Re: Relaying fails but sending is deferred instead of bouncing mail

* Jean-Sébastien Kroll-Rabotin : > > Hi, > > When my Postfix server sends some mail from addresses in the local > domain, permanent errors (5XX) are treated as temporary errors (4XX) > and mail is delayed while it should definitely fail. >From your logs I cannot see WHEN (at which stage of the S

Relaying fails but sending is deferred instead of bouncing mail

Hi, When my Postfix server sends some mail from addresses in the local domain, permanent errors (5XX) are treated as temporary errors (4XX) and mail is delayed while it should definitely fail. Errors are due to the fact that my server is flagged as a spammer in some RBL lists, but the origin of t

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

On 4/8/2011 1:21 AM, jeremy.als...@imap-mail.com wrote: If I do any of the Multiple Instance setup is there a good Document that tells what configuration goes into what file? Does configuration flow down from the 1st one you setup ? So that PostScreen configuration, which looks to do some of th

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

Hi Victor. On Fri, 08 Apr 2011 00:59 -0400, "Victor Duchovni" wrote: > Start simple, and add features gradually. There is a steep learning > curve for a novice to deploy a complex production system with no > prior experience. It sure feels pretty steep already. I guess I'm glad I'm not just ima

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

On 4/8/2011 12:33 AM, jeremy.als...@imap-mail.com wrote: Hi Stan. And Daniel. [various snips] Answering your specific question, no, you absolutely don't need multiple Postfix instances for a SOHO configuration: http://www.postfix.org/SOHO_README.html I read that but didn't see anything about

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

On Thu, Apr 07, 2011 at 09:33:33PM -0700, jeremy.als...@imap-mail.com wrote: > That's a good example. That's all on one server or instance then? I > mean you only have one master.cf and one main.cf for your setup? You don't have to use multiple instances if your configuration is very simple. Mul

Re: meta idea for posting guidelines

On Thu, Apr 07, 2011 at 08:26:50PM -0400, Daniel Bromberg wrote: > I see a sufficiently fair percentage of e-mail traffic relating to good > list hygiene; since it's repetitive anyway, would it make sense to post a > weekly, bi-weekly, or monthly reminder since new users arrive frequently at >

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

Hi Stan. And Daniel. > You're way out in front of yourself. Setting up spam filtering will > come well after you get the basic setup accomplished and working. First > you need to cover the basics: I'm pretty sure I got most of these covered when we had Microsoft Exchange set up. > Do you have

Re: postscreen -> client hangup unexpectedly -> PASS NEW ?? ..odd?

On Fri, 2011-04-08 at 04:41:59 +0200, Amedeo Rinaldo wrote: > -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- > Apr 8 03:28:46 mx20 postfix/postscreen[16419]: CONNECT from > [190.135.213.150]:18780 > Apr 8 03:28:55 mx20 postfix/postscreen[16419]: NOQUEUE: reject: RCPT > from [

Re: postscreen -> client hangup unexpectedly -> PASS NEW ?? ..odd?

On 4/7/2011 9:41 PM, Amedeo Rinaldo wrote: ciao a tutti ;) i'm finally learning postscreen (..ahh.. find the time) and i'm trying to fine tune the entire system.. and myself :) I was wondering if the following behaviour is due to a my-setup missing parameter or to a my mistake/misunderstanding

postscreen -> client hangup unexpectedly -> PASS NEW ?? ..odd?

ciao a tutti ;) i'm finally learning postscreen (..ahh.. find the time) and i'm trying to fine tune the entire system.. and myself :) I was wondering if the following behaviour is due to a my-setup missing parameter or to a my mistake/misunderstanding in reading the manual .. before, some d

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

On 4/7/2011 9:39 PM, jeremy.als...@imap-mail.com wrote: [snip] Whoa. I took a look at that and that's a bit much for me at this stage of the came. Do I need do it this Multi_Instace way? Even with your explanation I still don't understand how many PostFix servers I need to install on my one ho

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

jeremy.als...@imap-mail.com put forth on 4/7/2011 8:39 PM: > I think I get what you're saying about servers, processes and hosts. So > one host is good enough. It'll have multiple processes running on it. > So how many PostFix's, or these Instances of it, do I need to install to > just get what

