sender verification

2009-07-08 Thread K bharathan
is it effective if i use sender verification; i understand there is a risk of getting blacklisted the mail server that's doing the SAV; what could be the guidelines for putting this in postfix guidance appreciated

Re: Open Relay (???)

2009-07-08 Thread Ralf Hildebrandt
* Márcio Luciano Donada mdon...@auroraalimentos.com.br: command_time_limit = 1h Why change this? inet_protocols = all Default, why set this explicitly? mydomain = domain.com.br myhostname = mx.domain.com.br Setting myhostname to mx.domain.com.br implies mydomain = domain.com.br

SMTP connectivity problem

2009-07-08 Thread New Old Stk
For some unknown reason my mail client cannot connect to newly built FreeBSD mail server to send emails - connection refused. Originally I was intending to build secure connection using SASL2 and TLS/SSL but like I said I experience difficulties connecting to SMTP server. My observations: 1.

Re: sender verification

2009-07-08 Thread Charles Marcus
On 7/8/2009, K bharathan (kbhara...@gmail.com) wrote: is it effective if i use sender verification; i understand there is a risk of getting blacklisted the mail server that's doing the SAV; what could be the guidelines for putting this in postfix guidance appreciated Only use SAV against

Re: sender verification

2009-07-08 Thread Magnus Bäck
On Wed, July 8, 2009 8:57 am, K bharathan said: is it effective if i use sender verification; i understand there is a risk of getting blacklisted the mail server that's doing the SAV; what could be the guidelines for putting this in postfix guidance appreciated SAV is not recommended for

Filtering emails on server

2009-07-08 Thread Robert Jakob
Hello, I am listed in several mailing lists and I am looking for a possibility to put emails with some keywords regarding header-fields or content, into specific imap-sub-folders. Has anyone some tutorial or s.th. for this? Example: IMAP-Folder-Structure: - Inbox - Lists |- Postfix |-

Re: Filtering emails on server

2009-07-08 Thread Magnus Bäck
On Wed, July 8, 2009 1:44 pm, Robert Jakob said: I am listed in several mailing lists and I am looking for a possibility to put emails with some keywords regarding header-fields or content, into specific imap-sub-folders. Has anyone some tutorial or s.th. for this? Postfix' own delivery

[zot...@gmail.com: [mail/postfix]: don't build on latest current]

2009-07-08 Thread Sahil Tandon
FYI for FreeBSD users of the latest -CURRENT. I will not be able to test this until later this week / weekend, but just in case someone else runs into a similar problem. I know FreeBSD 8 is not supported as per the current makedefs, but there are still some people building on there. :) At first

Re: SMTP connectivity problem

2009-07-08 Thread Brian Evans - Postfix List
New Old Stk wrote: For some unknown reason my mail client cannot connect to newly built FreeBSD mail server to send emails - connection refused. Originally I was intending to build secure connection using SASL2 and TLS/SSL but like I said I experience difficulties connecting to SMTP server.

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
On Wed, Jul 8, 2009 at 2:11 PM, Brian Evans - Postfix List grkni...@scent-team.com wrote: New Old Stk wrote: For some unknown reason my mail client cannot connect to newly built FreeBSD mail server to send emails - connection refused. Originally I was intending to build secure connection

Re: Filtering emails on server

2009-07-08 Thread Robert Jakob
Thank you, this was the hint I was looking for! Magnus Bäck schrieb: On Wed, July 8, 2009 1:44 pm, Robert Jakob said: I am listed in several mailing lists and I am looking for a possibility to put emails with some keywords regarding header-fields or content, into specific imap-sub-folders.

