Re: Formatting of 544- ... lines in Undelivered Mail Returned to Sender

2009-09-14 Thread Seth Mattinen
Wietse Venema wrote: Seth Mattinen: Multiline responses in SMTP are (as far as I know) not allowed. I'm sure Wietse will correct me it I'm wrong, but I can't ever recall it. They are allowed. In fact, most EHLO server responses are multi-line. Ah yes, silly me. I've seen multiline EHLO,

Problem with postfix on Fedora 11

2009-09-14 Thread suomi
Dear listers I draw your atttention to a failure of proxymap, which in turn made fail entire postfix. This site retrieves all data concerning mail delivery from LDAP. This worked fine for years, no problem. Yesterday, I upgraded the main mail server to fedore 11. And when I thought,

Re: Writing an after-queue content filter in php

2009-09-14 Thread Mathias Tausig
Am Freitag, den 11.09.2009, 16:10 +0200 schrieb Mikael Bak: Mathias Tausig wrote: I just tried to replace the \n with \r\l, but to no avail. The same problem remains. I can be wrong here, but shouldn't that be \r\n ? HTH, Mikael You are right, of course. I had \r\n before, with the

Need help to change the Postfix code

2009-09-14 Thread Arora, Sumit
Hi All, I'm new to postfix, I need to execute my code when I receive a new email on my postfix smtp server. Please give me some idea, where I can get the postfix code documentation so that I can change its code. All and any type of suggestions are most welcome, I'll really appreciate. Thanks

Address starting with dash illegal?

2009-09-14 Thread Ansgar Wiechers
Hello It appears that Postfix considers addresses beginning with a dash as invalid: 8 cob...@iridium:~ $ telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 iridium.planetcobalt.net ESMTP helo planetcobalt.net 250 iridium.planetcobalt.net mail

Re: Address starting with dash illegal?

2009-09-14 Thread Markus Schönhaber
Ansgar Wiechers: It appears that Postfix considers addresses beginning with a dash as invalid: http://www.postfix.org/postconf.5.html#allow_min_user -- Regards mks

Re: Address starting with dash illegal?

2009-09-14 Thread Ansgar Wiechers
On 2009-09-14 Markus Schönhaber wrote: Ansgar Wiechers: It appears that Postfix considers addresses beginning with a dash as invalid: http://www.postfix.org/postconf.5.html#allow_min_user Thanks. Regards Ansgar Wiechers -- All vulnerabilities deserve a public fear period prior to patches

Re: Need help to change the Postfix code

2009-09-14 Thread ram
On Mon, 2009-09-14 at 09:27 +, Arora, Sumit wrote: Hi All, I’m new to postfix, I need to execute my code when I receive a new email on my postfix smtp server. Please give me some idea, where I can get the postfix code documentation so that I can change its code. All and

Re: res_search fails in postfix

2009-09-14 Thread Wietse Venema
OK, next step: turn off SELinux, AppArmor, Strace, and other security software. When such software is mis-configured all kinds of things will break. Wietse

Re: Problem with postfix on Fedora 11

2009-09-14 Thread Wietse Venema
suomi: In such cases, it would be helpful to have more information then just plain Segmentation fault. Segfaults are always bugs, when they happen in Postfix (some software uses SIGSEGV internally for memory management purposes, but Postfix does not). When in doubt, read the documentation.

Re: Writing an after-queue content filter in php

2009-09-14 Thread Mathias Tausig
I just found the problem. At the very beginning of the script, I had a newline between #!/usr/bin/php5 and ?php Thus this newline was printed to stdout and the SMTP Client got this empty line as its first response instead of the 220 ... line. Thanks to everyone for trying to help me out.

