Not able to add disclaimer

2009-05-18 Thread bijayant kumar
Hi, I have a local mail server installed inside the LAN. From the Firewall all port 25 traffic is being delivered to this mail server. I am trying to add disclaimer on the local mail server for the outgoing emails. There is only one interface for outgoing and incoming mail on to mail server. I

Question about postfix log system

2009-05-18 Thread Giovanni Mancuso
Hi to all, i have a question about postfix logging system. The normal logging system, print in a log file the message-id of email: May 18 04:02:14 fe postfix/cleanup[28007]: 4507B1E8621: message-id=<20090518020214.4507b1e8...@fe.example.org> Can I configure my postfix to log the message-id forea

Re: Question about postfix log system

2009-05-18 Thread Wietse Venema
Giovanni Mancuso: > Hi to all, > i have a question about postfix logging system. > > The normal logging system, print in a log file the message-id of email: > > May 18 04:02:14 fe postfix/cleanup[28007]: 4507B1E8621: > message-id=<20090518020214.4507b1e8...@fe.example.org> > > Can I configure my

Centralized Logging Server

2009-05-18 Thread Ashwin Muni
I am using postfix 2.5. I am configuring a centralized log server using rsyslog. Have anybody worked on it. Or any how to or rsyslog template for doing it. I want logs to be inserted in MYSQL. The Log Message should be in the format DateQueue ID Message ID From To S

Re: Centralized Logging Server

2009-05-18 Thread Robert Schetterer
Ashwin Muni schrieb: > I am using postfix 2.5. I am configuring a centralized log server > using rsyslog. Have anybody worked on it. Or any how to or rsyslog > template for doing it. I want logs to be inserted in MYSQL. > > The Log Message should be in the format > > DateQueue ID Mess

Re: Centralized Logging Server

2009-05-18 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ashwin Muni said the following on 18/05/09 13:22: > I am using postfix 2.5. I am configuring a centralized log server > using rsyslog. Have anybody worked on it. Or any how to or rsyslog > template for doing it. I want logs to be inserted in MYSQL. Yo

Re: shellscript as policy-service --> zombie/load

2009-05-18 Thread Andre Hübner
Hello, Do not contradict the expert. You must find out the parent process of the zombies. In the output from "ps axl" commands, this is shown in the PPID column (use "ps -el" on Solaris and other SYS5-ish platforms). The parent process is not cleaning up as it should. Wietse Oh no, i do n

Re: shellscript as policy-service --> zombie/load

2009-05-18 Thread Wietse Venema
Andre H?bner: > In some cases i find in log following line: > process id x: command time limit exceeded > written $command_time_limit seconds (default) after starting the > policychild. I do not really know how to handle this. RTFM http://www.postfix.org/SMTPD_POLICY_README.html Wiet

Re: Question about postfix log system

2009-05-18 Thread LuKreme
On 18-May-2009, at 04:49, Wietse Venema wrote: Giovanni Mancuso: Hi to all, i have a question about postfix logging system. The normal logging system, print in a log file the message-id of email: May 18 04:02:14 fe postfix/cleanup[28007]: 4507B1E8621: message-id=<20090518020214.4507b1e8...@

suppressing (No client certificate requested) from TLS header

2009-05-18 Thread Julius Thijssen
OK, I'm using SMTP with TLS, and I'd like to eliminate part of the header it generates; Received: from system (ip-address [1.2.3.4]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by mail.some.serverdomain (Postfix) with ESMTPSA id 75F61C

SMTP AUTH for own domain users too ?

2009-05-18 Thread Janaka Wickramasinghe
Hi All, I'm new to postfix, I've currently setup the postfix with SMTP AUTH and it works very well, when I'm sending mails outside of my own domain. However, when I send a mail to my own domain it doesn't ask for the authentication which is a problem because someone can send a mail using m

Re: SMTP AUTH for own domain users too ?

