Re: mail rejected by/because of DKIM

2010-05-12 Thread mouss
Sharma, Ashish a écrit : > Hi, > > I have setup a postfix mail receiving server and deployed DKIM and SID+SPF > milter by referring (http://www.postfix.org/MILTER_README.html). > > Now things are working fine but at times some of the mails that are received > on my postfix are rejected with err

Re: check_recipient_access regexp

2010-05-12 Thread mouss
VR a écrit : > Having read postfix.org/regexp_table.5.html, I'm experimenting to stop > junk mail to common system accounts with > check_recipient_access regexp:/etc/postfix/reject_by_recipient_regexp > > and trying to learn how to craft regexp's. I've tried many iterations > similar to: > /^To: m

Re: How Virtual users?

2010-05-12 Thread mouss
Gaby L a écrit : > I use postfix and courier-imap with system users (with nologin). > I want to transfer system users with virtual users. > How virtual users program is the ,but I want to transfer users from system. > Why virtual users is more better than system users? > well, they are not. ea

Re: Best practice to drop spam with virtual mailboxes

2010-05-12 Thread Reinaldo de Carvalho
On Wed, May 12, 2010 at 6:51 PM, Take wrote: > On 05/12/2010 06:55 PM, Dennis Guhl wrote: >> I don't know if cyrus can do something similar, but I think you want >> something like sieve_before in Dovecot: > > I wish it could, but it can't. I found this as well, but change to > dovecot isn't someth

Re: Best practice to drop spam with virtual mailboxes

2010-05-12 Thread Take
On 05/12/2010 06:55 PM, Dennis Guhl wrote: > I don't know if cyrus can do something similar, but I think you want > something like sieve_before in Dovecot: I wish it could, but it can't. I found this as well, but change to dovecot isn't something we'd like to do. So this doesn't help either. Than

Re: check_recipient_access regexp

2010-05-12 Thread Brian Evans - Postfix List
On 5/12/2010 4:44 PM, VR wrote: > Having read postfix.org/regexp_table.5.html, I'm experimenting to stop > junk mail to common system accounts with > check_recipient_access regexp:/etc/postfix/reject_by_recipient_regexp > > and trying to learn how to craft regexp's. I've tried many iterations > sim

check_recipient_access regexp

2010-05-12 Thread VR
Having read postfix.org/regexp_table.5.html, I'm experimenting to stop junk mail to common system accounts with check_recipient_access regexp:/etc/postfix/reject_by_recipient_regexp and trying to learn how to craft regexp's. I've tried many iterations similar to: /^To: man@/ REJECT or /^To:

Re: Postfix, SASL sending mail through Postfix.

2010-05-12 Thread Patrick Ben Koetter
* BABEDH-DHRA : > My mail server uses Postfix 2.5.5 amd-64 driven virtual mailbox domains > stored in a MySQL database, managed by PostfixAdmin and phpMyAdmin > > Postfix and Dovecot SASL > > My question / fear is if I should I just add the example excerpt to the > bottom of the original file or

Re: mail rejected by/because of DKIM

2010-05-12 Thread Noel Jones
On 5/12/2010 1:53 PM, Sharma, Ashish wrote: Hi, I have setup a postfix mail receiving server and deployed DKIM and SID+SPF milter by referring (http://www.postfix.org/MILTER_README.html). Now things are working fine but at times some of the mails that are received on my postfix are rejected w

mail rejected by/because of DKIM

2010-05-12 Thread Sharma, Ashish
Hi, I have setup a postfix mail receiving server and deployed DKIM and SID+SPF milter by referring (http://www.postfix.org/MILTER_README.html). Now things are working fine but at times some of the mails that are received on my postfix are rejected with error code 550 and they receive a message

RE: content_filter post processing question

2010-05-12 Thread Gary Smith
As covered, the pipe probably isn't what I want to do. Looking into the advanced content filter, these seems two paths; execute a script as a process from postfix (spawn) or setup a simple proxy indepdenent of postfix. Either one would probably work. In either case, spawn or proxy, is it poss

Re: A couple noob questions

2010-05-12 Thread Wietse Venema
Richard Pickett: > > There are two types of connection caching. One of them is what I > > call anti-social. > > > > It would be anti-social to keep a connection open in the hope that > > you will be sending messages by quickly after each other. The default setting is "smtp_connection_cache_on_dema

