LDAP query trouble

2012-05-15 Thread Andreas Oster
Hello all, I have a, somehow, working postfix + dovecot configuration with AD LDAP lookups. Recently I have moved our AD to a samba4 server with the unfortunate result, that sending mail now is very slow. This is because of the, currently, slow LDAP server implementation in samba4 which handels th

Re: timeout after END-OF-MESSAGE

2012-05-15 Thread Nikolaos Milas
On 14/5/2012 10:59 μμ, Jeroen Geilman wrote: Is this a known behavior of some clients (I suspect it may be Mac Mail) under certain circumstances? Does something go wrong due to this (default) behaviour ? On the contrary, everything is running smoothly. If postfix says the message was acce

Best content-filter for Postfix

2012-05-15 Thread Patric Falinder
Hi, I don't know if this is a valid Postifx question but I'll give it a shot. What content-filter (spamfilter) does people use that has a large userbase? Let's say I have over 1000 mailboxes which need to be checked for spam and 2 Postfix servers that will perform this task, what system is the

Re: Best content-filter for Postfix

2012-05-15 Thread Kirill Bychkov
Hello, Free or not? I use drweb antispam+antivirus, but it's not free. Drweb module work with Postfix by content filter or milter protocol. Work is fine. On 15 May 2012 11:57, Patric Falinder wrote: > Hi, > > I don't know if this is a valid Postifx question but I'll give it a shot. > What cont

Re: Best content-filter for Postfix

2012-05-15 Thread Robert Schetterer
Am 15.05.2012 10:29, schrieb Kirill Bychkov: > Hello, > > Free or not? > > I use drweb antispam+antivirus, but it's not free. > Drweb module work with Postfix by content filter or milter protocol. > Work is fine. > > On 15 May 2012 11:57, Patric Falinder > wrote:

Re: LDAP query trouble

2012-05-15 Thread Wietse Venema
Andreas Oster: > How can I prevent postfix from doing lookups for domains which are not > ours ? This would reduce the amount of LDAP queries quite a lot. See: man 5 ldap_table. Look for the "domain" parameter. Wietse

PostScreen taking too long time to send greeting

2012-05-15 Thread vishesh kumar
Hi Members, I have following setup related to postscreen greeting --- postscreen_greet_action = ignore postscreen_greet_banner = $smtpd_banner postscreen_greet_ttl = 1d postscreen_greet_wait = 2s smtp_skip_5xx_greeting = yes - But when i

Re: PostScreen taking too long time to send greeting

2012-05-15 Thread Eliezer Croitoru
On 15/05/2012 14:20, vishesh kumar wrote: Hi Members, I have following setup related to postscreen greeting --- postscreen_greet_action = ignore postscreen_greet_banner = $smtpd_banner postscreen_greet_ttl = 1d postscreen_greet_wait = 2s smtp_skip_5xx_greeting = yes -

Re: PostScreen taking too long time to send greeting

2012-05-15 Thread Marko Weber
You can try with the default: postscreen_greet_wait = ${stress?3}${stress:8}s you still get error message then ? marko Am 15.05.2012 13:20, schrieb vishesh kumar: Hi Members, I have following setup related to postscreen greeting  --- po

Re: PostScreen taking too long time to send greeting

2012-05-15 Thread Wietse Venema
vishesh kumar: > But when i doing telnet 25, its taking too long time to display > "220 " message That is a CISCO PIX or ASA "security" "firewall". Wietse

Re: PostScreen taking too long time to send greeting

2012-05-15 Thread vishesh kumar
Thanks Wietse, When i disable postscreen, then postfix works fine and respond immediately. Vishesh Kumar On Tue, May 15, 2012 at 5:24 PM, Wietse Venema wrote: > vishesh kumar: > > But when i doing telnet 25, its taking too long time to > display > > "220 " message > > That

Re: LDAP query trouble

2012-05-15 Thread Andreas Oster
Am 15.05.2012 13:01, schrieb Wietse Venema: > Andreas Oster: >> How can I prevent postfix from doing lookups for domains which are not >> ours ? This would reduce the amount of LDAP queries quite a lot. > > See: man 5 ldap_table. Look for the "domain" parameter. > > Wietse > Hell Wietse,

Re: PostScreen taking too long time to send greeting

2012-05-15 Thread Wietse Venema
vishesh kumar: > Thanks Wietse, > > When i disable postscreen, then postfix works fine and respond immediately. 1 - Please show command output of "postconf -n | grep postscreen". This contains the time that postscreen is configured to wait, and this may differ from what you show with "cut and pa

Re: LDAP query trouble

2012-05-15 Thread Wietse Venema
Andreas Oster: > Am 15.05.2012 13:01, schrieb Wietse Venema: > > Andreas Oster: > >> How can I prevent postfix from doing lookups for domains which are not > >> ours ? This would reduce the amount of LDAP queries quite a lot. > > > > See: man 5 ldap_table. Look for the "domain" parameter. > > >

Re: LDAP query trouble

2012-05-15 Thread /dev/rob0
On Tue, May 15, 2012 at 09:17:16AM +0200, Andreas Oster wrote: > How can I prevent postfix from doing lookups for domains which > are not ours ? This would reduce the amount of LDAP queries > quite a lot. > > Here is my config for reference : > > main.cf: There are reasons why the list welcome

Re: LDAP query trouble

2012-05-15 Thread Andreas Oster
Am 15.05.2012 15:10, schrieb Wietse Venema: > Andreas Oster: >> Am 15.05.2012 13:01, schrieb Wietse Venema: >>> Andreas Oster: How can I prevent postfix from doing lookups for domains which are not ours ? This would reduce the amount of LDAP queries quite a lot. >>> >>> See: man 5 ldap_ta

