Invalid IP address (ipv6)

2010-08-31 Thread Arthur Titeica
Hello, I have a postfix which works quite OK with both IPv4 and IPv6 but just today I see some errors comming from one of the authenticated users. Out: 220 xxx.yyy.ro ESMTP Postfix In: EHLO [::z:z:::fe79:ccd9] Out: 250-xxx.yyy.ro Out: 250-PIPELINING Out: 250-SIZE 5120

Using VERP on Postfix server

2010-08-31 Thread Reuben (Plexus IT)
Hey All, I am trying to use email sub addressing (VERP) on my Postfix server. To do this I should be able to add tag to an email address return+tag=bob@give2partners.org and still receive the email to mailto:ret...@give2partners.org ret...@give2partners.org. I have activated the following

Re: canonical_maps pattern causes NDR to be sent as requeued message

2010-08-31 Thread Wietse Venema
D G Teed: Aug 30 22:30:20 myself postfix/smtpd[25013]: NOQUEUE: reject: RCPT from mta03.anisp.ca[24.111.111.111]: 550 5.1.1 12345...@example.com: Recipient address rejected: User unknown in local recipient table However, if the email address is of the format of 6 numbers followed by a

Re: Invalid IP address (ipv6)

2010-08-31 Thread Wietse Venema
Arthur Titeica: Hello, I have a postfix which works quite OK with both IPv4 and IPv6 but just today I see some errors comming from one of the authenticated users. Out: 220 xxx.yyy.ro ESMTP Postfix In: EHLO [::z:z:::fe79:ccd9] The correct syntax for IPv6 address

Re: Using VERP on Postfix server

2010-08-31 Thread Wietse Venema
Reuben (Plexus IT): Hey All, I am trying to use email sub addressing (VERP) on my Postfix server. To do this I should be able to add tag to an email address return+tag=bob@give2partners.org and still receive the email to mailto:ret...@give2partners.org ret...@give2partners.org. I

Re: Invalid IP address (ipv6)

2010-08-31 Thread Simon Waters
On Tuesday 31 August 2010 11:17:25 Arthur Titeica wrote: In: EHLO [::z:z:::fe79:ccd9] Could someone share some thought about it? Not seen this myself, and only starting to learn IPv6 but EHLO tag not conforming with RFC2821 4.1.3 should start [IPV6 for an IPv6 tag so

Re: Invalid IP address (ipv6)

2010-08-31 Thread Arthur Titeica
On 08/31/2010 02:06 PM, Wietse Venema wrote: Arthur Titeica: Hello, I have a postfix which works quite OK with both IPv4 and IPv6 but just today I see some errors comming from one of the authenticated users. Out: 220 xxx.yyy.ro ESMTP Postfix In: EHLO [::z:z:::fe79:ccd9]

Re: Regexp for blocking dynamic hosts?

2010-08-31 Thread Charles Marcus
On 2010-08-30 6:40 PM, Stan Hoeppner s...@hardwarefreak.com wrote: REJECTGeneric - Please relay via ISP (telesp.net.br) Thanks for this Stan, but just to confirm, was that supposed to be a TAB between REJECT and Generic? Also - why a generic comment to relay via telesp.net.br? I'm

Re: Invalid IP address (ipv6)

2010-08-31 Thread Arthur Titeica
On Tue, 31 Aug 2010 06:48:31 -0500, Noel Jones njo...@megan.vbhcs.org wrote: On 8/31/2010 5:17 AM, Arthur Titeica wrote: Hello, I have a postfix which works quite OK with both IPv4 and IPv6 but just today I see some errors comming from one of the authenticated users. Out: 220 xxx.yyy.ro

Re: Regexp for blocking dynamic hosts?

2010-08-31 Thread J. Roeleveld
On Tuesday 31 August 2010 03:15:31 junkyardma...@verizon.net wrote: .* This will block all hosts, not just specific ones. -- From: Patrick Lists postfix-l...@puzzled.xs4all.nl Sent: Monday, August 30, 2010 2:34 PM To:

Wildcard .domain.tld notation in mydestination

2010-08-31 Thread Jasper Jongmans
Detailed information: http://pastie.org/private/w93tv2bb7yrb8suyjqkqmq Tested on: Postfix 2.6.5 on FreeBSD 7.2p7 I had configured mydestination to contain both domain.tld and .domain.tld notations, expecting that would accept mail for domains and their subdomains as local mail. Postfix had in

Re: Wildcard .domain.tld notation in mydestination

2010-08-31 Thread Wietse Venema
As far as I can tell, the documentation does not promise that mydestination supports .domain matching, therefore such behavior is not supported. If the documentation is in error, you're welcome to report this and the documentation will be fixed. It is not practical for Postfix to document all

LDAP group members filter

2010-08-31 Thread Nikolay Shopik
Hello, Is there way to set ldap filter after recursion? By default postfix will set filter to (objectclass=*) to query every member of group. Basically I would like not include some members of group (account disabled for example).

