Milter by domain

2010-01-27 Thread Jonathan Cutting
Hello fellow Postfix users, I am attempting to configure a postfix server for multiple domains, which will use a milter to send an email to a mailarchiving store (mailarchiva). What I would like to do is: Match the originating domain in outbound mail using a hash table or sql lookup and use

Re: OT: The Book of Postfix

2010-01-27 Thread J. Bakshi
A very very good news :-) Patrick Ben Koetter wrote: > * Julien Vehent : > >> On Wed, 27 Jan 2010 19:29:17 +0100, Patrick Ben Koetter >> wrote: >> >>> * JORGE CARMINATI : >>> Hi! I just want to know if the authors of this book are planning to release an updated rev

Re: OT: The Book of Postfix

2010-01-27 Thread Patrick Ben Koetter
* Julien Vehent : > On Wed, 27 Jan 2010 19:29:17 +0100, Patrick Ben Koetter > wrote: > > * JORGE CARMINATI : > >> Hi! I just want to know if the authors of this book are planning to > >> release > >> an updated revision with erratas fixes, etc and when (if applies). > >> Thanks > >> in advance. >

postfix to BorderWare MXtreme Mail Firewall SMTP server delivery fails?

2010-01-27 Thread Eero Volotinen
Hi All, Very intresting problem from my postfix server to BorderWare MXtreme Mail Firewall SMTP 1) In some rare case remote smtp server replies: said: 451 Error: internal error 512 (in reply to end of DATA command)) I think this is bug on BorderWare MXtreme Mail Firewall SMTP server?, but how t

Re: relay_recipient_maps: rejection of mails with valid recipient addresses

2010-01-27 Thread Erik Sonn
On Tue, 2010-01-26 at 10:33:41 -0600, adrian ilarion ciobanu wrote: > On Tue, Jan 26, 2010 at 04:06:29PM +0100, Erik Sonn wrote: > > > > Dear everyone, > > > > I'm working on some Antispam-Proxy, using Postfix as MTA. Postfix is > > 2.6.2-RC1 on an Ubuntu 8.04 LTS base-system. > > > > > > Preco

Re: OT: The Book of Postfix

2010-01-27 Thread Julien Vehent
On Wed, 27 Jan 2010 19:29:17 +0100, Patrick Ben Koetter wrote: > * JORGE CARMINATI : >> Hi! I just want to know if the authors of this book are planning to >> release >> an updated revision with erratas fixes, etc and when (if applies). >> Thanks >> in advance. > > Good news: We are in the middl

Re: ATRN reloaded

2010-01-27 Thread Victor Duchovni
On Wed, Jan 27, 2010 at 03:40:43PM -0500, Wietse Venema wrote: > 1) What is the need for ATRN in the first place? What are the > options (VPN, ETRN + dynamic DNS, ...). I find almost no information > about supported ATRN solutions with other major MTAs (not counting > qmail patches here), so it is

Re: Postfix as a filtering/relay box

2010-01-27 Thread Javier Fox
Hi Stan, Well, according to our appliance, it's processing about 240,000 emails a day. Our other mail filtering system, which is essentially an ancient in-house wrapper for Spamassassin that speaks libmilter to a couple old sendmail boxen, is a little harder to pin down. SNMP polling shows a

Re: Postfix as a filtering/relay box

2010-01-27 Thread Jorge Armando Medina
Jorge Armando Medina wrote: > Javier Fox wrote: > >> Greetings, >> >> I've inherited a rather kludgy email system consisting of an >> overpriced, underpowered spam filtering appliance which I would very >> much like to replace with a simple *nix box running Postfix and some >> manner of spam fil

Re: Postfix as a filtering/relay box

2010-01-27 Thread Stan Hoeppner
Stan Hoeppner put forth on 1/27/2010 9:47 PM: > http://www.postfix.org/STANDARD_CONFIGURATION_README.html#firewall > http://www.postfix.org/CONTENT_INSPECTION_README.html > http://www.postfix.org/SMTPD_PROXY_README.html > http://www.postfix.org/postconf.5.html#smtpd_recipient_restrictions > http:/

Re: Postfix as a filtering/relay box

2010-01-27 Thread Jorge Armando Medina
Javier Fox wrote: > Greetings, > > I've inherited a rather kludgy email system consisting of an > overpriced, underpowered spam filtering appliance which I would very > much like to replace with a simple *nix box running Postfix and some > manner of spam filtering software (ie spamassassin). I alre

Re: Postfix as a filtering/relay box

2010-01-27 Thread Javier Fox
Many thanks, Sahil and Stan. Just knowing the right terminology to address the situation by is a big help. I hate to sound like such an amateur but thus far I've been focusing my Sysadmin work on everything except email administration, so it's been an uphill battle. Thanks again folks, this

