Re: Postscreen DNSBL checks preferable over reject_client_rbl ?

2010-05-31 Thread Henrik K
On Sun, May 30, 2010 at 10:22:08PM +0200, Jeroen Geilman wrote: > > It looks as if moving my RBLs to postscreen means they're no longer > needed in my *_restrictions - is there a scenario where this would > not be the case ? If you want to whitelist by other means than IP.

Re: smtpd_recipient_restrictions has no effect

2010-05-31 Thread Jarrod Neven
> anyway, look at your master.cf. you may have overriden your smtpd > restrictions there... Good thinking, from my little understanding the master.cf is ok # grep -v '^ *\(#.*\)\?$' /etc/postfix/master.cf smtp inet n - n - - smtpd -v - v pickupfifo n

Re: SMTP sender-dependent authentication per host?

2010-05-31 Thread Wietse Venema
Rich Wales: > Now, here's my problem. I want to be able to do special handling of > mail to a subdomain (sandals.richw.org). Mail for this subdomain > should be relayed via its own server (sandals.richw.org, as shown in > my "transport" file) -- and this alternate relay host should *not* > requir

Re: SMTP sender-dependent authentication per host?

2010-05-31 Thread Rich Wales
> If sandals.richw.org should not require SASL authentication, then > you should not turn on SASL authentication on sandals.richw.org. Ah. Indeed, I had inadvertently enabled SASL authentication in the Sandals SMTP server (smtpd_sasl_auth_enable = yes in that server's Postfix configuration). Thi

Re: smtpd_recipient_restrictions has no effect

2010-05-31 Thread Michael Orlitzky
On 05/31/2010 08:15 AM, Jarrod Neven wrote: The non verbose version: ay 31 22:03:50 DKPADMMAIL1 postfix/postfix-script[3329]: starting the Postfix mail system May 31 22:03:50 DKPADMMAIL1 postfix/master[3330]: daemon started -- version 2.5.1, configuration /etc/postfix May 31 22:04:30 DKPADMMAIL1

Re: remove duplicate "received from" header

2010-05-31 Thread Gabor Illo
- to remove the header above, you can use header_checks, but you need to detect which headers to remove (you obviously don't want to remove headers added by remote systems). with (pcre syntax assumed): /^Received: \[127\.0\.0\.1\] \(\S+ \S+\)\s+by mail\.stageline\.hu \(Postfix\) with ESMT

Re: SMTP sender-dependent authentication per host?

2010-05-31 Thread Wietse Venema
Rich Wales: > > If sandals.richw.org should not require SASL authentication, then > > you should not turn on SASL authentication on sandals.richw.org. > > Ah. Indeed, I had inadvertently enabled SASL authentication in the > Sandals SMTP server (smtpd_sasl_auth_enable = yes in that server's > Post

Re: smtpd_recipient_restrictions has no effect

2010-05-31 Thread Noel Jones
On 5/31/2010 7:15 AM, Jarrod Neven wrote: Noel Jones: There are no compile options that will affect this. Show non-verbose postfix logging of a transaction you feel is handled incorrectly. Using this config: # postconf -n config_directory = /etc/postfix debug_peer_level = 9 disable_vrfy_comma

Re: remove duplicate "received from" header

2010-05-31 Thread Noel Jones
On 5/31/2010 11:02 AM, Gabor Illo wrote: - to remove the header above, you can use header_checks, but you need to detect which headers to remove (you obviously don't want to remove headers added by remote systems). with (pcre syntax assumed): /^Received: \[127\.0\.0\.1\] \(\S+ \S+\)\s+by mail\.s

postscreen faux-pas

2010-05-31 Thread Jeroen Geilman
Hi all, I was just alerted by standon about the fact that, while the postfix manual claims all postscreen_* options are AVAILABLE as of 2.7, this is not in fact true. There is a teeny tiny notice on the announce that you need to dump the 2.8 devel executables for postscreen into your 2.7 insta

Re: Postscreen DNSBL checks preferable over reject_client_rbl ?

2010-05-31 Thread Sahil Tandon
On Sun, 30 May 2010, Jeroen Geilman wrote: > I upgraded recently to 2.7.0 and thought I'd take advantage of the > nice separation of duties that postscreen provides. [...] > Does postscreen also log any DNSBL hits ? I can't seem to find any so far. Although postconf(5) says the postscreen daemon

Re: postscreen faux-pas

2010-05-31 Thread Wietse Venema
Jeroen Geilman: > Hi all, > > I was just alerted by standon about the fact that, while the postfix > manual claims all postscreen_* options are AVAILABLE as of 2.7, this is > not in fact true. > There is a teeny tiny notice on the announce that you need to dump the > 2.8 devel executables for p

