Re: whitelisting problem

2009-12-04 Thread Michael Orlitzky
Stan Hoeppner wrote: I can't figure out why my whitelist entry for 204.238.179.0/24 is being ignored. If not for a transient DNS failure this afternoon I'd not have known this was broken. The check_client_access whitelist entry _should_ have triggered before reject_unknown_client_hostname. Any

whitelisting problem

2009-12-04 Thread Stan Hoeppner
I can't figure out why my whitelist entry for 204.238.179.0/24 is being ignored. If not for a transient DNS failure this afternoon I'd not have known this was broken. The check_client_access whitelist entry _should_ have triggered before reject_unknown_client_hostname. Any ideas why is doesn't/d

Re: remote_header_rewrite_domain ignored

2009-12-04 Thread Wietse Venema
Ed W: > Hi, I'm using postfix 2.5.7 and having some trouble with the server > domain being appended to incomplete sender addresses. I have set > > # postconf|grep -e rewrite -e append -e myorigin -e mydomain -e local_header > append_at_myorigin = yes > append_dot_mydomain = no > local_header_rew

Re: postscreen dnsblog problem

2009-12-04 Thread Wietse Venema
Len Conrad: > -- Original Message -- > From: wie...@porcupine.org (Wietse Venema) > Date: Fri, 4 Dec 2009 14:13:17 -0500 (EST) > >I'll mkae a note that postscreen must be used only with low-latency databases > >such as local files. > > the problem postscree

postfix and ldap configuration blog post

2009-12-04 Thread Jack Bates
http://jdbates.blogspot.com/2009/11/initially-i-had-some-email-addresses-e.html ^ I just made this blog post about a Postfix configuration I've used a couple times The configuration is for storing user's email addresses in LDAP and both forwarding messages to and sending messages from those addre

Re: Searching Mails

2009-12-04 Thread Sahil Tandon
On Fri, 04 Dec 2009, osmcr...@gmail.com wrote: > as soon as possible i need to get a command to search all mails between a > date it's mean " start date " to " end date " > and i also im looking for a command to get inmediatelly a mail of a specific > mail for date. Please, carefully read: http:/

Re: SASL plain authentication failed; unable to lookup user record

2009-12-04 Thread Patrick Ben Koetter
* JP : > >Your Postfix uses Dovecot SASL. Have you tried to authenticate using a telnet > >session, sending AUTH identity on command line? > > > Escape character is '^]'. > 220 osx-106.example.com ESMTP Postfix > EHLO foobie.example.com > 250-osx-106.example.com > 250-PIPELINING > 250-SIZE 10485760

Re: different greetings for each domain I have. (many domains)

2009-12-04 Thread Brian Evans - Postfix List
On 12/4/2009 3:32 PM, S Lastname wrote: > Hello everyone. > > > I have a mail server running postfix. the server has man different ip's > associated with it, and many domains pointing at it. As Im sure you all know, > when the server gets a connection request, it responds with a greeting > messa

Searching Mails

2009-12-04 Thread osmcr...@gmail.com
Hi Folks as soon as possible i need to get a command to search all mails between a date it's mean " start date " to " end date " and i also im looking for a command to get inmediatelly a mail of a specific mail for date. Thanks in advanced Greetings !!

Re: SASL plain authentication failed; unable to lookup user record

2009-12-04 Thread JP
Patrick Ben Koetter wrote: * JP : i'll guess the solution to my problem will be something simple and obvious, because i know i ain't the first person to do this, but i've been staring at it for days and can't see what's wrong. os x snow leopard server; postfix 2.5.5; dovecot 1.1.17apple0.5 try

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Steve
Original-Nachricht > Datum: Fri, 4 Dec 2009 14:08:46 -0500 > Von: Carlos Williams > An: postfix users list > Betreff: Should Anyone Be Able To Send Telnet Email > I was just thinking today that if anyone knew a valid email address on > my Postfix mail server, anyone could simp

different greetings for each domain I have. (many domains)

2009-12-04 Thread S Lastname
Hello everyone. I have a mail server running postfix. the server has man different ip's associated with it, and many domains pointing at it. As Im sure you all know, when the server gets a connection request, it responds with a greeting message. something along the lines of "220 cattlejobs.com

Re: SASL plain authentication failed; unable to lookup user record

2009-12-04 Thread Patrick Ben Koetter
* JP : > i'll guess the solution to my problem will be something simple and > obvious, because i know i ain't the first person to do this, but i've > been staring at it for days and can't see what's wrong. > > os x snow leopard server; postfix 2.5.5; dovecot 1.1.17apple0.5 > > trying to get SMTP

Re: Snapshot 20091109, queue disk partition sizing

2009-12-04 Thread Stefan Förster
* Wietse Venema : > Stefan Förster: > > (number of smtpd processes) * message_size_limit > > > > bytes of queue space allocated in temporary files. > > By default, the Postfix requires 1.5*message_size_limit of free > space before it accepts mail. > > Right now, the before-proxy scratch files ar

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread /dev/rob0
This post was full of misunderstandings. First, the Subject, there is no such thing as "telnet email". telnet(1) is a commonly-available TCP client, which can be used to make a connection to a process such as smtpd(8). On Fri, Dec 04, 2009 at 02:08:46PM -0500, Carlos Williams wrote: > I was just t

