Re: performance of postfix

2013-05-22 Thread Stan Hoeppner
On 5/22/2013 4:04 PM, Viktor Dukhovni wrote: > On Wed, May 22, 2013 at 03:00:44PM -0500, Stan Hoeppner wrote: > >>> You'll probably find occasional >>> latency sending messages through the content filter. If that's a >>> problem, tune the content filter to remove DNS lookups or raise >>> its conc

Re: performance of postfix

2013-05-22 Thread Viktor Dukhovni
On Wed, May 22, 2013 at 03:00:44PM -0500, Stan Hoeppner wrote: > > You'll probably find occasional > > latency sending messages through the content filter. If that's a > > problem, tune the content filter to remove DNS lookups or raise > > its concurrency. If the content filter is using all avai

Re: postscreen questions

2013-05-22 Thread Stan Hoeppner
On 5/22/2013 10:02 AM, Noel Jones wrote: ... > Secondly, remember postscreen is intended as a quick-and-simple > zombie killer, its only purpose is to reduce the workload on the > more complex filters further downstream. This fact is not emphasized often enough. Many people forget the intended pu

Re: performance of postfix

2013-05-22 Thread Stan Hoeppner
On 5/22/2013 10:13 AM, Viktor Dukhovni wrote: > On Wed, May 22, 2013 at 04:45:42PM +0300, Selcuk Yazar wrote: > If your content filter is not very fast, bursts of mail will accumulate< while they are waiting to be scanned. Then the queue becomes empty. You may also have deferr

Re: postfix and dovecot SASL

2013-05-22 Thread Bill Cole
On 22 May 2013, at 13:42, Peter Skensved wrote: I've set up dovecot to provide SASL for postfix and as far as I can tell everything is working correctly. However, when I do a ehlo localhost I don't see it announcing anything about AUTH : Connected to localhost. Escape character is '^]'. 220

Re: postfix and dovecot SASL

2013-05-22 Thread Noel Jones
On 5/22/2013 12:42 PM, Peter Skensved wrote: > I've set up dovecot to provide SASL for postfix and as far as I can > tell everything is working correctly. However, when I do a ehlo localhost > I don't see it announcing anything about AUTH : > > Connected to localhost. > Escape character is '^

Re: /var/spool/postfix/private file permissons

2013-05-22 Thread Wietse Venema
Viktor Dukhovni: > On Wed, May 22, 2013 at 01:33:35PM -0400, Peter Skensved wrote: > > > The guidelines for setting up postfix with dovecot SASL recommends setting > > the file permissions on /var/spool/postfix/private/auth to 660. > > This socket is created by Dovecot. > > > Yet all the other s

Re: /var/spool/postfix/private file permissons

2013-05-22 Thread Viktor Dukhovni
On Wed, May 22, 2013 at 01:33:35PM -0400, Peter Skensved wrote: > The guidelines for setting up postfix with dovecot SASL recommends setting > the file permissions on /var/spool/postfix/private/auth to 660. This socket is created by Dovecot. > Yet all the other sockets in the .../private directo

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Quanah Gibson-Mount
--On Wednesday, May 22, 2013 1:17 PM -0400 Charles Marcus wrote: On 2013-05-22 12:38 PM, Quanah Gibson-Mount wrote: --On Wednesday, May 22, 2013 12:30 PM -0400 Charles Marcus wrote: On 2013-05-22 12:19 PM, Viktor Dukhovni wrote: 1.0.1c has some known issues, you should use 1.0.1e. Hmm

Re: Postfix, Autoreply

2013-05-22 Thread Charles Marcus
Again - please do not top-post. If you don't know what that means, google is your friend. On 2013-05-22 12:42 PM, motty cruz wrote: thank you soo much Charles, I was able to download that script you pointed in the last email, You're welcome. now this maybe dumb questions but I would like to

postfix and dovecot SASL

2013-05-22 Thread Peter Skensved
I've set up dovecot to provide SASL for postfix and as far as I can tell everything is working correctly. However, when I do a ehlo localhost I don't see it announcing anything about AUTH : Connected to localhost. Escape character is '^]'. 220 xxx.yyy.QueensU.CA ESMTP Postfix ehlo localhost 2

