Relay access denied

2011-02-14 Thread Georg Schönweger
Hi, yesterday i received a failure-notice; Remote host said: 554 5.7.1 i...@domain.com: Relay access denied -- this is the error-message which i received from the final recipient. The email was send from our webserver. The webserver (postfix) sends the email via relayhost (another external

Re: Relay access denied

2011-02-14 Thread Stan Hoeppner
Georg Schönweger put forth on 2/14/2011 1:59 AM: Hi, yesterday i received a failure-notice; Remote host said: 554 5.7.1 i...@domain.com: Relay access denied -- this is the error-message which i received from the final recipient. The email was send from our webserver. The webserver (postfix)

Re: Relay access denied

2011-02-14 Thread Georg Schönweger
you mean the failure-notice email? Ok here it is; Hi. This is the qmail-send program at smtplq01.our-external-smtp.com. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. i...@final-recipient.com:

Re: Relay access denied

2011-02-14 Thread Reindl Harald
Is your server using authentication on the relay-host? If not this MUST NOT work because if it would work the relayserver coul be used from everybody out there for spam Am 14.02.2011 08:59, schrieb Georg Schönweger: Hi, yesterday i received a failure-notice; Remote host said: 554 5.7.1

FreeBSD tuning for a dovecot + postfix server ?

2011-02-14 Thread Frank Bonnet
Hello I've googled around to tune a bit my mailhub ( AMD64 FreeBSD 8.1, 12 Gb RAM, 2 Tb raid5 disks , ~4000 mailboxes unix users ) but I am a bit confused, All my clients use thunderbird as MUA ( IMAP, IMAPS ) to connect to the mailhub no direct access to the machine. Any of you guys has

regex header_checks and line wrapping

2011-02-14 Thread J4K
Good Monday morning to you all, I have a regex question for header_checks, that I cannot get to work. Possible caused by line wrapping. I want to replace this line: Received: from [127.0.0.1] (unknown [62.11.11.11]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client

Re: FreeBSD tuning for a dovecot + postfix server ?

2011-02-14 Thread Matthias Andree
Am 14.02.2011 11:08, schrieb Frank Bonnet: Hello I've googled around to tune a bit my mailhub ( AMD64 FreeBSD 8.1, 12 Gb RAM, 2 Tb raid5 disks , ~4000 mailboxes unix users ) but I am a bit confused, All my clients use thunderbird as MUA ( IMAP, IMAPS ) to connect to the mailhub no direct

Re: Relay access denied

2011-02-14 Thread Bjørn Ruberg
On 02/14/2011 10:47 AM, Georg Schönweger wrote: you mean the failure-notice email? No, he meant logs from your mail server. Ok here it is; Hi. This is the qmail-send program at smtplq01.our-external-smtp.com. That's not postfix. When it comes to why your e-mail can't be delivered, the

Re: FreeBSD tuning for a dovecot + postfix server ?

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 5:08 AM, Frank Bonnet wrote: Hello I've googled around to tune a bit my mailhub ( AMD64 FreeBSD 8.1, 12 Gb RAM, 2 Tb raid5 disks , ~4000 mailboxes unix users ) but I am a bit confused, All my clients use thunderbird as MUA ( IMAP, IMAPS ) to connect to the mailhub no direct

Re: Relay access denied

2011-02-14 Thread Georg Schönweger
Yes the server is using authentication on the relay-host. /etc/postfix/main.cf: smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/smtp_auth smtp_sasl_security_options = noanonymous smtp_use_tls = yes smtp_tls_note_starttls_offer = yes it is just only this particular

Re: Relay access denied

2011-02-14 Thread Stan Hoeppner
Bjørn Ruberg put forth on 2/14/2011 4:18 AM: On 02/14/2011 10:47 AM, Georg Schönweger wrote: you mean the failure-notice email? No, he meant logs from your mail server. Ok here it is; Hi. This is the qmail-send program at smtplq01.our-external-smtp.com. That's not postfix. When it

Re: Relay access denied

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 5:32 AM, Georg Schönweger wrote: Yes the server is using authentication on the relay-host. /etc/postfix/main.cf: smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/smtp_auth smtp_sasl_security_options = noanonymous smtp_use_tls = yes smtp_tls_note_starttls_offer

