Re: OT: Multiple Queues

2009-05-22 Thread Steve
On Fri, 2009-05-22 at 15:07 -0700, brian moore wrote: > On Fri, 22 May 2009 14:37:48 -0400 > Victor Duchovni wrote: > > > Connection rate (rather than concurrency) limits are rather risky, > > a site with legitimate mail to send, and a lot of senders, may not be > > able to deliver any mail to yo

Re: outbound source ip adress

2009-05-22 Thread gohsteye
n elephant in a tutu. > Contact MSN to get off their blacklist. > > __ Information from ESET Smart Security, version of virus signature database 4096 (20090522) __ > > The message was checked by ESET Smart Security. > > http://www.eset.com > >

Re: OT: Multiple Queues

2009-05-22 Thread Steve
On Fri, 2009-05-22 at 14:37 -0400, Victor Duchovni wrote: > Connection rate (rather than concurrency) limits are rather risky, > a site with legitimate mail to send, and a lot of senders, may not be > able to deliver any mail to you in the face of a load-spike. I can see your point, but any load s

Re: /etc/mailname

2009-05-22 Thread Barney Desmond
2009/5/23 Sébastien WENSKE : > What should contain this file, local or external fqdn ? As stated, it's a Debian customisation. For the record: man 5 mailname: "The file contains only one line describing the fully qualified domain name that the program wishing to get the mail name should use" As

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread Barney Desmond
2009/5/23 John Peach : > Looks worse than that: > > host -t mx server.us > server.us mail is handled by 10 cm1.dnsmadeeasy.com. > > So they're not the primary MX and they're bouncing it. I'm happy to be wrong, but I suspect it's more likely that "server.us" was intended by the OP to obscur

Re: Compromised SMTP account

2009-05-22 Thread Scott Haneda
On May 22, 2009, at 5:28 PM, Sahil Tandon wrote: On Fri, 22 May 2009, Scott Haneda wrote: After inspection, I would want to re-queue the good ones, and leave the bad ones behind. Any pointers would be appreciated. http://www.postfix.org/QSHAPE_README.html http://www.postfix.org/postcat.1.ht

Re: Compromised SMTP account

2009-05-22 Thread Sahil Tandon
On Fri, 22 May 2009, Scott Haneda wrote: > The Postfix mailqueue seems a little different. Items are not all in > one directory, Mails are not monolithic files, but separate files. > > What is the suggested way of dealing with this, when there are backed up > mails in a queue, and I need to ge

Compromised SMTP account

2009-05-22 Thread Scott Haneda
I have been reading up on how SMTP works in postfix, especially the queue. As I am just about to toggle the switch over from a different SMTP/POP/IMAP server to Postfix/Dovecot, I want to make sure I know how to deal with problems that come up. Yesterday, a user's account was phsished on m

Re: /etc/mailname

2009-05-22 Thread Wietse Venema
S?bastien WENSKE: > Hi all, > > What should contain this file, local or external fqdn ? This is a Debian feature. It's not part of Postfix. Wietse

Re: How to safely re-inject an archived queue file?

2009-05-22 Thread Wietse Venema
Curtis: > > This is safe only when the maildrop queue is "stopped", that is, > > > > 1) No submissions with the Postfix sendmail command while these > >files are in the maildrop directory, otherwise mail will be > >lost. > > > > 2) No pickup daemon and no postsuper command, otherwise pick

Re: /etc/mailname

2009-05-22 Thread Sahil Tandon
On Sat, 23 May 2009, Sébastien WENSKE wrote: > What should contain this file, local or external fqdn ? Probably external, but this is not a Postfix question. Ask on a Debian mailing list. -- Sahil Tandon

Re: how to bypass milters, whitelist hosts

2009-05-22 Thread Sahil Tandon
On Fri, 22 May 2009, martin f krafft wrote: > also sprach Wietse Venema [2009.05.22.1826 +0200]: > > > how can I bypass smtpd_milters for certain hosts? > > > > Not. This question is related to the following question: how > > can I change the Milter depending on the client host. > > Why are *_

/etc/mailname

2009-05-22 Thread Sébastien WENSKE
Hi all, What should contain this file, local or external fqdn ? Thanks, Sébastien

Re: OT: Multiple Queues

2009-05-22 Thread brian moore
On Fri, 22 May 2009 14:37:48 -0400 Victor Duchovni wrote: > Connection rate (rather than concurrency) limits are rather risky, > a site with legitimate mail to send, and a lot of senders, may not be > able to deliver any mail to you in the face of a load-spike. Or a site running qmail, sending t

Re: How to safely re-inject an archived queue file?