Re: Need help to change the Postfix code

2009-09-14 Thread egoitz
Hi All, I'm new to postfix, I need to execute my code when I receive a new email on my postfix smtp server. Please give me some idea, where I can get the postfix code documentation so that I can change its code. Depending on what the code does... you could run a script passing content to it

defining slow transport - No Such file or directory

2009-09-14 Thread fursink
Per instructions at http://linuxnet.ca/postfix/dedicated_transport.html and tips by several group members, I created a slow transport for sending to Yahoo. I thought everything was working, but now I notice warning: connect to transport slow: No such file or directory in the logs. I notice that

Re: rereolling postfix

2009-09-14 Thread Patrick Ben Koetter
* Stéphane MERLE stephane.me...@distrigame.com: Patrick Ben Koetter a écrit : * LuKreme krem...@kreme.com: I am planning on recompiling postfix and all its various helper apps (switching from cyrus to dovecot, upgrading mysql, Maybe setting up LDAP, and doing a clean install of FreeBSD

Re: Need help to change the Postfix code

2009-09-14 Thread Wietse Venema
Arora, Sumit: Thanks egoitz Ram. Actually I don't need the whole functionality of Postfix, I also need to cut the code for my requirement only. My requirement is to just receive the email and send the body and attachments to another component. There is no requirement of sending any email

RE: Need help to change the Postfix code

2009-09-14 Thread Arora, Sumit
Thanks egoitz Ram. Actually I don't need the whole functionality of Postfix, I also need to cut the code for my requirement only. My requirement is to just receive the email and send the body and attachments to another component. There is no requirement of sending any email from my postfix

Re: Address starting with dash illegal?

2009-09-14 Thread LuKreme
On 14-Sep-2009, at 04:06, Ansgar Wiechers wrote: On 2009-09-14 Markus Schönhaber wrote: Ansgar Wiechers: It appears that Postfix considers addresses beginning with a dash as invalid: http://www.postfix.org/postconf.5.html#allow_min_user Thanks. Be sure and take the under-lying warning to

Re: defining slow transport - No Such file or directory

2009-09-14 Thread fursink
strace qmgr shows: connect(8, {sa_family=AF_FILE, path=private/slow}, 110) = -1 ENOENT (No such file or directory) But I unsure if I should have touched a file somewhere - I read nothing about that. Andrew

Re: defining slow transport - No Such file or directory

2009-09-14 Thread Wietse Venema
fursink: strace qmgr shows: connect(8, {sa_family=AF_FILE, path=private/slow}, 110) = -1 ENOENT (No such file or directory) But I unsure if I should have touched a file somewhere - I read nothing about that. You need to add a slow transport to master.cf, then postfix reload.

Re: rereolling postfix

2009-09-14 Thread LuKreme
On 13-Sep-2009, at 23:43, Patrick Ben Koetter wrote: When you move from Cyrus to something else you can't use a file to file copy mechanism, since the Cyrus mailbox format is non-standard. I am not moving from Cyrus to something else. I have Cyrus SASL installed for authentication against

Re: defining slow transport - No Such file or directory

2009-09-14 Thread fursink
You need to add a slow transport to master.cf, then postfix reload. /etc/postfix/master.cf: # slow transport for delicate domains, ie. Yahoo.com slowunix n - n - 1 smtp -o syslog_name=postfix-slow -o smtp_helo_timeout=10 I have reloaded this many times,

TLS auth failure from iPhone

2009-09-14 Thread Simon Wilson
Hi I have a Postfix 2.3.3 server on CentOS 5.3. Incoming mail is working fine, and has been for a year or so. The mail server sits at mail.simonandkate.net, which is port forwarded on port 25 to the Postfix server on port 25. Most email is done through Horde (running on same box) which

Re: rereolling postfix

2009-09-14 Thread LuKreme
On 14-Sep-2009, at 07:48, LuKreme wrote: against the myself database The travails of autocorrecting spelling errors. The mysql database. -- No one ever thinks of themselves as one of Them. We're always one of Us. It's Them that do the bad things.