Re: SMTP connectivity problem

2009-07-08 Thread Brian Evans - Postfix List
New Old Stk wrote: Sorry Brian, i didn't post the full command I was testing the connection with. Yes, it had -starttls among other things and it did work fine. I was able to connect, AUTH PLAIN generated string (below) and get 235 2.0.0 Authentication successful: #perl

Re: Some early postscreen results

2009-07-08 Thread LuKreme
On 7-Jul-2009, at 09:23, Wietse Venema wrote: You can find an overview of postscreen, and some pictures of early results, at http://www.porcupine.org/postfix-mirror/wip.html (and soon on Postfix documentation mirror websites). I've gone through the slides and the Prototype postscreen

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
I tried both Thunderbird and Outlook 2007. SMTP port in both was set to 25. I experimented with all combinations of SSL/TLS settings available in TB and Outlook as well. Thunderbird though displayed the following message (TLS/25): Sending of message failed. An error occured sending mail: Unable

Re: SMTP connectivity problem

2009-07-08 Thread Noel Jones
New Old Stk wrote: I tried both Thunderbird and Outlook 2007. SMTP port in both was set to 25. I experimented with all combinations of SSL/TLS settings available in TB and Outlook as well. Thunderbird though displayed the following message (TLS/25): Sending of message failed. An error

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
Noel, connecting to server remotely didn't work. I wonder what's the reason as no ports seem to be blocked. g2$ openssl s_client -starttls smtp -crlf -connect one.mailexpeditor.com:25 CONNECTED(0003) 157:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:601: I

Rerouting mail in queue to another SMTP

2009-07-08 Thread Frank DeChellis
Hi there, New to postfix and the list. We have a new postfix install (v 2.5.6) that we are trying to get going. My problem is ... I setup that server to be our gateway in our DNS so the address has propagated when I needed it. But I left it on with the postfix running for a few hours. So now

Re: SMTP connectivity problem

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 04:25:43PM +0100, New Old Stk wrote: Noel, connecting to server remotely didn't work. I wonder what's the reason as no ports seem to be blocked. g2$ openssl s_client -starttls smtp -crlf -connect one.mailexpeditor.com:25 CONNECTED(0003) 157:error:140770FC:SSL

Re: Rerouting mail in queue to another SMTP

2009-07-08 Thread Barney Desmond
2009/7/9 Frank DeChellis fra...@iaw.on.ca: We have a new postfix install (v 2.5.6) that we are trying to get going. My problem is ...  I setup that server to be our gateway in our DNS so the address has propagated when I needed it.  But I left it on with the postfix running for a few hours.

Re: Rerouting mail in queue to another SMTP

2009-07-08 Thread Wietse Venema
Frank DeChellis: Hi there, New to postfix and the list. We have a new postfix install (v 2.5.6) that we are trying to get going. My problem is ... I setup that server to be our gateway in our DNS so the address has propagated when I needed it. But I left it on with the postfix

Re: Rerouting mail in queue to another SMTP

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 12:42:33PM -0400, Wietse Venema wrote: # cat /etc/postfix/transport example.com host.example.com Surely: example.com relay:[host.example.com] # postmap hash:/etc/postfix/transport # postconf -e

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
Guys thanks a lot for helping out with my problem. I just tried sending mail from friend's mail server (SBS 2003) and same problem occured. Looks like Cisco box in our office messing up. Appreciate all the input and many many thanks! George On Wed, Jul 8, 2009 at 4:34 PM, Victor Duchovni

Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Ignacio Garcia
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk-email from their web php sites (you know, bulletins and such). My worst nightmare would be having our servers

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread Michael Durket
Thanks to all who replied. I'll be trying out the various ideas. But they all seem awkward. In my MVS days, when we wrote large scale systems like this, we'd keep important statistics in the link pack area, constantly updated, so monitor programs could just map that area and get the data (or

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 10:30:23AM -0700, Michael Durket wrote: Since Postfix knows the queue size, and other relevant statistics, Postfix does not know the size of the deferred, incoming or maildrop queues. This is intentional. -- Viktor. Disclaimer: off-list followups get on-list

