Re: Problem DNS-resolving single helo-hostnames

2009-01-23 Thread Schilling, Timo
Victor Duchovni wrote: On Thu, Jan 22, 2009 at 12:57:30PM +0100, Schilling, Timo wrote: Hello to everybody, while we use the option reject_unknown_helo_hostname we noticed, that single hostnames will be rejected without contacting the dns-servers. After some debugging of the source code we

Any improvement suggestions for main.cf + master.cf ?

2009-01-23 Thread Richard Foley
Hi postfix profis, I'm running postfix 2.1.5-9 for several domains. Of course it handles the workload with ease, but when I tail the mail.log the screen scrolls constantly as it's just rejecting spam every second. The good thing is that all these accesses are rejected, and logged. Also good

501 The first command in a session must be the HELO command

2009-01-23 Thread Peter Micunek
Hi, I have a strange problem with some email sessions. Postfix 2.5.2 is configured like email router. It receives emails from many sources and sends them to one destination. Each rules for mail routing are done by transport table. Everything works properly but sometimes some emails are

Re: Any improvement suggestions for main.cf + master.cf ?

2009-01-23 Thread ram
On Fri, 2009-01-23 at 11:04 +0100, Richard Foley wrote: Hi postfix profis, I'm running postfix 2.1.5-9 for several domains. Of course it handles the workload with ease, but when I tail the mail.log the screen scrolls constantly as it's just rejecting spam every second. The good thing is

Re: Question re: config_directory setting

2009-01-23 Thread Charles Marcus
On 1/21/2009 8:46 AM, Charles Marcus wrote: I try to keep my postconf -n output clean/small by not explicitly setting anything that is not different from the default (postconf -d), and I just noticed that my postconf -n output contains the following: config_directory = /etc/postfix and

Re: Confirm: home_mailbox not needed/used in this setup?

2009-01-23 Thread Charles Marcus
On 1/21/2009, Victor Duchovni (victor.ducho...@morganstanley.com) wrote: Your question cannot be answered based just on the data you have provided. Many thanks for the response Victor... I've been trying to digest it fully... I thought I had a good, basic understanding of the different address

Re: Postfix mail queue

2009-01-23 Thread Martin Spinassi
On Thu, 2009-01-22 at 15:16 -0600, Noel Jones wrote: Martin Spinassi wrote: Hi list! I've been using postfix since a few weeks. I always used qmail before for mail servers, and I'm really impressed by postfix but there is something that I really miss... I use to use qmHandle

Re: Problem DNS-resolving single helo-hostnames

2009-01-23 Thread Wietse Venema
Schilling, Timo: Postfix shouldn't negate the flag (from 1 to 0) so that the function res_search doesn't append the known domain-informations. But it is done in the above mentioned file, but why? Because it makes no sense to append MY OWN DOMAIN to the hostname from a REMOTE client.

Re: remote_header_rewrite_domain ignored.

2009-01-23 Thread Wietse Venema
Guy: Hi, I added the following line to main.cf but the server name was still appended to an incomplete sender address. content_filter = smtp-amavis:[127.0.0.1]:10024 begin speculation You're appending it on return from the filter. end speculation Don't list the local machine as a local

Re: 501 The first command in a session must be the HELO command

2009-01-23 Thread Wietse Venema
Peter Micunek: Hi, I have a strange problem with some email sessions. Postfix 2.5.2 is configured like email router. It receives emails from many sources and sends them to one destination. Each rules for mail routing are done by transport table. Everything works properly but

Re: Any improvement suggestions for main.cf + master.cf ?