2009-05-22 Thread Victor Duchovni
On Fri, May 22, 2009 at 03:51:49PM -0600, Curtis wrote: > > Curtis: > > > We're not manually creating them, these are archived queue files that > > were > > > pulled from the hold queue, and then later released by being dropped > > into > > > the maildrop queue (using the technique discussed earli

RE: How to safely re-inject an archived queue file?

2009-05-22 Thread Curtis
> Curtis: > > We're not manually creating them, these are archived queue files that > were > > pulled from the hold queue, and then later released by being dropped > into > > the maildrop queue (using the technique discussed earlier in this > thread). > > This is safe only when the maildrop queue

Re: How to safely re-inject an archived queue file?

2009-05-22 Thread Wietse Venema
Curtis: > We're not manually creating them, these are archived queue files that were > pulled from the hold queue, and then later released by being dropped into > the maildrop queue (using the technique discussed earlier in this thread). This is safe only when the maildrop queue is "stopped", that

RE: How to safely re-inject an archived queue file?

2009-05-22 Thread Curtis
> Yes, "postfix reload" runs "postsuper", which will fix-up the names of > files. To avoid this, you'd have to do that yourself, before marking > the > file mode 0700. The first 5 bytes are a microsecond timer measured just > after the created file's inode is obtained via lstat(2) and before it > i

Re: How to safely re-inject an archived queue file?

2009-05-22 Thread Wietse Venema
Curtis: > On Thu, Feb 12, 2009 at 8:13 AM, Victor Duchovni > wrote: > > > On Thu, Feb 12, 2009 at 06:51:20AM -0700, Curtis wrote: > > > > > >> So, on a box that I know has nothing else feeding into the maildrop > >> queue, it would be safe to skip the step of dropping it in the idle > >> queue

Re: delivering mail to one host to another port

2009-05-22 Thread mouss
martin f krafft a écrit : > also sprach Wietse Venema [2009.05.22.2010 +0200]: Is it possiblew to instruct postfix to always deliver to a different port when it tries to connect to a specific machine? >>> iptables is not an option, since it cannot (yet) translate >>> destination sockets

Re: How to safely re-inject an archived queue file?

2009-05-22 Thread Victor Duchovni
On Thu, May 21, 2009 at 07:48:43PM -0600, Curtis wrote: > It would appear that we're seeing a side effect of dropping files into the > maildrop queue like this. if there are messages in the maildrop directory > when a "postfix reload" is run, we're seeing duplicate messages. Yes, "postfix reload"

Re: time stamp changes in the queue'

2009-05-22 Thread Ralf Hildebrandt
* tom lee : > my procmail setting is very simple: > > VERBOSE=yes > LOGFILE=/var/log/procmail.log > USERINBOX="$HOME/Maildir/" > :0 > $USERINBOX > > > so, if $USERINBOX is not writable, procmail delivered the mail to > /var/mail, not the postfix. > (I may change USERINBOX to the external storag

Re: time stamp changes in the queue'

2009-05-22 Thread tom lee
On Fri, May 22, 2009 at 12:36 PM, Victor Duchovni wrote: > On Fri, May 22, 2009 at 12:33:22PM -0700, tom lee wrote: > >> > >> > Please show actual evidence that mail is delivered to the mailspool >> > directory while home_mailbox is set in main.cf: >> > >> > 1) Command output from "postconf -n hom

Re: time stamp changes in the queue'

2009-05-22 Thread Wietse Venema
tom lee: > procmail: Error while writing to "/Users/username/Maildir/" The error message says PROCMAIL. This is the POSTFIX mailing list. Wietse

Re: time stamp changes in the queue'