Re: postscreen questions

2013-05-22 Thread Bill Cole
On 22 May 2013, at 11:02, Noel Jones wrote: so, the RBLs are getting utilized by postscreen before it even hits the smtp service. So, am I right to assume that the reject_rbl_client lines in my smtpd_recipient_restrictions are no longer needed? No, not needed. But some folks like to leave t

/var/spool/postfix/private file permissons

2013-05-22 Thread Peter Skensved
Hi, The guidelines for setting up postfix with dovecot SASL recommends setting the file permissions on /var/spool/postfix/private/auth to 660. Yet all the other sockets in the .../private directory have 666 permissions. Does it matter ? They are all owned by postfix:postfix and the parent dire

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Charles Marcus
On 2013-05-22 12:38 PM, Quanah Gibson-Mount wrote: --On Wednesday, May 22, 2013 12:30 PM -0400 Charles Marcus wrote: On 2013-05-22 12:19 PM, Viktor Dukhovni wrote: 1.0.1c has some known issues, you should use 1.0.1e. Hmmm... generally, gentoo is very good at keeping up with security or c

Re: Postfix, Autoreply

2013-05-22 Thread motty cruz
thank you soo much Charles, I was able to download that script you pointed in the last email, now this maybe dumb questions but I would like to deploy this script on the spam filter level before reaching our imap/pop server. At the spam filter level I don't have a database for users, I was hopin

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Quanah Gibson-Mount
--On Wednesday, May 22, 2013 12:30 PM -0400 Charles Marcus wrote: On 2013-05-22 12:19 PM, Viktor Dukhovni wrote: 1.0.1c has some known issues, you should use 1.0.1e. Hmmm... generally, gentoo is very good at keeping up with security or critical functionality issues. 1.0.1c has been stable

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Charles Marcus
On 2013-05-22 12:19 PM, Viktor Dukhovni wrote: 1.0.1c has some known issues, you should use 1.0.1e. Hmmm... generally, gentoo is very good at keeping up with security or critical functionality issues. 1.0.1c has been stable for quite some time. Maybe they have added patches to address whatev

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Viktor Dukhovni
On Wed, May 22, 2013 at 12:15:24PM -0400, Charles Marcus wrote: > On 2013-05-22 12:10 PM, Marko Weber | ZBF wrote: > >i am on gentoo linux with openssl 1.0.1c. > > Me too... > > >i remerge the openssl and restart postfix. > > No need - you missed the significance of Viktor's 'no'... > > This

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Charles Marcus
On 2013-05-22 12:10 PM, Marko Weber | ZBF wrote: i am on gentoo linux with openssl 1.0.1c. Me too... i remerge the openssl and restart postfix. No need - you missed the significance of Viktor's 'no'... This is nothing to worry about *unless* you are getting a significant number of these

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Marko Weber | ZBF
Am 2013-05-22 17:54, schrieb Viktor Dukhovni: On Wed, May 22, 2013 at 03:57:49PM +0200, Marko Weber | ZBF wrote: I find error entries like these in my logs: postfix/smtp[16790]: warning: TLS library problem: 16790:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340:

Re: ssl errors in log. error on remote or local side?

2013-05-22 Thread Viktor Dukhovni
On Wed, May 22, 2013 at 03:57:49PM +0200, Marko Weber | ZBF wrote: > I find error entries like these in my logs: > > postfix/smtp[16790]: warning: TLS library problem: > 16790:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version > number:s3_pkt.c:340: > > does that mean openssl or somethin

Re: Postfix, Autoreply

2013-05-22 Thread Charles Marcus
Please don't top-post - response inline below... On 2013-05-22 10:25 AM, motty cruz wrote: On Wed, May 22, 2013 at 4:11 AM, Charles Marcus mailto:cmar...@media-brokers.com>> wrote: On 2013-05-21 8:23 PM, Benny Pedersen wrote: motty cruz skrev den 2013-05-21 02:04: Do

Re: performance of postfix

2013-05-22 Thread Viktor Dukhovni
On Wed, May 22, 2013 at 04:45:42PM +0300, Selcuk Yazar wrote: > > >If your content filter is not very fast, bursts of mail will accumulate< > > >while they are waiting to be scanned. Then the queue becomes empty. > > > > > >You may also have deferred mail that is retried periodically. You logs >

