postfix content_filter source address

2013-08-20 Thread Jimmy Stewpot
Hello, I have recently done a deployment of Postfix 2.10. It seems that the behaviour of postfix has changed slightly in the way that it handles the content_filter variables in the configuration file. We are using content_filter to pass through the emails to Sophos PureMessage for UNIX like

Re: greylisting generates error email?

2013-08-20 Thread Grant
zen is, for all practical purposes, perfect. You will not get false positives as everyone in zen is either a confirmed spammer or in the PBL (policy block list). That is to say, no one in zen should be connecting to your mailserver to send mail, ever. http://www.spamhaus.org/zen/ zen

Re: greylisting generates error email?

2013-08-20 Thread Erwan David
On Tue, Aug 20, 2013 at 05:58:44AM CEST, LuKreme krem...@kreme.com said: . http://www.spamhaus.org/zen/ zen blocks these categories: SBL Direct UBE sources, spam operations spam services CSS Direct snowshoe spam sources detected via automation CBL (3rd party exploits such as proxies,

Re: postfix content_filter source address

2013-08-20 Thread Stan Hoeppner
On 8/20/2013 1:04 AM, Jimmy Stewpot wrote: Hello, I have recently done a deployment of Postfix 2.10. It seems that the behaviour of postfix has changed slightly in the way that it handles the content_filter variables in the configuration file. We are using content_filter to pass through

Re: greylisting generates error email?

2013-08-20 Thread Grant
http://www.spamhaus.org/zen/ zen blocks these categories: SBL Direct UBE sources, spam operations spam services CSS Direct snowshoe spam sources detected via automation CBL (3rd party exploits such as proxies, trojans, etc.) PBL End-user Non-MTA IP addresses set by ISP outbound mail

Re: greylisting generates error email?

2013-08-20 Thread Jose Borges Ferreira
On Aug 20, 2013 8:03 AM, Erwan David er...@rail.eu.org wrote: On Tue, Aug 20, 2013 at 05:58:44AM CEST, LuKreme krem...@kreme.com said: . http://www.spamhaus.org/zen/ zen blocks these categories: SBL Direct UBE sources, spam operations spam services CSS Direct snowshoe spam

Re: greylisting generates error email?

2013-08-20 Thread Stan Hoeppner
On 8/20/2013 3:06 AM, Grant wrote: Has anyone had a confirmed false positive with zen.spamhaus.org ? http://lmgtfy.com/?q=spamhaus+false+positive -- Stan

TLS errors with GMX/web.de

2013-08-20 Thread Sebastian Wiesinger
Hello, GMX and web.de started an initiative for secure E-Mail made in Germany... they turned TLS on. But in addition to that bold move the did something else that causes the following errors when they try to send mail to my postfix: postfix/smtpd[28706]: connect from mout.web.de[212.227.15.14]

Re: TLS errors with GMX/web.de

2013-08-20 Thread Heiko Wundram
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 20.08.2013 11:48, schrieb Sebastian Wiesinger: This error ONLY occurs with their servers. My question is if anyone has an idea what could cause this error. My first guess is that they check certificates for validity and I only have an CACert

Re: TLS errors with GMX/web.de

2013-08-20 Thread Sebastian Wiesinger
* Heiko Wundram modeln...@modelnine.org [2013-08-20 12:09]: Still delivers fine for me (and my mail-server) running Postfix 2.10.1: Received: from mout.web.de (mout.web.de [212.227.15.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate

Re: TLS errors with GMX/web.de

2013-08-20 Thread Heiko Wundram
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 20.08.2013 12:12, schrieb Sebastian Wiesinger: * Heiko Wundram modeln...@modelnine.org [2013-08-20 12:09]: Still delivers fine for me (and my mail-server) running Postfix 2.10.1: Received: from mout.web.de (mout.web.de [212.227.15.3]) (using

Re: TLS errors with GMX/web.de

2013-08-20 Thread DTNX Postmaster
On Aug 20, 2013, at 11:48, Sebastian Wiesinger postfix-us...@ml.karotte.org wrote: GMX and web.de started an initiative for secure E-Mail made in Germany... they turned TLS on. But in addition to that bold move the did something else that causes the following errors when they try to send

Re: Issue with a customer running Symantec Messaging Gateway: .dat attachments

2013-08-20 Thread Marcio Merlone
Em 19-08-2013 18:35, Jeroen Geilman escreveu: On 08/19/2013 06:24 PM, Marcio Merlone wrote: I run a mail server for my company with Ubuntu 10.04 LTS and postfix 2.7.0-1ubuntu0.2 and all my users use Thunderbird ESR. We have a customer running Symantec Messaging Gateway and it converts

Re: TLS errors with GMX/web.de

2013-08-20 Thread Sebastian Wiesinger
* DTNX Postmaster postmas...@dtnx.net [2013-08-20 12:57]: Self-signed, 2048 bits certificate from our own root. Picks the same cipher and TLS version as in Heiko's example, it seems. Perhaps it's your certificate, perhaps your Postfix settings? No odd overrides for the defaults anywhere,

[ot] Zen and the art of spam abatement (was: Re: greylisting generates error email?)