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

Hi Daniel. That was a quick reply. Thanks a bunch. Sorry, I got all the terminology wrong. Thanks for the lesson, though. Hopefully it'll stick a bit. > Even a simple modern desktop PC can easily run (host) many server > processes. Postfix is especially economical in this regard especially i

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

On 4/7/2011 8:48 PM, jeremy.als...@imap-mail.com wrote: Hi everybody. I've been reading up how to install a mailserver for my office. At the local computer users group I was told about using PostFix on an Ubuntu system instead of Microsoft Exchange Server on Windows. I saw a demo at the user g

To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

Hi everybody. I've been reading up how to install a mailserver for my office. At the local computer users group I was told about using PostFix on an Ubuntu system instead of Microsoft Exchange Server on Windows. I saw a demo at the user group, and thought it's worth a real look. They told us ab

meta idea for posting guidelines

All, I see a sufficiently fair percentage of e-mail traffic relating to good list hygiene; since it's repetitive anyway, would it make sense to post a weekly, bi-weekly, or monthly reminder since new users arrive frequently at the list? Experienced list users could auto-filter it away by des

Re: problem using postfix and mailman

Yup, thanks, '-i' did it on my spam filter. What happened was the filter originally called a shell script that called sendmail with -i. When I switched to directly invoking spamc which proxies sendmail, I didn't add back the -i right in master.cf Daniel . On 4/7/2011 5:08 AM, Matthias Andree

RE: SASL Error on Submission port

> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Victor Duchovni > On Thu, Apr 07, 2011 at 07:37:50PM +0200, Simon Brereton wrote: > > > > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > > > us...@postfix.org] On Behalf Of Patrick Ben

Re: no reject in smtpd_recipient_restrictions?

On 4/7/2011 1:50 PM, Gábor Lénárt wrote: On Thu, Apr 07, 2011 at 02:40:09PM -0400, Victor Duchovni wrote: For submission: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject Then feel free to implement othe

Re: SASL Error on Submission port

On Thu, Apr 07, 2011 at 07:37:50PM +0200, Simon Brereton wrote: > > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > > us...@postfix.org] On Behalf Of Patrick Ben Koetter > > * Simon Brereton > > > Hi > > > > > > Running 2.3.8 Debian package (I'll be upgrading shortly), I was > > al

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 02:40:09PM -0400, Victor Duchovni wrote: > On Thu, Apr 07, 2011 at 08:27:01PM +0200, G?bor L?n?rt wrote: > > > I don't want to check if rcpt domain is mine (I have no "own" domains on > > this MTA). I want to accept everything if sender is authenticated, since > > it's a m

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 12:42:49PM -0500, Noel Jones wrote: > On 4/7/2011 11:00 AM, Gábor Lénárt wrote: > >On Thu, Apr 07, 2011 at 10:40:28AM -0500, Noel Jones wrote: > >[...] > >>Use instead: > >>smtpd_recipient_restrictions = > >> permit_sasl_authenticated, > >> reject > >> > >>The overhead i

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 08:27:01PM +0200, G?bor L?n?rt wrote: > I don't want to check if rcpt domain is mine (I have no "own" domains on > this MTA). I want to accept everything if sender is authenticated, since > it's a mail submit MTA, users can submit mails through it. > > I don't need reject

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 12:56:41PM -0400, Victor Duchovni wrote: > On Thu, Apr 07, 2011 at 06:42:22PM +0200, G?bor L?n?rt wrote: > > > On Thu, Apr 07, 2011 at 12:20:51PM -0400, Victor Duchovni wrote: > > > On Thu, Apr 07, 2011 at 05:57:24PM +0200, G?bor L?n?rt wrote: > > > > > > > > Instead, Post

Re: no reject in smtpd_recipient_restrictions?

