9
Linux/UNIX - Internet - E-Mail Infrastructure - Antispam/Antivirus
- "What goes up, must come down. Ask any system administrator." -



signature.asc
Description: OpenPGP digital signature


Re: Strange behaviour of smtpd_mumble_restrictions

2009-02-03 Thread Ralf Hildebrandt
* Martin Schmitt (Schmitt Systemberatung) :

> But still:
> 
> smtpd_client_restrictions = hash:/etc/postfix/clients
> 
> Is this valid configuration syntax? According to what part of the docs?

It's deprecated. I complain about this once in a while here and am
being ignored (more or less) :) It's equivalent to:

smtpd_client_restrictions = check_client_access hash:/etc/postfix/clients

smtpd_mumble_restrictions = hash:/foo
is equivalent to:
smtpd_mumble_restrictions = check_mumble_access hash:/foo

-- 
Ralf Hildebrandt (ralf.hildebra...@charite.de)  snick...@charite.de
Postfix - Einrichtung, Betrieb und Wartung   Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
Die kuerzesten Computerwitze:
1) Muesste laufen.


Re: Strange behaviour of smtpd_mumble_restrictions

2009-02-03 Thread Martin Schmitt (Schmitt Systemberatung)
Ralf Hildebrandt schrieb:
> * Martin Schmitt (Schmitt Systemberatung) :
> 
>> smtpd_client_restrictions = hash:/etc/postfix/clients
> 
> What about this one?

This points into the right direction:

192.168.1   HOLD
127 HOLD

Thanks for that.

But still:

smtpd_client_restrictions = hash:/etc/postfix/clients

Is this valid configuration syntax? According to what part of the docs?
I have never seen anything like this before.

-martin

-- 
Martin Schmitt - Schmitt Systemberatung - http://www.scsy.de
DE 35415 Pohlheim, Gießener Str. 18
DE 65307 Bad Schwalbach, Am Bräunchesberg 9
Linux/UNIX - Internet - E-Mail Infrastructure - Antispam/Antivirus
- "What goes up, must come down. Ask any system administrator." -



signature.asc
Description: OpenPGP digital signature


Re: Strange behaviour of smtpd_mumble_restrictions

2009-02-03 Thread Ralf Hildebrandt
* Martin Schmitt (Schmitt Systemberatung) :

> My current theory is that this might not be the configuration of the
> running postfix instance.

What does the log say when a mail is being held?

-- 
Ralf Hildebrandt (ralf.hildebra...@charite.de)  snick...@charite.de
Postfix - Einrichtung, Betrieb und Wartung   Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
good morning scum


Re: Strange behaviour of smtpd_mumble_restrictions

2009-02-03 Thread Ralf Hildebrandt
* Martin Schmitt (Schmitt Systemberatung) :

> My current theory is that this might not be the configuration of the
> running postfix instance.

:)

-- 
Ralf Hildebrandt (ralf.hildebra...@charite.de)  snick...@charite.de
Postfix - Einrichtung, Betrieb und Wartung   Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
A C program is like a fast dance on a newly waxed dance floor by people
carrying razors."  -- Waldi Ravens. 


Re: Strange behaviour of smtpd_mumble_restrictions

2009-02-03 Thread Martin Schmitt (Schmitt Systemberatung)
Ralf Hildebrandt schrieb:

>> smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
>> smtpd_sender_restrictions = hash:/etc/postfix/access
> 
> check master.cf?

I've already done that. master.cf does not contain any smtpd clones or
-o options.

>> transport_maps = hash:/etc/postfix/transport
> What's in here?

The file is empty.

My current theory is that this might not be the configuration of the
running postfix instance.

-martin

-- 
Martin Schmitt - Schmitt Systemberatung - http://www.scsy.de
DE 35415 Pohlheim, Gießener Str. 18
DE 65307 Bad Schwalbach, Am Bräunchesberg 9
Linux/UNIX - Internet - E-Mail Infrastructure - Antispam/Antivirus
- "What goes up, must come down. Ask any system administrator." -



signature.asc
Description: OpenPGP digital signature


Re: Strange behaviour of smtpd_mumble_restrictions

2009-02-03 Thread Ralf Hildebrandt
* Martin Schmitt (Schmitt Systemberatung) :
> Hi all!
> 
> I'm confronted with a legacy system (/etc/postfix has not received any
> edits since 2006, current uptime is 150 days) that looks like this:
> 
> # grep -v '^#' /etc/postfix/access
> 0.0.0.0/0 HOLD
> 
> # postconf -n | grep access
> smtpd_sender_restrictions = hash:/etc/postfix/access

That's wrong, since "0.0.0.0/0" is CIDR format and it's not a sender.

> All incoming mail gets put on hold, as intended.

I wonder how this can work.

> Everything about this seems to be wrong: The CIDR notation in "access",
> the smtpd_sender_restrictions and the fact that the client match appears
> to be done in the sender context.

Yes. I'm intrigued.

> smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
> smtpd_sender_restrictions = hash:/etc/postfix/access

check master.cf?

> transport_maps = hash:/etc/postfix/transport
What's in here?

-- 
Ralf Hildebrandt (ralf.hildebra...@charite.de)  snick...@charite.de
Postfix - Einrichtung, Betrieb und Wartung   Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
I have never left my schooling interfere with my education. - Mark Twain


Strange behaviour of smtpd_mumble_restrictions

2009-02-03 Thread Martin Schmitt (Schmitt Systemberatung)
Hi all!

I'm confronted with a legacy system (/etc/postfix has not received any
edits since 2006, current uptime is 150 days) that looks like this:

# grep -v '^#' /etc/postfix/access
0.0.0.0/0   HOLD

# postconf -n | grep access
smtpd_sender_restrictions = hash:/etc/postfix/access

# postconf mail_version
mail_version = 2.1.1

OS is SLES9.

All incoming mail gets put on hold, as intended.

Everything about this seems to be wrong: The CIDR notation in "access",
the smtpd_sender_restrictions and the fact that the client match appears
to be done in the sender context.

postconf -n output is below.

Can anyone on the list share an insight as to why holding of all mail
works in this configuration?

Thanks all,

-martin

alias_maps = hash:/etc/aliases
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter =
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = 127.0.0.1, x.x.x.50
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 1024
mydestination = $myhostname, localhost.$mydomain
myhostname = .example.com
mynetworks = x.x.x.0/24, 127.0.0.1/8
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_client_restrictions = hash:/etc/postfix/clients
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_use_tls = no
strict_rfc821_envelopes = no
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550

-- 
Martin Schmitt - Schmitt Systemberatung - http://www.scsy.de
DE 35415 Pohlheim, Gießener Str. 18
DE 65307 Bad Schwalbach, Am Bräunchesberg 9
Linux/UNIX - Internet - E-Mail Infrastructure - Antispam/Antivirus
- "What goes up, must come down. Ask any system administrator." -



signature.asc
Description: OpenPGP digital signature