Re: Formatting of 544- ... lines in "Undelivered Mail Returned to Sender"

2009-09-13 Thread Seth Mattinen
Wietse Venema wrote: > Seth Mattinen: >> Multiline responses in SMTP are (as far as I know) not allowed. I'm sure >> Wietse will correct me it I'm wrong, but I can't ever recall it. > > They are allowed. In fact, most EHLO server responses are multi-line. > Ah yes, silly me. I've seen multiline

Re: res_search fails in postfix

2009-09-13 Thread girish br
some more logs I would like to give as I am struck up here and need help. The permission of some of the directories are # ls -l / drwxr-xr-x 2 girish root 0 Jan 1 1970 bin drwxr-xr-x 13 root root 0 Jan 1 1970 debug drwxr-xr-x 5 root root 3660 Jun 11 21:36 dev drwxr-xr-x 12 root root 0 Sep 12 16:5

Re: rereolling postfix

2009-09-13 Thread Patrick Ben Koetter
* LuKreme : > I am planning on recompiling postfix and all its various helper apps > (switching from cyrus to dovecot, upgrading mysql, Maybe setting up > LDAP, and doing a clean install of FreeBSD latest) onto a newer, and > hopefully more capable machine. > > What I want to do is get the new sy

Re: rereolling postfix

2009-09-13 Thread Sahil Tandon
On Sun, 13 Sep 2009, LuKreme wrote: > >Depending on how many users you have to move, just select a bunch and > >spool mail for them on the current Postfix box while you rsync their > >IMAP mailboxes to the new box. > > Probably not enough users to make that necessary, but that might be a > way to

Re: rereolling postfix

2009-09-13 Thread LuKreme
On 13-Sep-2009, at 18:27, Sahil Tandon wrote: On Sun, 13 Sep 2009, LuKreme wrote: My question is what is the best way to actually migrate the mail and the users to the new machine without losing mail? WOuld it be a good idea (or even possible) to run the two machines in parallel for a time, havi

Re: Forged Emails

2009-09-13 Thread Sahil Tandon
On Sun, 13 Sep 2009, James Hankins wrote: > If you could please point me to blacklists that are using Sender > Verification as qualification for being on it, I'd be interested in > seeing this. [snip off-topic noise] See: http://www.backscatterer.org/?target=sendercallouts. Please take all fo

Re: Forged Emails

2009-09-13 Thread James Hankins
If you could please point me to blacklists that are using Sender Verification as qualification for being on it, I'd be interested in seeing this. This feature has been around for some 10 years as a means for helping to thwart spam. It would seem to me this is a win for the spammers if the

Re: Forged Emails

2009-09-13 Thread Sahil Tandon
On Sun, 13 Sep 2009, Noel Jones wrote: > On 9/13/2009 7:14 PM, Sahil Tandon wrote: > >On Sun, 13 Sep 2009, Noel Jones wrote: > > > >>On 9/13/2009 10:45 AM, Sahil Tandon wrote: > >>>On Sun, 13 Sep 2009, mouss wrote: > > smtpd_sender_restrictions = > ... > check_client_access ha

Re: rereolling postfix

2009-09-13 Thread Sahil Tandon
On Sun, 13 Sep 2009, LuKreme wrote: > I am planning on recompiling postfix and all its various helper apps > (switching from cyrus to dovecot, upgrading mysql, Maybe setting up > LDAP, and doing a clean install of FreeBSD latest) onto a newer, and > hopefully more capable machine. > > What I wan

Re: Forged Emails

2009-09-13 Thread Noel Jones
On 9/13/2009 7:14 PM, Sahil Tandon wrote: On Sun, 13 Sep 2009, Noel Jones wrote: On 9/13/2009 10:45 AM, Sahil Tandon wrote: On Sun, 13 Sep 2009, mouss wrote: smtpd_sender_restrictions = ... check_client_access hash:/etc/postfix/forged_sender_wl check_sender_access has

Re: Forged Emails

2009-09-13 Thread Sahil Tandon
On Sun, 13 Sep 2009, Noel Jones wrote: > On 9/13/2009 10:45 AM, Sahil Tandon wrote: > >On Sun, 13 Sep 2009, mouss wrote: > >> > >>smtpd_sender_restrictions = > >>... > >>check_client_access hash:/etc/postfix/forged_sender_wl > >>check_sender_access hash:/etc/postfix/forged_sender_bl >

Re: What's wrong with my postfixclient.key?

