Re: Strategies to Prevent Abuse in Bulk-Mailing?

2009-07-09 Thread Scott Haneda
On Jul 8, 2009, at 10:00 PM, ram wrote: On Wed, 2009-07-08 at 19:10 +0200, Ignacio Garcia wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi guys. I've been googling around looking for info on this without much sucess. Here we are: Some of my customers insist on sending bulk- email

fatal: pipe_command: execvp

2009-07-09 Thread Wim Groen
Hi, I've got a postfix server with spamassassin running. If one of my customers is on vacation he can turn on auto reply. For this I created a script /usr/local/bin/responder. It always worked but the last days it is stopped. I get the following error in the maillog: status=deferred (temporary

TLS handshake failed

2009-07-09 Thread Rocco Scappatura
Hello, a user of my mail gateway has got the following messages while have tried to send a message to recipie...@recipdomain.tld,recipie...@recipdomain.tld: - Original Message - From: Mail Delivery Subsystem mailer-dae...@recipserver.tld To: sen...@senddomain.tld Sent: Tuesday, July 07,

Re: TLS handshake failed

2009-07-09 Thread Charles Marcus
On 7/9/2009, Rocco Scappatura (rocco.scappat...@infracom.it) wrote: # postconf -d | grep tls ? This shows defaults... please use postconf -n output - and no need to filter it, it won't (shouldn't) be all that long... -- Best regards, Charles

Re: fatal: pipe_command: execvp

2009-07-09 Thread Wietse Venema
Wim Groen: Hi, I've got a postfix server with spamassassin running. If one of my customers is on vacation he can turn on auto reply. For this I created a script /usr/local/bin/responder. It always worked but the last days it is stopped. I get the following error in the maillog:

Re: TLS handshake failed

2009-07-09 Thread Wietse Venema
Rocco Scappatura: # postconf -d | grep tls What web page is telling you to use postconf -d for trouble shooting? It should say postconf -n instead. Wietse

RE: TLS handshake failed

2009-07-09 Thread Rocco Scappatura
Thanks, -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Charles Marcus Sent: Thursday, July 09, 2009 12:43 PM To: postfix-users@postfix.org Subject: Re: TLS handshake failed On 7/9/2009, Rocco Scappatura

RE: TLS handshake failed

2009-07-09 Thread Rocco Scappatura
Hello, -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Wietse Venema Sent: Thursday, July 09, 2009 12:47 PM To: Postfix users Subject: Re: TLS handshake failed Rocco Scappatura: # postconf -d | grep tls What web

RE: fatal: pipe_command: execvp

2009-07-09 Thread Wim Groen
Hi Wietse, I don't use AppArmor and i disabled SELinux but it didn't helped. Kind Regards, Wim Wim Groen: Hi, I've got a postfix server with spamassassin running. If one of my customers is on vacation he can turn on auto reply. For this I created a script /usr/local/bin/responder.

Re: fatal: pipe_command: execvp

2009-07-09 Thread Victor Duchovni
On Thu, Jul 09, 2009 at 09:17:20AM +0200, Wim Groen wrote: This is the master.cf: vacationunix- n n - - pipe flags=FRq user=vmail argv=/usr/local/bin/responder ${sender} ${recipient} When I look at the file it looks good: -rwxr-xr-x 1 root

Re: TLS handshake failed

2009-07-09 Thread Victor Duchovni
On Thu, Jul 09, 2009 at 10:11:26AM +0200, Rocco Scappatura wrote: Hello, a user of my mail gateway has got the following messages while have tried to send a message to recipie...@recipdomain.tld,recipie...@recipdomain.tld: - Original Message - From: Mail Delivery Subsystem