Re: defining slow transport - No Such file or directory

2009-09-14 Thread Wietse Venema
fursink: You need to add a slow transport to master.cf, then postfix reload. /etc/postfix/master.cf: # slow transport for delicate domains, ie. Yahoo.com slowunix n - n - 1 smtp -o syslog_name=postfix-slow -o smtp_helo_timeout=10 I have

Re: missing 'client=' in log file

2009-09-14 Thread Martina Tomisova
Hi, I understand now. But there are very very old queue IDs - older than my logs so I can't find where the user comes from. Is there a possibility how to set some limit how old at maximum can the queue ID be (the postfix would reset the queue ID after this time)? Or is there a possibility how to

Re: defining slow transport - No Such file or directory

2009-09-14 Thread fursink
Then you need to shutdown SELinux, AppArmor, etc. security software. SELinux is disabled and I am using nothing else... Andrew

Re: defining slow transport - No Such file or directory

2009-09-14 Thread Wietse Venema
fursink: Then you need to shutdown SELinux, AppArmor, etc. security software. SELinux is disabled and I am using nothing else... If the socket does NOT exist, then you mis-configured master.cf. If the socket does exist, then you mis-configured SELinux, AppArmor, Strace, whatever.

Re: defining slow transport - No Such file or directory

2009-09-14 Thread fursink
If the socket does NOT exist, then you mis-configured master.cf. If the socket does exist, then you mis-configured SELinux, AppArmor, Strace, whatever. The socket does not exist, but I see no error in master.cf. Do you see a problem? slow unix n - n - 1

Re: defining slow transport - No Such file or directory

2009-09-14 Thread Wietse Venema
fursink: oops, the whole file is rather: Obviously, that file is not what Postfix uses. # find / -name master.cf Wietse

Re: defining slow transport - No Such file or directory

2009-09-14 Thread fursink
# == smtp     inet   n       -       n       -       -       smtpd slow     unix   n       -       n       -       1       smtp This is broken, the unix delivery agent needs to be private not public. Bang, 10 points!

Re: defining slow transport - No Such file or directory

2009-09-14 Thread fursink
oops, the whole file is rather: # Postfix master process configuration file. For details on the format # of the file, see the master(5) manual page (command: man 5 master). # # == # service type private unpriv chroot

Re: TLS auth failure from iPhone

2009-09-14 Thread Victor Duchovni
On Mon, Sep 14, 2009 at 11:52:27PM +1000, Simon Wilson wrote: And it never succeeds. If I set smtpd_tls_auth_only to no and disable Use SSL on the iPhone it auths over SMTP (insecurely) and sends fine. Sep 14 23:17:59 server04 postfix/smtpd[4774]: connect from unknown[120.152.28.100] Sep

Re: LDAP lookup succeeds yet mail bounces

2009-09-14 Thread Victor Duchovni
On Sun, Sep 13, 2009 at 08:16:59PM +0100, Gavin Hamill wrote: On Sat, 2009-09-12 at 23:51 -0400, Victor Duchovni wrote: Your LDAP aliases table is expected to be equivalent in its use of keys and values to the on-disk file. This is a frequently answered question. Thank you. I solved

Re: defining slow transport - No Such file or directory

2009-09-14 Thread Victor Duchovni
On Mon, Sep 14, 2009 at 10:29:26AM -0400, fursink wrote: oops, the whole file is rather: # == smtp inet n - n - - smtpd slow unix n - n - 1 smtp

Re: defining slow transport - No Such file or directory

2009-09-14 Thread Victor Duchovni
On Mon, Sep 14, 2009 at 10:45:41AM -0400, fursink wrote: This is broken, the unix delivery agent needs to be private not public. Bang, 10 points! changing to: slow unix y - n - 1 smtp fixed the issue... Thank You! When creating new transports

Whitelisting secondary MX for spf check

2009-09-14 Thread bsd
Hello, I am using two postfix server and quite often some misconfigured mail server are sending mail to the backup MX instead of the primary. Both server have postfix implemented using the 'classic' conf: in main.cf smtpd_recipient_restrictions = permit_mynetworks,

Re: TLS auth failure from iPhone

2009-09-14 Thread LuKreme
On 14-Sep-2009, at 08:59, Victor Duchovni wrote: On Mon, Sep 14, 2009 at 11:52:27PM +1000, Simon Wilson wrote: And it never succeeds. If I set smtpd_tls_auth_only to no and disable Use SSL on the iPhone it auths over SMTP (insecurely) and sends fine. Sep 14 23:17:59 server04

Re: Address starting with dash illegal?