2009-05-18 Thread Patrick Ben Koetter
* Janaka Wickramasinghe : > Hi All, > >I'm new to postfix, I've currently setup the postfix with SMTP AUTH and > it works very well, when I'm sending mails outside of my own domain. > > However, when I send a mail to my own domain it doesn't ask for the > authentication which is a problem

Re: Not able to add disclaimer

2009-05-18 Thread LuKreme
On 18-May-2009, at 03:24, bijayant kumar wrote: I am trying to add disclaimer on the local mail server for the outgoing emails. Oh god no, don't. Please, please don't. And as a point of reference, anytime I get an email with a 'confidential' or 'copyright' disclaimer, I put it on my webser

Re: Postfix SASL didn't query saslauthd whereas smtp.conf is set

2009-05-18 Thread David Touzeau
Message initial De: Patrick Ben Koetter À: postfix-users@postfix.org Sujet: Re: Postfix SASL didn't query saslauthd whereas smtp.conf is set Date: Sun, 17 May 2009 22:02:00 +0200 * David Touzeau : > I use SASL connected to ldap server trough saslauthd daemon > I don't understan

milter-greylist: smfi_getsymval failed for {i} In postfix 2.6

2009-05-18 Thread David Touzeau
Dear I have installed Postfix 2.6 in order to run milters addons In postfix 2.5, milter-greylist claim : milter-greylist: smfi_getsymval failed for {if_addr} -

dns issue - slow SMTP connection

2009-05-18 Thread Felix Nielsen
Hi Is it normal that when connection to the SMTP engine is performed it takes 4-6 sec. before greeting is presented? I suspect it is doing some DNS lookup on the client? - can it be disabled for IPs? Thanks Felix

Re: suppressing (No client certificate requested) from TLS header

2009-05-18 Thread Noel Jones
Julius Thijssen wrote: OK, I'm using SMTP with TLS, and I'd like to eliminate part of the header it generates; Received: from system (ip-address [1.2.3.4]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by mail.some.serverdomain (Postfi

Re: milter-greylist: smfi_getsymval failed for {i} In postfix 2.6

2009-05-18 Thread Wietse Venema
David Touzeau: > Dear > > I have installed Postfix 2.6 in order to run milters addons > > In postfix 2.5, milter-greylist claim : > > milter-greylist: smfi_getsymval failed for {if_addr} > --

Re: Proxying a policy service

2009-05-18 Thread Jan P. Kessler
J Sloan schrieb: > I'm going to try out hapolicy first, since it's quite a bit quicker and > cheaper to set up than full blown mysql replication. > hapolicy (http://postfwd.org/DEVEL/tools/hapolicy-0.99.1) was developed to be small (~200 lines perl), simple and reliable. therefore it uses only

Re: Centralized Logging Server

2009-05-18 Thread Ashwin Muni
Thanks Luigi for the reply can you please tell me how to parse rsyslog to get the desired results using pglogsumm. Thanks in Advance On Mon, May 18, 2009 at 5:07 PM, Luigi Rosa wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Ashwin Muni said the following on 18/05/09 13:22: >> I am

Re: Centralized Logging Server

2009-05-18 Thread Kenneth Marshall
rsyslog can log directly to a database backend. Cheers, Ken On Mon, May 18, 2009 at 08:57:33PM +0530, Ashwin Muni wrote: > Thanks Luigi for the reply can you please tell me how to parse rsyslog > to get the desired results using pglogsumm. > > Thanks in Advance > > On Mon, May 18, 2009 at 5:07

Re: suppressing (No client certificate requested) from TLS header

2009-05-18 Thread Victor Duchovni
On Mon, May 18, 2009 at 09:42:08AM -0500, Noel Jones wrote: > IF /^Received: .*by mail.my.domain/ > IF /no client certificate/ > /(.*)\(No client certificate requested\)(.*)/ > REPLACE $1 $2 > ENDIF > ENDIF This will leave a blank line in the middle of the folded header, which violates RFC5322.