RE: TLS handshake failed

2009-07-09 Thread Rocco Scappatura
Thanks Victor, -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Victor Duchovni Sent: Thursday, July 09, 2009 2:11 PM To: postfix-users@postfix.org Subject: Re: TLS handshake failed On Thu, Jul 09, 2009 at 10:11:26AM

safe etrn

2009-07-09 Thread Andre Hübner
Hello, i try to set up safe etrn. i use in main.cf smtpd_etrn_restrictions = check_etrn_access hash:/etc/postfix/etrn-domains reject if etrn-domain is found /etc/postfix/etrn-domains returns name of 2nd restriction which checks by check_client_access other file for clientip and returns ok if

smtpd_*_restrictions

2009-07-09 Thread Jon
Looking for some clarification to help me understand. Are smtpd_*_restrictions processed in this order: smtpd_client_restrictions smtpd_helo_restrictions smtpd_sender_restrictions smtpd_recipient_restrictions smtpd_data_restrictions If these restriction mechanisms share a common

Re: safe etrn

2009-07-09 Thread Wietse Venema
Andre H?bner: Hello, i try to set up safe etrn. i use in main.cf smtpd_etrn_restrictions = check_etrn_access hash:/etc/postfix/etrn-domains reject if etrn-domain is found /etc/postfix/etrn-domains returns name of 2nd restriction which checks by check_client_access other file for

Re: safe etrn

2009-07-09 Thread Thomas Gelf
Andre Hübner wrote: setup works but there is still security-problem that a client ip which is allowed for etrn is requesting mails for other domain. is there a combination of restrictions to make it safe or is an own policy-service better solution? As of ETRN works this is not to be

RE: Multiple Aliases Files - Same Domain

2009-07-09 Thread wiskbroom
On Wed, Jul 08, 2009 at 04:04:33PM -0400, wiskbr...@hotmail.com wrote: alias_maps = dbm:/etc/postfix/aliases, dbm:/etc/newcompany/aliases, nis:mail.aliases Are you sure you want a local aliases(5) file and not a virtual(5) aliases file? Generally, and especially for non-system users, the

Re: smtpd_*_restrictions

2009-07-09 Thread Robert Lopez
On Thu, Jul 9, 2009 at 8:28 AM, Jonjo...@iotk.net wrote: Looking for some clarification to help me understand. Are smtpd_*_restrictions processed in this order:  smtpd_client_restrictions  smtpd_helo_restrictions  smtpd_sender_restrictions  smtpd_recipient_restrictions  

Re: smtpd_*_restrictions

2009-07-09 Thread Brian Evans - Postfix List
Jon wrote: Looking for some clarification to help me understand. Are smtpd_*_restrictions processed in this order: smtpd_client_restrictions smtpd_helo_restrictions smtpd_sender_restrictions smtpd_recipient_restrictions smtpd_data_restrictions If these restriction mechanisms

Re: smtpd_*_restrictions

2009-07-09 Thread Charles Marcus
On 7/9/2009, Robert Lopez (rlopez...@gmail.com) wrote: If these restriction mechanisms share a common hash file for their check, for example: /etc/postfix/main.cf ... smtpd_client_restrictions = check_client_access hash:/etc/postfix/access_hash ... ... smtpd_sender_restrictions =

Re: Logging sender recipient pairs

2009-07-09 Thread brian moore
On Thu, 9 Jul 2009 09:25:40 +1000 Barney Desmond barneydesm...@gmail.com wrote: I haven't done this myself, but I hear policy servers are quite popular for this sort of thing (the usual question is how to setup sending quotas for users, so this would be a slight modification). Yes,

unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Alban Deniz
Hello, I've implemented a milter (SNFMilter), and when I use it with postfix, and send postfix multiple messages over one SMTP connection, I get the following warning in the log file: Jun 18 10:32:58 skidmark postfix/smtpd[11622]: warning: milter unix:/snf- milter/socket: unexpected filter

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Wietse Venema
Alban Deniz: Hello, I've implemented a milter (SNFMilter), and when I use it with postfix, and send postfix multiple messages over one SMTP connection, I get the following warning in the log file: Jun 18 10:32:58 skidmark postfix/smtpd[11622]: warning: milter unix:/snf-