2009-09-14 Thread Ansgar Wiechers
On 2009-09-14 LuKreme wrote: On 14-Sep-2009, at 04:06, Ansgar Wiechers wrote: On 2009-09-14 Markus Schönhaber wrote: Ansgar Wiechers: It appears that Postfix considers addresses beginning with a dash as invalid: http://www.postfix.org/postconf.5.html#allow_min_user Thanks. Be sure and

Re: rereolling postfix

2009-09-14 Thread Patrick Ben Koetter
* LuKreme krem...@kreme.com: On 13-Sep-2009, at 23:43, Patrick Ben Koetter wrote: When you move from Cyrus to something else you can't use a file to file copy mechanism, since the Cyrus mailbox format is non-standard. I am not moving from Cyrus to something else. I have Cyrus SASL

slow transport logging

2009-09-14 Thread AndrewLong
Now that the slow transport (for yahoo) is at least set up correctly, I am wondering how to verify that is actually working. I have -o syslog_name=postfix-slow defined for the slow transport in master.cf, but am perhaps not clear on what this should be doing; I see no mention of postfix-slow

Re: res_search fails in postfix

2009-09-14 Thread girish br
No change in the behavior after SELinux and strace are turned off. No other sucurity softwares are enabled. On Mon, Sep 14, 2009 at 3:39 AM, Wietse Venema wie...@porcupine.org wrote: OK, next step: turn off SELinux, AppArmor, Strace, and other security software. When such software is

Re: Whitelisting secondary MX for spf check

2009-09-14 Thread Noel Jones
On 9/14/2009 12:18 PM, bsd wrote: Hello, I am using two postfix server and quite often some misconfigured mail server are sending mail to the backup MX instead of the primary. Both server have postfix implemented using the 'classic' conf: in main.cf smtpd_recipient_restrictions =

Re: Whitelisting secondary MX for spf check

2009-09-14 Thread Victor Duchovni
On Mon, Sep 14, 2009 at 12:40:08PM -0500, Noel Jones wrote: The problem is that I sometimes have (quite often in fact) rejected mail because they are using spf and the mail is transfered from my backup MX to my master server and my server is considering that second server as the issuer. Add

Re: SMTP split or mirror technique

2009-09-14 Thread Paul Cockings
Wietse Venema wrote: Paul Cockings: Hi List, I'm interested in testing several anti-spam systems (using postfix as my mta). I'd like to perform some real-time testing with live data, so I've had a thought to 'split' or 'mirror' the incoming SMTP stream to several servers. Server 1

Re: SMTP split or mirror technique

2009-09-14 Thread Victor Duchovni
On Mon, Sep 14, 2009 at 07:09:17PM +0100, Paul Cockings wrote: Are you suggesting a virtual_alias_maps like this? myn...@mydomain.comtes...@test1.com (aka server 1) myn...@mydomain.comtes...@test2.com (aka server 2) myn...@mydomain.comtes...@test3.com (aka server 3)

Re: Whitelisting secondary MX for spf check

2009-09-14 Thread Scott Kitterman
On Mon, 14 Sep 2009 19:18:36 +0200 bsd b...@todoo.biz wrote: Hello, I am using two postfix server and quite often some misconfigured mail server are sending mail to the backup MX instead of the primary. Both server have postfix implemented using the 'classic' conf: in main.cf

Re: missing 'client=' in log file

2009-09-14 Thread Wietse Venema
2009/9/7 Wietse Venema wie...@porcupine.org: You need to find the FIRST logfile record with C74FC6A60A0. That record was logged 160062 seconds ago (almost 2 days). Jul 23 07:01:23 server_name postfix/smtp[30845]: C74FC6A60A0: ==

Re: What's wrong with my postfixclient.key?