Postfix performance issue

2010-05-31 Thread Teh Kim Chooi
Hi guys, i recently just setup a high volume postfix server, still in testing mode before the server go for live, OS rhel 5.5 and postfix version 2.3.3 server with 1 quad core, 8gb ram OS on mirror disk, /var/spool/postfix in 1+0 6 disks, all is SAS 15k disk. my postfix configuration file will b

Re: postscreen faux-pas

2010-05-31 Thread Jeroen Geilman
On 05/31/2010 08:50 PM, Wietse Venema wrote: Jeroen Geilman: Hi all, I was just alerted by standon about the fact that, while the postfix manual claims all postscreen_* options are AVAILABLE as of 2.7, this is not in fact true. There is a teeny tiny notice on the announce that you need to d

Re: Postfix performance issue

2010-05-31 Thread Jeroen Geilman
On 05/31/2010 08:50 PM, Teh Kim Chooi wrote: Hi guys, i recently just setup a high volume postfix server, still in testing mode before the server go for live, OS rhel 5.5 and postfix version 2.3.3 server with 1 quad core, 8gb ram OS on mirror disk, /var/spool/postfix in 1+0 6 disks, all is S

Re: Postfix performance issue

2010-05-31 Thread Wietse Venema
Teh Kim Chooi: [ Charset ISO-8859-1 unsupported, converting... ] > Hi guys, > > i recently just setup a high volume postfix server, still in testing mode > before the server go for live, OS rhel 5.5 and postfix version 2.3.3 Which is no longer maintained. The last release was postfix-2.3.19 in Au

Re: SMTP sender-dependent authentication per host?

2010-05-31 Thread Rich Wales
> You're supposed to use sender-dependent AUTHENTICATION in combination > with sender-dependent RELAYHOST. Otherwise, it makes no sense. I was trying to describe a situation in which a site might have to deal with two separate relay hosts . . . where the choice of relay is dependent on the destin

Re: SMTP sender-dependent authentication per host?

2010-05-31 Thread Wietse Venema
Rich Wales: > > You're supposed to use sender-dependent AUTHENTICATION in combination > > with sender-dependent RELAYHOST. Otherwise, it makes no sense. > > I was trying to describe a situation in which a site might have to deal > with two separate relay hosts . . . That makes absolutely no sense

Re: smtpd_recipient_restrictions has no effect

2010-05-31 Thread mouss
Jarrod Neven a écrit : >> a[snip] > http://engage.neven.info/postfix-static.txt > sigh. This is mail submitted via the sendmail command. such mail is not subject to smtpd_* parameters. smtpd_* parameters only apply to smtpd and derived processes. The sendmail command is used by many programs (in

Re: remove duplicate "received from" header

2010-05-31 Thread mouss
Gabor Illo a écrit : >> - to remove the header above, you can use header_checks, but you need to >> detect which headers to remove (you obviously don't want to remove >> headers added by remote systems). with (pcre syntax assumed): >> >> /^Received: \[127\.0\.0\.1\] \(\S+ \S+\)\s+by >> mail\.st

Re: Postfix performance issue

2010-05-31 Thread Teh Kim Chooi
It sounds weird to me, the 192.168.1.10 is on server eth0 network interface, and it will be on my local etc host file, will postfix still do NSlookup ? since i try inject 100 msgs, there is not time out 5 secs then only start injecting for the 100 msgs, the 5 secs is the time for 100 msgs to injec

Re: Postfix performance issue

2010-05-31 Thread Wietse Venema
Teh Kim Chooi: > It sounds weird to me, the 192.168.1.10 is on server eth0 network interface, > and it will be on my local etc host file, will postfix still do NSlookup ? The Postfix SMTP server looks up the client hostname with the getnameinfo() system library routine. I have attached a test pro

Re: smtpd_recipient_restrictions has no effect [Solved]

2010-05-31 Thread Jarrod Neven
Thanks guys for pointing out that the mail was sent via send mail, I could not tell that by the logs. SquirrelMail defaults to this and I was not smart enough to know it needed to be changed. > - do not post verbose logs unless you are explicitely asked to do so > - do put your logs in the message

probleme with dk dkim and dlv for miltiple domain

2010-05-31 Thread fakessh
hello all hello postfix network hello centos network I am having problems with my dk and dkim signature of my emails I have successfully made the process of verification of signatures dnssec all my domains are correct and good displays on dlv.isc.org the reason for my problem just the reason t

Re: probleme with dk dkim and dlv for miltiple domain

2010-05-31 Thread Sahil Tandon
On Tue, 01 Jun 2010, fakessh wrote: > I am having problems with my dk and dkim signature of my emails > I have successfully made the process of verification of signatures dnssec > all my domains are correct and good displays on dlv.isc.org > the reason for my problem just the reason that I have up