Re: A couple noob questions

2010-05-12 Thread Richard Pickett
Wietse, First, thanks for your help. > /etc/postfix/main.cf: >transport_maps = hash:/etc/postfix/transport > > /etc/postfix/transport: >example.com retry:Mail for example.com is waiting to be > scheduled > > Then, update the transport table as per > http://www.postfix.org/DATABAS

Re: A couple noob questions

2010-05-12 Thread Wietse Venema
Richard Pickett: > I've typically ran on boxes w/ Exim. We are evaluating different MTAs, I've > been using a stock postfix install and am pretty happy. I have two main > areas that we need to "tweak". We have a mailing list and run into all the > problems that are natorious with spammers, even tho

Re: Do header_checks matching generate an email?

2010-05-12 Thread Noel Jones
On 5/12/2010 10:54 AM, VR wrote: I ask because I saw this as a result of a header_check match: May 12 09:47:00 mail postfix/smtpd[10013]: 696F12BC36: client=spiteful.cnc.net[207.155.249.209] May 12 09:47:00 mail postfix/cleanup[10034]: 696F12BC36: reject: header Received: from 123.44.167.190.d.d

How to compile postfix with dovecot and sasl support

2010-05-12 Thread Wilberth Pérez
Hi everyone: is correct this compile option on postfix for integrate dovecot and sasl authentication? make makefiles CCARGS=" -DHAS_SSL -DUSE_SASL_AUTH -I/usr/local/ssl/include -I/usr/local/include/sasl -I/usr/local/BerkeleyDB/include" AUXLIBS="-L/usr/local/lib -L/usr/local/ssl/lib -L/usr/local/l

A couple noob questions

2010-05-12 Thread Richard Pickett
I've typically ran on boxes w/ Exim. We are evaluating different MTAs, I've been using a stock postfix install and am pretty happy. I have two main areas that we need to "tweak". We have a mailing list and run into all the problems that are natorious with spammers, even though we definitely aren't

Re: DSN without attachment?

2010-05-12 Thread Noel Jones
On 5/12/2010 10:33 AM, Markus Schwengel wrote: The error message that is send back to the sender is generated by postfix and looks like this: <--> This is the mail system at host I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's

Re: Best practice to drop spam with virtual mailboxes

2010-05-12 Thread Dennis Guhl
On Wed, May 12, 2010 at 02:19:06PM +0300, Take wrote: > On 05/12/2010 11:39 AM, Roman Medina-Heigl Hernandez wrote: > > I have a similar setup. What I do is using sieve. My script for mailbox > > > You have an extra advantage with this method: users may choose to edit > > his/her filter so he/she

Do header_checks matching generate an email?

2010-05-12 Thread VR
I ask because I saw this as a result of a header_check match: May 12 09:47:00 mail postfix/smtpd[10013]: 696F12BC36: client=spiteful.cnc.net[207.155.249.209] May 12 09:47:00 mail postfix/cleanup[10034]: 696F12BC36: reject: header Received: from 123.44.167.190.d.dyn.codetel.net.do (123.44.167.1

Re: postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Uwe Dippel
On 05/12/2010 10:46 PM, Larry Stone wrote: Based on what you've provided us, I'd say that it fails at five minutes past every hour because that's the only time you try to run it. Spot on and brown bag for me. Of course, it used to be */5 until I carelessly dropped some characters with all my

Re: DSN without attachment?

2010-05-12 Thread Markus Schwengel
The error message that is send back to the sender is generated by postfix and looks like this: <--> This is the mail system at host I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please

How Virtual users?

2010-05-12 Thread Gaby L
I use postfix and courier-imap with system users (with nologin). I want to transfer system users with virtual users. How virtual users program is the ,but I want to transfer users from system. Why virtual users is more better than system users? Thanks Gaby

Re: Postfix, SASL sending mail through Postfix.

2010-05-12 Thread BABEDH-DHRA
My mail server uses Postfix 2.5.5 amd-64 driven virtual mailbox domains stored in a MySQL database, managed by PostfixAdmin and phpMyAdmin Postfix and Dovecot SASL My question / fear is if I should I just add the example excerpt to the bottom of the original file or should I just go down the e

Re: postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Larry Stone
On Wed, 12 May 2010, Uwe Dippel wrote: I guess it will help. I have no access now, but I'll report back next week. And I do like those kind hints about Google. ;) My concern at searching however, wasn't the |"fetchmail: connection to localhost:smtp [::1/25] failed: Connection refused.", but th

Re: DSN without attachment?