2009-05-22 Thread Victor Duchovni
On Fri, May 22, 2009 at 12:33:22PM -0700, tom lee wrote: > > > > Please show actual evidence that mail is delivered to the mailspool > > directory while home_mailbox is set in main.cf: > > > > 1) Command output from "postconf -n home_mailbox". > > $ postconf -n home_mailbox > home_mailbox = Maild

Re: adding secondary MX

2009-05-22 Thread Aaron Wolfe
On Fri, May 22, 2009 at 3:19 PM, Rick wrote: > > > On Tue, May 19, 2009 at 1:58 PM, Noel Jones wrote: >> >>> Won't the mail just be forwarded to the primary mail server, who can >>> reject it there? >> >> ... which then causes your server to generate a bounce to the (often >> forged) envelope sen

Re: time stamp changes in the queue'

2009-05-22 Thread tom lee
> > Please show actual evidence that mail is delivered to the mailspool > directory while home_mailbox is set in main.cf: > > 1) Command output from "postconf -n home_mailbox". $ postconf -n home_mailbox home_mailbox = Maildir/ > 2) Logging that shows delivery to system mailbox. procmail: Error

Re: adding secondary MX

2009-05-22 Thread Rick
On Tue, May 19, 2009 at 1:58 PM, Noel Jones wrote: > > >> >> Won't the mail just be forwarded to the primary mail server, who can >> reject it there? >> > > ... which then causes your server to generate a bounce to the (often > forged) envelope sender. Your queue will be clogged with undelivera

Re: delivering mail to one host to another port

2009-05-22 Thread Kenneth Marshall
On Fri, May 22, 2009 at 08:41:45PM +0200, martin f krafft wrote: > also sprach Wietse Venema [2009.05.22.2010 +0200]: > > > > Is it possiblew to instruct postfix to always deliver to a different > > > > port when it tries to connect to a specific machine? > > > > > > iptables is not an option, si

Re: Disable content_filter

2009-05-22 Thread mouss
Simon Schelkshorn a écrit : >> what exactly doesn't work? what do you mean by "the local smtp-port"? if >> you mean port 25 on localhost, then you need to add a listener >> >> localhost:25 -o content_filter= > > Here is part of my master.cf > > smtp inet n - n -

Re: time stamp changes in the queue'

2009-05-22 Thread Wietse Venema
tom lee: > >> > >> One more thing, I have MAILDIR set to an external storage server which > > > > Postfix has no MAILDIR setting. > > > > sorry, I am talking about home_mailbox, it looks that if home_mailbox > not available, the mail will go to the default mail_spool_directory. Please show actual

Re: delivering mail to one host to another port

2009-05-22 Thread martin f krafft
also sprach Wietse Venema [2009.05.22.2010 +0200]: > > > Is it possiblew to instruct postfix to always deliver to a different > > > port when it tries to connect to a specific machine? > > > > iptables is not an option, since it cannot (yet) translate > > destination sockets for IPv6. Sorry, shou

Re: OT: Multiple Queues

2009-05-22 Thread Victor Duchovni
On Fri, May 22, 2009 at 03:23:07PM +0100, Steve wrote: > The appliance I took apart had a nice rate control feature. The crux of > it was the ability to set connection limit on a per IP basis in 30 > minutes. You could *NOT* change this time window, but could change the > limit thus; > > 50 conne

Re: Disable content_filter

2009-05-22 Thread Simon Schelkshorn
> what exactly doesn't work? what do you mean by "the local smtp-port"? if > you mean port 25 on localhost, then you need to add a listener > > localhost:25 -o content_filter= Here is part of my master.cf smtp inet n - n - 75 smtpd -o content_filter=postf

Re: time stamp changes in the queue'

2009-05-22 Thread tom lee
>> >> One more thing, I have MAILDIR set to an external storage server which > > Postfix has no MAILDIR setting. > sorry, I am talking about home_mailbox, it looks that if home_mailbox not available, the mail will go to the default mail_spool_directory. I tried to make mail_spool_directory (/var/m

Re: delivering mail to one host to another port

2009-05-22 Thread Wietse Venema
martin f krafft: > also sprach martin f krafft [2009.05.22.1919 +0200]: > > Is it possiblew to instruct postfix to always deliver to a different > > port when it tries to connect to a specific machine? > > iptables is not an option, since it cannot (yet) translate > destination sockets for IPv6.

