Re: python framework for a policy daemon?

2009-09-10 Thread Zhang Huangbin
On Sep 9, 2009, at 5:50 PM, Ralf Hildebrandt wrote: Is there a ready to use python framework for a policy daemon? I have a nice idea for a policy daemon :) Reference: http://www.apolicy.org/cgi-bin/moin.cgi -- Best Regards. Zhang Huangbin - Open Source Mail Server Solution for Red Hat(R) E

Re: Configuration question

2009-09-10 Thread Sahil Tandon
On Thu, 10 Sep 2009, Duncan B. wrote: > The list of CIDR IP ranges to relay for is in the mynetworks variable, > so I can't do the recipient domain verification in > "smtpd_recipient_restrictions" because I need "permit_mynetworks", so > that my networks can relay through the box! permit_mynet

Re: slow mail delivering

2009-09-10 Thread Israel Garcia
On 9/10/09, Sahil Tandon wrote: > On Thu, 10 Sep 2009, Israel Garcia wrote: > >> I've the following issue, sometimes I have some apps who use to send >> to the smarthost a lot of mail (hundreds) in just one connection. So, >> my smarthost tries to deliver it as soon as mail are coming from >> clie

Re: Problem with spam messages

2009-09-10 Thread Sahil Tandon
On Thu, 10 Sep 2009, an...@iguanait.com wrote: > in our two mail servers i see last weeks this: > > non-SMTP command from 250.84.221.62.dyn.idknet.com[62.221.84.250]: > From: ? VIAGRA ? Official Site > > How can i block these accesses? These are harmless; leave it alone. If you are adamant on

Re: slow mail delivering

2009-09-10 Thread Sahil Tandon
On Thu, 10 Sep 2009, Israel Garcia wrote: > I've the following issue, sometimes I have some apps who use to send > to the smarthost a lot of mail (hundreds) in just one connection. So, > my smarthost tries to deliver it as soon as mail are coming from > client servers. My question is: > > How can

Re: postfix maildir outside of user home dirs

2009-09-10 Thread /dev/rob0
On Thursday 10 September 2009 18:46:25 Sukh Khehra wrote: > I am installing postfix on a box where all users don't necessarily > have a home directory. Sounds odd, almost like a case for virtual(8), although even virtual users should have a $HOME. > Anyone know of a way to configure "home_mailbox

Re: Formatting of 544- ... lines in "Undelivered Mail Returned to Sender"

2009-09-10 Thread Robin Whittle
Hi Wietse, Thanks for your reply: >> I am not sure whether this is specified in an RFC, but I understand >> that for every part of the remote MTA's response which starts with >> "544-" there should be a new line in the message to the sender. > > Error reports are standardized in 346[1-4]. I invi

slow mail delivering

2009-09-10 Thread Israel Garcia
I've the following issue, sometimes I have some apps who use to send to the smarthost a lot of mail (hundreds) in just one connection. So, my smarthost tries to deliver it as soon as mail are coming from client servers. My question is: How can I rate limit mail delivering on the smarthost, althoug

Re: postfix maildir outside of user home dirs

2009-09-10 Thread Wietse Venema
Sukh Khehra: > I am installing postfix on a box where all users don't necessarily have > a home directory. Anyone know of a way to configure "home_mailbox" to > an absolute path(with username var) so every user's mailbox directory > resides under one top level directory? If the user has no UNIX a

postfix maildir outside of user home dirs

2009-09-10 Thread Sukh Khehra
I am installing postfix on a box where all users don't necessarily have a home directory. Anyone know of a way to configure "home_mailbox" to an absolute path(with username var) so every user's mailbox directory resides under one top level directory? Something like "/var/spool/mail/$USER/", e.

Re: forged domain in message-id?

2009-09-10 Thread Wietse Venema
LuKreme: > I've started seeing "forged domain name in Message-ID: header: covisp.net > " recently when sending from a covisp.net email address. I suspect > that it is the OS X Mail.app generating it's own Message-ID. Some mail client software will use the domain as the message-id domain. BACKSC

forged domain in message-id?

2009-09-10 Thread LuKreme
I've started seeing "forged domain name in Message-ID: header: covisp.net " recently when sending from a covisp.net email address. I suspect that it is the OS X Mail.app generating it's own Message-ID. What I'd like is to know how I can let postfix know that Message-IDs from authenticated cl

Re: Alias members based on LDAP attribute value

2009-09-10 Thread Victor Duchovni
On Thu, Sep 10, 2009 at 10:13:35AM +0200, Edgar Fuß wrote: > > So you can store the "foo=bar" query in a "special_result_attribute" > > of an object whose primary lookup key is foobars, and a special > > result attribute specifies the desired query as an LDAP URL. > > Ah, neat, thanks! > > Am I r

Re: Postfix unable to delivery mail

2009-09-10 Thread Wietse Venema
Mark Johnson: > All, > > I have 2 mail servers within the same network (One Postfix and One Sendmail). > Djbdns was also installed in Postfix Mail Server. Sendmail is hosting our > client email. > > The configuration is any incoming mail will send to Postfix first then > forward to Sendmail. P