Re: Relay access denied

2011-02-14 Thread Georg Schönweger
Well in the server logs (our local smtp) there are only these lines; I don't have access to the logs of our relayhost smtp. Feb 12 19:00:40 susi1 postfix/pickup[23920]: B7B27255B449: uid=33 from=www-data Feb 12 19:00:40 susi1 postfix/cleanup[25085]: B7B27255B449:

Re: OT: How to resolve big ISP mail drop

2011-02-14 Thread Nick Edwards
I know this is a few days old, but i've been away on holidays On Sat, Feb 12, 2011 at 8:40 PM, Andrew Beverley a...@andybev.com wrote: On Fri, 2011-02-11 at 13:25 -0500, Kris Deugau wrote: Gary Smith wrote: As already stated, there's not a huge amount that you can do on your own.

Re: Relay access denied

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 6:12 AM, Georg Schönweger wrote: [SNIP] You get Relay access denied when you're contacting a RECEIVING mail server with a message that that mailserver doesn't want to handle, because it's not the authoritative destination for that domain. Nothing here implies anything wrong with a

Auditing encrypted/clear text SMTP transmission

2011-02-14 Thread Stuart Kendrick
Hi, I would like to parse my mail logs each month and report on the number of messages which were encrypted during transmission (TLS) and the number which were sent/received in the clear (along with domains of course). I can see Martin Schmitt proposing a logging enhancement which would fit this

Re: Auditing encrypted/clear text SMTP transmission

2011-02-14 Thread Noel Jones
On 2/14/2011 6:51 AM, Stuart Kendrick wrote: Hi, I would like to parse my mail logs each month and report on the number of messages which were encrypted during transmission (TLS) and the number which were sent/received in the clear (along with domains of course). How do other folks solve

Re: regex header_checks and line wrapping

2011-02-14 Thread Noel Jones
On 2/14/2011 4:16 AM, J4K wrote: Good Monday morning to you all, I have a regex question for header_checks, that I cannot get to work. Possible caused by line wrapping. I want to replace this line: Received: from [127.0.0.1] (unknown [62.11.11.11]) (using TLSv1 with cipher

Re: Auditing encrypted/clear text SMTP transmission

2011-02-14 Thread Wietse Venema
Stuart Kendrick: Hi, I would like to parse my mail logs each month and report on the number of messages which were encrypted during transmission (TLS) and the number which were sent/received in the clear (along with domains of course). In the SMTP server, this could be logged as:

Re: regex header_checks and line wrapping

2011-02-14 Thread J4K
On 02/14/2011 02:23 PM, Noel Jones wrote: On 2/14/2011 4:16 AM, J4K wrote: Good Monday morning to you all, I have a regex question for header_checks, that I cannot get to work. Possible caused by line wrapping. I want to replace this line: Received: from [127.0.0.1] (unknown

Re: regex header_checks and line wrapping

2011-02-14 Thread Noel Jones
On 2/14/2011 7:29 AM, J4K wrote: On 02/14/2011 02:23 PM, Noel Jones wrote: On 2/14/2011 4:16 AM, J4K wrote: Good Monday morning to you all, I have a regex question for header_checks, that I cannot get to work. Possible caused by line wrapping. I want to replace this line: Received: from

Re: regex header_checks and line wrapping

2011-02-14 Thread J4K
On 02/14/2011 02:41 PM, Noel Jones wrote: On 2/14/2011 7:29 AM, J4K wrote: On 02/14/2011 02:23 PM, Noel Jones wrote: On 2/14/2011 4:16 AM, J4K wrote: Good Monday morning to you all, I have a regex question for header_checks, that I cannot get to work. Possible caused by line wrapping. I

Re: Relay access denied

2011-02-14 Thread Georg Schönweger
Am 14.02.2011 12:28, schrieb Daniel Bromberg: On 2/14/2011 6:12 AM, Georg Schönweger wrote: [SNIP] You get Relay access denied when you're contacting a RECEIVING mail server with a message that that mailserver doesn't want to handle, because it's not the authoritative destination for that

Re: regex header_checks and line wrapping

2011-02-14 Thread J4K
On 02/14/2011 02:23 PM, Noel Jones wrote: On 2/14/2011 4:16 AM, J4K wrote: Good Monday morning to you all, I have a regex question for header_checks, that I cannot get to work. Possible caused by line wrapping. I want to replace this line: Received: from [127.0.0.1] (unknown

Postscreen

2011-02-14 Thread JC Putter
Can postscreen be compared to SNARE? Thank you

sending email to an SMTP server with public IP addr (but domain not registered yet)