Question About Maildir Mailboxes

2009-07-08 Thread Carlos Williams
I am setting up a new server to run Maildir style in-boxes. In my main.cf, I added the following parameter: home_mailbox = Maildir/ The above seems to be working fine in my main.cf. It auto created the directory upon receiving the 1st email but I was also reading I need to add the following

Re: Question About Maildir Mailboxes

2009-07-08 Thread Sahil Tandon
On Jul 8, 2009, at 1:40 PM, Carlos Williams carlosw...@gmail.com wrote: I am setting up a new server to run Maildir style in-boxes. In my main.cf, I added the following parameter: home_mailbox = Maildir/ The above seems to be working fine in my main.cf. It auto created the directory upon

Re: Question About Maildir Mailboxes

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 01:40:58PM -0400, Carlos Williams wrote: I am setting up a new server to run Maildir style in-boxes. In my main.cf, I added the following parameter: home_mailbox = Maildir/ The above seems to be working fine in my main.cf. It auto created the directory upon

Re: Question About Maildir Mailboxes

2009-07-08 Thread Carlos Williams
On Wed, Jul 8, 2009 at 1:48 PM, Victor Duchovnivictor.ducho...@morganstanley.com wrote: This is the default value. You don't need this, unless someone (perhaps an O/S distribution) supplied you with a main.cf file that overrides the default. Hmmm... I am using the Debian provided main.cf when

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread Wietse Venema
Michael Durket: Thanks to all who replied. I'll be trying out the various ideas. But they all seem awkward. In my MVS days, when we wrote large scale systems like this, we'd keep important statistics in the link pack area, constantly updated, so monitor programs could just map that area

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Terry Carmen
Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk-email from their web php sites (you know, bulletins and such). My worst nightmare would be having our servers listed in any RBL list because of this. How

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
Looks like I spoke to early about tricky Cisco router. Just had our modem/router equipment replaced, hoping it would fix the problem but to no avail! I give up. On Wed, Jul 8, 2009 at 6:03 PM, New Old Stk newold...@googlemail.comwrote: Guys thanks a lot for helping out with my problem. I just

Re: SMTP connectivity problem

2009-07-08 Thread donovan jeffrey j
On Jul 8, 2009, at 2:16 PM, New Old Stk wrote: Looks like I spoke to early about tricky Cisco router. Just had our modem/router equipment replaced, hoping it would fix the problem but to no avail! I give up. in the cisco box , did you remove any fixup smtp protocols / ports ? On Wed,

Re: SMTP connectivity problem

2009-07-08 Thread Charles Marcus
On 7/8/2009 2:16 PM, New Old Stk wrote: Looks like I spoke to early about tricky Cisco router. Just had our modem/router equipment replaced, hoping it would fix the problem but to no avail! I give up. Replaced... with another Cisco? If so, try to disable smtp_fixup on it... -- Best

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Leonardo Rodrigues
Terry Carmen escreveu: There are various band-aid approaches, like running the outbound mail through spamassassin and HOLDing the spammy mail, however this may or may not catch what you want, since even SpamAssassin has no idea if the user actually wanted the mail or not. another

Re: Question About Maildir Mailboxes

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 01:54:54PM -0400, Carlos Williams wrote: On Wed, Jul 8, 2009 at 1:48 PM, Victor Duchovnivictor.ducho...@morganstanley.com wrote: This is the default value. You don't need this, unless someone (perhaps an O/S distribution) supplied you with a main.cf file that

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Ignacio Garcia
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Terry Carmen escribió: Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk-email from their web php sites (you know, bulletins and such). My worst nightmare

OT: Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Terry Carmen
Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk-email from their web php sites (you know, bulletins and such). My worst nightmare would be having our servers listed in any RBL list because of this. How

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread LuKreme
On Jul 7, 2009, at 9:15 AM, Michael Durket dur...@highwire.stanford.edu wrote: So what's the best way to quickly (i.e. less than a few seconds) get the current queue count out of Postfix? ls -1 [queue directory] | wc -l ?

