Re: needing to log all outbound emails

2012-04-16 Thread Robert Schetterer
Am 17.04.2012 05:29, schrieb Mike Zupan: > We are looking to log all outbound emails in code.. not tailing a lot > or anything.. is there an area of the code I can look at first to get > an idea of where the final stop for emails through postfix go before > they are sent out. We are looking to log

Re: Another issue with SMTPD AUTH

2012-04-16 Thread Patrick Ben Koetter
* Franck MAHE : > [root@fsrv02 postfix]# tail /var/log/mail/errors.log > Apr 17 01:59:09 fsrv02 postfix/smtpd[7889]: fatal: no SASL authentication > mechanisms > > [root@fsrv02 postfix]# tail /var/log/mail/warnings.log > Apr 17 01:59:09 fsrv02 postfix/smtpd[7889]: warning: > xsasl_cyrus_server_get

Re: multiple copies to different destinations

2012-04-16 Thread Noel Jones
On 4/16/2012 11:00 PM, Punit Jain wrote: [please don't top post. Thanks.] > Hi Noel, > > This will send the email to u...@sms.example.com. But my requirement is to > send copy of email to SMS program Yes, exactly. To deliver multiple copies, you need multiple recipients. You specify in tran

Re: multiple copies to different destinations

2012-04-16 Thread DTNX Postmaster
On Apr 17, 2012, at 06:00, Punit Jain wrote: > This will send the email to u...@sms.example.com. But my requirement is to > send copy of email to SMS program which itself does some processing and finds > the recipient and send the sms accordingly. Read Noel's reply again, specifically the part

Re: Postfix and Flood Spamming

2012-04-16 Thread DTNX Postmaster
On Apr 16, 2012, at 14:20, lst_ho...@kwsoft.de wrote: Dear Postfix Jedi, I need your help to secure a new postfix server against the SPAM flooding. Currently I have an old postfix based on an old debian server and since some days, my server is subject to the SPAM fl

Re: needing to log all outbound emails

2012-04-16 Thread DTNX Postmaster
On Apr 17, 2012, at 05:29, Mike Zupan wrote: > We are looking to log all outbound emails in code.. not tailing a lot > or anything.. is there an area of the code I can look at first to get > an idea of where the final stop for emails through postfix go before > they are sent out. We are looking to

Re: multiple copies to different destinations

2012-04-16 Thread Punit Jain
Hi Noel, This will send the email to u...@sms.example.com. But my requirement is to send copy of email to SMS program which itself does some processing and finds the recipient and send the sms accordingly. Thanks and Regards, Punit - Original Message - From: "Noel Jones" To: postfix

needing to log all outbound emails

2012-04-16 Thread Mike Zupan
We are looking to log all outbound emails in code.. not tailing a lot or anything.. is there an area of the code I can look at first to get an idea of where the final stop for emails through postfix go before they are sent out. We are looking to log all cc/bcc emails also. We have a compliance regu

Re: Another issue with SMTPD AUTH

2012-04-16 Thread jeffrey j donovan
On Apr 16, 2012, at 8:10 PM, Franck MAHE wrote: > All, > > I’m lost and I don’t understand why it is not working (I did the same > configuration from another machine who is working). > > [root@fsrv02 postfix]# postconf -n > broken_sasl_auth_clients = yes > command_directory = /usr/sbin > con

Another issue with SMTPD AUTH

2012-04-16 Thread Franck MAHE
All, I'm lost and I don't understand why it is not working (I did the same configuration from another machine who is working). [root@fsrv02 postfix]# postconf -n broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/lib64/po

Re: multiple copies to different destinations

2012-04-16 Thread Noel Jones
On 4/16/2012 12:46 PM, Punit Jain wrote: > Hi , > > I have a requirement where I need to send a copy of mail to pipe daemon for > some processing, based on if recipient has an attribute set in ldap. > > At the same time mail is also delivered to recipient. The pipe daemon can > pass the mail to

multiple copies to different destinations

2012-04-16 Thread Punit Jain
Hi , I have a requirement where I need to send a copy of mail to pipe daemon for some processing, based on if recipient has an attribute set in ldap. At the same time mail is also delivered to recipient. The pipe daemon can pass the mail to SMS fateway for sms to be delivered. Any clues how to

Re: OT illogical? Helo-v-Host varience - why?