2011-02-14 Thread sunhux G
Hi Pending the purchase of our domain, I have already set up an SMTP email server running postfix this server already has a public IP address, say aa.bb.cc.dd Q1: Can I test send an email to this server by sending to a_postfix_mail...@aa.bb.cc.dd ? Q2: Secondly after getting the domain, how

Re: Relay access denied

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 8:51 AM, Georg Schönweger wrote: [SNIP] [REPOSTED FROM PERSONAL REPLY] Hello Daniel, thank you for this clear explanation! How can i figure out if the receving mail server is listet as current MX for the recipient mail address? It's not a big problem for us if the recipients mail

Re: Relay access denied

2011-02-14 Thread Noel Jones
On 2/14/2011 7:51 AM, Georg Schönweger wrote: thx for your help. i can't check the DNS query on our relayhost smtp server. On our local Server the MX is current. My conclusion is that a) our external relayhost smtp has wrong MX entry or b) recipient mailserver is misconfigured. I will switch off

[SOLVED] Re: regex header_checks and line wrapping

2011-02-14 Thread J4K
On 02/14/2011 02:54 PM, J4K wrote: On 02/14/2011 02:23 PM, Noel Jones wrote: On 2/14/2011 4:16 AM, J4K wrote: Good Monday morning to you all, I have a regex question for header_checks, that I cannot get to work. Possible caused by line wrapping. I want to replace this line:

Re: regex header_checks and line wrapping

2011-02-14 Thread Noel Jones
On 2/14/2011 7:54 AM, J4K wrote: On 02/14/2011 02:23 PM, Noel Jones wrote: On 2/14/2011 4:16 AM, J4K wrote: Good Monday morning to you all, I have a regex question for header_checks, that I cannot get to work. Possible caused by line wrapping. I want to replace this line:

Re: sending email to an SMTP server with public IP addr (but domain not registered yet)

2011-02-14 Thread Noel Jones
On 2/14/2011 8:15 AM, sunhux G wrote: Hi Pending the purchase of our domain, I have already set up an SMTP email server running postfix this server already has a public IP address, say aa.bb.cc.dd Q1: Can I test send an email to this server by sending to a_postfix_mail...@aa.bb.cc.dd

Can Postfix do this?

2011-02-14 Thread Scott Fitzhugh
I am new to Postfix and am wondering something about Postfix. Currently, all our email comes into 2 Proofpoint appliances. Email that passes through goes straight to the Groupwise Internet Agent (GWIA), which distributes the email where it needs to go within our email system. We are switching

Re: Can Postfix do this?

2011-02-14 Thread Noel Jones
On 2/14/2011 8:39 AM, Scott Fitzhugh wrote: I am new to Postfix and am wondering something about Postfix. Currently, all our email comes into 2 Proofpoint appliances. Email that passes through goes straight to the Groupwise Internet Agent (GWIA), which distributes the email where it needs to

Re: Can Postfix do this?

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 9:39 AM, Scott Fitzhugh wrote: I am new to Postfix and am wondering something about Postfix. Currently, all our email comes into 2 Proofpoint appliances. Email that passes through goes straight to the Groupwise Internet Agent (GWIA), which distributes the email where it needs to

Re: Relay access denied

2011-02-14 Thread Georg Schönweger
Am 14.02.2011 15:20, schrieb Daniel Bromberg: On 2/14/2011 8:51 AM, Georg Schönweger wrote: [SNIP] [REPOSTED FROM PERSONAL REPLY] Hello Daniel, thank you for this clear explanation! How can i figure out if the receving mail server is listet as current MX for the recipient mail address?

Re: Relay access denied

2011-02-14 Thread Georg Schönweger
Am 14.02.2011 15:21, schrieb Noel Jones: On 2/14/2011 7:51 AM, Georg Schönweger wrote: thx for your help. i can't check the DNS query on our relayhost smtp server. On our local Server the MX is current. My conclusion is that a) our external relayhost smtp has wrong MX entry or b) recipient

Re: Can Postfix do this?