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Joe
Carlos Williams wrote: > On Fri, Dec 4, 2009 at 2:22 PM, Matt Hayes wrote: > >> The question is, are you trying to 'relay' through the server or sending >> to a domain that the server hosts? >> >> -Matt >> > > I don't know how to answer this. The Postfix server is on the same > network as

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Sahil Tandon
On Dec 4, 2009, at 2:34 PM, Sahil Tandon wrote: On Dec 4, 2009, at 2:26 PM, Carlos Williams wrote: On Fri, Dec 4, 2009 at 2:22 PM, Matt Hayes wrote: The question is, are you trying to 'relay' through the server or sending to a domain that the server hosts? -Matt I don't know how to

Re: postscreen dnsblog problem

2009-12-04 Thread Len Conrad
-- Original Message -- From: wie...@porcupine.org (Wietse Venema) Date: Fri, 4 Dec 2009 14:13:17 -0500 (EST) >Len Conrad: >> I've got more data. The killer option is when I have this on: >> >> postscreen_blacklist_networks = >> mysql:/usr/local/etc/postf

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread tobi
Carlos Williams schrieb: > On Fri, Dec 4, 2009 at 2:22 PM, Matt Hayes wrote: > >> The question is, are you trying to 'relay' through the server or sending >> to a domain that the server hosts? >> >> -Matt >> > > I don't know how to answer this. The Postfix server is on the same > network a

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Sahil Tandon
On Dec 4, 2009, at 2:26 PM, Carlos Williams wrote: On Fri, Dec 4, 2009 at 2:22 PM, Matt Hayes wrote: The question is, are you trying to 'relay' through the server or sending to a domain that the server hosts? -Matt I don't know how to answer this. The Postfix server is on the same net

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Carlos Williams
On Fri, Dec 4, 2009 at 2:22 PM, Matt Hayes wrote: > The question is, are you trying to 'relay' through the server or sending > to a domain that the server hosts? > > -Matt I don't know how to answer this. The Postfix server is on the same network as the clients connecting to it. The clients simpl

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Stan Hoeppner
Carlos Williams put forth on 12/4/2009 1:08 PM: > I was just thinking today that if anyone knew a valid email address on > my Postfix mail server, anyone could simply telnet to it (assuming > they're on a trusted network / mynetworks) and send mail posed as that > valid email address. I know this i

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Matt Hayes
Carlos Williams wrote: > On Fri, Dec 4, 2009 at 2:16 PM, Martijn de Munnik > wrote: >> If sending e-mail via telnet without a username/password is possible it is >> also possible with a client. > > OK so from that note I gather something with my config is not secure > or wide open. Is this is a

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Carlos Williams
On Fri, Dec 4, 2009 at 2:16 PM, Martijn de Munnik wrote: > If sending e-mail via telnet without a username/password is possible it is > also possible with a client. OK so from that note I gather something with my config is not secure or wide open. Is this is a Postfix issue or something 'off-top

Re: Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Martijn de Munnik
On Dec 4, 2009, at 8:08 PM, Carlos Williams wrote: > I was just thinking today that if anyone knew a valid email address on > my Postfix mail server, anyone could simply telnet to it (assuming > they're on a trusted network / mynetworks) and send mail posed as that > valid email address. I know t

Re: postscreen dnsblog problem

2009-12-04 Thread Wietse Venema
Len Conrad: > I've got more data. The killer option is when I have this on: > > postscreen_blacklist_networks = > mysql:/usr/local/etc/postfix/mysql-mta_clients_reactive_b.cf I'll mkae a note that postscreen must be used only with low-latency databases such as local files. Wietse

Should Anyone Be Able To Send Telnet Email

2009-12-04 Thread Carlos Williams
I was just thinking today that if anyone knew a valid email address on my Postfix mail server, anyone could simply telnet to it (assuming they're on a trusted network / mynetworks) and send mail posed as that valid email address. I know this is not a huge security deal since it's come from a client

remote_header_rewrite_domain ignored

2009-12-04 Thread Ed W
Hi, I'm using postfix 2.5.7 and having some trouble with the server domain being appended to incomplete sender addresses. I have set # postconf|grep -e rewrite -e append -e myorigin -e mydomain -e local_header append_at_myorigin = yes append_dot_mydomain = no local_header_rewrite_clients = mydo

SASL plain authentication failed; unable to lookup user record

2009-12-04 Thread JP
i'll guess the solution to my problem will be something simple and obvious, because i know i ain't the first person to do this, but i've been staring at it for days and can't see what's wrong. os x snow leopard server; postfix 2.5.5; dovecot 1.1.17apple0.5 trying to get SMTP auth working via SAS

Re: Snapshot 20091109, queue disk partition sizing

2009-12-04 Thread Wietse Venema
Stefan F?rster: > If I understood the release notes correctly, with "smtpd_proxy_options > = speed_adjust", each smtpd process will keep the message it's > currently receiving in a temporary file. That seems to imply that > there could be > > (number of smtpd processes) * message_size_limit > > b

Snapshot 20091109, queue disk partition sizing

2009-12-04 Thread Stefan Förster
If I understood the release notes correctly, with "smtpd_proxy_options = speed_adjust", each smtpd process will keep the message it's currently receiving in a temporary file. That seems to imply that there could be (number of smtpd processes) * message_size_limit bytes of queue space allocated in