Re: Address Extensions

2009-07-08 Thread Daniel L. Miller
Daniel L. Miller wrote: Noel Jones wrote: either way, use smtpd_*_restrictions to restrict access to the recipient. What kind of allow restrictions would make sense as I am looking to receive from a domain I do not control (e.g. Intuit)? Would check_sender_access against the domain be

Re: Recommended way to (quickly) get total mail queue size?

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 12:44:17PM -0600, LuKreme wrote: On Jul 7, 2009, at 9:15 AM, Michael Durket dur...@highwire.stanford.edu wrote: So what's the best way to quickly (i.e. less than a few seconds) get the current queue count out of Postfix? ls -1 [queue directory] | wc -l The Perl

Re: sender verification

2009-07-08 Thread Magnus Bäck
On Wed, July 8, 2009 8:48 pm, K bharathan said: On Wed, Jul 8, 2009 at 1:42 PM, Magnus Bäck mag...@dsek.lth.se wrote: SAV is not recommended for general use with all domains. What problem do you think you would solve with SAV? sorry i posted my reply in some other thread; i read about

Re: Address Extensions

2009-07-08 Thread Daniel L. Miller
Noel Jones wrote: Sahil Tandon wrote: On Tue, 07 Jul 2009, Sahil Tandon wrote: On Tue, 07 Jul 2009, Daniel L. Miller wrote: So...my initial thought was I'd have to create a public Internet name for the fax gateway, and apply some level of security to only accept submissions from Intuit.

Multiple Aliases Files - Same Domain

2009-07-08 Thread wiskbroom
All; My organization has recently acquired a very small company that has and manages their own exchange servers. We would like this company to begin using the same email domain addresses that we use. The only problem is that we are not yet able to capture their aliases into our own aliases

Logging sender recipient pairs

2009-07-08 Thread Chris Turan
Hi All, I'm attempting to come up with a better solution for detecting email customers who attempt to send email campaigns using my mail servers. I'd like to find a way to have postfix log the sender and recipient addresses into a flat file, as well as the message id and timestamp. The

OT - Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Chris Babcock
There are various band-aid approaches, like running the outbound mail through spamassassin and HOLDing the spammy mail, however this may or may not catch what you want, since even SpamAssassin has no idea if the user actually wanted the mail or not. Yes, we already do that, and more.

Re: Multiple Aliases Files - Same Domain

2009-07-08 Thread Victor Duchovni
On Wed, Jul 08, 2009 at 04:04:33PM -0400, wiskbr...@hotmail.com wrote: alias_maps = dbm:/etc/postfix/aliases, dbm:/etc/newcompany/aliases, nis:mail.aliases Are you sure you want a local aliases(5) file and not a virtual(5) aliases file? Generally, and especially for non-system users, the

postfix+mysql one postmaster for all virtual domains?

2009-07-08 Thread Ignacio Garcia
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, we have postfix+mysql with virtual domains. Until now for each virtual domain we have created a postmaster account for each domain (that means customer), and at the end, none of my customers read the mail. I've been trying to find out a way so we

Re: postfix+mysql one postmaster for all virtual domains?

2009-07-08 Thread Martin Strand
You could add another mysql alias map: [main.cf] virtual_alias_maps = proxy:mysql:/path/to/virtual_alias_maps [virtual_alias_maps] query = select 'supportst...@isp.ltd' from your_virtual_domains where '%u' in ('postmaster', 'abuse', 'any-other-local-part') and domain

Re: Address Extensions

2009-07-08 Thread Noel Jones
Daniel L. Miller wrote: Daniel L. Miller wrote: Noel Jones wrote: either way, use smtpd_*_restrictions to restrict access to the recipient. What kind of allow restrictions would make sense as I am looking to receive from a domain I do not control (e.g. Intuit)? Would check_sender_access