Re: LDAP query trouble

2012-05-15 Thread Andreas Oster
Am 15.05.2012 15:44, schrieb /dev/rob0: > On Tue, May 15, 2012 at 09:17:16AM +0200, Andreas Oster wrote: >> How can I prevent postfix from doing lookups for domains which >> are not ours ? This would reduce the amount of LDAP queries >> quite a lot. >> >> Here is my config for reference : >> >> ma

Re: LDAP query trouble

2012-05-15 Thread Andreas Oster
Hi rob0, Am 15.05.2012 15:44, schrieb /dev/rob0: > On Tue, May 15, 2012 at 09:17:16AM +0200, Andreas Oster wrote: >> How can I prevent postfix from doing lookups for domains which >> are not ours ? This would reduce the amount of LDAP queries >> quite a lot. >> >> Here is my config for reference

Missing attachments - BAD HEADER SECTION, MIME error: error: part did not end with expected boundary

2012-05-15 Thread Alex Dyas
Hello, Environment : - Ubuntu - 10.04.3 LTS - Postfix - 2.7.0-1ubuntu0.2 - Amavis - 1:2.6.4-1ubuntu5 - Spam Assassin - 3.3.1-1 - ClamAV - 0.96.5+dfsg-1ubuntu1.10.04.3 Symptoms - A couple of emails per day come through the system with empty attachments. They have the following line in their head

Re: LDAP query trouble

2012-05-15 Thread Brian Evans - Postfix List
On 5/15/2012 9:44 AM, /dev/rob0 wrote: > On Tue, May 15, 2012 at 09:17:16AM +0200, Andreas Oster wrote: >> # Allow maximum mail size 40GB >> message_size_limit = 4048 > The comment is wrong. 4048 is only 40MB. Good, because most sites > will not accept any multi-GB mail. In addition, be car

Re: LDAP query trouble

2012-05-15 Thread Wietse Venema
Brian Evans - Postfix List: > It may be platform dependent, but my minimal research found the > (message|mailbox)_size_limit parameters are a signed 32-bit integer. Postfix message size parameters are type "long", which is 64-bit on LP64 UNIX systems. Given the wide availability of 64-bit hardwa

Re: Missing attachments - BAD HEADER SECTION, MIME error: error: part did not end with expected boundary

2012-05-15 Thread Jeroen Geilman
On 05/15/2012 06:11 PM, Alex Dyas wrote: Hello, Environment : - Ubuntu - 10.04.3 LTS - Postfix - 2.7.0-1ubuntu0.2 - Amavis - 1:2.6.4-1ubuntu5 - Spam Assassin - 3.3.1-1 - ClamAV - 0.96.5+dfsg-1ubuntu1.10.04.3 Symptoms - A couple of emails per day come through the system with empty attachments.

Protocol error sending mail to Exim 4.77 system

2012-05-15 Thread k...@rice.edu
Dear Postfix users, I am having mail bounce from a Exim 4.77 system with the following error: : Protocol error: host citykitchencatering.com[74.50.1.185] said: 250 Accepted (in reply to DATA command) The sending system is running postfix 2.6.5. Has anyone seen this before and is there a workarou

Re: Protocol error sending mail to Exim 4.77 system

2012-05-15 Thread Wietse Venema
k...@rice.edu: > Dear Postfix users, > > I am having mail bounce from a Exim 4.77 system with the following > error: > > : Protocol error: host > citykitchencatering.com[74.50.1.185] said: 250 Accepted (in reply to DATA > command) Does this affect all mail or just some? > The sending system is

Re: Protocol error sending mail to Exim 4.77 system

2012-05-15 Thread k...@rice.edu
On Tue, May 15, 2012 at 03:08:45PM -0400, Wietse Venema wrote: > k...@rice.edu: > > Dear Postfix users, > > > > I am having mail bounce from a Exim 4.77 system with the following > > error: > > > > : Protocol error: host > > citykitchencatering.com[74.50.1.185] said: 250 Accepted (in reply to DAT

Re: Protocol error sending mail to Exim 4.77 system

2012-05-15 Thread Wietse Venema
k...@rice.edu: > On Tue, May 15, 2012 at 03:08:45PM -0400, Wietse Venema wrote: > > k...@rice.edu: > > > Dear Postfix users, > > > > > > I am having mail bounce from a Exim 4.77 system with the following > > > error: > > > > > > : Protocol error: host > > > citykitchencatering.com[74.50.1.185] sa

Re: Protocol error sending mail to Exim 4.77 system

2012-05-15 Thread k...@rice.edu
On Tue, May 15, 2012 at 03:45:22PM -0400, Wietse Venema wrote: > k...@rice.edu: > > On Tue, May 15, 2012 at 03:08:45PM -0400, Wietse Venema wrote: > > > k...@rice.edu: > > > > Dear Postfix users, > > > > > > > > I am having mail bounce from a Exim 4.77 system with the following > > > > error: > >

Policy delegation - message content?

2012-05-15 Thread Chad M Stewart
Is it possible for a policy server to get access to the message contents? At least headers? In reading http://www.postfix.org/SMTPD_POLICY_README.html it talks about after client has sent data. However since the protocol is name=value then I suspect the answer is no. Though i do see queue_id is

Re: Policy delegation - message content?

2012-05-15 Thread /dev/rob0
On Tue, May 15, 2012 at 09:29:47PM -0500, Chad M Stewart wrote: > Is it possible for a policy server to get access to the message > contents? At least headers? No. Headers are SMTP DATA. > In reading http://www.postfix.org/SMTPD_POLICY_README.html it talks > about after client has sent data. Ho