Re: Wildcard .domain.tld notation in mydestination

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 02:22:02PM +0200, Jasper Jongmans wrote: Detailed information: http://pastie.org/private/w93tv2bb7yrb8suyjqkqmq Tested on: Postfix 2.6.5 on FreeBSD 7.2p7 I had configured mydestination to contain both domain.tld and .domain.tld notations, expecting that would accept

Re: Migrating from sendmail, a few questions...

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 01:53:21PM +1000, Jean-Yves Avenard wrote: Hi On 31 August 2010 03:42, Victor Duchovni victor.ducho...@morganstanley.com wrote: Probably not surprising when the Cyrus library is pre-empted by Apple's pw server, and the mechanism list is defined in an

Re: LDAP group members filter

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 04:49:41PM +0400, Nikolay Shopik wrote: Hello, Is there way to set ldap filter after recursion? By default postfix will set filter to (objectclass=*) to query every member of group. Basically I would like not include some members of group (account disabled for

Re: Wildcard .domain.tld notation in mydestination

2010-08-31 Thread Jasper Jongmans
On 2010-08-31 14:54, Wietse Venema wrote: As far as I can tell, the documentation does not promise that mydestination supports .domain matching, therefore such behavior is not supported. If the documentation is in error, you're welcome to report this and the documentation will be fixed. It

Re: Recipient_delimiter

2010-08-31 Thread Victor Duchovni
On Mon, Aug 30, 2010 at 08:01:10PM -0700, Constance Mallon wrote: I have a question regarding recipient delimiters. I need to set the recipient delimiter for my mailing lists (mailman) with - but I also need to set the recipient_delimiter to + for my calendar server. How can I set the

Re: Wildcard .domain.tld notation in mydestination

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 03:32:48PM +0200, Jasper Jongmans wrote: On 2010-08-31 14:54, Wietse Venema wrote: As far as I can tell, the documentation does not promise that mydestination supports .domain matching, therefore such behavior is not supported. If the documentation is in error,

SASL readme smtp/smtpd confusion

2010-08-31 Thread Jasper Jongmans
The SASL readme section Postfix SMTP/LMTP client policy - SASL mechanism properties http://www.postfix.org/SASL_README.html#client_sasl_policy, subsection Encrypted SMTP session (TLS), mentions smtpd_sasl_security_options and smtpd_sasl_tls_security_options, but I think their smtp_ equivalents are

Re: SASL readme smtp/smtpd confusion

2010-08-31 Thread Wietse Venema
Jasper Jongmans: The SASL readme section Postfix SMTP/LMTP client policy - SASL mechanism properties http://www.postfix.org/SASL_README.html#client_sasl_policy, subsection Encrypted SMTP session (TLS), mentions smtpd_sasl_security_options and smtpd_sasl_tls_security_options, but I think their

AW: local_recipient_maps with LDAP

2010-08-31 Thread Marco Rebsamen
Ok I removed that * now from the request an used mail as result_attribute. This works now for the local domain but not for the others. I added all the non-local domains to the parameter virtual_alias_domains and set virtual_alias_maps to ldap:/etc/postfix/virtual.cf I tested it with postmap -q

Re: local_recipient_maps with LDAP

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 04:05:57PM +0200, Marco Rebsamen wrote: Ok I removed that * now from the request an used mail as result_attribute. This works now for the local domain ... Good. I added all the non-local domains to the parameter virtual_alias_domains and set virtual_alias_maps to

Problem telnet postfix from a network segment not local

2010-08-31 Thread Cimoni Enwis Ogwujiakwu
Hello I am having problem send mails from a client(not on a segment local to postfix server)  connected  to a postfix server on port 25. I tried telnetting the post fix server on telnet 192.168.20.19 25 and I get the following Could not open connection to the host, on port 25: Connect failed

Postfix forwarding may result in backscatter

2010-08-31 Thread Stefan Seidel
Hi, I am using Postfix for some time now and up to now I could always make it behave the way it should. However, I have a problem now: I use virtual_alias_maps (with mysql backend, not that it would matter) to sort mail into local user's mailboxes, but also sometimes to forward mail to external