Re: kill ip from bootnets and zombi (shell script)

2009-05-18 Thread Benny Pedersen
On Thu, May 14, 2009 07:23, Julio Cesar Covolato wrote: > Download pf-ip-killer : > http://psi.com.br/~julio/postfix/pf-ip-killer.tgz nice script but have you tryed http://www.fail2ban.org/wiki/index.php/Postfix ? here i hook fail2ban into shorewall allow|drop|reject that way i do not mess wit

Re: kill ip from bootnets and zombi (shell script)

2009-05-18 Thread Benny Pedersen
On Fri, May 15, 2009 09:24, Corey Chandler wrote: > fail2ban interfaces with iptables. > FreeBSD uses pf. and fail2ban works with pf also it just need another action.conf to pf > That little bit of trivia aside, the firewall is a kernel builtin; it's > not a daemon. Perhaps that makes a differe

Re: Centralized Logging Server

2009-05-18 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ashwin Muni said the following on 18/05/09 17:27: > Thanks Luigi for the reply can you please tell me how to parse rsyslog > to get the desired results using pglogsumm. That really depends on what you need from Postfix log data. You can take a look a

Re: Proxying a policy service

2009-05-18 Thread J Sloan
Jan P. Kessler wrote: > > hapolicy (http://postfwd.org/DEVEL/tools/hapolicy-0.99.1) was developed > to be small (~200 lines perl), simple and reliable. therefore it uses > only basic perl modules and relies on postfix spawn. we run it since > more than 6 months without problems to have a shared gre

Re: Postfix-2.6.0 RPM

2009-05-18 Thread Simon J Mudd
lis...@newnanutilities.org ("Brian Collins") writes: > > I noticed that Postfix V#2.6.0 is now out. Does anybody know where to > > get RPM files? GOOGLE did not help. > > Simon Mudd picks up the releases and makes good source and binary RPMs from > them with lots of options. However, he's a busy

RE: Need To Reject Inbound From Addresses with My Own Domain/s

2009-05-18 Thread wiskbroom
> From: Victor.Duchovni@ > On Thu, May 14, 2009 at 12:42:01PM -0500, Noel Jones wrote: > >> wiskbr...@hotmail.com wrote: > Here are the contents of my /etc/postfix/blocked_senders file: > > "operator#...@somephishingbanksite\.com" REJECT The above line is the wrong syntax and wil

Re: Postfix-2.6.0 RPM

2009-05-18 Thread Victor Duchovni
On Mon, May 18, 2009 at 08:38:54PM +0200, Simon J Mudd wrote: > Others ask why not build from source. The simplicity of a single upgrade > procedure and reproducibility make this more favourable the more boxes > you have to manage. For those of us who have hundres of boxes to manage > this makes l

Re: SRS or RPR in Postfix

2009-05-18 Thread Wietse Venema
Yves Kreis: > Dear, > > Is it (technically) possible to implement SRS or RPR in Postfix using > either a milter plugin or a policy? Does anyone know of such an > implementation? Postfix 2.6.0 (stable release) and later support sender address replacement by milter plugins. You're welcome to gi

RE: Postfix-2.6.0 RPM

2009-05-18 Thread Dan Horne
> > I'll see if I can make some time to build some 2.6 rpms, but am likely > to respond more if there are people who show an interest in these > rpms I build. > [DH] +1 for interest. I have begun building mail servers on multiple VPS's using CentOS and I use your RPM's all the time. I'd be very

empty subject, empty body, from: Postfix After-Queue Content Filter...

2009-05-18 Thread Robert Lopez
A new email gateway I am building is sending email with empty subject, empty body, and the internal from starts with "Postfix After-Queue Content Filter:. It is possible an external filter is the culprit, but it appears to me as if postfix is actually stripping the missing information, due to some

RE: Postfix-2.6.0 RPM

2009-05-18 Thread Voytek Eymont
On Tue, May 19, 2009 6:41 am, Dan Horne wrote: >> >> I'll see if I can make some time to build some 2.6 rpms, but am likely >> to respond more if there are people who show an interest in these rpms I >> build. >> > [DH] +1 for interest. I have begun building mail servers on multiple > VPS's usin

Re: empty subject, empty body, from: Postfix After-Queue Content Filter...