2011-02-14 Thread Scott Fitzhugh
Thanks - I'll look into trying this out! Scott Noel Jones njo...@megan.vbhcs.org 2/14/2011 8:59 AM On 2/14/2011 8:39 AM, Scott Fitzhugh wrote: I am new to Postfix and am wondering something about Postfix. Currently, all our email comes into 2 Proofpoint appliances. Email that passes

Re: sending email to an SMTP server with public IP addr (but domain not registered yet)

2011-02-14 Thread sunhux G
Thanks. But gmail doesn't allow/accept brackets (square or round brackets) in the To: field. Any particular email client allows this? Outlook? On Mon, Feb 14, 2011 at 10:32 PM, Noel Jones njo...@megan.vbhcs.org wrote: On 2/14/2011 8:15 AM, sunhux G wrote: Hi Pending the purchase of our

Re: Auditing encrypted/clear text SMTP transmission

2011-02-14 Thread Victor Duchovni
On Mon, Feb 14, 2011 at 08:24:14AM -0500, Wietse Venema wrote: In the SMTP server, this could be logged as: QUEUEID: client=foo.example.com, tls=whatever That line is logged whenever the Postfix SMTP server opens a mail delivery transaction. I use a log parser that collates all the

Re: Relay access denied

2011-02-14 Thread Noel Jones
On 2/14/2011 9:36 AM, Georg Schönweger wrote: Am 14.02.2011 15:21, schrieb Noel Jones: On 2/14/2011 7:51 AM, Georg Schönweger wrote: thx for your help. i can't check the DNS query on our relayhost smtp server. On our local Server the MX is current. My conclusion is that a) our external

Re: sending email to an SMTP server with public IP addr (but domain not registered yet)

2011-02-14 Thread Noel Jones
On 2/14/2011 10:14 AM, sunhux G wrote: Thanks. But gmail doesn't allow/accept brackets (square or round brackets) in the To: field. Any particular email client allows this? Outlook? I didn't say to use round brackets. The form user@[a.b.c.d] is specified in RFC's covering email. I know

Summarizing email

2011-02-14 Thread Scappatura Rocco
Hello, I have different aliases configured under the same domain, say: ali...@domain.tld ali...@domain.tld ali...@domain.tld which forward an email to the same mailbox, say: mail...@domain2.tld I have tried the following experiments.. EXPERIMENT 1: mail...@domain2.tld is the mailbox

Re: Summarizing email

2011-02-14 Thread Noel Jones
On 2/14/2011 10:56 AM, Scappatura Rocco wrote: Hello, I have different aliases configured under the same domain, say: ali...@domain.tld ali...@domain.tld ali...@domain.tld which forward an email to the same mailbox, say: mail...@domain2.tld I have tried the following experiments..

RE: Summarizing email

2011-02-14 Thread Scappatura Rocco
-Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Noel Jones Sent: Monday, February 14, 2011 6:10 PM To: postfix-users@postfix.org Subject: Re: Summarizing email On 2/14/2011 10:56 AM, Scappatura Rocco wrote: Hello,

Bug when sending to invalid addess extension?

2011-02-14 Thread Matt Holgate
Hi, Not sure if this is a bug or not, but thought I'd mention it, as I noticed it recently when investigating an intrusion attempt (it was an attempt to exploit this vulnerability in spamassassin-milter: http://archives.neohapsis.com/archives/fulldisclosure/2010-03/0139.html) I have root

Re: Bug when sending to invalid addess extension?

2011-02-14 Thread Wietse Venema
Already fixed early 2010. You need to upgrade to Postfix 2.8 or later. I don't know if this will be back-ported to earlier releases. Wietse 20100422 Workaround (introduced: postfix-19990906 a.k.a. Postfix 0.8.0). The Postfix local delivery agent did not properly

RE: Issue with header_checks

2011-02-14 Thread Franck MAHE
Hi Guys, Thanks for your help, and I promise to send my mail in Text format next time. So, for sure, I agree with you that it is not the right way to fight against SPAM, but my configuration is based on SpamAssassin+Amavis+ClamAV with DNSBL, DKIM implementation and SPF record to fight the

Re: Postscreen

2011-02-14 Thread /dev/rob0
On Mon, Feb 14, 2011 at 03:55:25PM +0200, JC Putter wrote: Can postscreen be compared to SNARE? Shall I compare thee to a summer's day? Thou art more temperate, and more fair. http://en.wikipedia.org/wiki/Snare gives me no clue as to what you might be asking. However, postscreen has

Re: FreeBSD tuning for a dovecot + postfix server ?