Re: Postfix forwarding may result in backscatter

2010-08-31 Thread Wietse Venema
Stefan Seidel: This forwarding to external addresses however, makes my Postfix create backscatter. Example: hijac...@yahoo.example.com sends email to u...@mysystem.com - virtual_alias_maps says: deliver it to interestedpa...@gmx.example.com However, the mail server at gmx.example.com may

Re: Postfix forwarding may result in backscatter

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 05:07:10PM +0200, Stefan Seidel wrote: I use virtual_alias_maps (with mysql backend, not that it would matter) to sort mail into local user's mailboxes, but also sometimes to forward mail to external mail addresses (upon user request). I know that this kind of

Re: Postfix forwarding may result in backscatter

2010-08-31 Thread Stefan Seidel
On Tue, 31 Aug 2010 11:20:37 -0400 (EDT), Wietse Venema wie...@porcupine.org wrote: Stefan Seidel: This forwarding to external addresses however, makes my Postfix create backscatter. Example: hijac...@yahoo.example.com sends email to u...@mysystem.com - virtual_alias_maps says: deliver it to

Re: Regexp for blocking dynamic hosts?

2010-08-31 Thread Stan Hoeppner
Charles Marcus put forth on 8/31/2010 6:48 AM: On 2010-08-30 6:40 PM, Stan Hoeppner s...@hardwarefreak.com wrote: REJECT Generic - Please relay via ISP (telesp.net.br) Thanks for this Stan, but just to confirm, was that supposed to be a TAB between REJECT and Generic? It doesn't

Re: Postfix forwarding may result in backscatter

2010-08-31 Thread Simon Waters
On Tuesday 31 August 2010 16:57:16 Stefan Seidel wrote: Really, I don't care about NDNs for _forwarded_ mail, esp. since most of the mail traffic on this address is from mailing lists. Most mailing lists can automatically detect dead accounts using NDN - but your choice to do it manually or

Re: Regexp for blocking dynamic hosts?

2010-08-31 Thread Charles Marcus
On 2010-08-31 12:22 PM, Stan Hoeppner s...@hardwarefreak.com wrote: Charles Marcus put forth on 8/31/2010 6:48 AM: Also - why a generic comment to relay via telesp.net.br? I'm thinking to change this to just 'Please relay via your ISP'... Not sure what you're asking here Charles. Probably

Re: Postfix forwarding may result in backscatter

2010-08-31 Thread Stefan Seidel
On Tue, 31 Aug 2010 17:39:50 +0100, Simon Waters sim...@zynet.net wrote: On Tuesday 31 August 2010 16:57:16 Stefan Seidel wrote: Additionally, the mail is also stored to a local mailbox. I know, that means that users could fetch them via POP3/IMAP/Webmail, but as it is, they prefer getting

Re: Postfix forwarding may result in backscatter

2010-08-31 Thread Wietse Venema
Stefan Seidel: I was actually in favour of using SRS as I also use SPF and it is often mentioned that SRS is needed for SPF to work across forwarding, however everything I found on the internet told me that Postfix didn't support it. Postfix implements DKIM, DomainKeys, SPF, SRS etc. via

Re: Postfix forwarding may result in backscatter

2010-08-31 Thread Stefan Seidel
On Tue, 31 Aug 2010 13:45:25 -0400 (EDT), Wietse Venema wie...@porcupine.org wrote: Stefan Seidel: I was actually in favour of using SRS as I also use SPF and it is often mentioned that SRS is needed for SPF to work across forwarding, however everything I found on the internet told me that

Re: Identifying instance owner for different Postfix processes

2010-08-31 Thread Justin Pasher
Noel Jones wrote: The only bone I have to throw will reduce the number of places to change it. # main.cf my_syslog_name = instanceX syslog_name = $my_syslog_name # master.cf foo foo -o syslog_name=$my_syslog_name Well, it sounded like a good idea when I read it, but it looks like

AW: local_recipient_maps with LDAP

2010-08-31 Thread Marco Rebsamen
I added all the non-local domains to the parameter virtual_alias_domains and set virtual_alias_maps to ldap:/etc/postfix/virtual.cf Do you understand what virtua alias domains are for? I thought I would... I tested it with postmap -q and it worked. What does worked mean? I got the same

postfix check

2010-08-31 Thread Bob Cohen
I was noodling with my postfix install and got the following when running postfix check: postfix/postfix-script: warning: group or other writable: /etc/postfix/./pop_relay_access.db postfix/postfix-script: warning: group or other writable: /etc/postfix/./access.db postfix/postfix-script:

Re: postfix check

2010-08-31 Thread lunix
run the command postfix set-permissions to fix it. On Tue, Aug 31, 2010 at 3:33 PM, Bob Cohen b...@mojotools.com wrote: I was noodling with my postfix install and got the following when running postfix check: postfix/postfix-script: warning: group or other writable:

Re: local_recipient_maps with LDAP

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 08:07:52PM +0200, Marco Rebsamen wrote: Probably mail is the original address in most cases. Where is such mail routed? If to another server, these are relay domains, not virtual alias domains, unless you rewrite the address in transit... The Messages should be

Re: postfix check

2010-08-31 Thread Bob Cohen
On Aug 31, 2010, at 2:40 PM, lunix wrote: run the command postfix set-permissions to fix it. Now that's what I call easy! Thanks folks. -Bob

Re: Regexp for blocking dynamic hosts?

2010-08-31 Thread Stan Hoeppner
Charles Marcus put forth on 8/31/2010 11:44 AM: What the following looked like to me: REJECTGeneric - Please relay via ISP (telesp.net.br) was that *everything* rejected by this regex would get the same reject message: Please relay via ISP (telesp.net.br) Apparently that

Re: Identifying instance owner for different Postfix processes

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 01:02:28PM -0500, Justin Pasher wrote: smtp unix - - n - - smtp -o syslog_name=$my_instance_name Turns out, the macro doesn't get expanded in the process name. 4894 ?S 0:00 smtpd -n smtp -t

Re: Regexp for blocking dynamic hosts?

2010-08-31 Thread Charles Marcus
On 2010-08-31 4:06 PM, Stan Hoeppner s...@hardwarefreak.com wrote: Have you browsed over that file Charles? There are over 1600 fully qualified rDNS pattens, one per line. Most are specific to a particular ISP, and those all have unique custom reject messages with the ISP name in them.

AW: local_recipient_maps with LDAP

2010-08-31 Thread Marco Rebsamen
Hm, looks like some things changed since I set up the last system. I mean why did it work before ? I guess i buy the newest version of Peer Heinlein's book :-P Anyway, it works now the way I wanted it. Thank you for your patience. -Ursprüngliche Nachricht- Von:

Re: Problem telnet postfix from a network segment not local

2010-08-31 Thread Ansgar Wiechers
On 2010-08-31 Cimoni Enwis Ogwujiakwu wrote: I am having problem send mails from a client(not on a segment local to postfix server) connected to a postfix server on port 25. I tried telnetting the post fix server on telnet 192.168.20.19 25 and I get the following Could not open connection to

mirror status

2010-08-31 Thread John Fawcett
Wietse by mistake I just managed to download and compile a year old postfix snapshot version (I missed that it was 2009 instead of 2010). Wouldn't it be a good idea to remove the links to outdated mirrors when the status is more than x days old (could be done automatically). Normally I chose a

Postfix Message ID process

2010-08-31 Thread Morten P.D. Stevens
Hi all, a small question regard to the postfix message id process. Every message has a unique ID provided by the postfix messaging process. Some messages have a 11 characters message id and other a 12 characters message ID although our servers all running exactly the same postfix version.

Re: Postfix Message ID process

2010-08-31 Thread brian moore
On Wed, 1 Sep 2010 01:19:12 +0200 Morten P.D. Stevens mstev...@imt-systems.com wrote: Hi all, a small question regard to the postfix message id process. Every message has a unique ID provided by the postfix messaging process. Some messages have a 11 characters message id and other a 12

Re: Postfix Message ID process

2010-08-31 Thread Wietse Venema
Morten P.D. Stevens: Hi all, a small question regard to the postfix message id process. Every message has a unique ID provided by the postfix messaging process. The queue file name is only unique while the message is stored in the queue. Once the message is delivered the queue file name

Re: Postfix Message ID process

2010-08-31 Thread Morten P.D. Stevens
-Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Wietse Venema Sent: Wednesday, September 01, 2010 1:31 AM To: Postfix users Subject: Re: Postfix Message ID process The queue file name contains time information

misunderstanding of some connections

2010-08-31 Thread fakessh
hi all hi folks hi wieste : the saincristain of postfix hi all the postfix network I consult regularly logs postfix I consult regularly logs postfix, and he appears regularly attempts to connect mx3.mail2000.com.tw and that is that I do not understand how it happens I have the following rules

Re: Regexp for blocking dynamic hosts?

2010-08-31 Thread pf at alt-ctrl-del.org
On 2010-08-31 4:45 PM, Charles Marcus wrote: Yep, in that it shows why I really should read all of a post before asking questions about it. I was only looking at the one example line you included in the body - I neglected the last part about the *file* to download that contained all of the