2012-04-16 Thread Sam Jones
On Mon, 2012-04-16 at 08:34 -0500, /dev/rob0 wrote: > On Mon, Apr 16, 2012 at 07:58:31AM +0100, Sam Jones wrote: > > A bit of an extreme example, but i've often wondered, when > > looking through my Postfix logs, why some senders do this: > > > > Received: from mx-out.facebook.com (outmail019.snc7

Re: postfix/postscreen[pid]: warning: cannot connect to service private/smtpd: No such file or directory

2012-04-16 Thread Noel Jones
On 4/16/2012 9:31 AM, mail...@securitylabs.it wrote: > Hello, just upgraded my Postfix from 2.8.x to 2.9.1 (Debian 6.0, > Postfix coming from backports) to use postscreen and following this: > > http://www.postfix.org/POSTSCREEN_README.html > > I've modified my master.cf as follow: > > #smtp

postfix/postscreen[pid]: warning: cannot connect to service private/smtpd: No such file or directory

2012-04-16 Thread mail...@securitylabs.it
Hello, just upgraded my Postfix from 2.8.x to 2.9.1 (Debian 6.0, Postfix coming from backports) to use postscreen and following this: http://www.postfix.org/POSTSCREEN_README.html I've modified my master.cf as follow: #smtp inet n - - - - smtpd smtpd pass n

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread /dev/rob0
On Mon, Apr 16, 2012 at 10:48:16PM +1000, Mark Constable wrote: > On 16/04/12 21:57, DTNX Postmaster wrote: > > I would not bother with prettifying headers or SMTP transaction > > output that is generally only seen by automated systems, > > It's mainly for "vanity" virtual hosting so our clients c

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread lst_hoe02
Zitat von Wietse Venema : Mark Constable: 12.34.56.78:smtp inet n - - - - smtpd -o myhostname=domain1.com This change all SMTP server responses that depend on the myhostname settings. Any thoughts or suggestions on how to improve this strategy? Use separate MTA instances. By changing t

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
On 16/04/12 23:13, Reindl Harald wrote: >> More importantly, with the -o myhostname=domain1.com they can >> fully pass any hardfail SPF test > > this has nothing to do with the hostname True from a fail/pass SPF inspection by the remote mailserver but not from a support techie eyeball point of vie

Re: OT illogical? Helo-v-Host varience - why?

2012-04-16 Thread /dev/rob0
On Mon, Apr 16, 2012 at 07:58:31AM +0100, Sam Jones wrote: > A bit of an extreme example, but i've often wondered, when > looking through my Postfix logs, why some senders do this: > > Received: from mx-out.facebook.com (outmail019.snc7.facebook.com > [69.171.232.153]) by . > > The connecting

Re: Using Header_checks to stop specific incoming mails

2012-04-16 Thread /dev/rob0
On Mon, Apr 16, 2012 at 08:37:00AM +0200, Rodolphe Quiédeville wrote: > Le 13/04/2012 19:27, Kizito Thomas a écrit : > > Thank you Ansgar, Does it mean I cannot use this method to block > > un desirable mails this way? At first I tried using the method > > explained on > > http://www.cyberciti.b

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Wietse Venema
Mark Constable: > 12.34.56.78:smtp inet n - - - - smtpd > -o myhostname=domain1.com This change all SMTP server responses that depend on the myhostname settings. > Any thoughts or suggestions on how to improve this strategy? Use separate MTA instances. By changing the MTA name in one SMTP clie

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Reindl Harald
Am 16.04.2012 14:48, schrieb Mark Constable: > On 16/04/12 21:57, DTNX Postmaster wrote: >> I would not bother with prettifying headers or SMTP transaction >> output that is generally only seen by automated systems, > > It's mainly for "vanity" virtual hosting so our clients can be > assured the

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
On 16/04/12 21:57, DTNX Postmaster wrote: > I would not bother with prettifying headers or SMTP transaction > output that is generally only seen by automated systems, It's mainly for "vanity" virtual hosting so our clients can be assured they have their own fully branded mail service. More import

Re: Postfix and Flood Spamming

2012-04-16 Thread lst_hoe02
Zitat von Stéphane Wirtel : Is there an efficient way to know if my server is blacklisted ? a reference ? Enter the IP in question at http://multirbl.valli.org/ is one possibility Regards Andreas

Re: Postfix and Flood Spamming

2012-04-16 Thread lst_hoe02
Zitat von Stéphane Wirtel : Hi Stan, On 04/16/2012 01:27 PM, Stan Hoeppner wrote: On 4/16/2012 4:33 AM, Stephane Wirtel wrote: Dear Postfix Jedi, I need your help to secure a new postfix server against the SPAM flooding. Currently I have an old postfix based on an old debian server and sin

Re: Postfix and Flood Spamming

2012-04-16 Thread Stéphane Wirtel
Hi all, I will push my config in a gist (github.com) asap. Regards, Stéphane

Re: Postfix and Flood Spamming

2012-04-16 Thread Stéphane Wirtel
Hi Andreas, On 04/16/2012 01:46 PM, lst_ho...@kwsoft.de wrote: > > Zitat von Stephane Wirtel : > >> Dear Postfix Jedi, >> >> I need your help to secure a new postfix server against the SPAM flooding. >> >> Currently I have an old postfix based on an old debian server and since >> some days, my s

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread DTNX Postmaster
On Apr 16, 2012, at 12:01, Mark Constable wrote: > I managed to get multiple SSL certs working on multiple virtual > IPs on the same server so vhost domains appeared to be completely > independent from the base server. I'd like an opinion as to whether > this is the right or best way to do this...

