Re: What attack is this one?

2011-02-13 Thread Robert Schetterer
Am 12.02.2011 22:53, schrieb Bob Proulx: A friend's Mac running Postfix logged this rejected attack: Feb 11 21:45:28 mailer postfix/smtpd[3708]: NOQUEUE: reject: RCPT from unknown[216.104.47.74]: 504 5.5.2 bluedick: Helo command rejected: need fully-qualified hostname; from=b...@dick.com

Re: postfix-2.9-20110212 segfault in smtp

2011-02-13 Thread Wietse Venema
Ralf Hildebrandt: This seems to be TLS related, since it happens whenever TLS is being used. Here is a patch. This part of the TLS library still needs to be restructured. There is redundancy in the internal APIs: multiple function arguments propagate the same information, and that same

Re: postfix-2.9-20110212 segfault in smtp

2011-02-13 Thread Ralf Hildebrandt
* Wietse Venema wie...@porcupine.org: Ralf Hildebrandt: This seems to be TLS related, since it happens whenever TLS is being used. Here is a patch. This part of the TLS library still needs to be restructured. There is redundancy in the internal APIs: multiple function arguments

Re: postfix-2.9-20110212 segfault in smtp

2011-02-13 Thread Wietse Venema
function arguments propagate the same information, and that same information is maintained by different functions, so things got out of step when code was updated yesterday. Yep, it's working. Thanks. Also uploaded as postfix-2.9-20110213 to ftp.porcupine.org. Wietse

Re: different server for the same domain

2011-02-13 Thread Simone Caruso
If you mean why doesn't he synchronize all mail storage between the servers - do you really think that that will DECREASE the traffic ? doesn't a san decrease traffic between servers!? -- Simone Caruso IT Consultant p.iva: 03045250838

Re: different server for the same domain

2011-02-13 Thread Jeroen Geilman
On 02/13/2011 06:06 PM, Simone Caruso wrote: If you mean why doesn't he synchronize all mail storage between the servers - do you really think that that will DECREASE the traffic ? doesn't a san decrease traffic between servers!? That would be the case if he specifically stated he

milter or socket?

2011-02-13 Thread Darren Pilgrim
I'm testing a filter that's available as both a milter and as a postfix-style policy daemon listening on a unix socket. Either way, the functionality of the filter is identical. Which approach is better? Milter or unix socket? In this case, better is actually two separate criteria:

Issue with header_checks

2011-02-13 Thread Franck MAHE
Hello, I've the following in main.cf header_checks = regexp:/etc/postfix/regexp_table My postfix release is 2.3.8 I've the following in my header_checks regex table: # MAL FORMATED EMAIL ADDRESS /^From:.*\.@.*/ REJECT 1 - Your Email address is not compliant with RFC, Go Away

Re: milter or socket?

2011-02-13 Thread Wietse Venema
Darren Pilgrim: I'm testing a filter that's available as both a milter and as a postfix-style policy daemon listening on a unix socket. Either way, the functionality of the filter is identical. Which approach is better? Milter or unix socket? In this case, better is actually two separate

Another pipelining mystery solved

2011-02-13 Thread Wietse Venema
For a while now, Postfix has logged that clients send commands ahead of time (unauthorized pipelining) but I didn't have code to log what those clients actually sent, because those commands haven't been read yet - they still sit in the input buffer. Meanwhile I have been puzzled by this message

RE: Issue with header_checks

2011-02-13 Thread Franck MAHE
I did the same test on a postfix release 2.6.5, and I’ve the same behavior. Any idea? Franck --- E: mailto:m...@civis.net m...@civis.net De : Franck MAHE [mailto:m...@civis.net] Envoyé : dimanche 13 février 2011 22:33 À :

Re: Issue with header_checks

2011-02-13 Thread Jeroen Geilman
On 02/13/2011 10:33 PM, Franck MAHE wrote: Hello, I've the following in main.cf header_checks = regexp:/etc/postfix/regexp_table My postfix release is 2.3.8 I've the following in my header_checks regex table: # MAL FORMATED EMAIL ADDRESS /^From:.*\.@.*/ REJECT 1 - Your Email