On 4/7/2011 11:00 AM, Gábor Lénárt wrote: On Thu, Apr 07, 2011 at 10:40:28AM -0500, Noel Jones wrote: [...] Use instead: smtpd_recipient_restrictions = permit_sasl_authenticated, reject The overhead is negligible -- just check an internal status flag, about the same as your fake table loo

RE: SASL Error on Submission port

> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Patrick Ben Koetter > * Simon Brereton > > Hi > > > > Running 2.3.8 Debian package (I'll be upgrading shortly), I was > already supporting TLS and SASL auth. One of my users recently moved > to RCN an

RE: Re: SASL Error on Submission port

> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Victor Duchovni > On Thu, Apr 07, 2011 at 04:53:59PM +0200, Simon Brereton wrote: > > > However, when I test I get a SASL auth error. If I switch my > client back to port 25, there is no SASL error. >

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 06:42:22PM +0200, G?bor L?n?rt wrote: > On Thu, Apr 07, 2011 at 12:20:51PM -0400, Victor Duchovni wrote: > > On Thu, Apr 07, 2011 at 05:57:24PM +0200, G?bor L?n?rt wrote: > > > > > > Instead, Postfix requires that you have one or more of (reject, > > > > reject_unauth_dest

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 12:20:51PM -0400, Victor Duchovni wrote: > On Thu, Apr 07, 2011 at 05:57:24PM +0200, G?bor L?n?rt wrote: > > > > Instead, Postfix requires that you have one or more of (reject, > > > reject_unauth_destination, etc.) SOMEWHERE in > > > sender_recipient_restrictions. > > > >

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 05:57:24PM +0200, G?bor L?n?rt wrote: > > Instead, Postfix requires that you have one or more of (reject, > > reject_unauth_destination, etc.) SOMEWHERE in > > sender_recipient_restrictions. > > I have the needed rejects at the sender, but not at the recipient, because I >

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 10:40:28AM -0500, Noel Jones wrote: [...] > Use instead: > smtpd_recipient_restrictions = > permit_sasl_authenticated, > reject > > The overhead is negligible -- just check an internal status flag, > about the same as your fake table lookup -- and may save you from an >

Re: no reject in smtpd_recipient_restrictions?

On Thu, Apr 07, 2011 at 11:43:55AM -0400, Wietse Venema wrote: > G�bor L�n�rt: > > Hi, > > > > I have the idea to simply put "permit" at the end of > > smtpd_recipient_restrictions. No, I don't want open relay :) but I do all > > the checks to make it secure in sender_recipient_restrictions. Postf

Re: no reject in smtpd_recipient_restrictions?

G?bor L?n?rt: > Hi, > > I have the idea to simply put "permit" at the end of > smtpd_recipient_restrictions. No, I don't want open relay :) but I do all > the checks to make it secure in sender_recipient_restrictions. Postfix > nicely wants to change my mind about this idea. So my question that:

Re: no reject in smtpd_recipient_restrictions?

On 4/7/2011 10:29 AM, Gábor Lénárt wrote: Hi, I have the idea to simply put "permit" at the end of smtpd_recipient_restrictions. No, I don't want open relay :) but I do all the checks to make it secure in sender_recipient_restrictions. Postfix nicely wants to change my mind about this idea. So m

no reject in smtpd_recipient_restrictions?

Hi, I have the idea to simply put "permit" at the end of smtpd_recipient_restrictions. No, I don't want open relay :) but I do all the checks to make it secure in sender_recipient_restrictions. Postfix nicely wants to change my mind about this idea. So my question that: is it safe to do what I wan

Re: SASL Error on Submission port

* Simon Brereton : > Hi > > Running 2.3.8 Debian package (I'll be upgrading shortly), I was already > supporting TLS and SASL auth. One of my users recently moved to RCN and they > block port 25 so I'm trying to open 587. > > I added this to my master.cf > > > submission inet n -

Re: SASL Error on Submission port

On Thu, Apr 07, 2011 at 04:53:59PM +0200, Simon Brereton wrote: > However, when I test I get a SASL auth error. If I switch my client back to > port 25, there is no SASL error. > > Connecting to port 25 > Apr 7 10:00:30 donald postfix/smtpd[21028]: connect from > 18.myvzw.com[174.252.18.98] >

SASL Error on Submission port

Hi Running 2.3.8 Debian package (I'll be upgrading shortly), I was already supporting TLS and SASL auth. One of my users recently moved to RCN and they block port 25 so I'm trying to open 587. I added this to my master.cf submission inet n - - - - smtpd -