2011-02-14 Thread mouss
Le 14/02/2011 11:08, Frank Bonnet a écrit : Hello I've googled around to tune a bit my mailhub ( AMD64 FreeBSD 8.1, 12 Gb RAM, I guess you mean 12 Go (or 12 GB) ;-p 2 Tb raid5 disks , ~4000 mailboxes unix users ) but I am a bit confused, All my clients use thunderbird as MUA ( IMAP,

Re: Issue with header_checks

2011-02-14 Thread mouss
Le 13/02/2011 23:30, Franck MAHE a écrit : I did the same test on a postfix release 2.6.5, and I’ve the same behavior. Any idea? Franck --- E: mailto:m...@civis.net m...@civis.net De : Franck MAHE [mailto:m...@civis.net] Envoyé :

Re: Issue with header_checks

2011-02-14 Thread mouss
Le 14/02/2011 22:22, mouss a écrit : # MAL FORMATED EMAIL ADDRESS /^From:.*\.@.*/ REJECT 1 - Your Email address is not compliant with RFC, Go Away /^From:.*.*\.\..*@.*/ REJECT 2 - Your Email address is not compliant with RFC, Go Away you can probably make all that simpler.

email is properly rejected but reason given to user unclear

2011-02-14 Thread Per-Erik Persson
I have recently found out the beuty of restriction classes. So to reject senders from certain sites that usually misspell their sender address I have set up the following: smtpd_restriction_classes = verify_client_sender verify_client_sender = reject_unverified_sender, permit

Re: email is properly rejected but reason given to user unclear

2011-02-14 Thread Noel Jones
On 2/14/2011 4:17 PM, Per-Erik Persson wrote: I have recently found out the beuty of restriction classes. So to reject senders from certain sites that usually misspell their sender address I have set up the following: smtpd_restriction_classes = verify_client_sender verify_client_sender =

Re: email is properly rejected but reason given to user unclear

2011-02-14 Thread Wietse Venema
Per-Erik Persson: But the sender(roundcube webmail) gets the errormessage 450 could not add recipient That is not a Postfix error message. Wietse

Re: email is properly rejected but reason given to user unclear

2011-02-14 Thread Stan Hoeppner
Per-Erik Persson put forth on 2/14/2011 4:17 PM: I have recently found out the beuty of restriction classes. So to reject senders from certain sites that usually misspell their sender address I have set up the following: smtpd_restriction_classes = verify_client_sender

Re: Postscreen

2011-02-14 Thread Tomoyuki Murakami
On Mon, 14 Feb 2011 14:28:22 -0600, /dev/rob0 r...@gmx.co.uk wrote: On Mon, Feb 14, 2011 at 03:55:25PM +0200, JC Putter wrote: Can postscreen be compared to SNARE? http://en.wikipedia.org/wiki/Snare gives me no clue as to what you might be asking. However, postscreen has documentation:

Postfix fatal message with Amavis-new

2011-02-14 Thread Steve Jenkins
I've recently installed Amavis-new with SpamAssassin and ClamAV on one of my boxes running Postfix 2.6.5. I'm now seeing this occasionally in the maillog: Feb 14 20:42:47 carbonfiber postfix/smtp[19516]: fatal: garbage after ] in server description: [127.0.0.1] :10025 Feb 14 20:42:47 carbonfiber

Re: Postfix fatal message with Amavis-new

2011-02-14 Thread Victor Duchovni
On Mon, Feb 14, 2011 at 08:56:07PM -0800, Steve Jenkins wrote: I'm now seeing this occasionally in the maillog: Feb 14 20:42:47 carbonfiber postfix/smtp[19516]: fatal: garbage after ] in server description: [127.0.0.1] :10025 You have a transport setting or FILTER action, ... that specifies

Re: Postfix fatal message with Amavis-new

2011-02-14 Thread Steve Jenkins
On Mon, Feb 14, 2011 at 9:01 PM, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Mon, Feb 14, 2011 at 08:56:07PM -0800, Steve Jenkins wrote: I'm now seeing this occasionally in the maillog: Feb 14 20:42:47 carbonfiber postfix/smtp[19516]: fatal: garbage after ] in server

Re: email is properly rejected but reason given to user unclear

2011-02-14 Thread Per-Erik Persson
On Mon, 14 Feb 2011 16:52:42 -0600, Stan Hoeppner s...@hardwarefreak.com wrote: Per-Erik Persson put forth on 2/14/2011 4:17 PM: I have recently found out the beuty of restriction classes. So to reject senders from certain sites that usually misspell their sender address I have set up the