hold queue management

2010-04-15 Thread Rudy Gevaert
Hello postfix users, I have question concerning the hold queue. I have a smtpd_*_restriction map that puts certain mails in the hold queue. (E.g. phishing messages). My idea was to then update the restriction to DISCARD or REJECT the message and to move the mails out of the hold queue. However

Re: Limit outgoing SMTP

2010-04-15 Thread listadecorreo
Wietse Venema wrote: Claudio Prono: Hi to all, Just a question, there is any method to limit the outgoing mails ? Something like domain.com allowed, domain.net not allowed, or u...@domain.com allowed, u...@domain.net not allowed. And this can be done for each user? Postfix enforces s

Re: crl support?

2010-04-15 Thread Victor Duchovni
On Thu, Apr 15, 2010 at 07:16:58PM -0400, zhong ming wu wrote: > I don't find anywhere in TLS documentation how to make postfix respect a crl > so that client's whose certs have been revoked cannot use the submission > server. The supported model for submission servers that use client certs is t

Re: crl support?

2010-04-15 Thread Wietse Venema
zhong ming wu: > Dear List > > I don't find anywhere in TLS documentation how to make postfix respect a crl > so that client's whose certs have been revoked cannot use the submission > server. > > Can someone please confirm that this feature is supported or not? If it is not in the documentatio

Re: block specific IP addresses

2010-04-15 Thread groups
mouss wrote, On 04/15/2010 06:03 PM: CT a écrit : I have several boxes that "check" my relay every 40 seconds to check that the server is up. After multiple attempts to get the number of checks reduced I would like the know the preferred way to block specific IP addresses in Postfix. I have no

Re: block specific IP addresses

2010-04-15 Thread groups
Stan Hoeppner wrote, On 04/15/2010 05:16 PM: CT put forth on 4/15/2010 4:43 PM: I have several boxes that "check" my relay every 40 seconds to check that the server is up. After multiple attempts to get the number of checks reduced I would like the know the preferred way to block specific IP ad

Fwd: Re: [Dovecot] catch-all not working with postfix dovecot lda (fwd)

2010-04-15 Thread fakessh
it may be a problem in dealing with amavisd perl milter Subject: Re: [Dovecot] catch-all not working with postfix dovecot lda On Fri, 16 Apr 2010 09:07:55 +1000, Noel Butler wrote: > Postfix must first "know the user(s)" > therefore this isa postfix issue and not dovecot > dovecot deliver assum

Re: [Dovecot] catch-all not working with postfix dovecot lda

2010-04-15 Thread fakessh
On Fri, 16 Apr 2010 09:07:55 +1000, Noel Butler wrote: > Postfix must first "know the user(s)" > therefore this isa postfix issue and not dovecot > dovecot deliver assumes the MTA has verified the user to accept mail > from and does not do further authentication > > how to build a catch-all wi

crl support?

2010-04-15 Thread zhong ming wu
Dear List I don't find anywhere in TLS documentation how to make postfix respect a crl so that client's whose certs have been revoked cannot use the submission server. Can someone please confirm that this feature is supported or not? Thanks

Re: block specific IP addresses

2010-04-15 Thread mouss
CT a écrit : > I have several boxes that "check" my relay every 40 seconds to > check that the server is up. > > After multiple attempts to get the number of checks reduced I would > like the know the preferred way to block specific IP addresses in Postfix. > > I have no issue with checks.. but e

Re: Many IP address outgoing messages

2010-04-15 Thread Stan Hoeppner
Eduardo Júnior put forth on 4/15/2010 4:52 PM: > On Thu, Apr 15, 2010 at 6:35 PM, Stan Hoeppner wrote: >> Eduardo Júnior put forth on 4/15/2010 8:04 AM: >> >>> Due the high load of e-mails over my link, I want that >>> my messages outgoing through more IPs with only postfix box. >> >> If you only

Re: catch-all not working with postfix dovecot lda

2010-04-15 Thread fakessh
On Fri, 16 Apr 2010 00:26:25 +0200, fakessh wrote: > On Thu, 15 Apr 2010 08:33:43 -0500, Noel Jones > wrote: >> On 4/14/2010 3:42 PM, fakessh wrote: >>> On Wed, 14 Apr 2010 13:50:34 -0500, Noel Jones >>> wrote: On 4/14/2010 1:45 PM, fakessh wrote: > On Wed, 14 Apr 2010 14:12:25 -0400, Ch

Re: catch-all not working with postfix dovecot lda

2010-04-15 Thread fakessh
On Thu, 15 Apr 2010 08:33:43 -0500, Noel Jones wrote: > On 4/14/2010 3:42 PM, fakessh wrote: >> On Wed, 14 Apr 2010 13:50:34 -0500, Noel Jones >> wrote: >>> On 4/14/2010 1:45 PM, fakessh wrote: On Wed, 14 Apr 2010 14:12:25 -0400, Charles Marcus wrote: >> >> >> I changed the entries @f

