Re: postfix hangs when SASL enabled

2008-09-08 Thread mouss
Travis wrote: I first tried the instructions in The BOOK of POSTFIX, but no luck Then I followed the instructions here: https://help.ubuntu.com/community/Postfix In both cases, the symptom is that postfix, upon being restarted, responds to nc -v -v localhost 25' with an accept and then an

Re: postfix hangs when SASL enabled

2008-09-08 Thread Wietse Venema
I narrowed down the problem to this config value: smtpd_sasl_auth_enable = yes All problems are reported to logfile. http://www.postfix.org/DEBUG_README.html#logging Wietse TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail

Re: rcpt count mismatch errors (not using Mailscanner)

2008-09-08 Thread Wietse Venema
[EMAIL PROTECTED]: Any ideas what causes these? Jul 21 23:14:43 kd1 postfix/qmgr[20699]: warning: F320A29569: rcpt count mismatch (-2) ... Version is postfix-2.3.r8,3 (FreeBSD port) This problem was removed by a code reorganization in Postfix 2.4, when I added support for message body

Postfix + SPF/SRS advice

2008-09-08 Thread Guy
Hi guys, I'm running a mail gateway (soon to add a second one) and I've just recently started having problems with SPF as many of our users just use us to forward mail. At the moment all I have is an SPF entry in DNS so I'm looking at SPF and SRS patches/plugins for postfix. The last SRS patch I

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Brian Evans - Postfix List
Guy wrote: Hi guys, I'm running a mail gateway (soon to add a second one) and I've just recently started having problems with SPF as many of our users just use us to forward mail. At the moment all I have is an SPF entry in DNS so I'm looking at SPF and SRS patches/plugins for postfix. The

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Guy
Hi Brian, 2008/9/8 Brian Evans - Postfix List [EMAIL PROTECTED]: SPF running in conjunction with Postfix will only do verification. http://www.openspf.org/Software lists the packages known to work properly. What makes you think you have a problem? I should have been more specific. I've had a

Re: Postfix + SPF/SRS advice

2008-09-08 Thread mouss
Guy wrote: Hi guys, I'm running a mail gateway (soon to add a second one) and I've just recently started having problems with SPF as many of our users just use us to forward mail. Can you give more details here? do you forward mail for domains that have a -all? (if so, can you give an

Re: Postfix + SPF/SRS advice

2008-09-08 Thread mouss
Guy wrote: Hi Brian, 2008/9/8 Brian Evans - Postfix List [EMAIL PROTECTED]: SPF running in conjunction with Postfix will only do verification. http://www.openspf.org/Software lists the packages known to work properly. What makes you think you have a problem? I should have been more specific.

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Guy
Hi Mouss, 2008/9/8 mouss [EMAIL PROTECTED]: we'd like to see a concrete example: sender domain and the uncooperative remote server. [EMAIL PROTECTED]: host ricercare.co.uk[195.216.196.141] said: 550 SPF: x.x.x.x is not allowed to send mail from growse.com (in reply to RCPT TO command) how is

Re: Postfix + SPF/SRS advice

2008-09-08 Thread Brian Evans - Postfix List
Guy wrote: Hi Mouss, 2008/9/8 mouss [EMAIL PROTECTED]: we'd like to see a concrete example: sender domain and the uncooperative remote server. [EMAIL PROTECTED]: host ricercare.co.uk[195.216.196.141] said: 550 SPF: x.x.x.x is not allowed to send mail from growse.com (in reply to

Re: Postfix not sending to proper servers.

2008-09-08 Thread mouss
Marcelo Iturbe wrote: Hello, A client has a domain (sample.com) which resolves to the IP 190.190.168.54 The MX records this domain point to another IP completely different: 64.233.171.27 I don't see the same IPs here. $ host sample.com sample.com has address 208.87.33.150 sample.com mail is

Postfix crashing under load

2008-09-08 Thread Devdas Bhagat
The last error messages I get are these: Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem talking to service private/scache: Connection timed out Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning: problem talking to service private/scache: Connection timed out

trusted access and authenticated access

2008-09-08 Thread Charles Account
Hi, I am trying to configure my postfix server to allow two types of users: trusted and authenticated The trusted users are sending from a set of IP addresses and I don't require them to authenticate since this has occurred up stream. The authenticated users are using thirdparty clients like