RE: Issue with header_checks

2011-02-13 Thread Franck MAHE
Hi, OK, but the REJECT 3 works fine, so I think it is an issue with the if, but I don’t see why. Franck --- M: +33 6 6042 7249 E: m...@civis.net De : owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] De la part de Jeroen

Re: Issue with header_checks

2011-02-13 Thread Jeroen Geilman
On 02/14/2011 12:13 AM, Franck MAHE wrote: Hi, OK, but the REJECT 3 works fine, so I think it is an issue with the if, but I don't see why. Define works fine. What headers did you test, and what was the result ? Franck --- M: +33 6 6042 7249 E:

RE: Issue with header_checks

2011-02-13 Thread Franck MAHE
I did the test on the From header, so I don’t understand why the if !/^From:.*.*@.*/ don’t catch header From: user...@domain.tld I want to catch all character not compliant with the standard in the From Header. Franck --- E: mailto:m...@civis.net

Re: Issue with header_checks

2011-02-13 Thread Jeroen Geilman
On 02/14/2011 12:37 AM, Franck MAHE wrote: I did the test on the From header, so I don't understand why the if !/^From:.*.*@.*/ don't catch header From: user...@domain.tld A. It does catch that, since it doesn't contain either or . But B. That is unlike anything you have shown before.

RE: Issue with header_checks

2011-02-13 Thread Franck MAHE
OK, so this configuration seems to work fine. /^From:.*.*(\[|\]|\(|\)|\`|\;|\,|\^|\#|\:|\||\\|\@|||\/|\!|\ |\$|||\%|\|').*@.*/ REJECT 3 - Your Email address is not compliant with RFC, Go Away if !/^From:.*.*@.*/ /^From:.*([|]|\(|\)|`|;|,|^|#|:|\||\\|@|||\/|!|$||%||').*@/ REJECT 4 - Your

Re: Issue with header_checks

2011-02-13 Thread Jeroen Geilman
On 02/14/2011 01:37 AM, Franck MAHE wrote: OK, so this configuration seems to work fine. /^From:.*.*(\[|\]|\(|\)|\`|\;|\,|\^|\#|\:|\||\\|\@|||\/|\!|\ |\$|||\%|\|').*@.*/ REJECT 3 - Your Email address is not compliant with RFC, Go Away if !/^From:.*.*@.*/

Re: OT: How to resolve big ISP mail drop

2011-02-13 Thread Stan Hoeppner
Gary Smith put forth on 2/11/2011 11:15 AM: Problem isn't white/grey/black listings, its that they accepted the email with a valid return code but it never made it to the destination box. It only seems to be happened on a few recipients. Basically, in short, the destination ISP (in this

Re: newbie question

2011-02-13 Thread Stan Hoeppner
Victor Duchovni put forth on 2/11/2011 4:50 PM: On Fri, Feb 11, 2011 at 11:38:41PM +0100, Gergely Buday wrote: Dear Postfix experts, I'm new to mailing servers and need advice. Is it reasonable for my small company to use my own mail server? How much configuration is needed for a secure

Re: Issue with header_checks

2011-02-13 Thread Noel Jones
On 2/13/2011 6:37 PM, Franck MAHE wrote: OK, so this configuration seems to work fine. /^From:.*.*(\[|\]|\(|\)|\`|\;|\,|\^|\#|\:|\||\\|\@|||\/|\!|\ |\$|||\%|\|').*@.*/ REJECT 3 - Your Email address is not compliant with RFC, Go Away if !/^From:.*.*@.*/

Re: Issue with header_checks

2011-02-13 Thread Victor Duchovni
On Mon, Feb 14, 2011 at 01:45:28AM +0100, Jeroen Geilman wrote: Any idea for the REJECT 4 to reject the header From: us e...@domain.tld mailto:e...@domain.tld, ie with a space in the first part. The example I showed you, while being much more readable, already included the space. Dare I

Re: Issue with header_checks

2011-02-13 Thread Jeroen Geilman
On 02/14/2011 02:15 AM, Victor Duchovni wrote: On Mon, Feb 14, 2011 at 01:45:28AM +0100, Jeroen Geilman wrote: Any idea for the REJECT 4 to reject the header From: us e...@domain.tld mailto:e...@domain.tld, ie with a space in the first part. The example I showed you, while being