Re: Postfix as a filtering/relay box

2010-01-27 Thread Stan Hoeppner
Javier Fox put forth on 1/27/2010 7:57 PM: > Greetings, > > I've inherited a rather kludgy email system consisting of an overpriced, > underpowered spam filtering appliance which I would very much like to > replace with a simple *nix box running Postfix and some manner of spam > filtering software

Re: Postfix as a filtering/relay box

2010-01-27 Thread Sahil Tandon
On Wed, 27 Jan 2010, Javier Fox wrote: > -MX for domain points to the spam filtering appliance -Appliance > handles user verification (via ldap), rejection, quarantine, etc > -'Clean' mail handed off to MTA for final delivery > > The slightly funky part is that there are a number of destination M

Postfix as a filtering/relay box

2010-01-27 Thread Javier Fox
Greetings, I've inherited a rather kludgy email system consisting of an overpriced, underpowered spam filtering appliance which I would very much like to replace with a simple *nix box running Postfix and some manner of spam filtering software (ie spamassassin). I would like to be able to kee

Re: unusual to syntax creating what looks like an open relay (Postfix 2.2)

2010-01-27 Thread Noel Jones
On 1/27/2010 4:10 PM, Wietse Venema wrote: Noel Jones: use a regexp or pcre check_sender_access map. A very basic example: # /etc/postfix/sender_access.regexp /^@/ REJECT invalid recipient This does not have the expected result. Postfix strips off the obsolete source route syntax before acc

Re: unusual to syntax creating what looks like an open relay (Postfix 2.2)

2010-01-27 Thread Wietse Venema
Noel Jones: > use a regexp or pcre check_sender_access map. A very basic > example: > > # /etc/postfix/sender_access.regexp > /^@/ REJECT invalid recipient This does not have the expected result. Postfix strips off the obsolete source route syntax before access maps see the address. W

Re: unusual to syntax creating what looks like an open relay (Postfix 2.2)

2010-01-27 Thread Wietse Venema
Curtis H. Wilbar Jr.: > Wietse Venema wrote: > > Curtis H. Wilbar Jr.: > > > >> Running a Postfix 2.2 server... > >> > >> The server won't accept u...@somewhereelse.com@ourserver.com > >> > >> But, it is accepting @somewhereelse.com:u...@ourserver.com > >> > > > > This is historical syntax,

Re: unusual to syntax creating what looks like an open relay (Postfix 2.2)

2010-01-27 Thread Noel Jones
On 1/27/2010 3:37 PM, Curtis H. Wilbar Jr. wrote: Wietse Venema wrote: Curtis H. Wilbar Jr.: Running a Postfix 2.2 server... The server won't accept u...@somewhereelse.com@ourserver.com But, it is accepting @somewhereelse.com:u...@ourserver.com This is historical syntax, and is deprecated.

Re: unusual to syntax creating what looks like an open relay (Postfix 2.2)

2010-01-27 Thread Curtis H. Wilbar Jr.
Wietse Venema wrote: Curtis H. Wilbar Jr.: Running a Postfix 2.2 server... The server won't accept u...@somewhereelse.com@ourserver.com But, it is accepting @somewhereelse.com:u...@ourserver.com This is historical syntax, and is deprecated. For compatibility, Postfix accepts the syn

Re: unusual to syntax creating what looks like an open relay (Postfix 2.2)

2010-01-27 Thread Wietse Venema
Curtis H. Wilbar Jr.: > > Running a Postfix 2.2 server... > > The server won't accept u...@somewhereelse.com@ourserver.com > > But, it is accepting @somewhereelse.com:u...@ourserver.com This is historical syntax, and is deprecated. For compatibility, Postfix accepts the syntax and processes it

unusual to syntax creating what looks like an open relay (Postfix 2.2)

2010-01-27 Thread Curtis H. Wilbar Jr.
Running a Postfix 2.2 server... The server won't accept u...@somewhereelse.com@ourserver.com But, it is accepting @somewhereelse.com:u...@ourserver.com We will be upgrading Postfix soon, but in the meantime, how do I best block this ? we have permit_sasl_authenticated, permit_mynetworks, and

Re: ATRN reloaded

2010-01-27 Thread Wietse Venema
adrian ilarion ciobanu: > I'd say the sasl authorization map IS the transport map. The sasl > authorization (not the authentication that is ofcourse outside > atrnd) can be resolved when atrnd > does the lookup domain<->user > transport looks like: > > domainA atrn:user1 > domainB atrn:user1 > dom

Re: a few questions around postfix as bulk mailer (NOT a spammer!!!)

2010-01-27 Thread Alan McKay
On Wed, Jan 27, 2010 at 3:16 PM, Larry Stone wrote: > I think you are still not getting what an MX does. Thanks Larry, you've answered my questions. And yes, I have some reading to do! Thanks again. -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author

Re: a few questions around postfix as bulk mailer (NOT a spammer!!!)