2009-09-14 Thread sean darcy
Wietse Venema wrote: sean darcy: Wietse Venema wrote: sean darcy: Sep 13 16:00:19 asterisk postfix/smtp[1786]: warning: TLS library problem: 1786:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:304: Does the client private key match the client

Re: Forged Emails

2009-09-14 Thread mouss
Sahil Tandon a écrit : On Sun, 13 Sep 2009, mouss wrote: What I mean by this is, if a malicious attacker send an email from dam...@hotmail.com is there anyway to check that the email came from hotmail.com via a DNS lookup? the simplest thing you can do is something like this:

Re: Address starting with dash illegal?

2009-09-14 Thread mouss
LuKreme a écrit : On 14-Sep-2009, at 04:06, Ansgar Wiechers wrote: On 2009-09-14 Markus Schönhaber wrote: Ansgar Wiechers: It appears that Postfix considers addresses beginning with a dash as invalid: http://www.postfix.org/postconf.5.html#allow_min_user Thanks. Be sure and take the

messages lost

2009-09-14 Thread kazabe
Hi. This is my first post. :) I have a mail server with a very rare issue. Many users was reported me to some messages was not arrive to the destination. I enable a always_bcc account to trace all the messages, and i detect, in many cases, to some lost messages are with bad destination info

Re: What's wrong with my postfixclient.key?

2009-09-14 Thread Wietse Venema
sean darcy: Wietse Venema wrote: sean darcy: Wietse Venema wrote: sean darcy: Sep 13 16:00:19 asterisk postfix/smtp[1786]: warning: TLS library problem: 1786:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:304: Does the client private

Re: messages lost

2009-09-14 Thread Corey Chandler
kazabe wrote: Hi. This is my first post. :) I have a mail server with a very rare issue. Many users was reported me to some messages was not arrive to the destination. I enable a always_bcc account to trace all the messages, and i detect, in many cases, to some lost messages are with bad

Re: TLS auth failure from iPhone

2009-09-14 Thread Simon Wilson
Quoting LuKreme krem...@kreme.com: On 14-Sep-2009, at 08:59, Victor Duchovni wrote: On Mon, Sep 14, 2009 at 11:52:27PM +1000, Simon Wilson wrote: And it never succeeds. If I set smtpd_tls_auth_only to no and disable Use SSL on the iPhone it auths over SMTP (insecurely) and sends fine.

Re: What's wrong with my postfixclient.key?

2009-09-14 Thread sean darcy
Wietse Venema wrote: sean darcy: Wietse Venema wrote: sean darcy: Wietse Venema wrote: sean darcy: Sep 13 16:00:19 asterisk postfix/smtp[1786]: warning: TLS library problem: 1786:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:304: Does the

Re: What's wrong with my postfixclient.key?

2009-09-14 Thread Victor Duchovni
On Mon, Sep 14, 2009 at 09:11:43PM -0400, sean darcy wrote: This is way simpler than any of the howto's for gmail relay access. Or the TLS_README. It's weird how everyone make this so complicated. Which part of TLS_README led you astray? In the section on client certificates:

Re: TLS auth failure from iPhone

2009-09-14 Thread Simon Wilson
Quoting Paul Beard paulbe...@gmail.com: On Sep 14, 2009, at 6:04 PM, Simon Wilson wrote: Originally I had only port 25 open on the router, and it used to work fine, with the iPhone specifically told to use port 25 and SSL. Then something changed (on the iPhone I suspect). Only then did I

Re: Need help to change the Postfix code

2009-09-14 Thread Stan Hoeppner
Arora, Sumit put forth on 9/14/2009 7:51 AM: Thanks egoitz Ram. Actually I don't need the whole functionality of Postfix, I also need to cut the code for my requirement only. My requirement is to just receive the email and send the body and attachments to another component. There is no