Re: Postfix and Flood Spamming

2012-04-16 Thread Stéphane Wirtel
Hi Stan, On 04/16/2012 01:27 PM, Stan Hoeppner wrote: > On 4/16/2012 4:33 AM, Stephane Wirtel wrote: >> Dear Postfix Jedi, >> >> I need your help to secure a new postfix server against the SPAM flooding. >> >> Currently I have an old postfix based on an old debian server and since >> some days, my

Re: Postfix and Flood Spamming

2012-04-16 Thread lst_hoe02
Zitat von Stephane Wirtel : Dear Postfix Jedi, I need your help to secure a new postfix server against the SPAM flooding. Currently I have an old postfix based on an old debian server and since some days, my server is subject to the SPAM flooding (+- 50k mails/hours). What do you mean by 50

Re: Postfix and Flood Spamming

2012-04-16 Thread Stan Hoeppner
On 4/16/2012 4:33 AM, Stephane Wirtel wrote: > Dear Postfix Jedi, > > I need your help to secure a new postfix server against the SPAM flooding. > > Currently I have an old postfix based on an old debian server and since > some days, my server is subject to the SPAM flooding (+- 50k mails/hours).

Re: Postfix can not resolve the ip-address

2012-04-16 Thread Руслан Шарипов
I'm was wrong. Postfix (on debian) default working in chroot. In chroot environment no file "etc/resolv.conf", why he could not resolve IP-address. Thank. The problem is solved. -- С уважением, Шарипов Руслан. Руководитель отдела разработки и сопровождения программного обеспечения ОАО "Уфанет".

Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
I managed to get multiple SSL certs working on multiple virtual IPs on the same server so vhost domains appeared to be completely independent from the base server. I'd like an opinion as to whether this is the right or best way to do this... domain1.com = 12.34.56.78 /etc/postfix/master.cf 12.34.

Postfix and Flood Spamming

2012-04-16 Thread Stephane Wirtel
Dear Postfix Jedi, I need your help to secure a new postfix server against the SPAM flooding. Currently I have an old postfix based on an old debian server and since some days, my server is subject to the SPAM flooding (+- 50k mails/hours). So, I have decided to reconfigure a new server with an

Re: Postfix can not resolve the ip-address

2012-04-16 Thread lst_hoe02
Zitat von Руслан Шарипов : Hello. Postfix can not resolve the IP-address, but the nameserver is configured correctly. See, in mail.log: root@mail2:/var/log# tail -3 mail.log Apr 16 02:35:44 mail2 postfix/smtpd[1855]: connect from unknown[209.85.215.53] Apr 16 02:35:45 mail2 postfix/smtpd[1

Re: Postfix can not resolve the ip-address

2012-04-16 Thread Руслан Шарипов
2012/4/16 Ralf Hildebrandt : > * Руслан Шарипов : >> But in fact (execute in the console on the same server): >> root@mail2:/var/log# host 209.85.215.53 >> 53.215.85.209.in-addr.arpa domain name pointer mail-lpp01m010-f53.google.com. >> That is, PTR-record for the IP-address is correct. > > And wha

Re: Postfix can not resolve the ip-address

2012-04-16 Thread Ralf Hildebrandt
* Руслан Шарипов : > But in fact (execute in the console on the same server): > root@mail2:/var/log# host 209.85.215.53 > 53.215.85.209.in-addr.arpa domain name pointer mail-lpp01m010-f53.google.com. > That is, PTR-record for the IP-address is correct. And what about host mail-lpp01m010-f53.goog

Postfix can not resolve the ip-address

2012-04-16 Thread Руслан Шарипов
Hello. Postfix can not resolve the IP-address, but the nameserver is configured correctly. See, in mail.log: root@mail2:/var/log# tail -3 mail.log Apr 16 02:35:44 mail2 postfix/smtpd[1855]: connect from unknown[209.85.215.53] Apr 16 02:35:45 mail2 postfix/smtpd[1855]: NOQUEUE: reject: RCPT from u