2010-01-27 Thread Larry Stone
On Wed, 27 Jan 2010, Alan McKay wrote: you need an MX for the domains you use in the envelope sender and From/reply-To headers, not for a "box". The MX says which server to send this or that mail to. So let's assume I have mail.example.com as my Kerio server, at IP 10.11.12.13, and relay.examp

Re: ATRN reloaded

2010-01-27 Thread adrian ilarion ciobanu
> Does any Edge MTA other than Microsoft Exchange support the client-side > of ATRN? No idea. I'd say ATRN is a dead subject besides being used by some exchange users and being offered by some ISPs (europe mostly, not sure why). > > Are there enough ATRN-dependent Exchange shops with part-time o

Re: a few questions around postfix as bulk mailer (NOT a spammer!!!)

2010-01-27 Thread Alan McKay
On Wed, Jan 27, 2010 at 1:37 PM, mouss wrote: > unlist an address after some bounces. for this, you will probably need > VERP (if the bounce is received from a remote system, it is hard to find > out the recipient, because of "remote" aliases, forwarding, ...). Ah, OK, as mentioned in my initial

Re: ATRN reloaded

2010-01-27 Thread Victor Duchovni
On Wed, Jan 27, 2010 at 12:54:25PM -0600, adrian ilarion ciobanu wrote: > > Using login names as next-hop destination? I am not sure I like > > this user interface. > > well the next hop in the case of atrn IS the connection authenticated > for the user more than anythin else. i believe there's n

Re: a few questions around postfix as bulk mailer (NOT a spammer!!!)

2010-01-27 Thread mouss
Alan McKay a écrit : >> Postfix will log all rejections AND BOUNCE permanent errors or queue >> expiration ($maximal_queue_lifetime) mails. You also need some means >> of handling the bounces. > > Could you elaborate on "some means of handling the bounces"? unlist an address after some bounces. f

Re: OT: The Book of Postfix

2010-01-27 Thread Patrick Ben Koetter
* JORGE CARMINATI : > Hi! I just want to know if the authors of this book are planning to release > an updated revision with erratas fixes, etc and when (if applies). Thanks > in advance. Good news: We are in the middle of it. There will be new chapters, fixes for errors etc. Todays count: 10 cha

Re: ATRN reloaded

2010-01-27 Thread adrian ilarion ciobanu
> Victor Duchovni: > > On Tue, Jan 26, 2010 at 08:26:15PM -0500, Wietse Venema wrote: > > > > > Then the transport map would look like: > > > > > > example.com atrn:[example.com] > > > example.org atrn:[example.org] > > > > ATRN supports multi-domain requests either explicitly or imp

Re: allowing outside users access to mailman lists

2010-01-27 Thread Wietse Venema
Jeff Weinberger: > I changed main.cf so the only "relay_domains" entry is: > > relay_domains=lists.mylistserver.com You need to verify this with the command postconf -n It's no good posting unverified cut-and-paste to the mailing list. Wietse

Re: allowing outside users access to mailman lists

2010-01-27 Thread Jeff Weinberger
--- In postfix-us...@yahoogroups.com, Wietse Venema wrote: > > Jeff Weinberger: > > > > > > Jeff Weinberger: > > > [ Charset UTF-8 unsupported, converting... ] > > > > --- In postfix-us...@yahoogroups.com, mouss wrote: > > > > > > > > > > Jeff Weinberger a ?crit : > > > > > > I am hoping that thi

OT: The Book of Postfix

2010-01-27 Thread JORGE CARMINATI
Hi! I just want to know if the authors of this book are planning to release an updated revision with erratas fixes, etc and when (if applies). Thanks in advance. Jorge. "Cuidar la naturaleza es vivir mejor... hag?moslo juntos. Imprime s?lo lo necesario." "L

Re: main.cf - "paramter name" format

2010-01-27 Thread Wietse Venema
Otto Hirr: > In answer to my question, and so others don't have to > trudge thru the source to find it... > > The 'parameter name' may be and non-space, non-equals (i.e. =) > string of characters. The fine details are not documented, because I didn't want to promise that Postfix will forever supp

Re: a few questions around postfix as bulk mailer (NOT a spammer!!!)

2010-01-27 Thread Alan McKay
> Postfix will log all rejections AND BOUNCE permanent errors or queue > expiration ($maximal_queue_lifetime) mails. You also need some means > of handling the bounces. Could you elaborate on "some means of handling the bounces"? A more directed question I have in that area is this. If I try to s

Re: a few questions around postfix as bulk mailer (NOT a spammer!!!)