check_sender_access

2009-05-22 Thread Ken
Magnus, I really appreciate your input. Here is what I have done. I moved reject_unauth_destination above check_sender_access, so mail is only relayed for virtual_alias_domains unless sender is connecting from $mynetworks. I wish for senders at example.net to be exempt from any further tests in smt

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread John Peach
On Fri, 22 May 2009 19:23:33 +0200 mouss wrote: > Carlos Williams a __crit : > > [snip] > > Content-filter at server.us wrote: > > > > A message from to: -> jthras...@server.us > > was considered unsolicited bulk e-mail (UBE). Our internal reference > > code for your message is 16433-01/qNJ

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread mouss
Carlos Williams a écrit : > [snip] > Content-filter at server.us wrote: > > A message from to: -> jthras...@server.us > was considered unsolicited bulk e-mail (UBE). Our internal reference > code for your message is 16433-01/qNJBp5TNkzDa The message carried > your return address, so it was ei

Re: delivering mail to one host to another port

2009-05-22 Thread martin f krafft
also sprach martin f krafft [2009.05.22.1919 +0200]: > Is it possiblew to instruct postfix to always deliver to a different > port when it tries to connect to a specific machine? iptables is not an option, since it cannot (yet) translate destination sockets for IPv6. Sorry, should have mentioned.

delivering mail to one host to another port

2009-05-22 Thread martin f krafft
I need to deliver mail to the primary MX of several hundred domains via a different port. Unfortunately, putting the MX's address or IP into the transport map does not seem to work. I'd prefer not to maintain the list of domains in the transport table as well, so I am wondering: Is it possiblew to

Re: how to bypass milters, whitelist hosts

2009-05-22 Thread martin f krafft
also sprach Wietse Venema [2009.05.22.1826 +0200]: > > how can I bypass smtpd_milters for certain hosts? > > Not. This question is related to the following question: how > can I change the Milter depending on the client host. Right, but I cannot really find anything on that either. Why are *_c

Re: Allow Relaying, but not be an open-relay

2009-05-22 Thread Terry Carmen
> > Well, I have a ColdFusion based website that I have a few forms that > users submit to sign up for events. So they dont log in or anything. I > specified localhost in and it works for domains on my system, > but when I send the user a copy of what they submitted they dont get it. > > My main.c

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread Barney Desmond
2009/5/23 Carlos Williams : > Thanks for all the info and I guess I am still worried because the > user who the logs indicate is sending this message is 100% not sending > this. She has been on vacation for the past 2 weeks as no webmail > activity either. I used "postcat -q" to check the message I

Re: how to bypass milters, whitelist hosts

2009-05-22 Thread Wietse Venema
martin f krafft: > Hi, > > how can I bypass smtpd_milters for certain hosts? Not. This question is related to the following question: how can I change the Milter depending on the client host. Wietse

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread Wietse Venema
Carlos Williams: > > 206.212.244.102 does not accept SMTP connections. Either the host > > is firewalled, or the host is down, or it is not reachable for > > other reasons. > > > > % telnet 206.212.244.102 smtp > > Trying 206.212.244.102... > > telnet: connect to address 206.212.244.102: Operation

RE: RESOLVED RE: Need To Reject Inbound From Addresses with My Own Domain/s

2009-05-22 Thread wiskbroom
> From: mich...@orlitzky.com > To: postfix-users@postfix.org > Subject: Re: RESOLVED RE: Need To Reject Inbound From Addresses with My Own > Domain/s > > wiskbr...@hotmail.com wrote: >> >> My problem was that my main.cf, although stating the aliases map with: >> >> alias_database = dbm:/etc/post

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread Carlos Williams
Thanks for all the info and I guess I am still worried because the user who the logs indicate is sending this message is 100% not sending this. She has been on vacation for the past 2 weeks as no webmail activity either. I used "postcat -q" to check the message ID and the output is listed below: O

Re: virtual alias mapping does not match postmap query result

2009-05-22 Thread Ken
Hi Melvyn, That makes sense but after reversing the two regexp, $ postmap -q f...@mydomain.com regexp:/etc/postfix/virtual b...@myotherdomain.com (should be b...@somewhere-else.tld) Which matches the actual rewriting that occurs if a message is sent to f...@mydomain.com. At least postmap and post