Re: block specific IP addresses

2010-04-15 Thread Stan Hoeppner
CT put forth on 4/15/2010 4:43 PM: > I have several boxes that "check" my relay every 40 seconds to > check that the server is up. > > After multiple attempts to get the number of checks reduced I would > like the know the preferred way to block specific IP addresses in Postfix. > > I have no iss

Re: Trouble with virtual_alias_maps and mailman stopped working

2010-04-15 Thread Ansgar Wiechers
On 2010-04-15 Bruno Ribeiro da Silva wrote: > Hi, I'm having some trouble with my production server, that mailman > stopped working apparently without any modification. I think > everything at my postfix configuration is ok, but what I'm seeing is > that virtual_alias_maps isn't working as expected

Re: Trouble with virtual_alias_maps and mailman stopped working

2010-04-15 Thread Noel Jones
On 4/15/2010 3:22 PM, Bruno Ribeiro da Silva wrote: Hi, I'm having some trouble with my production server, that mailman stopped working apparently without any modification. I think everything at my postfix configuration is ok, but what I'm seeing is that virtual_alias_maps isn't working as expect

Re: Many IP address outgoing messages

2010-04-15 Thread Eduardo Júnior
Hi, On Thu, Apr 15, 2010 at 6:35 PM, Stan Hoeppner wrote: > Eduardo Júnior put forth on 4/15/2010 8:04 AM: > >> Due the high load of e-mails over my link, I want that >> my messages outgoing through more IPs with only postfix box. > > If you only have one physical link, how will sending mail fro

Re: block specific IP addresses

2010-04-15 Thread Sahil Tandon
On Thu, 15 Apr 2010, CT wrote: > I have several boxes that "check" my relay every 40 seconds to > check that the server is up. > > After multiple attempts to get the number of checks reduced I would > like the know the preferred way to block specific IP addresses in Postfix. http://www.postfix.o

block specific IP addresses

2010-04-15 Thread CT
I have several boxes that "check" my relay every 40 seconds to check that the server is up. After multiple attempts to get the number of checks reduced I would like the know the preferred way to block specific IP addresses in Postfix. I have no issue with checks.. but every 40 seconds is ridicul

Re: Many IP address outgoing messages

2010-04-15 Thread Stan Hoeppner
Eduardo Júnior put forth on 4/15/2010 8:04 AM: > Due the high load of e-mails over my link, I want that > my messages outgoing through more IPs with only postfix box. If you only have one physical link, how will sending mail from multiple IPs within the same subnet solve your link congestion prob

Trouble with virtual_alias_maps and mailman stopped working

2010-04-15 Thread Bruno Ribeiro da Silva
Hi, I'm having some trouble with my production server, that mailman stopped working apparently without any modification. I think everything at my postfix configuration is ok, but what I'm seeing is that virtual_alias_maps isn't working as expected. My setup consists in one virtual domain example.co

Re: errors from postfix

2010-04-15 Thread Oguz Yilmaz
Even if you solve quotes problem, postfix will deliver message to olpcx@aol.com. Is this what you want? You may try smtpname option of fetchmail to deliver to local mail user on postfix server. Or if you do not change "rcpt to", you may try to deliver directly to mda with "-m" option. On Fri

Re: defer: removed spurious QUEUEID log

2010-04-15 Thread Stefan Foerster
* Wietse Venema : > Normally the queue manager deletes a defer logfile when it brings > a message into the active queue, and the bounce daemon deletes the > defer logfile after sending a "mail too old" bounce message. > > If the defer file still exists without the message file, some of > the follo

Re: defer: removed spurious QUEUEID log

2010-04-15 Thread Wietse Venema
Stefan Foerster: > * Wietse Venema : > > Stefan Foerster: > > > It was followed by what seemed the normal delivery of a single mail: > > > > > > postfix-hub/smtpd[27112]: 1E0DE10003: > > > client=edge.kvm.incertum.net[192.168.122.13] > > > > Right, this is a new message that has claimed the name

Re: Limit outgoing SMTP

2010-04-15 Thread Wietse Venema
Claudio Prono: > Hi to all, > > Just a question, there is any method to limit the outgoing mails ? > Something like domain.com allowed, domain.net not allowed, or > u...@domain.com allowed, u...@domain.net not allowed. And this can be > done for each user? Postfix enforces such limits while RECE

Re: defer: removed spurious QUEUEID log

2010-04-15 Thread Stefan Foerster
* Wietse Venema : > Stefan Foerster: > > It was followed by what seemed the normal delivery of a single mail: > > > > postfix-hub/smtpd[27112]: 1E0DE10003: > > client=edge.kvm.incertum.net[192.168.122.13] > > Right, this is a new message that has claimed the name 1E0DE10003, > Postfix must not a

Re: Protection against stolen credentials?