2010-01-27 Thread /dev/rob0
On Wed, Jan 27, 2010 at 09:21:16AM -0500, Alan McKay wrote: > Does this sound right so far? No MX record for this guy? The MX is for receiving mail for a domain. You're only receiving mail from the list, to relay out, no mailboxes. This is similar in spirit to the null client example: http://www.

RE: main.cf - "paramter name" format

2010-01-27 Thread Otto Hirr
In answer to my question, and so others don't have to trudge thru the source to find it... The 'parameter name' may be and non-space, non-equals (i.e. =) string of characters. For those who may be curious... one can start with something like postconf.c leading to: cfg_parser_alloc() in ./src/glob

Re: how to force postfix deliver one domain to different smtp relay?

2010-01-27 Thread Ralf Hildebrandt
* Eero Volotinen : > Hi, > > One problem: how to force postfix to deliver one outgoing host via > other smtp relay? /etc/postfix/transport ? Yes. man 5 transport > smtp server is delivering all mails directly via smtp without > smarthost. > > -- > Eero -- Ralf Hildebrandt Geschäftsbereich I

how to force postfix deliver one domain to different smtp relay?

2010-01-27 Thread Eero Volotinen
Hi, One problem: how to force postfix to deliver one outgoing host via other smtp relay? /etc/postfix/transport ? smtp server is delivering all mails directly via smtp without smarthost. -- Eero

Re: Error: TLS not available due to local problem

2010-01-27 Thread Wietse Venema
Vegard Svanberg: > Hi list, > > I'm receiving several thousand errors per day from Postfix. The error is > "454 4.7.0 TLS not available due to local problem" (see below). Look in your LOGFILE. Postfix does not reveal the details of this problem to the SMTP client. http://www.postfix.org/DEBUG

a few questions around postfix as bulk mailer (NOT a spammer!!!)

2010-01-27 Thread Alan McKay
Hey folks, At work we offer a subscription service and nightly send out 10s of thousands of emails to paying customers. At present this is does via a Kerio mail server which also doubles as our corporate mail server. I'm in the process of setting up a Postfix box that will eventually offload the

Re: Error: TLS not available due to local problem

2010-01-27 Thread Eero Volotinen
2010/1/27 Vegard Svanberg : > * Eero Volotinen [2010-01-27 14:41]: > >> Look at logs. "Out: 450 4.1.8 : Sender address >> rejected: Domain not" looks like DNS problem > > Unless half of Norway's DNS servers are bad, ne.jp doesn't exist. > > :) > > -- > Vegard Svanberg [*tak...@irc (EFnet)] to d

Re: Error: TLS not available due to local problem

2010-01-27 Thread Vegard Svanberg
* Eero Volotinen [2010-01-27 14:41]: > Look at logs. "Out: 450 4.1.8 : Sender address > rejected: Domain not" looks like DNS problem Unless half of Norway's DNS servers are bad, ne.jp doesn't exist. :) -- Vegard Svanberg [*tak...@irc (EFnet)]

Re: Error: TLS not available due to local problem

2010-01-27 Thread Eero Volotinen
>> Any ideas? Thanks in advance. > > Look at logs. "Out: 450 4.1.8 : Sender address > rejected: Domain not" looks like DNS problem > Not also that you can tune postfix log level to debug out this kind of problem. -- Eero

Re: Error: TLS not available due to local problem

2010-01-27 Thread Eero Volotinen
2010/1/27 Vegard Svanberg : > Hi list, > > I'm receiving several thousand errors per day from Postfix. The error is > "454 4.7.0 TLS not available due to local problem" (see below). > > TLS is working, and has been for a long time. I've verified this by > telnet and running STARTTLS. But it seems t

Error: TLS not available due to local problem

2010-01-27 Thread Vegard Svanberg
Hi list, I'm receiving several thousand errors per day from Postfix. The error is "454 4.7.0 TLS not available due to local problem" (see below). TLS is working, and has been for a long time. I've verified this by telnet and running STARTTLS. But it seems to stop working from time to time, and I

Re: allowing outside users access to mailman lists

2010-01-27 Thread Wietse Venema
Jeff Weinberger: > > > > Jeff Weinberger: > > [ Charset UTF-8 unsupported, converting... ] > > > --- In postfix-us...@yahoogroups.com, mouss wrote: > > > > > > > > Jeff Weinberger a ?crit : > > > > > I am hoping that this is something fairly simple that I am > missing > > > > > > > > > > I hav

Re: ATRN reloaded

2010-01-27 Thread Wietse Venema
Victor Duchovni: > On Tue, Jan 26, 2010 at 08:26:15PM -0500, Wietse Venema wrote: > > > Then the transport map would look like: > > > > example.com atrn:[example.com] > > example.org atrn:[example.org] > > ATRN supports multi-domain requests either explicitly or implicitly, > in