Configuration question

2009-09-10 Thread Duncan B.
Hi, Just a quick config question, which I'm not too sure how to achieve. I'd like to enable recipient domain validation, which I've partly done (at the data stage), however if you then enter another "rcpt to" after the data command failed, it'll allow it through. E.g. 220 relay4.post.newnet

Postfix unable to delivery mail

2009-09-10 Thread Mark Johnson
All, I have 2 mail servers within the same network (One Postfix and One Sendmail). Djbdns was also installed in Postfix Mail Server. Sendmail is hosting our client email. The configuration is any incoming mail will send to Postfix first then forward to Sendmail. Postfix is also setup as relay

Re: Writing an after-queue content filter in php

2009-09-10 Thread Thomas Gelf
Wietse Venema wrote: > This is an output buffering problem. You need to flush output > after each reply, perhaps by calling the flush() function. Good catch, I guess this could most likely be his problem! -- mail: tho...@gelf.net web: http://thomas.gelf.net/

Re: Writing an after-queue content filter in php

2009-09-10 Thread Thomas Gelf
Mathias Tausig wrote: > I want to write an after-queue content filter for my postfix > installation which is invoked by spawn (according to the FILTER_README > from postfix.org). > > My problem is, that the input/output part simply does not work. I am > sending a "220 localhost SMTP foo" to STDOUT

Re: Writing an after-queue content filter in php

2009-09-10 Thread Wietse Venema
Mathias Tausig: > Hy! > > I want to write an after-queue content filter for my postfix > installation which is invoked by spawn (according to the FILTER_README > from postfix.org). > > My problem is, that the input/output part simply does not work. I am > sending a "220 localhost SMTP foo" to STD

Writing an after-queue content filter in php

2009-09-10 Thread Mathias Tausig
Hy! I want to write an after-queue content filter for my postfix installation which is invoked by spawn (according to the FILTER_README from postfix.org). My problem is, that the input/output part simply does not work. I am sending a "220 localhost SMTP foo" to STDOUT at the beginning of the scri

Re: Exempting localhost from STARTTLS

2009-09-10 Thread Wietse Venema
Gerard: > On Wed, 9 Sep 2009 15:30:22 -0400 (EDT) > wie...@porcupine.org (Wietse Venema) wrote: > > > Gerard: > > > I use fetchmail to harvest mail from a couple of accounts. I added > > > this to the main.cf file and fetchmail stopped delivering mail. > > > > > > smtpd_tls_security_level = encry

Re: Formatting of 544- ... lines in "Undelivered Mail Returned to Sender"

2009-09-10 Thread Wietse Venema
Robin Whittle: > I am not sure whether this is specified in an RFC, but I understand > that for every part of the remote MTA's response which starts with > "544-" there should be a new line in the message to the sender. Error reports are standardized in 346[1-4]. I invite you to point out the requ

Re: Postfix not sending SMFIC_RCPT to milter, libmilter rejecting state transition

2009-09-10 Thread Wietse Venema
Postfix VSTREAMs automatically flush output on the next read operation; a lot of things depend on this, including the SMTP client and SMTP server protocol implementations. This is how Postfix avoids sending silly little network packets. In the case of skipping Milter replies, the idea is that queu

Re: Exempting localhost from STARTTLS

2009-09-10 Thread Gerard
On Wed, 9 Sep 2009 15:30:22 -0400 (EDT) wie...@porcupine.org (Wietse Venema) wrote: > Gerard: > > I use fetchmail to harvest mail from a couple of accounts. I added > > this to the main.cf file and fetchmail stopped delivering mail. > > > > smtpd_tls_security_level = encrypt > > > > This was the

Re: piped transports error message

2009-09-10 Thread Wietse Venema
Marcel Montes: > What does postfix actually add to the bounce message? > The STDERR output if the return status is not 0? Postfix absorbs stdout and stderr. There is some information in the pipe(8) man page, but it is not complete. Wietse DIAGNOSTICS Command exit status codes

Re: Exempting localhost from STARTTLS

2009-09-10 Thread Gerard
On Thu, 10 Sep 2009 11:20:28 +0200 Geert Hendrickx wrote: > On Wed, Sep 09, 2009 at 03:19:11PM -0400, Gerard wrote: > > I use fetchmail to harvest mail from a couple of accounts. I added > > this to the main.cf file and fetchmail stopped delivering mail. > > Do you actually need fetchmail to del

Re: Exempting localhost from STARTTLS

2009-09-10 Thread Geert Hendrickx
On Wed, Sep 09, 2009 at 03:19:11PM -0400, Gerard wrote: > I use fetchmail to harvest mail from a couple of accounts. I added > this to the main.cf file and fetchmail stopped delivering mail. Do you actually need fetchmail to deliver mail via smtp? If you don't need special handling by postfix an

Re: Alias members based on LDAP attribute value

2009-09-10 Thread Edgar Fuß
> So you can store the "foo=bar" query in a "special_result_attribute" > of an object whose primary lookup key is foobars, and a special > result attribute specifies the desired query as an LDAP URL. Ah, neat, thanks! Am I right to assume that the original (key=alias, value=URI) entry must reside