Re: TLS for external clients

On Thu, Apr 07, 2011 at 12:31:55PM +0100, Bernhard Rohrer wrote: > I assume you are talking about the submission port? > > simply create a second one (I used 588) and limit it to the internal IP range > and don't require TLS and auth. No need. master.cf: submission inet n -

Re: problem using postfix and mailman

On Thu, Apr 07, 2011 at 04:15:44AM -0400, Daniel Bromberg wrote: > Again the quoting problem of literal SMTP conversations embedded in a > message that is actually its own SMTP transaction. Move the trailing '.' in > by one space in order to not cut off your own message. This is wrong. SMTP cor

Re: problem using postfix and mailman

On Thu, 7 Apr 2011 12:08:42 +0200 deconya articulated: > First of all, sorry for the inconvenience, I didn't know that I send > mails in html format. I change it for next mails. Perhaps you could also lose the "top posting" technique as well. It makes following this tread a lot harder than it ne

Re: TLS for external clients

I assume you are talking about the submission port? simply create a second one (I used 588) and limit it to the internal IP range and don't require TLS and auth. cheers Bernhard original message- From: "AutoGlobus2000 SRL / Gabi LUDA" g...@autoglobus2000.ro T

TLS for external clients

Hi I am a postfix 2.82 without TLS.It is normal functionaly. I want to change with TLS and SASL,BUT only external cilents (Internal clients set with my network=192.168.x.x) Please help me? Thanks

Re: problem using postfix and mailman

Hi Other doubt, If I use relay_recipient_maps, users that has accounts using ldap, can be affected? All mails when are validated goes to antispam server. How mailman needs to validate users,I don't know if creating this variable all users can be rejected. Thanks 2011/4/7 Matthias Andree : > Am 0

Re: problem using postfix and mailman

HI First of all, sorry for the inconvenience, I didn't know that I send mails in html format. I change it for next mails. For my problem Im using this guide https://help.ubuntu.com/community/Mailman but im viewing that uses relay_domains and I don't know If this point is necessary. If I use $my

Re: Postfix with IPV6 error

Wietse Venema porcupine.org> writes: > It makes perfect sense: the IPv4 address is assigned FIRST > and the IPv6 address is assigned LAST. > > If you want to find out why a FreeBSD jail network interface > behaves the way it does, then that would be an excellent > question for a FreeBSD mailing l

Re: problem using postfix and mailman

Am 07.04.2011 10:11, schrieb deconya: > Hi list > > I have diferent mailman lists mounted and I detected a problem making > tests to access, If I use telnet using other mailserver (mailserver.es > ) I receive this information: > > telnet mail.mydomain.com

Re: problem using postfix and mailman

Am 07.04.2011 10:15, schrieb Daniel Bromberg: > On 4/7/2011 4:11 AM, deconya wrote: >> Hi list >> >> I have diferent mailman lists mounted and I detected a problem making >> tests >> to access, If I use telnet using other mailserver (mailserver.es) I >> receive >> this information: >> >> telnet mai

Re: problem using postfix and mailman

Hi I dont understand, I wrote something bad¿? Thanks 2011/4/7 Daniel Bromberg > On 4/7/2011 4:11 AM, deconya wrote: > >> Hi list >> >> I have diferent mailman lists mounted and I detected a problem making >> tests >> to access, If I use telnet using other mailserver (mailserver.es) I >> receiv

Re: problem using postfix and mailman

On 4/7/2011 4:11 AM, deconya wrote: Hi list I have diferent mailman lists mounted and I detected a problem making tests to access, If I use telnet using other mailserver (mailserver.es) I receive this information: telnet mail.mydomain.com 25 Trying 84.88.68.66... [SNIP] 354 End data with. subje

problem using postfix and mailman

Hi list I have diferent mailman lists mounted and I detected a problem making tests to access, If I use telnet using other mailserver (mailserver.es) I receive this information: telnet mail.mydomain.com 25 Trying 84.88.68.66... Connected to mail.mydomain.com. Escape character is '^]'. 220 jupiter