2013-08-20 Thread /dev/rob0
Whilst this subject is of some interest to many or most Postfix users, it has departed from being fully on topic here. It would fit better on a list like SDLU: http://spammers.dontlike.us [Disclaimer: I am a list moderator at SDLU.) On Sat, Aug 17, 2013 at 10:39:25AM -0700, Grant wrote:

Re: postfix content_filter source address

2013-08-20 Thread Wietse Venema
Jimmy Stewpot: content_filter = smtp:[127.0.0.1]:2500 [...] However with the same version of Pure Message on a new version of Postfix we see that the system is seeing localhost as the from relay which means it goes through the localhost whitelist in the spam policy... On all systems that I

postfix.org down?

2013-08-20 Thread Charles Marcus
for me at least... -- Best regards, */Charles /*

Re: how to see my_networks check in peer_debug, level 2 or greater?

2013-08-20 Thread Charles Marcus
On 2013-08-16 5:22 PM, lcon...@go2france.com lcon...@go2france.com wrote: postconf mail_version mail_version = 2.3.3 Good gawd... The reason no one has responded most likely is because you are using such an ancient and most importantly unsupported version. You need to upgrade... -- Best

Re: postfix.org down?

2013-08-20 Thread btb
On 2013.08.20 10.23, Charles Marcus wrote: for me at least... http://www.downforeveryoneorjustme.com/www.postfix.org

Re: postfix.org down?

2013-08-20 Thread Charles Marcus
On 2013-08-20 10:29 AM, btb b...@bitrate.net wrote: On 2013.08.20 10.23, Charles Marcus wrote: for me at least... http://www.downforeveryoneorjustme.com/www.postfix.org Well, it is back up now for me, so either it was really down for a few minutes, or there was some kind of DNS issue local

transport map not working

2013-08-20 Thread jeffrey j donovan
Greetings i have an old osx server that was working fine and I noticed that the transport maps listed in the config are not being followed. I have one domain name and several imap servers. first i checked if the format for the map was correct in main.cf , hash:/etc/postfix/k12_tm_imap2 I

Re: postfix.org down?

2013-08-20 Thread Jeffrey 'jf' Lim
On Tue, Aug 20, 2013 at 10:34 PM, Charles Marcus cmar...@media-brokers.com wrote: On 2013-08-20 10:29 AM, btb b...@bitrate.net wrote: On 2013.08.20 10.23, Charles Marcus wrote: for me at least... http://www.downforeveryoneorjustme.com/www.postfix.org Well, it is back up now for me, so

Re: TLS errors with GMX/web.de

2013-08-20 Thread Viktor Dukhovni
On Tue, Aug 20, 2013 at 01:27:01PM +0200, Sebastian Wiesinger wrote: I found the problem... In addition to my normal certificate, I had an EC certificate. smtpd_tls_eccert_file=/etc/postfix/certs/cacert-karotte-ec.crt Though I think OpenSSL will generally detect attempts to configure a

Re: transport map not working

2013-08-20 Thread Viktor Dukhovni
On Tue, Aug 20, 2013 at 10:45:44AM -0400, jeffrey j donovan wrote: Aug 20 10:36:41 imap2 postfix/pipe[3641]: 536D3DC23DA: to=us...@imap2.mydomain.com, orig_to=user1@mydomain, relay=dovecot, delay=0.02, delays=0.01/0/0/0.01, dsn=2.0.0, status=sent (delivered via dovecot service) As

Re: postfix.org down?

2013-08-20 Thread Wietse Venema
Charles Marcus: for me at least... Try www.postfix.org. Wietse

Re: transport map not working

2013-08-20 Thread Wietse Venema
jeffrey j donovan: Aug 20 10:36:41 imap2 postfix/pipe[3641]: 536D3DC23DA: to=us...@imap2.mydomain.com, That is us...@imap2.mydomain.com. us...@mydomain.com smtp:sub1.mydomain.com:25 That is not us...@imap2.mydomain.com You need to update your virtual aliases or your transport map.