Re: Postfix crashing under load

2008-09-08 Thread Brian Evans - Postfix List
Devdas Bhagat wrote: The last error messages I get are these: Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem talking to service private/scache: Connection timed out Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning: problem talking to service

Re: trusted access and authenticated access

2008-09-08 Thread mouss
Charles Account wrote: Hi, I am trying to configure my postfix server to allow two types of users: trusted and authenticated The trusted users are sending from a set of IP addresses and I don't require them to authenticate since this has occurred up stream. for these you need

Re: processing order lookup tables

2008-09-08 Thread gerrit
mouss schreef: gerrit wrote: Hi All, Recently i implemented the sender check. First i made a split for the processing and put some restrictions under smtpd_sender_restrictions and some under stmpd_recipient_restrictions. This resulted in too many rejections, so i left the sender

Re: processing order lookup tables

2008-09-08 Thread mouss
gerrit wrote: check_sender_access hash:/etc/postfix/sender_whitelist check_recipient_access hash:/etc/postfix/recipient_whitelist reject_unauth_destination reject_unverified_sender sender verification callbacks are not very

Re: Postfix crashing under load

2008-09-08 Thread Victor Duchovni
On Mon, Sep 08, 2008 at 10:35:40PM +0530, Devdas Bhagat wrote: The last error messages I get are these: Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem talking to service private/scache: Connection timed out Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]:

Re: postfix/dovecot lda assistance

2008-09-08 Thread mouss
Scott Sharkey wrote: Hi All, I'm trying to set postfix up to deliver using dovecot's LDA delivery agent. I'm using postfixadmin, with mysql virtual user tables. Those tables include a transport field, which is set to virtual:. But I thought that the main.cf virtual_transport setting would

Re: Postfix crashing under load

2008-09-08 Thread Wietse Venema
Devdas Bhagat: The last error messages I get are these: Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem talking to service private/scache: Connection timed out Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning: problem talking to service private/scache:

Re: Postfix crashing under load

2008-09-08 Thread Wietse Venema
Wietse Venema: Devdas Bhagat: The last error messages I get are these: Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem talking to service private/scache: Connection timed out Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning: problem talking to

Re: Postfix crashing under load

2008-09-08 Thread Victor Duchovni
On Mon, Sep 08, 2008 at 03:31:29PM -0400, Wietse Venema wrote: The master daemon triggers qmgr and pickup regularly. That trigger write is non-blocking with a timeout of 1, so it cannot block the master daemon. Except of course when the kernel is messed up. Hmm, except that write_buf()

Re: Postfix crashing under load

2008-09-08 Thread Wietse Venema
Wietse Venema: Wietse Venema: Devdas Bhagat: The last error messages I get are these: Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem talking to service private/scache: Connection timed out Sep 8 13:54:37 jaundiced-outlook postfix/smtp[20375]: warning:

Re: Postfix crashing under load

2008-09-08 Thread Wietse Venema
Victor Duchovni: On Mon, Sep 08, 2008 at 03:31:29PM -0400, Wietse Venema wrote: The master daemon triggers qmgr and pickup regularly. That trigger write is non-blocking with a timeout of 1, so it cannot block the master daemon. Except of course when the kernel is messed up. Hmm,

Re: postfix hangs when SASL enabled

2008-09-08 Thread Travis
On Mon, Sep 08, 2008 at 08:15:24AM +0200, mouss wrote: Travis wrote: I also notice that even though the SSL keys have passwords on them, postfix never prompts for them. daemons do not prompt. Perhaps they should not, but apache does. Dovecot has a config file entry with the password to

Re: postfix hangs when SASL enabled

2008-09-08 Thread Wietse Venema
Travis: It turns out that my software (tinyca2) as well as the normal openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 (suggested here: https://help.ubuntu.com/community/Postfix) both prompt for passwords with which to encrypt the key. See instructions at the end of

Re: postfix hangs when SASL enabled

2008-09-08 Thread Barney Desmond
2008/9/9 Travis [EMAIL PROTECTED]: Perhaps they should not, but apache does. Dovecot has a config file entry with the password to the key to allow use of keys with passwords, which is helpful because: Apache's default behaviour to prompt is less than ideal, but can be configured to do