2009-05-18 Thread Wietse Venema
Robert Lopez: > A new email gateway I am building is sending email with empty subject, empty > body, > and the internal from starts with "Postfix After-Queue Content Filter:. You need to undo your changes one by one until you find the one that causes the problem. Wietse

Simplifying repetition of reject, warn or OK checks with same reasons

2009-05-18 Thread Jon
Hello list, When building out the various checks available to postfix, is there a mechanism for doing a REJECT, WARN or OK plus the reason, en mass, without pasting the same text a lot? For example... bad.guy01.com REJECT 550 Reason1 bad.guy02.com REJECT 550 Reason1 . . . bad.guy50.com REJECT

Re: Simplifying repetition of reject, warn or OK checks with same reasons

2009-05-18 Thread Victor Duchovni
On Mon, May 18, 2009 at 08:52:45PM -0400, Jon wrote: > Hello list, > > When building out the various checks available to postfix, is there a > mechanism for doing a REJECT, WARN or OK plus the reason, en mass, without > pasting the same text a lot? For example... > > bad.guy01.com REJECT 550 Rea

Re: Sent Mail Shows FQDN in Email Address

2009-05-18 Thread mouss
Carlos Williams a écrit : > I am using a new Postfix server and when I send an email to anyone, when you say "I send", what do you exactly do? what software do you use? what actions do you take?

Re: Sent Mail Shows FQDN in Email Address

2009-05-18 Thread LuKreme
On 17-May-2009, at 19:44, Carlos Williams wrote: u...@mail.myserver.com myserver.com is a real domain name. Is it YOUR domain name? Somehow I doubt it. Use example.com, example.net, example.org, etc. Or use an impossible name like mydomain.tld, foobar.tld, &c. when obfuscating. Oh, and

Re: Sent Mail Shows FQDN in Email Address

2009-05-18 Thread Scott Haneda
On May 18, 2009, at 8:08 PM, LuKreme wrote: On 17-May-2009, at 19:44, Carlos Williams wrote: u...@mail.myserver.com myserver.com is a real domain name. Is it YOUR domain name? Somehow I doubt it. Thank you for pointing this out. I feel bad for anyone at domain, company, foo, bar, foob

Re: Sent Mail Shows FQDN in Email Address

2009-05-18 Thread LuKreme
On 18-May-2009, at 21:47, Scott Haneda wrote: Glad you brought this up, often times I am using example.com and then ns.example.com and imap.example.com and want to refer to something else outside of example.com. At least example.net and example.org in addition to example.com, so you can e

[maybe OT] topology question

2009-05-18 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A customer asked me to think about a new email topology for a company with four offices, each on one of the four corners of this planet and a lot of people moving from one office to the other. For various reasons I cannot put the mail server on as hos

Re: Sent Mail Shows FQDN in Email Address

2009-05-18 Thread Victor Duchovni
On Mon, May 18, 2009 at 08:47:09PM -0700, Scott Haneda wrote: >> Use example.com, example.net, example.org, etc. Or use an impossible name >> like mydomain.tld, foobar.tld, &c. when obfuscating. Oh, and obfuscating >> on this list is generally a waste of time and makes it harder for people >> t

Re: Sent Mail Shows FQDN in Email Address

2009-05-18 Thread Scott Haneda
On May 18, 2009, at 9:15 PM, LuKreme wrote: On 18-May-2009, at 21:47, Scott Haneda wrote: Glad you brought this up, often times I am using example.com and then ns.example.com and imap.example.com and want to refer to something else outside of example.com. At least example.net and example.o

Re: [maybe OT] topology question

2009-05-18 Thread Victor Duchovni
On Tue, May 19, 2009 at 06:16:01AM +0200, Luigi Rosa wrote: > My idea is to declare the MX of the organization the headquarter of the > organization Not unusual. > and route via Internet the email of other local offices to local > servers. Likewise. > The only problem is that I have to manage

Re: Postfix-2.6.0 RPM

2009-05-18 Thread M. Fioretti
On Mon, May 18, 2009 14:48:12 PM -0400, Victor Duchovni wrote: > I, for one, would urge the more sophisticated users, who need the > latest release, to learn how to use/build source RPMs, and build the > official Postfix release via source RPM that resembles the vendor's > support source RPM, but

Re: Postfix-2.6.0 RPM

2009-05-18 Thread M. Fioretti
On Mon, May 18, 2009 20:38:54 PM +0200, Simon J Mudd wrote: > I'll see if I can make some time to build some 2.6 rpms, but am > likely to respond more if there are people who show an interest in > these rpms I build. +1 for me, thanks if you find the time! Marco -- Your own civil rights and th