2010-05-12 Thread Noel Jones
On 5/12/2010 9:28 AM, Markus Schwengel wrote: Hi all, I'm using postfix 2.4.6 and clamav-milter 0.9.6 to scan mails for viruses. clamav-milter is set to reject mails in case of a virus found. Postfix then sends a DSN to the sender with the original mail (and the virus) attached. Is there a way

Encoded attack using cyrus sasl

2010-05-12 Thread John te Bokkel / Tempus
I came across an interesting attack when I was setting up fail2ban. My fail2ban config didn't have the ignoreip variable set correctly so I ended up accidentally temp banning localhost, but it brought an interesting bit of log to my attention. 9100 May 10 12:00:42 [postfix/smtpd] < unknown[190.144

Re: .de dns error

2010-05-12 Thread lst_hoe02
Zitat von "Kammen van, Marco, Springer SBM NL" : Hi All, Not something specific for this list maybe, but was just wondering if anyone else noticed a DNS error with all .de domains... Suddenly got a ... load of NDR's and user complaints. (Host or domain name not found. Name service error f

RE: content_filter post processing question

2010-05-12 Thread Gary Smith
> The SMTP protocol is not a trade secret. The definition is publically > available from the IETF website. You make it hard to try to be lazy ;). I'll look into the RFC. In the background I will probably just enforce the strict_rfc821_envelopes policy.

Re: virtual_alias_maps

2010-05-12 Thread Noel Jones
On 5/12/2010 7:36 AM, M.S. Lucas wrote: Hello, Newbie allert. I want to do the following us...@domain.nl us...@domain.nl , us...@domain.nl So every email to user1 is delivered to user1 and to user2. I try this in the virtual_alias_maps but is

Re: Empty 'local_recipient_maps =' and security

2010-05-12 Thread Noel Jones
On 5/12/2010 1:56 AM, Aniruddha wrote: Hi, I have set up postfix with a mail_transport to Zarafa. To fix an ' Recipient address rejected: User unknown in local recipient table' error I have to put an empty 'local_recipient_maps =' in postfix's main.cf. The correct solution is to point that p

Re: content_filter post processing question

2010-05-12 Thread Wietse Venema
Gary Smith: > > > > That depends on how Postfix is configured. > > > > > > > > Remember, Postfix passes the RCPT TO and MAIL FROM commands to the > > > > filter as received. By default, Postfix allows non-standard forms > > > > (such as your examples). If this is a problem then you will need > > >

DSN without attachment?

2010-05-12 Thread Markus Schwengel
Hi all, I'm using postfix 2.4.6 and clamav-milter 0.9.6 to scan mails for viruses. clamav-milter is set to reject mails in case of a virus found. Postfix then sends a DSN to the sender with the original mail (and the virus) attached. Is there a way to tell postfix to not include the attachment in

Re: postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Uwe Dippel
On 05/12/2010 09:27 PM, Jorge Andrea G Carminati wrote: Uwe: you may want to try this tip that I've got from google: http://www.bloovis.com/wordpress/?p=172 HTH I guess it will help. I have no access now, but I'll report back next week. And I do like those kind hints about Google. ;) My c

Re: .de dns error

2010-05-12 Thread Robert Schetterer
Am 12.05.2010 15:55, schrieb Kammen van, Marco, Springer SBM NL: > Hi All, > > > > Not something specific for this list maybe, but was just wondering if > anyone else noticed a DNS error with all .de domains… > > Suddenly got a … load of NDR’s and user complaints. > > > > (Host or domain n

Re: .de dns error

2010-05-12 Thread Markus Schönhaber
12.05.2010 15:55, Kammen van, Marco, Springer SBM NL: > Not something specific for this list maybe, but was just wondering if > anyone else noticed a DNS error with all .de domains... Yes, the DeNIC name servers had a major problem.

