Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine - but apparently isn't. HELO message comes from chez-vrolet.net which is in my $mynetworks setting, but the IP address for the incoming machine does not match DNS. What adjustment in

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Reindl Harald
Am 07.05.2011 19:13, schrieb Dennis Carr: HELO message comes from chez-vrolet.net which is in my $mynetworks setting, but the IP address for the incoming machine does not match DNS On the surface, permit_mynetworks in strategic locations can be eliminated, but last time I did that, I

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
On Sat, 7 May 2011, Reindl Harald wrote: mynetworks has nothing to do with DNS/PTR/HELO mynetworks is for IP-ADDRESSES/NETWORKS which are allowed to relay and override settings in smtp-restricitions That does eliminate it from the equation, but I still need to block this crap from coming

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Reindl Harald
Am 07.05.2011 19:21, schrieb Dennis Carr: On Sat, 7 May 2011, Reindl Harald wrote: mynetworks has nothing to do with DNS/PTR/HELO mynetworks is for IP-ADDRESSES/NETWORKS which are allowed to relay and override settings in smtp-restricitions That does eliminate it from the equation, but

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
On Sat, 7 May 2011, Reindl Harald wrote: in your case you have to place the check_sender_access policy in smtpd_recipient_restrictions AFTER permit_mynetworks and permit_sasl_authenticated so only internal hosts and authenticated users are allowed to use in this policy listed domains Being

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Duane Hill
Saturday, May 7, 2011, 12:13:53 PM, Dennis wrote: Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine - but apparently isn't. HELO message comes from chez-vrolet.net which is in my $mynetworks setting, but the IP address for the incoming

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Reindl Harald
Am 07.05.2011 19:52, schrieb Dennis Carr: On Sat, 7 May 2011, Reindl Harald wrote: in your case you have to place the check_sender_access policy in smtpd_recipient_restrictions AFTER permit_mynetworks and permit_sasl_authenticated so only internal hosts and authenticated users are

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Noel Jones
On 5/7/2011 12:52 PM, Dennis Carr wrote: On Sat, 7 May 2011, Reindl Harald wrote: in your case you have to place the check_sender_access policy in smtpd_recipient_restrictions AFTER permit_mynetworks and permit_sasl_authenticated so only internal hosts and authenticated users are allowed to

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Stan Hoeppner
On 5/7/2011 12:52 PM, Dennis Carr wrote: Being that the issue seems to be stemming from an issue in HELO, wouldn't it be more logical to work with smtpd_helo_restrictions? What would be logical is for you to provide us with relevant log entries, per the welcome message you received when

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
On Sat, 7 May 2011, Reindl Harald wrote: and how will HELO change anything in Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine? sure you can restrict HELO but it solves not the real problem that you will stop forged-from of your domains

SASL / LDAP authentication, multiple domains

2011-05-07 Thread Mehmet Tolga Avcioglu
This is probably not a postfix issue but I figured I should ask this list anyway. In /etc/saslauthd.conf I have the following and this works to authenticate u...@domain.com ldap_search_base: uid=%u,ou=people,dc=%2,dc=%1 However it of course doesn't work for u...@domain.co.uk. My ldap has

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Ralf Hildebrandt
* Stan Hoeppner s...@hardwarefreak.com: On 5/7/2011 12:52 PM, Dennis Carr wrote: Being that the issue seems to be stemming from an issue in HELO, wouldn't it be more logical to work with smtpd_helo_restrictions? What would be logical is for you to provide us with relevant log entries, per

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Michael Orlitzky
On 05/07/2011 01:13 PM, Dennis Carr wrote: Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine - but apparently isn't. HELO message comes from chez-vrolet.net which is in my $mynetworks setting, but the IP address for the incoming

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Stan Hoeppner
On 5/7/2011 1:01 PM, Dennis Carr wrote: I'm ultimately trying to reject any mail from servers that say they are me and are distinctively NOT. Ultimately, the proper way to separate public connections from private connections is to create separate smtpd listeners (or use a separate server

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Duane Hill
Saturday, May 7, 2011, 4:34:03 PM, you wrote: On 05/07/2011 01:13 PM, Dennis Carr wrote: Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine - but apparently isn't. HELO message comes from chez-vrolet.net which is in my $mynetworks

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Noel Jones
On 5/7/2011 5:31 PM, Duane Hill wrote: Saturday, May 7, 2011, 4:34:03 PM, you wrote: On 05/07/2011 01:13 PM, Dennis Carr wrote: Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine - but apparently isn't. HELO message comes from

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Michael Orlitzky
On 05/07/2011 06:31 PM, Duane Hill wrote: Saturday, May 7, 2011, 4:34:03 PM, you wrote: On 05/07/2011 01:13 PM, Dennis Carr wrote: Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine - but apparently isn't. HELO message comes from

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
On Sat, 7 May 2011, Michael Orlitzky wrote: If he wants to reject hosts that HELO as his own, he can check his own SPF record, and reject anything that softfails. ...spf does that? -Dennis

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Sahil Tandon
On Sat, 2011-05-07 at 22:01:33 -0700, Dennis Carr wrote: On Sat, 7 May 2011, Michael Orlitzky wrote: If he wants to reject hosts that HELO as his own, he can check his own SPF record, and reject anything that softfails. ...spf does that? SPF is overkill for the problem you described at