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Alban Deniz
On Thursday 09 July 2009 01:01:28 pm Wietse Venema wrote: Alban Deniz: Hello, I've implemented a milter (SNFMilter), and when I use it with postfix, and send postfix multiple messages over one SMTP connection, I get the following warning in the log file: Jun 18 10:32:58 skidmark

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Wietse Venema
Alban Deniz: On Thursday 09 July 2009 01:01:28 pm Wietse Venema wrote: Alban Deniz: Hello, I've implemented a milter (SNFMilter), and when I use it with postfix, and send postfix multiple messages over one SMTP connection, I get the following warning in the log file: Jun 18

Mail sometimes is not delivered to one customer

2009-07-09 Thread Jakub Nadolny
Hi, I have repeating problem with delivering mail to one of our customers. It looks like e-mail stays endlessly in active queue. At first I've thought that it might be some network issue on customer side as my netstat shows something waits for a long time in Send-Q: tcp0 86284

postfix and ldap alias users

2009-07-09 Thread Evan Platt
Thanks all for the previous help getting postfix up and running with ldap / tls.. Finally after I don't even know how many build attempts, ,it's up and running :) My setup is all mail is delivered from a mail host to my postfix from another server. They do ldap lookups which is working fine.

Re: smtpd_*_restrictions

2009-07-09 Thread Sahil Tandon
On Jul 9, 2009, at 10:28 AM, Jon jo...@iotk.net wrote: Looking for some clarification to help me understand. Are smtpd_*_restrictions processed in this order: smtpd_client_restrictions smtpd_helo_restrictions smtpd_sender_restrictions smtpd_recipient_restrictions smtpd_data_restrictions

policyd-weight and postgrey: which should work first?

2009-07-09 Thread Ignacio Garcia
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there. We use both postgrey and policyd-weight to block spam. policyd-weight checks against several RBL and DNSBL so each time a mail is received several queries are done in order to get a score. On the other side, we have a filter with postgrey

Re: policyd-weight and postgrey: which should work first?

2009-07-09 Thread Michael Orlitzky
Ignacio Garcia wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there. We use both postgrey and policyd-weight to block spam. policyd-weight checks against several RBL and DNSBL so each time a mail is received several queries are done in order to get a score. On the other side, we have

Re: Mail sometimes is not delivered to one customer

2009-07-09 Thread Wietse Venema
Jakub Nadolny: Jul 8 12:43:33 zonk postfix/qmgr[7095]: DF7C21811E53: from=sender.n...@mycompany.pl, size=4254293, nrcpt=2 (queue active) Jul 8 13:33:40 zonk postfix/qmgr[16317]: DF7C21811E53: skipped, still being delivered Jul 8 13:34:41 zonk postfix/qmgr[16317]: DF7C21811E53: skipped,

Re: unexpected filter response from SNFMilter when sending multiple messages to postfix over one SMTP connection

2009-07-09 Thread Wietse Venema
Alban Deniz: It seems to me that if postfix is expecting an SMFIR_ADDHEADER milter response after invoking the xxfi_envfrom application 1) Postfix does not invoke xxfi callbacks. Instead, Postfix sends messages to the milter application, where libmilter invokes the application callbacks. 2)

Postfix and AUTH

2009-07-09 Thread Scott Haneda
Hello, I have been looking into this for the better part of today. I am using a proxy in front of postfix. In order to be able to AUTH a user through the proxy, the proxy needs the 250-AUTH credentials to show up. I discovered that mynetworks disables this for those hosts listed in

Re: Postfix and AUTH

2009-07-09 Thread Wietse Venema
Scott Haneda: Hello, I have been looking into this for the better part of today. I am using a proxy in front of postfix. In order to be able to AUTH a user through the proxy, the proxy needs the 250-AUTH credentials to show up. I discovered that mynetworks disables this for those

Re: Logging sender recipient pairs

2009-07-09 Thread Sahil Tandon
On Thu, 09 Jul 2009, brian moore wrote: I haven't done this myself, but I hear policy servers are quite popular for this sort of thing (the usual question is how to setup sending quotas for users, so this would be a slight modification). Yes, postfixpolicyd can do this. The real trick