2009-01-23 Thread Richard Foley
On Friday 23 January 2009 11:32:04 ram wrote: On Fri, 2009-01-23 at 11:04 +0100, Richard Foley wrote: Hi postfix profis, I'm running postfix 2.1.5-9 If it isnt broken , dont fix it :-) Sage advice :-) If you are seeing a lot of reject lines ( because of spamhaus ? ). That is

Re: Problem DNS-resolving single helo-hostnames

2009-01-23 Thread Schilling, Timo
Wietse Venema wrote: Schilling, Timo: Postfix shouldn't negate the flag (from 1 to 0) so that the function res_search doesn't append the known domain-informations. But it is done in the above mentioned file, but why? Because it makes no sense to append MY OWN DOMAIN to the hostname from a

No filters for authenticated users

2009-01-23 Thread Jordi Espasa Clofent
Hi all, I want to the authenticated users (who are authenticated using SASL2 and SQL backend) don't pass to several filters detailed in master.cf file; on the other hand, I want to still using the same filter for all the remain world. My first thought has been to create another smtpd daemon

Re: No filters for authenticated users

2009-01-23 Thread Patrick Ben Koetter
* Jordi Espasa Clofent jespa...@minibofh.org: Hi all, I want to the authenticated users (who are authenticated using SASL2 and SQL backend) don't pass to several filters detailed in master.cf file; on the other hand, I want to still using the same filter for all the remain world. My

Re: Problem DNS-resolving single helo-hostnames

2009-01-23 Thread Wietse Venema
Schilling, Timo: Wietse Venema wrote: Schilling, Timo: Postfix shouldn't negate the flag (from 1 to 0) so that the function res_search doesn't append the known domain-informations. But it is done in the above mentioned file, but why? Because it makes no sense to append MY OWN DOMAIN

Re: 501 The first command in a session must be the HELO command

2009-01-23 Thread lst_hoe02
Zitat von Wietse Venema wie...@porcupine.org: Peter Micunek: Hi, I have a strange problem with some email sessions. Postfix 2.5.2 is configured like email router. It receives emails from many sources and sends them to one destination. Each rules for mail routing are done by transport table.

Feature request

2009-01-23 Thread Thomas Ackermann
As older postfix installations have a fallback_relay variable and newer installations have a smtp_fallback_relay, i wanted to use postconf to check, which version is supported. Usally, i would expect a program to return with a non-zero exit-code at such a failure: r...@localhost# postconf

To [ and ] or not to [ and ] in relayhost entries ...

2009-01-23 Thread Thomas Ackermann
Hello, i read the documentation about the usage of [ and ] in relayhost entries ... I still not quite sure what happens or not happens when using an IP with or without such signs... relayhost = 1.2.3.4 may use MX records from DNS? What if there is no nameserver configured? Will there be any

Re: No filters for authenticated users

2009-01-23 Thread Noel Jones
Jordi Espasa Clofent wrote: Hi all, I want to the authenticated users (who are authenticated using SASL2 and SQL backend) don't pass to several filters detailed in master.cf file; on the other hand, I want to still using the same filter for all the remain world. My first thought has been

Re: Problem DNS-resolving single helo-hostnames

2009-01-23 Thread Noel Jones
Schilling, Timo wrote: Wietse Venema wrote: Schilling, Timo: Postfix shouldn't negate the flag (from 1 to 0) so that the function res_search doesn't append the known domain-informations. But it is done in the above mentioned file, but why? Because it makes no sense to append MY OWN DOMAIN to

Re: Any improvement suggestions for main.cf + master.cf ?

2009-01-23 Thread Noel Jones
Richard Foley wrote: This file is very minimal: /^\@/ 550 invalid address /[...@].*\@/550 weird addresses Don't escape @ in postfix regular expressions. Don't escape characters inside [ ] classes. /^@/550 invalid address /[...@].*@/

Re: 501 The first command in a session must be the HELO command

2009-01-23 Thread Noel Jones
Peter Micunek wrote: Hi, I have a strange problem with some email sessions. Postfix 2.5.2 is configured like email router. It receives emails from many sources and sends them to one destination. Each rules for mail routing are done by transport table. Everything works properly but

Re: Blocking account from sending (Still not working)

2009-01-23 Thread Noel Jones
Bill Loy wrote: After adding the lines smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/restricted_senders smtpd_restriction_classes = local_only local_only = check_recipient_access hash:/etc/postfix/local_domains, reject to the file

Re: Blocking account from sending (Still not working)

2009-01-23 Thread Noel Jones
Noel Jones wrote: Bill Loy wrote: After adding the lines smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/restricted_senders smtpd_restriction_classes = local_only local_only = check_recipient_access hash:/etc/postfix/local_domains, reject to