Re: OT: Multiple Queues

2009-05-22 Thread d . hill
Quoting Steve : On Fri, 2009-05-22 at 18:06 +1000, Barney Desmond wrote: 2009/5/22 Ralf Hildebrandt : >> 2. Rate/Anti DNS control >> a. If IP X is seen more than 50 times in 30 minutes block it. > > Postfix can do that using anvil I'd just like to add to that; the answer here on the list

Re: OT: Multiple Queues

2009-05-22 Thread Steve
On Fri, 2009-05-22 at 18:06 +1000, Barney Desmond wrote: > 2009/5/22 Ralf Hildebrandt : > >> 2. Rate/Anti DNS control > >> a. If IP X is seen more than 50 times in 30 minutes block it. > > > > Postfix can do that using anvil > > I'd just like to add to that; the answer here on the list is al

how to bypass milters, whitelist hosts

2009-05-22 Thread martin f krafft
Hi, how can I bypass smtpd_milters for certain hosts? I have asked a related question previously [0], and the only solution seemed to be to redirect those hosts to a different smtpd instance, but unfortunately, Linux cannot redirect IPv6 connections yet (TPROXY is in preparation). 0. http://www.

Re: spawn/pipe on every delivery

2009-05-22 Thread Wietse Venema
rhn: > Hi > I have a question regarding launching external programs. > What I want to do is to have an external program receive a copy of every > email, or at least the headers of it - I need it for a new mail > notification feature to my small mail server. Why do you need to send a copy of every

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread mouss
Carlos Williams a écrit : > On Thu, May 21, 2009 at 8:20 PM, Sahil Tandon wrote: >> No need to be alarmist; search the logs for further enlightenment. > > I checked the logs and found the following when I search for the message ID: > > May 21 16:48:04 mail postfix/smtpd[22513]: 502E97782FC: > cl

Re: outbound source ip adress

2009-05-22 Thread Ralf Hildebrandt
* gohst...@bc.iij4u.or.jp : > Hi! > Thanks reply. > > After all may not you do it when you do not install postfix in every > each IP address? I beg your pardon? Either do it the way I outlined or it won't work :) -- Ralf Hildebrandt Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)

Re: spawn/pipe on every delivery

2009-05-22 Thread mouss
rhn a écrit : > Hi > I have a question regarding launching external programs. > What I want to do is to have an external program receive a copy of every > email, or at least the headers of it - I need it for a new mail > notification feature to my small mail server. > > I know so far that I need t

Re: outbound source ip adress

2009-05-22 Thread gohsteye
etrieb und Wartung Tel. +49 (0)30-450 570-155 > http://www.computerbeschimpfung.de > Ich habe manchmal den Eindruck, dass ein Telefon wesentlich komplizierter > zu bedienen ist als beispielsweise der ed(1). Vergleich doch einfach mal > "man ed" mit der Gebrauc

Re: Impossible to send mail using SSL for SMTP connection.

2009-05-22 Thread mouss
Sthu Pous a écrit : > Good day. > > I have installed a new postfix server w/ virtual users, mysql > accounts and courier. All seems works fine except that I can not send > mail using secure connection. If connect to port 25 - it connects and > send the mail, but if I try to do so checking in my cl

Re: Allow Relaying, but not be an open-relay

2009-05-22 Thread mouss
Jason Todd Slack-Moehrle a écrit : > Hi Terry, > >>> My main.cf says: >>> mynetworks = 172.16.254.0/28 >>> >>> That address is my apartment. I am hosting this at mosso so I have one >>> static from them of 67.23.34.37. Mail and CF run on this same IP. >> >> It looks like the mail isn't going out b

Re: Fw: Not able to add disclaimer

2009-05-22 Thread mouss
Bijayant Kumar a écrit : > --- On Thu, 21/5/09, mouss wrote: > >> From: mouss >> Subject: Re: Fw: Not able to add disclaimer >> To: "postfix" >> Date: Thursday, 21 May, 2009, 9:36 PM >> Bijayant Kumar a écrit : >>> Some body please help me, its very urgent. >>> >> if you use amavisd-new, it alr