2009-09-13 Thread Wietse Venema
sean darcy: > Wietse Venema wrote: > > sean darcy: > >> Sep 13 16:00:19 asterisk postfix/smtp[1786]: warning: TLS library > >> problem: 1786:error:0B080074:x509 certificate > >> routines:X509_check_private_key:key values mismatch:x509_cmp.c:304: > > > > Does the client private key match the clie

Re: What's wrong with my postfixclient.key?

2009-09-13 Thread sean darcy
Wietse Venema wrote: sean darcy: Sep 13 16:00:19 asterisk postfix/smtp[1786]: warning: TLS library problem: 1786:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:304: Does the client private key match the client (public key) certificate? See the

rereolling postfix

2009-09-13 Thread LuKreme
I am planning on recompiling postfix and all its various helper apps (switching from cyrus to dovecot, upgrading mysql, Maybe setting up LDAP, and doing a clean install of FreeBSD latest) onto a newer, and hopefully more capable machine. What I want to do is get the new system built and co

Re: What's wrong with my postfixclient.key?

2009-09-13 Thread Wietse Venema
sean darcy: > Sep 13 16:00:19 asterisk postfix/smtp[1786]: warning: TLS library > problem: 1786:error:0B080074:x509 certificate > routines:X509_check_private_key:key values mismatch:x509_cmp.c:304: Does the client private key match the client (public key) certificate? See the Postfix TLS_README

Re: Forged Emails

2009-09-13 Thread Noel Jones
On 9/13/2009 10:45 AM, Sahil Tandon wrote: On Sun, 13 Sep 2009, mouss wrote: What I mean by this is, if a malicious attacker send an email from dam...@hotmail.com is there anyway to check that the email came from hotmail.com via a DNS lookup? the simplest thing you can do is something like th

What's wrong with my postfixclient.key?

2009-09-13 Thread sean darcy
Postfix-2.6.5 0n Fedora 12: I'm trying use gmail as a relay for my mail. But I keep getting this error when I try to send mail: Sep 13 16:00:19 asterisk postfix/smtp[1786]: warning: cannot get RSA private key from file /etc/postfix/postfixclient.key: disabling TLS support Sep 13 16:00:19 aste

Re: LDAP lookup succeeds yet mail bounces

2009-09-13 Thread Gavin Hamill
On Sat, 2009-09-12 at 23:51 -0400, Victor Duchovni wrote: > Your LDAP aliases table is expected to be equivalent in its use of > keys and values to the on-disk file. This is a frequently answered > question. Thank you. I solved this by moving the LDAP lookup to a virtual table rather than a pure

Re: Forged Emails

2009-09-13 Thread Sahil Tandon
On Sun, 13 Sep 2009, mouss wrote: > > What I mean by this is, if a malicious attacker send an email from > > dam...@hotmail.com is there anyway to check that the email came from > > hotmail.com via a DNS lookup? > > the simplest thing you can do is something like this: > > smtpd_sender_restricti

Re: question about policy daemon time limit

2009-09-13 Thread Egoitz Aurrekoetxea Aurre
I set 40 seconds for policy time limit and too for smtpd_policy_service_max_ttl I telneted the smtpd later after data command I waited 2 minutes (for exceeding nice the 40 seconds) for Perhaps surprisingly, Postfix starts a new policy daemon when a policy daemon process terminates too s

Re: question about policy daemon time limit

2009-09-13 Thread Wietse Venema
Egoitz Aurrekoetxea Aurre: > >> > >> When you run the policy service under the Postfix spawn daemon, > >> terminate when a read operation returns an end-of-file indication. > >> > >>Wietse > > > > Hi Wietse, > > > > Have just read this... yep this is just what I do, I read from input > > fd w