Blocking Phishing emails

2009-01-23 Thread Paul Reilly
Hello, I know this is not specifically a postfix question, but I know there are a lot of very knowledgeable people on this list. I'm wondering what success others have had blocking Phishing emails? We can block them using header/body checks, but one is always playing catch up. It's a game you

Re: Blocking Phishing emails

2009-01-23 Thread Noel Jones
Paul Reilly wrote: Hello, I know this is not specifically a postfix question, but I know there are a lot of very knowledgeable people on this list. I'm wondering what success others have had blocking Phishing emails? We can block them using header/body checks, but one is always playing catch

RE: Blocking Phishing emails

2009-01-23 Thread Rob Sterenborg
Is anyone using ClamAV with Postfix with the phishing filters? Are they effective? Does anyone know of any other service offering Phishing signatures that one can employ? SaneSecurity (they're back) is providing ClamAV signatures for spam, phishing, etc. Rsync scripts are available to

Postfix multi-instance support ready for testing

2009-01-23 Thread Wietse Venema
Postfix snapshot 20090123 provides support for managing multiple Postfix instances. It was designed, implemented and documented during this week (implementation taking about 1/6 of that time). Citing from the RELEASE_NOTES: This can automatically apply your postfix start etc. command

forged outlook html

2009-01-23 Thread bharathan kailath
X-Spam-Status: No, score=2.797 tagged_above=2 required=5 tests=[BAYES_00=-2.599, FORGED_MUA_OUTLOOK=3.116, FORGED_OUTLOOK_HTML=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, MSOE_MID_WRONG_CASE=0.82, NORMAL_HTTP_TO_IP=0.001] the above header details are of a message which was a spam; what does

Re: forged outlook html

2009-01-23 Thread Charles Marcus
On 1/23/2009 11:33 AM, bharathan kailath wrote: X-Spam-Status: No, score=2.797 tagged_above=2 required=5 tests=[BAYES_00=-2.599, FORGED_MUA_OUTLOOK=3.116, FORGED_OUTLOOK_HTML=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, MSOE_MID_WRONG_CASE=0.82, NORMAL_HTTP_TO_IP=0.001] the above

MAILER-DAEMON question

2009-01-23 Thread ESTEVES, Luis
Hi all, We are using Postfix and I have a little question. When I send an e-mail to a bad external address (example: jdhfjdfjdhfjdhfj...@yahoo.com), my SMTP gateway send me an error message from mailer-dea...@mydomain.com because the target address doesn't exist. Question: Do you

Re: MAILER-DAEMON question

2009-01-23 Thread Wietse Venema
ESTEVES, Luis: When I send an e-mail to a bad external address (example: jdhfjdfjdhfjdhfj...@yahoo.com), my SMTP gateway send me an error message from mailer-dea...@mydomain.com because the target address doesn't exist. Question: Do you know where I can change mydomain.com (after the

Re: speeding dkim filtering

2009-01-23 Thread postfix
Hi, The incoming queue was big and increased continually ( from 2000 to up to 5 messages) The active queue was full. The traffic was not to too heavy ( 5,000- messages per 10 minutes). Trivial-rewrite is using LDAP lookups (locally) to route messages. System CPU, disk or network were NOT

something+em...@example.com

2009-01-23 Thread hose
Can anyone tell me what the formal name of the email technique of placing something + a delimiter + your email is? I can't seem to remember... hose

Re: speeding dkim filtering

2009-01-23 Thread Victor Duchovni
On Fri, Jan 23, 2009 at 07:24:08PM +0100, postfix wrote: The incoming queue was big and increased continually ( from 2000 to up to 5 messages) Symptom. The active queue was full. Cause. The traffic was not to too heavy ( 5,000- messages per 10 minutes). Trivial-rewrite is using LDAP

Re: Feature request

2009-01-23 Thread mouss
Thomas Ackermann a écrit : As older postfix installations have a fallback_relay variable and newer installations have a smtp_fallback_relay, i wanted to use postconf to check, which version is supported. Usally, i would expect a program to return with a non-zero exit-code at such a failure:

Re: How to reject mispelled recipient domain

2009-01-23 Thread mouss
christopher andrews a écrit : I was reading this subject and I was wondering, if you thought about what would happen if you compile a list of misspelled domains and denied them instantly and the user mint to send it to one of those domains. I'm saying this because what you may think is

Re: something+em...@example.com

2009-01-23 Thread Victor Duchovni
On Fri, Jan 23, 2009 at 02:37:55PM -0500, Charles Marcus wrote: On 1/23/2009, hose (h...@bluemaggottowel.com) wrote: Can anyone tell me what the formal name of the email technique of placing something + a delimiter + your email is? I can't seem to remember... Are you talking about

Re: Zone record set up

2009-01-23 Thread mouss
Kevin Bailey a écrit : Hi Guys, Just a question RE setting up the DNS zone record correctly for a mail server. I have a couple of setups which work but have just copied one and I'm getting the following response. j.gilb...@watercooledsurf.com: Host or domain name not found. Name

Re: Zone record set up

2009-01-23 Thread Victor Duchovni
On Fri, Jan 23, 2009 at 08:53:21PM +0100, mouss wrote: wrong. the MX should not be a cname. see http://www.rfc-ignorant.org/policy-bogusmx.php use IN MC 10 mail2.freewayprojects.com. This requirement was relaxed in RFC 2821. It is OK (though still better not to if not

Re: something+em...@example.com

2009-01-23 Thread Charles Marcus
On 1/23/2009, Victor Duchovni (victor.ducho...@morganstanley.com) wrote: - recipient delimiter, the + or sometimes - (...) character that separates the base address from the address: - extension, the rest of the address localpart between the delimiter and the domain.

can't authenticate to gmail: CAPTCHA needed

2009-01-23 Thread sean darcy
I have a voip server that receives faxes in a tif file. I use fax2email to convert the tif to a pdf and send it as an attachment over postfix. My isp blocks port 22, so I've setup a gmail account to use as a relay. That generally works. But, every once in a while, authentication fails. When I

Postfix - Blackberry

2009-01-23 Thread postmas...@klam.ca
I don't currently own a blackberry, but am thinking about getting one (the Obama effect). A friend who works in the Cellphone business has warned me that if I just setup the BB to go get my email from my postfix server this will treated as internet data, whereas if I can interface postfix - BB

Re: Postfix - Blackberry

2009-01-23 Thread Leonardo Rodrigues Magalhães
postmas...@klam.ca escreveu: I don't currently own a blackberry, but am thinking about getting one (the Obama effect). A friend who works in the Cellphone business has warned me that if I just setup the BB to go get my email from my postfix server this will treated as internet data, whereas if

Re: Postfix - Blackberry

2009-01-23 Thread Dario subbia Cavallaro
postmas...@klam.ca ha scritto: I don't currently own a blackberry, but am thinking about getting one (the Obama effect). A friend who works in the Cellphone business has warned me that if I just setup the BB to go get my email from my postfix server this will treated as internet data, whereas if

Re: can't authenticate to gmail: CAPTCHA needed

2009-01-23 Thread sean darcy
Victor Duchovni wrote: On Fri, Jan 23, 2009 at 04:09:07PM -0500, sean darcy wrote: I have a voip server that receives faxes in a tif file. I use fax2email to convert the tif to a pdf and send it as an attachment over postfix. My isp blocks port 22, so I've setup a gmail account to use as a

Re: can't authenticate to gmail: CAPTCHA needed

2009-01-23 Thread Wietse Venema
Victor Duchovni: On Fri, Jan 23, 2009 at 04:09:07PM -0500, sean darcy wrote: I have a voip server that receives faxes in a tif file. I use fax2email to convert the tif to a pdf and send it as an attachment over postfix. My isp blocks port 22, so I've setup a gmail account to use as a

Re: Postfix - Blackberry

2009-01-23 Thread Udo Rader
postmas...@klam.ca wrote: I don't currently own a blackberry, but am thinking about getting one (the Obama effect). A friend who works in the Cellphone business has warned me that if I just setup the BB to go get my email from my postfix server this will treated as internet data, whereas if I

OT Re: Postfix - Blackberry

2009-01-23 Thread Steve Crawford
postmas...@klam.ca wrote: I don't currently own a blackberry, but am thinking about getting one (the Obama effect). A friend who works in the Cellphone business has warned me that if I just setup the BB to go get my email from my postfix server this will treated as internet data, whereas if I

Re: Feature request

2009-01-23 Thread Thomas
mouss wrote: check_parameter() { postconf $1 21 | grep -vq unknown parameter return $? } or check_parameter() { postconf $1 2/dev/null | grep -q = return $? } Then, you need an exit-code wrapper for grep too, it seems :) check_result() { RESULT=$( grep ${1} ${2} 2/dev/null )

Re: To [ and ] or not to [ and ] in relayhost entries ...

