smtp auth connection restrictions

2012-10-17 Thread Tom Kinghorn
Morning List. I was wondering id there is any way to specify a destination_concurrency_limit for clients which have used SMTP_AUTH and whose source is not on the $mynetworks. We currently have a problem where the accounts of clients (who have used weak passwords), are being used to spam.

Re: MX vs A records

2012-10-17 Thread Tom Kinghorn
On 11/10/2012 14:48, Wietse Venema wrote: Tom Kinghorn: check_sender_ns_access type:table Search the specified access(5) database for the DNS servers for the MAIL FROM address, and execute the corresponding action. Note: a result of OK is not allowed for safety reasons.

Re: MX vs A records

2012-10-17 Thread Tom Hendrikx
On 10/17/12 10:05 AM, Tom Kinghorn wrote: On 11/10/2012 14:48, Wietse Venema wrote: Tom Kinghorn: check_sender_ns_access type:table Search the specified access(5) database for the DNS servers for the MAIL FROM address, and execute the corresponding action. Note: a result of OK is

Re: MX vs A records

2012-10-17 Thread Tom Kinghorn
On 17/10/2012 10:14, Tom Hendrikx wrote: On 10/17/12 10:05 AM, Tom Kinghorn wrote: You're testing NS records for the recipient address here, not the sender. i tested using ad...@cpf.co.za cpf.co.za is hosted at sedoparking.com in the recipient_ns_host file I have sedoparking.com

Re: smtp auth connection restrictions

2012-10-17 Thread /dev/rob0
On Wed, Oct 17, 2012 at 09:35:33AM +0200, Tom Kinghorn wrote: I was wondering id there is any way to specify a destination_concurrency_limit for clients which have used SMTP_AUTH and whose source is not on the $mynetworks. We currently have a problem where the accounts of clients (who have

Re: Unable to execute a java program from postfix

2012-10-17 Thread /dev/rob0
On Tue, Oct 16, 2012 at 09:33:38PM -0500, Stan Hoeppner wrote: On 10/16/2012 9:17 PM, Neil Aggarwal wrote: I am trying to execute a java program from postfix using a pipe alias. When I send an email to the alias, I get this back from postfix: Command died with status 1:

Re: 4xx too many errors question

2012-10-17 Thread Wietse Venema
Tomas Macek: So my question is how can I get this error message on my own computer, when I did not sent any email to the server in last hour? According to this experience, this seems to be per server settings. Or am I missing something? The error counter is a PER SESSION property. It

Re: MX vs A records

2012-10-17 Thread Noel Jones
On 10/17/2012 3:31 AM, Tom Kinghorn wrote: On 17/10/2012 10:14, Tom Hendrikx wrote: On 10/17/12 10:05 AM, Tom Kinghorn wrote: You're testing NS records for the recipient address here, not the sender. i tested using ad...@cpf.co.za cpf.co.za is hosted at sedoparking.com in the

Re: 4xx too many errors question

2012-10-17 Thread Tomas Macek
On Wed, 17 Oct 2012, Wietse Venema wrote: Tomas Macek: So my question is how can I get this error message on my own computer, when I did not sent any email to the server in last hour? According to this experience, this seems to be per server settings. Or am I missing something? The error

local delivery: temporary failure

2012-10-17 Thread Renato
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I'm new to postfix and MTAs in general; I'd like to set it up for local delivery only on my Archlinux box. I've followed the instructions on the archwiki [1] and my configuration files are exactly as explained there, except that I have *not* set

Re: 4xx too many errors question

2012-10-17 Thread Wietse Venema
Tomas Macek: The part of the log is here: Oct 11 12:26:44 mail postfix/smtpd[4546]: my.pc.host.name[x.x.x.x]: RSET Oct 11 12:26:44 mail postfix/smtpd[4546]: my.pc.host.name[x.x.x.]: 250 2.0.0 Ok Oct 11 12:26:44 mail postfix/smtpd[4546]: my.pc.host.name[x.x.x.x]: 421 4.7.0

Re: Problems with authentication using dovecot

2012-10-17 Thread Noel Jones
On 10/17/2012 12:54 PM, Ricardo Barbosa wrote: hi all, I deploy enviroment with postfix and dovecot but not worked. look my settings. postconf -n is preferred rather than main.cf snippings. mynetworks = 127.0.0.0/8, 172.16.1.0/24, 10.0.0.0/24, 0.0.0.0/0 0.0.0.0/0!!! Trying to be an

Re: Block sending from non-US IPs

2012-10-17 Thread /dev/rob0
On Wed, Oct 17, 2012 at 03:41:08PM -0500, Thomas E Lackey wrote: I am looking into a system where one of the [virtual] mail accounts was compromised. Apparently the account, once compromised, was used to send spam from overseas hosts. Since the company has no overseas users, they asked

Re: Block sending from non-US IPs

2012-10-17 Thread CSS
On Oct 17, 2012, at 4:51 PM, /dev/rob0 wrote: On Wed, Oct 17, 2012 at 03:41:08PM -0500, Thomas E Lackey wrote: I am looking into a system where one of the [virtual] mail accounts was compromised. Apparently the account, once compromised, was used to send spam from overseas hosts. Since

Re: Problems with authentication using dovecot

2012-10-17 Thread Noel Jones
On 10/17/2012 2:41 PM, Ricardo Barbosa wrote: Hi jones 0.0.0.0/0!!! Trying to be an open relay? Bad idea; remove this. Its test only, because not worked no way Take it out! Not a good placeholder, even for testing. Any other warning|error|fatal|panic postfix messages? Any dovecot

Re: Any best practices for stacking filters?

2012-10-17 Thread Wietse Venema
Quanah Gibson-Mount: Right now, we can have up to 4 different processing filters in our configuration, based on what features are enabled. In general, we always have: 1) OpenDKIM for signing Then we almost always have 2) Amavis Then we sometimes have 3) A Zimbra written Milter

Re: Problems with authentication using dovecot

2012-10-17 Thread Patrick Ben Koetter
* Ricardo Barbosa spidersl...@yahoo.com.br: but smtp not worked with auth plain. but I also have a mysql server by my understanding, the sasl uses to authenticate users from smtp dovecot so the parameter smtpd_sasl_type = dovecot, correct? funny that the dovecot is working, as much as pop