Re: transport map not working

2013-08-20 Thread jeffrey j donovan
On Aug 20, 2013, at 11:08 AM, wie...@porcupine.org (Wietse Venema) wrote: jeffrey j donovan: Aug 20 10:36:41 imap2 postfix/pipe[3641]: 536D3DC23DA: to=us...@imap2.mydomain.com, That is us...@imap2.mydomain.com. us...@mydomain.com smtp:sub1.mydomain.com:25 That is not

Re: postfix.org down?

2013-08-20 Thread Charles Marcus
On 2013-08-20 11:09 AM, wie...@porcupine.org (Wietse Venema) wie...@porcupine.org (Wietse Venema) wrote: Charles Marcus: for me at least... Try www.postfix.org. I did, it was down for about 2 or 3 minutes. By the time someone else responded, it was back up. One other person said it was

Re: transport map not working

2013-08-20 Thread Wietse Venema
jeffrey j donovan: I do have a virtual alias map that i am using for some redirected mail list. is it because i have no user entry that it delivers locally ? i thought that it would step down to transport if it did not find anything. virtual_alias_maps = hash:/etc/postfix/virtualmm

Re: transport map not working

2013-08-20 Thread jeffrey j donovan
On Aug 20, 2013, at 11:39 AM, wie...@porcupine.org (Wietse Venema) wrote: If you rewrite an envelope recipient address X with virtual_alias_maps (or otherwise) into envelope recipient address Y, then Postfix will use envelope recipient address Y for transport map lookups. Therefore you

Re: transport map not working

2013-08-20 Thread Wietse Venema
jeffrey j donovan: If I do not use a virtual alias map, is a transport map sufficient by itself or should I always use the two together ? I only ask this because this was working before I added the alias map. I just want to be clear that these two work together. That depends. First, Postfix

Re: transport map not working

2013-08-20 Thread jeffrey j donovan
On Aug 20, 2013, at 12:17 PM, Wietse Venema wie...@porcupine.org wrote: That depends. First, Postfix needs to know what domains to receive mail for (otherwise mail is rejected with relay access denied). You specify each domain in one of the four domain lists: mydestination,

Re: transport map not working

2013-08-20 Thread Wietse Venema
jeffrey j donovan: First, Postfix needs to know what domains to receive mail for (otherwise mail is rejected with relay access denied). You specify each domain in one of the four domain lists: mydestination, relay_domains, virtual_alias_domains, or virtual_mailbox_domains. In addition,

disable ipv6 when sending to gmail ?

2013-08-20 Thread Nicolas KOWALSKI
Hello, The gmail smtp server is now refusing mails from my system when IPv6 is used, as shown in the log below: Aug 20 06:25:08 petole postfix/smtp[27705]: Trusted TLS connection established to gmail-smtp-in.l.google.com[2a00:1450:400c:c03::1b]:25: TLSv1.2 with cipher ECDHE-RSA-RC4-SHA

Re: disable ipv6 when sending to gmail ?

2013-08-20 Thread Wietse Venema
Nicolas KOWALSKI: I am not able to have an IPv6 rDNS record with my ISP, only an IPv4 one. I guess this is why it works when using IPv4 (tested by forcing inet_protocols = ipv4), and does not work any more with IPv6. Is it possible to have outgoing mail to gmail (or another domain) sent

Re: Issue with a customer running Symantec Messaging Gateway: .dat attachments

2013-08-20 Thread LuKreme
On 20 Aug 2013, at 05:21 , Marcio Merlone marcio.merl...@a1.ind.br wrote: Em 19-08-2013 18:35, Jeroen Geilman escreveu: On 08/19/2013 06:24 PM, Marcio Merlone wrote: I run a mail server for my company with Ubuntu 10.04 LTS and postfix 2.7.0-1ubuntu0.2 and all my users use Thunderbird ESR. We

Using Postfix as a client to an upstream server

2013-08-20 Thread Rob Tanner
Is it possible to use Postfix as a client to an upstream server? And by a client I mean, can Postfix use auth SMTP to authenticate to that upstream server and can it use STARTTLS while acting like a client to the upstream server? If any of the above questions are yes i there specific

Re: Using Postfix as a client to an upstream server

2013-08-20 Thread Wietse Venema
Rob Tanner: Is it possible to use Postfix as a client to an upstream server? And by a client I mean, can Postfix use auth SMTP to authenticate to that upstream server and can it use STARTTLS while acting like a client to the upstream server? If any of the above questions are yes i there