Re: outbound source ip adress

2009-05-22 Thread Ralf Hildebrandt
* gohst...@bc.iij4u.or.jp : > Hi! > > I have '8 global IP' and '8 domains'. > I assign all domains / IP addresses to one server > (I use the IP alias/OS:CentOS5.3/Postfix:Ver2.6.1). > > Postfix refer to the e-mail address (a domain) of the origin of dispatch > and want to set up the connection o

outbound source ip adress

2009-05-22 Thread gohsteye
Hi! I have '8 global IP' and '8 domains'. I assign all domains / IP addresses to one server (I use the IP alias/OS:CentOS5.3/Postfix:Ver2.6.1). Postfix refer to the e-mail address (a domain) of the origin of dispatch and want to set up the connection of the outward arrow every 1 domain w ith 1

Re: How to whilelist a host, for which name check fails?

2009-05-22 Thread Sahil Tandon
On Fri, 22 May 2009, Sthu Pous wrote: > I try to whitelist a host for which it is impossible to check its host > name - just a bad setup host, yet I know the organization - it is not a > spammers' host or whatever, therefore their mail is important for us. > > For now amavis lets not to get the m

spawn/pipe on every delivery

2009-05-22 Thread rhn
Hi I have a question regarding launching external programs. What I want to do is to have an external program receive a copy of every email, or at least the headers of it - I need it for a new mail notification feature to my small mail server. I know so far that I need to edit master.cf to include

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread Wietse Venema
Carlos Williams: > status=deferred (connect to > returnmail35.gowenandco.com[206.212.244.102]: Connection timed out) 206.212.244.102 does not accept SMTP connections. Either the host is firewalled, or the host is down, or it is not reachable for other reasons. % telnet 206.212.244.102 smtp Trying

Re: virtual alias mapping does not match postmap query result

2009-05-22 Thread Melvyn Sopacua
On Friday 22 May 2009 01:10:21 Ken wrote: > And, how can I accomplish the catch-all rewrite if this is the expected >.: postfix/virtual >/^foo@/ b...@somewhere-else.tld >/^([...@]+)@/ $...@myotherdomain.com Reverse them. It has the intended effect, but with a different logic: "R

Re: Consistent Entry Stuck in Queue

2009-05-22 Thread Melvyn Sopacua
On Friday 22 May 2009 02:33:48 Carlos Williams wrote: > On Thu, May 21, 2009 at 8:20 PM, Sahil Tandon wrote: > > No need to be alarmist; search the logs for further enlightenment. > > I checked the logs and found the following when I search for the message > ID: > > May 21 16:48:04 mail postfix/sm

Re: delivery notification

2009-05-22 Thread Melvyn Sopacua
On Friday 22 May 2009 08:50:28 Dr.Pesko wrote: > Melvyn Sopacua wrote: > > On Wednesday 20 May 2009 21:14:39 Dr.Pesko wrote: > >> On 5/20/2009 1:03 AM, mouss wrote: > >>> Dr.Pesko a écrit : > Hello everyone, > > can postfix automatically create delivery notification info for every >

How to whilelist a host, for which name check fails?

2009-05-22 Thread Sthu Pous
Good day. I try to whitelist a host for which it is impossible to check its host name - just a bad setup host, yet I know the organization - it is not a spammers' host or whatever, therefore their mail is important for us. For now amavis lets not to get the mail and I want to whitelist it. What

Re: OT: Multiple Queues

2009-05-22 Thread Barney Desmond
2009/5/22 Ralf Hildebrandt : >> 2. Rate/Anti DNS control >>       a. If IP X is seen more than 50 times in 30 minutes block it. > > Postfix can do that using anvil I'd just like to add to that; the answer here on the list is almost always, "ANVIL IS NOT FOR DOING THAT" (whatever you think you can

Impossible to send mail using SSL for SMTP connection.

2009-05-22 Thread Sthu Pous
Good day. I have installed a new postfix server w/ virtual users, mysql accounts and courier. All seems works fine except that I can not send mail using secure connection. If connect to port 25 - it connects and send the mail, but if I try to do so checking in my claws-mail client "Use SSL for SM