Re: rcpt count mismatch errors (not using Mailscanner)

2008-09-08 Thread Wietse Venema
Wietse Venema: [EMAIL PROTECTED]: Any ideas what causes these? Jul 21 23:14:43 kd1 postfix/qmgr[20699]: warning: F320A29569: rcpt count mismatch (-2) ... Version is postfix-2.3.r8,3 (FreeBSD port) This problem was removed by a code reorganization in Postfix 2.4, when I added

can send mail, but cannot receive (through ISP smtp)

2008-09-08 Thread Alex Bernea
Hi all, I have set up Postfix 2.5.4 with TLS, Cyrus SASL and LDAP lookups for users. I tested it with openssl s_client command on ports 25, 465 and 587 and everything works (authentication and test emails). I use self signed CA certificates. I also tested sending mail on gmail, yahoo and other

my networks exclusions not working?

2008-09-08 Thread Chris St Denis
I have the following mynetworks defined Dispite having 69.31.160.0/20 defined and !69.31.174.220 defined, I can still relay mail from 69.31.174.220 without smtp authentication. Why is this? Does order matter or is there another problem with my syntax? mynetworks = 69.31.160.0/20,

Re: postfix/dovecot lda assistance

2008-09-08 Thread Scott Sharkey
Hi Brian, I'm editing this to make it a bit shorter. Brian Evans - Postfix List wrote: Scott Sharkey wrote: Brian Evans - Postfix List wrote: Scott Sharkey wrote: We need your 'postconf -n' to give more hints about a correct setup. (with virtual_ maps explained too) see below:

Re: Spam from hotmail servers - how to kill?

2008-09-08 Thread James Robertson
James Robertson wrote: Recently we noticed an increase in junk and discovered that it's coming from Hotmail (and to a lesser extent Yahoo). The problem is that these spammers are smarter that the average spammer. The don't spam flatout all the time (not to us anyway) and since the mail comes

RE: my networks exclusions not working?

2008-09-08 Thread MacShane, Tracy
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris St Denis Sent: Tuesday, 9 September 2008 10:41 AM To: postfix-users@postfix.org Subject: my networks exclusions not working? I have the following mynetworks defined Dispite having

Re: can send mail, but cannot receive (through ISP smtp)

2008-09-08 Thread Victor Duchovni
On Tue, Sep 09, 2008 at 03:20:32AM +0300, Alex Bernea wrote: Hi all, I have set up Postfix 2.5.4 with TLS, Cyrus SASL and LDAP lookups for users. I tested it with openssl s_client command on ports 25, 465 and 587 and everything works (authentication and test emails). I use self signed CA

Re: my networks exclusions not working?

2008-09-08 Thread Noel Jones
Chris St Denis wrote: I have the following mynetworks defined Dispite having 69.31.160.0/20 defined and !69.31.174.220 defined, I can still relay mail from 69.31.174.220 without smtp authentication. Why is this? Does order matter or is there another problem with my syntax? Yes, order

Re: can send mail, but cannot receive (through ISP smtp)

2008-09-08 Thread Alex Bernea
On Tue, Sep 9, 2008 at 4:18 AM, Victor Duchovni [EMAIL PROTECTED] wrote: On Tue, Sep 09, 2008 at 03:20:32AM +0300, Alex Bernea wrote: Hi all, I have set up Postfix 2.5.4 with TLS, Cyrus SASL and LDAP lookups for users. I tested it with openssl s_client command on ports 25, 465 and

Re: Postfix crashing under load

2008-09-08 Thread Devdas Bhagat
On Mon, Sep 08, 2008 at 01:23:53PM -0400, Brian Evans - Postfix List wrote: relay_recipient_maps = regexp:/etc/postfix/relay This looks potentially bad to me, but without knowing what is in that /etc/postfix/relay map, it's hard to judge. relayhost = [redacted-trap]

Re: Postfix crashing under load

2008-09-08 Thread Devdas Bhagat
On Mon, Sep 08, 2008 at 03:27:31PM -0400, Wietse Venema wrote: Devdas Bhagat: The last error messages I get are these: Sep 8 13:54:37 jaundiced-outlook postfix/smtp[7998]: warning: problem talking to service private/scache: Connection timed out Sep 8 13:54:37 jaundiced-outlook