2009-01-23 Thread Thomas
Thomas Ackermann wrote: So, does anybody know what technically is the difference between the use with and without the signs? I mean, what network things may happen or not happen? Nobody knows the technical differences? :-(

Re: To [ and ] or not to [ and ] in relayhost entries ...

2009-01-23 Thread Noel Jones
Thomas wrote: Thomas Ackermann wrote: So, does anybody know what technically is the difference between the use with and without the signs? I mean, what network things may happen or not happen? Nobody knows the technical differences? :-( ... more likely nobody cares, because postfix

Re: To [ and ] or not to [ and ] in relayhost entries ...

2009-01-23 Thread Duane Hill
On Sat, 24 Jan 2009, Thomas wrote: Thomas Ackermann wrote: So, does anybody know what technically is the difference between the use with and without the signs? I mean, what network things may happen or not happen? Nobody knows the technical differences? Care to take a look at the Postfix

Re: Postfix - Blackberry

2009-01-23 Thread rafa
Steve Crawford wrote: postmas...@klam.ca wrote: I don't currently own a blackberry, but am thinking about getting one (the Obama effect). A friend who works in the Cellphone business has warned me that if I just setup the BB to go get my email from my postfix server this will treated as

Re: Feature request

2009-01-23 Thread Thomas
J.P. Trosclair wrote: This is really off topic, but grep already returns a success and failure code based on if there were any matches which mouss's code uses from what I can tell. There's really no reason to look at grep's stdout, if it has a match the return code is 0, it doesn't it's != 0.

Re: To [ and ] or not to [ and ] in relayhost entries ...

2009-01-23 Thread Thomas
Duane Hill wrote: Care to take a look at the Postfix documentation? http://www.postfix.org/postconf.5.html#relayhost As i wrote, i read the documentation i found - it was exactly this small entry about relayhost! The answer from Noel Jones contains quite some more and deeper information

Re: To [ and ] or not to [ and ] in relayhost entries ...

2009-01-23 Thread Thomas
Noel Jones wrote: ... more likely nobody cares, because postfix behavior is documented. When the relayhost is a hostname enclosed by [ ] brackets, postfix asks for an A record and does not ask for an MX record. If relayhost is an IP address enclosed by brackets, postfix uses that IP with no

Re: To [ and ] or not to [ and ] in relayhost entries ...

2009-01-23 Thread Wietse Venema
Thomas: Duane Hill wrote: Care to take a look at the Postfix documentation? http://www.postfix.org/postconf.5.html#relayhost As i wrote, i read the documentation i found - it was exactly this small entry about relayhost! The answer from Noel Jones contains quite some more and

RE: example.com problem?

2009-01-23 Thread Norm Mackey
Wietse Venema [mailto:wie...@porcupine.org] wrote: Norm Mackey: The situation reached the point where the mail queue could not even be listed completely with postqueue without postqueue failing, and What was the failure? I suppose that after $daemon_timeout seconds (1800s default) the

Re: example.com problem?

2009-01-23 Thread Wietse Venema
Norm Mackey: The failure was logged in /var/log/mail/errors as messages like: [r...@relay mail]# cat errors |grep open files|head -n 5 Jan 19 00:39:43 relay postfix/qmgr[26415]: fatal: socket: Too many open files Your machine resources don't match the Postfix configuration. Either scale

forged spam mails

2009-01-23 Thread bharathan kailath
i get spam mails that pretend to be from yahoo (eg.from yahoo.it, yahoo.nl) on my postfix relay; how can i prevent such kind of foregeries help appreciated thanks