Re: Address Extensions

2009-07-08 Thread Noel Jones
Daniel L. Miller wrote: Noel Jones wrote: Sahil Tandon wrote: On Tue, 07 Jul 2009, Sahil Tandon wrote: On Tue, 07 Jul 2009, Daniel L. Miller wrote: So...my initial thought was I'd have to create a public Internet name for the fax gateway, and apply some level of security to only accept

Re: SMTP connectivity problem

2009-07-08 Thread Noel Jones
New Old Stk wrote: Looks like I spoke to early about tricky Cisco router. Just had our modem/router equipment replaced, hoping it would fix the problem but to no avail! I give up. On Wed, Jul 08, 2009 at 04:25:43PM +0100, New Old Stk wrote: Noel, connecting to server

hiding relay client info in headers

2009-07-08 Thread GeoffSweet
Greetings all, we have corporate postfix mail servers that act as our central point for inbound mail as well as acting as smarthosts for outbound for our Exchange servers in various locations. We do this by allowing the exchange servers to relay off the Postfix servers by including them in the

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread Barney Desmond
2009/7/9 Ignacio Garcia i...@oenus.com: can trigger undesired actions. People sometimes have poorly designed web pages with a not-too good php emailing code. Practically guaranteed :) For instance. I'd like to find a way (maybe through some header checks in outgoing email) so if it detects a

Re: Logging sender recipient pairs

2009-07-08 Thread Barney Desmond
2009/7/9 Chris Turan li...@christuran.com: The idea is to count the number of envelope recipients to determine who's sending to lots of people.  If someone goes over 500 per day, flag them as suspicious and alert me. Postfix already logs part of this in syslog but the recipient list is

Re: SMTP connectivity problem

2009-07-08 Thread New Old Stk
Noel Server is real. It does look like problem at my end however I have replaced modem+router (DrayTek + Cisco ASA) with generic Zoom ADSL modem and still cannot connect. I will keep investigating the issue so thank you all for input. George On Wed, Jul 8, 2009 at 11:14 PM, Noel Jones

Re: SMTP connectivity problem

2009-07-08 Thread Noel Jones
OK, I give on the top-posting. Turn off your antivirus for testing, or try a different computer. -- Noel Jones New Old Stk wrote: Noel Server is real. It does look like problem at my end however I have replaced modem+router (DrayTek + Cisco ASA) with generic Zoom ADSL modem and still

Re: Logging sender recipient pairs

2009-07-08 Thread Sahil Tandon
On Wed, 08 Jul 2009, Chris Turan wrote: The idea is to count the number of envelope recipients to determine who's sending to lots of people. If someone goes over 500 per day, flag them as suspicious and alert me. It might be better to define a someone as an IP rather than an envelope

Re: Logging sender recipient pairs

2009-07-08 Thread Magnus Bäck
On Thursday, July 09, 2009 at 03:44 CEST, Sahil Tandon sa...@tandon.net wrote: [...] You might be able to use the fact that qmgr(8) logs the original recipient count. Example: postfix/qmgr[54662]: 98EF25C51: from=f...@bar.org, size=717, nrcpt=5 Take care to avoid double counting in

Re: postfix+mysql one postmaster for all virtual domains?

2009-07-08 Thread Magnus Bäck
On Wednesday, July 08, 2009 at 23:37 CEST, Ignacio Garcia i...@oenus.com wrote: Hi, we have postfix+mysql with virtual domains. Until now for each virtual domain we have created a postmaster account for each domain (that means customer), and at the end, none of my customers read the

Re: Logging sender recipient pairs

2009-07-08 Thread Victor Duchovni
On Thu, Jul 09, 2009 at 06:23:09AM +0200, Magnus Bäck wrote: On Thursday, July 09, 2009 at 03:44 CEST, Sahil Tandon sa...@tandon.net wrote: [...] You might be able to use the fact that qmgr(8) logs the original recipient count. Example: postfix/qmgr[54662]: 98EF25C51:

Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-08 Thread ram
On Wed, 2009-07-08 at 19:10 +0200, Ignacio Garcia wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk-email from their web php sites (you know,