Re: question about policy daemon time limit

2009-09-13 Thread Egoitz Aurrekoetxea Aurre
When you run the policy service under the Postfix spawn daemon, terminate when a read operation returns an end-of-file indication. Wietse Hi Wietse, Have just read this... yep this is just what I do, I read from input fd with <> wich in perl does the trick. I didn't remember I exite

Re: Forged Emails

2009-09-13 Thread mouss
Damian Myerscough a écrit : > Hello all, > > I thought there was a way in Postfix to perform DNS lookups on the > senders domain. > > For example, if I send a forged mail from my machine to say my gmail > address then > if I look at the full headers I can see the actual IP address it was > sent f

Re: question about policy daemon time limit

2009-09-13 Thread Egoitz Aurrekoetxea Aurre
and how could I know that the smtp server has disconnected from the policy server? what does postfix send for knowing it? When you run the policy service under the Postfix spawn daemon, terminate when a read operation returns an end-of-file indication. Wietse Hi Wietse, Have just

Re: Forged Emails

2009-09-13 Thread Wietse Venema
Damian Myerscough: > Hello all, > > I thought there was a way in Postfix to perform DNS lookups on the > senders domain. Perhaps you meant: http://www.google.com/search?q=postfix+spf This creates problems when mail is forwarded so that it comes from a different IP address. Wietse

Re: Forged Emails

2009-09-13 Thread Damian Myerscough
Hello all, I thought there was a way in Postfix to perform DNS lookups on the senders domain. For example, if I send a forged mail from my machine to say my gmail address then if I look at the full headers I can see the actual IP address it was sent from and it does not resolve the the forged add

Re: Forged Emails

2009-09-13 Thread mouss
James Hankins a écrit : > One way, albiet expensive on CPU util is reject_unverified_sender. What are the chances that dam...@largedomain does not exist? and what if this is used as a "spam trap" by hotmail? > [snip] >

Re: Forged Emails

2009-09-13 Thread mouss
Damian Myerscough a écrit : > Hello, > > I had a question regarding forged mail. I wanted to know if it was > possible for Postfix for > postfix to check the integrity of incoming emails? > > What I mean by this is, if a malicious attacker send an email from > dam...@hotmail.com is > there anyway

Re: aliases problem

2009-09-13 Thread c cc
Sahil, Thank you so much. It seems to be working after I removed the $. Once again, thanks for your time and patience. Charles On Sun, Sep 13, 2009 at 3:05 AM, Sahil Tandon wrote: > On Sun, 13 Sep 2009, c cc wrote: > >> mydestination = $myhostname, localhost, $mydomain, >> localhost.$mydomain,

Re: aliases problem

2009-09-13 Thread Sahil Tandon
On Sun, 13 Sep 2009, c cc wrote: > mydestination = $myhostname, localhost, $mydomain, > localhost.$mydomain, $ns1.example.org, localhost.localdomain, > localhost.$ns1.example.org > mydomain = example.org > myhostname = ns1.example.org > myorigin = $ns1.example.org What's with all these '$ns1' ref

Re: aliases problem

2009-09-13 Thread c cc
Sahil, Thanks--here are the files. Chralres /var/log $postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 html_directory = no inet_interfaces = all

Re: aliases problem

2009-09-13 Thread Sahil Tandon
On Sun, 13 Sep 2009, c cc wrote: > Thank you. Here is the main part of the aliase file. Also show us the output of 'postconf -n' and some un-modified sections from your maillog that display the ENTIRE error. -- Sahil Tandon

Re: aliases problem

2009-09-13 Thread c cc
Sahil, Thank you. Here is the main part of the aliase file. Charles # Aliases in this file will NOT be expanded in the header from # Mail, but WILL be visible over networks or from /bin/mail. # # >> The program "newaliases" must be run after # >> NOTE >> this file