Re: postscreen questions

2013-05-22 Thread Noel Jones
On 5/22/2013 8:41 AM, Deeztek Support wrote: > I'm trying out postscreen and I have a couple of questions. First > off, here's my postscreen setup: > > postscreen_access_list = permit_mynetworks > postscreen_blacklist_action = enforce > postscreen_dnsbl_action = enforce > postscreen_greet_action =

Re: Postfix, Autoreply

2013-05-22 Thread motty cruz
Thank your suggestions, do you mind pointing to a source for vacation script? I'm using FreeBSD I tried to use Autoreply Software from here: http://www.postfix.org/addon.html#autoreply but one requires Java and the other works with LDAP, I don't have LDAP and I'm not willing to use Java. Thank y

ssl errors in log. error on remote or local side?

2013-05-22 Thread Marko Weber | ZBF
hello list, i find error entries like these in my logs: postfix/smtp[16790]: warning: TLS library problem: 16790:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340: does that mean openssl or something is broken on my machine? thanks marko

Re: performance of postfix

2013-05-22 Thread Selcuk Yazar
On Wed, May 22, 2013 at 3:58 PM, Viktor Dukhovni wrote: > On Wed, May 22, 2013 at 01:53:15PM +0300, Selcuk Yazar wrote: > > > we have Postfix with LDAP backend , everything is working good but i > think > > we have some performance issues , but i can't sure :/ ( Our mailbox > > folders are locat

postscreen questions

2013-05-22 Thread Deeztek Support
I'm trying out postscreen and I have a couple of questions. First off, here's my postscreen setup: postscreen_access_list = permit_mynetworks postscreen_blacklist_action = enforce postscreen_dnsbl_action = enforce postscreen_greet_action = enforce postscreen_dnsbl_sites = zen.spamhaus.org*3

Re: Mail in Submit Queue

2013-05-22 Thread Bill Cole
On 22 May 2013, at 7:36, LuKreme wrote: My daily run output (freebsd) sent this message (in part) for today. Mail in submit queue: -Queue ID- --Size-- Arrival Time -Sender/Recipient--- 27FC0118B7AF 9831 Tue May 21 14:29:35 MAILER-DAEMON (host eforward3.registrar-servers.com[38.

Re: performance of postfix

2013-05-22 Thread Viktor Dukhovni
On Wed, May 22, 2013 at 01:53:15PM +0300, Selcuk Yazar wrote: > we have Postfix with LDAP backend , everything is working good but i think > we have some performance issues , but i can't sure :/ ( Our mailbox > folders are located Storage Drive mapped at Redhat Enterprise) > > > Every 5.0s: .

Mail in Submit Queue

2013-05-22 Thread LuKreme
My daily run output (freebsd) sent this message (in part) for today. Mail in submit queue: -Queue ID- --Size-- Arrival Time -Sender/Recipient--- 27FC0118B7AF 9831 Tue May 21 14:29:35 MAILER-DAEMON (host eforward3.registrar-servers.com[38.101.213.199] said: 450 4.1.1 : Recipient a

Re: performance of postfix

2013-05-22 Thread Selcuk Yazar
Hi, actually i forgot write additional info about our server, also we have policyd deamon (cluebringer) , amavis(SpamAssasin, clamav) and dovecot . when i looked up logs everything looking good for me :) . it flows like waterfall . sometime when one e-mail comes from yahoo groups, it takes minute

Re: Postfix, Autoreply

2013-05-22 Thread Charles Marcus
On 2013-05-21 8:23 PM, Benny Pedersen wrote: motty cruz skrev den 2013-05-21 02:04: Does anybody have a script that work for autoresponders? try the one in postfixadmin, note it does not reply to maillists blindly Well... I had a lot of trouble with it responding to a lot of things that i

Re: performance of postfix

2013-05-22 Thread Mike
On 13-05-22 07:53 AM, Selcuk Yazar wrote: Hi, we have Postfix with LDAP backend , everything is working good but i think we have some performance issues , but i can't sure :/ ( Our mailbox folders are located Storage Drive mapped at Redhat Enterprise) Have you looked at your logs to dete

performance of postfix

2013-05-22 Thread Selcuk Yazar
Hi, we have Postfix with LDAP backend , everything is working good but i think we have some performance issues , but i can't sure :/ ( Our mailbox folders are located Storage Drive mapped at Redhat Enterprise) Every 5.0s: ./qshape.pl Wed May 2