2010-04-15 Thread Ignacio García
El 15/04/10 12:41, ram escribió: The points mentioned should help you especially ratelimits , and FBL's Are you planning to do outgoing scanning. Hi Ram. I believe ratelimits and FBLs can help, but just partially. FBLs are of great help, but they work only after much harm has been done. For

Re: DKIM-milter only for outgoing

2010-04-15 Thread Tomoyuki Murakami
From: Birta Levente Subject: DKIM-milter only for outgoing Date: Thu, 15 Apr 2010 17:23:12 +0300 > My postfix server is set up with amavisd-new and dkim-milter. > > In the main.cf: > > content_filter = smtp-amavis:[127.0.0.1]:10024 > > smtpd_milters = inet:localhost:20209 > non_smtpd_milters =

DKIM-milter only for outgoing

2010-04-15 Thread Birta Levente
Hi all My postfix server is set up with amavisd-new and dkim-milter. In the main.cf: content_filter = smtp-amavis:[127.0.0.1]:10024 smtpd_milters = inet:localhost:20209 non_smtpd_milters = inet:localhost:20209 milter_protocol = 2 milter_default_action = accept With this configuration the D

Limit outgoing SMTP

2010-04-15 Thread Claudio Prono
Hi to all, Just a question, there is any method to limit the outgoing mails ? Something like domain.com allowed, domain.net not allowed, or u...@domain.com allowed, u...@domain.net not allowed. And this can be done for each user? If is possible, there is any web based or similar tool to manage t

Re: catch-all not working with postfix dovecot lda

2010-04-15 Thread Noel Jones
On 4/14/2010 3:42 PM, fakessh wrote: On Wed, 14 Apr 2010 13:50:34 -0500, Noel Jones wrote: On 4/14/2010 1:45 PM, fakessh wrote: On Wed, 14 Apr 2010 14:12:25 -0400, Charles Marcus wrote: I changed the entries @fakessh to r...@localhost in /etc/postfix/virtual postmap then a file to the po

RE: Append a custom head via a filter, partially OT

2010-04-15 Thread Gary Smith
> Is there some reason the Message-ID won't work as a unique > identifier? > It's about compliance tracking and tagging for specific things. > You can use a policy server to insert a header based on > envelope information. > http://www.postfix.org/SMTPD_POLICY_README.html > > If your header mus

Re: Append a custom head via a filter, partially OT

2010-04-15 Thread Noel Jones
On 4/14/2010 11:02 PM, Gary Smith wrote: We use a filter to break out and run our spamassassin and other checks. In bash shell that process, we have a need to insert a custom unique header per email for compliance. Is there a simple way of doing this without having to go into any special mime

Re: Many IP address outgoing messages

2010-04-15 Thread Eero Volotinen
> Anyone could point me to the respective doc? how about: http://www.kutukupret.com/2009/11/30/postfix-smtp-outgoing-ip-rotator-using-iptables/ -- Eero

Re: Many IP address outgoing messages

2010-04-15 Thread Noel Jones
On 4/15/2010 8:04 AM, Eduardo Júnior wrote: Hi, all Due the high load of e-mails over my link, I want that my messages outgoing through more IPs with only postfix box. I read about that, but not in official documentation. I want understand how this works and how to implement. Anyone could po

Many IP address outgoing messages

2010-04-15 Thread Eduardo Júnior
Hi, all Due the high load of e-mails over my link, I want that my messages outgoing through more IPs with only postfix box. I read about that, but not in official documentation. I want understand how this works and how to implement. Anyone could point me to the respective doc? Thanks, -- E

Re: All email forward a copy to testing server

2010-04-15 Thread Wietse Venema
Patric Falinder: > Ok after a little trail and error I tried to remove the > "no_address_mappings" from "-o receive_override_options=" in mater.cf > and it started working:D I did as I first was told, with the options in > main.cf so I didn't add the -o recipient_bcc_maps = > regexp:/etc/postfix/re

Re: defer: removed spurious QUEUEID log

2010-04-15 Thread Wietse Venema
Stefan Foerster: > This morning, I got a warning in my logs that I have never seen > before: > > postfix-hub/cleanup[27115]: warning: defer: removed spurious 1E0DE10003 log Long ago, queue file after {incoming/active/deferred}/1E0DE10003 was deleted, without removing also removing the file defer/

defer: removed spurious QUEUEID log

2010-04-15 Thread Stefan Foerster
This morning, I got a warning in my logs that I have never seen before: postfix-hub/cleanup[27115]: warning: defer: removed spurious 1E0DE10003 log It was followed by what seemed the normal delivery of a single mail: postfix-hub/smtpd[27112]: 1E0DE10003: client=edge.kvm.incertum.net[192.168.122

Re: Protection against stolen credentials?

2010-04-15 Thread ram
On Wed, 2010-04-14 at 21:15 +0200, Ignacio García wrote: > Hi there. Some days ago 1 of our postfix servers was abused by bot > networks using one of our customer's stolen credentials, inadvertently > done by a virus/keylogger probably. In few hours more than 2 spam > messages were in our