.de dns error

2010-05-12 Thread Kammen van, Marco, Springer SBM NL
Hi All, Not something specific for this list maybe, but was just wondering if anyone else noticed a DNS error with all .de domains... Suddenly got a ... load of NDR's and user complaints. (Host or domain name not found. Name service error for name=mwoffice.de type=A: Host not found) (Hos

RE: content_filter post processing question

2010-05-12 Thread Gary Smith
> > > That depends on how Postfix is configured. > > > > > > Remember, Postfix passes the RCPT TO and MAIL FROM commands to the > > > filter as received. By default, Postfix allows non-standard forms > > > (such as your examples). If this is a problem then you will need > > > to configure "strict_r

Re: postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Wietse Venema
Uwe Dippel: > On 05/12/2010 07:13 PM, Wietse Venema wrote: > >> "fetchmail: connection to localhost:smtp [::1/25] failed: Connection > >> refused." is what I get in the mail at *:05. > >> > > Fetchmail wants to connect over IP VERSION 6. > > > > Apparently, Postfix does not listen on IP VERSI

RE: postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Jorge Andrea G Carminati
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Uwe Dippel > Sent: Wednesday, May 12, 2010 10:20 > To: Wietse Venema > Cc: postfix-users@postfix.org > Subject: Re: postfix unavailable at 5 minutes after the hour? > > On 0

Re: postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Uwe Dippel
On 05/12/2010 07:13 PM, Wietse Venema wrote: "fetchmail: connection to localhost:smtp [::1/25] failed: Connection refused." is what I get in the mail at *:05. Fetchmail wants to connect over IP VERSION 6. Apparently, Postfix does not listen on IP VERSION 6. Apparently. Maybe I shoul

ot: problem with .de root servers

2010-05-12 Thread Robert Schetterer
Hi, there was/is a Problem with the denic .de root servers this might give you some Problems with mail it looks like that it is recent partly working again -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

virtual_alias_maps

2010-05-12 Thread M.S. Lucas
Hello, Newbie allert. I want to do the following us...@domain.nl us...@domain.nl, us...@domain.nl So every email to user1 is delivered to user1 and to user2. I try this in the virtual_alias_maps but is this the best place and don't I get a loop this way? With kind reg

Re: Restrict alias delivery to internal users

2010-05-12 Thread Wietse Venema
Jon Tullett: > Hi all > > I've had a bit of a Google but not come up with an answer for this - > hoping someone can help me out. Apologies if I've missed something > excruciatingly obvious. This is described in http://www.postfix.org/RESTRICTION_CLASS_README.html, Wietse > I'd like to s

Restrict alias delivery to internal users

2010-05-12 Thread Jon Tullett
Hi all I've had a bit of a Google but not come up with an answer for this - hoping someone can help me out. Apologies if I've missed something excruciatingly obvious. I'd like to set up group aliases ("everyone@", sort of thing) but restrict them from external senders so that only internal users

Re: Best practice to drop spam with virtual mailboxes

2010-05-12 Thread Take
On 05/12/2010 11:39 AM, Roman Medina-Heigl Hernandez wrote: > I have a similar setup. What I do is using sieve. My script for mailbox > You have an extra advantage with this method: users may choose to edit > his/her filter so he/she could exactly decide whether he/she want junk mail > to be dropp

Re: postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Wietse Venema
> "fetchmail: connection to localhost:smtp [::1/25] failed: Connection > refused." is what I get in the mail at *:05. Fetchmail wants to connect over IP VERSION 6. Apparently, Postfix does not listen on IP VERSION 6. Wietse

Re: postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Stan Hoeppner
Uwe Dippel put forth on 5/12/2010 4:58 AM: > This is quite strange: > > I have been running fetchmail from a cronjob for a few years now, to > collect my messages from an IMAP server and forward it to another one. > > This was and is the (only) cronjob: > # m h dom mon dow command > 5 * * * *

postfix unavailable at 5 minutes after the hour?

2010-05-12 Thread Uwe Dippel
This is quite strange: I have been running fetchmail from a cronjob for a few years now, to collect my messages from an IMAP server and forward it to another one. This was and is the (only) cronjob: # m h dom mon dow command 5 * * * * /usr/bin/fetchmail > /dev/null No changes of the .fetchm

Re: Best practice to drop spam with virtual mailboxes

2010-05-12 Thread Roman Medina-Heigl Hernandez
Hello, I have a similar setup. What I do is using sieve. My script for mailbox creation also includes a small sieve filter setup, so every mailbox has its own filter. So Postfix setup (with spamassasin) adds X-Spam-* headers and the user decides based on that headers. You have an extra advantage

Best practice to drop spam with virtual mailboxes

2010-05-12 Thread Take
Hello! I've been trying to figure out the best way to drop/sort spam with virtual users. All documentation I could find didn't fit to our virtual configuration and I'm a bit confused what's the best way to drop spam. Our setup is postfix+cyrus-imapd+spamassassin. Users have access to sieve via ro