How to output custom message to sender_access reject

2014-02-10 Thread L. D. James
Can someone advise me how to customize the rejection message for message rejected by /etc/postfix/sender_access? For example: --- # /etc/postfix/sender_access # # Black/Whitelist for senders matching the 'MAIL FROM' field.

Re: problem with postfix-sasl and debian 7: SASL PLAIN authentication failed: no mechanism available

2014-02-10 Thread Wietse Venema
nik600: my /etc/default/saslauthd ... OPTIONS=-c -m /var/spool/postfix/var/run/saslauthd -r my /etc/postfix/sasl/smtpd.conf ... saslauthd_path: /var/spool/postfix/var/run/saslauthd/mux Debian runs Postfix with chroot turned on, which changes the meaning of pathnames. Try turning off chroot

Re: How to output custom message to sender_access reject

2014-02-10 Thread Noel Jones
On 2/10/2014 7:13 AM, L. D. James wrote: Can someone advise me how to customize the rejection message for message rejected by /etc/postfix/sender_access? http://www.postfix.org/access.5.html f...@example.com REJECT Custom message where Custom message contains the reject text sent to the

warning: hostname localhost does not resolve to address ::1: No address associated with hostname

2014-02-10 Thread Jelle de Jong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello everyone, I have a dual stack IPv6/IPv4 postfix server that been running on debian stable quite happy. At 9 februari I did some system updates for debian: apache2-mpm-prefork apache2-utils apache2.2-bin apache2.2-common base-files libc-bin

Re: warning: hostname localhost does not resolve to address ::1: No address associated with hostname

2014-02-10 Thread li...@rhsoft.net
Am 10.02.2014 16:33, schrieb Jelle de Jong: I have a dual stack IPv6/IPv4 postfix server that been running on debian stable quite happy. postfix/smtpd[15247]: warning: hostname localhost does not resolve to address ::1: No address associated with hostname 1. should I be worried? 2. why

Re: warning: hostname localhost does not resolve to address ::1: No address associated with hostname

2014-02-10 Thread Wietse Venema
Jelle de Jong: postfix/smtpd[15247]: warning: hostname localhost does not resolve to address ::1: No address associated with hostname .. 2. why is the warning popping up now? Because the system getnameinfo() function cannot resolve localhost to ::1. # cat /etc/hosts 127.0.0.1

gmail certificate complaints

2014-02-10 Thread Norton Allen
I've noticed the following in my logs: Feb 9 04:10:01 endymion postfix/smtp[21298]: certificate verification failed for gmail-smtp-in.l.google.com: num=20:unable to get local issuer certificate Feb 9 04:10:01 endymion postfix/smtp[21298]: certificate verification failed for

Re: [OT] SELinux Policies (port maildir location)

2014-02-10 Thread Michal Bruncko
Hello * A custom smtpd instance listening on the loopback interface on port 10025 as you can see from you policy posted at the end of your post - you can simply allow postfix to bind to port 10025 using command: setsebool -P allow_ypbind=on (parameter -P makes this change permanent) *

Re: problem with postfix-sasl and debian 7: SASL PLAIN authentication failed: no mechanism available

2014-02-10 Thread nik600
You are true...it was a chroot problem thanks! 2014-02-10 14:57 GMT+01:00 Wietse Venema wie...@porcupine.org: nik600: my /etc/default/saslauthd ... OPTIONS=-c -m /var/spool/postfix/var/run/saslauthd -r my /etc/postfix/sasl/smtpd.conf ... saslauthd_path:

Re: gmail certificate complaints

2014-02-10 Thread Viktor Dukhovni
On Mon, Feb 10, 2014 at 11:05:50AM -0500, Norton Allen wrote: I've noticed the following in my logs: Feb 9 04:10:01 endymion postfix/smtp[21298]: certificate verification failed for gmail-smtp-in.l.google.com: num=20:unable to get local issuer certificate Feb 9 04:10:01

Re: Does this have side effects?

2014-02-10 Thread Jay G. Scott
On Fri, Feb 07, 2014 at 01:55:09PM -0500, Glenn Sieb wrote: This will do what you're looking for, much easier. in main.cf: mydomain = arlut.utexas.edu # SENDING MAIL # # The myorigin parameter specifies the domain that locally-posted # mail appears to come from. The default is to

Re: How to output custom message to sender_access reject

2014-02-10 Thread L. D. James
On 02/10/2014 09:33 AM, Noel Jones wrote: On 2/10/2014 7:13 AM, L. D. James wrote: Can someone advise me how to customize the rejection message for message rejected by /etc/postfix/sender_access? http://www.postfix.org/access.5.html f...@example.com REJECT Custom message where Custom

OT - call for speakers announcements?

2014-02-10 Thread CS DBA
Hi All; We're hosting a conference in April and we're looking for speakers (www.opendatasummit.com). Would it be appropriate to post the call for speakers announcement here? or is there a better list? Thanks in advance

Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread fleon
Hello, i am using Debian 7.3 with postfix, and am trying to send email through our Exchange 2007 server. I have read tons of posts but i have been unable to get it to work I am using the postfix package that comes with Debian, and also installed libsasl2-modules On mail.cf i tried the following:

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread Viktor Dukhovni
On Mon, Feb 10, 2014 at 09:54:42AM -0800, fleon wrote: Hello, i am using Debian 7.3 with postfix, and am trying to send email through our Exchange 2007 server. I have read tons of posts but i have been unable to get it to work I am using the postfix package that comes with Debian, and also

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread fleon
I added the debug command you requested so you can see the whole error. I don't seem to have dns issues so i haven't felt the need for the brackets. I do seem to have the NTLM module I am aware of base64, so my tests with telnet i did use base64 to enter the username but as soon as i pressed

Re: OT - call for speakers announcements?

2014-02-10 Thread Wietse Venema
CS DBA: Hi All; We're hosting a conference in April and we're looking for speakers (www.opendatasummit.com). Would it be appropriate to post the call for speakers announcement here? or is there a better list? Please do not post the CFP here. You can post a weblink instead.

Re: OT - call for speakers announcements?

2014-02-10 Thread CS DBA
On 2/10/14, 12:29 PM, Wietse Venema wrote: CS DBA: Hi All; We're hosting a conference in April and we're looking for speakers (www.opendatasummit.com). Would it be appropriate to post the call for speakers announcement here? or is there a better list? Please do not post the CFP here. You can

Re: [OT] SELinux Policies (port maildir location)

2014-02-10 Thread Ori Bani
On 2/10/14, Michal Bruncko michal.brun...@zssos.sk wrote: * A custom smtpd instance listening on the loopback interface on port 10025 as you can see from you policy posted at the end of your post - you can simply allow postfix to bind to port 10025 using command: setsebool -P

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread Viktor Dukhovni
On Mon, Feb 10, 2014 at 10:39:49AM -0800, fleon wrote: I added the debug command you requested so you can see the whole error. I don't seem to have dns issues so i haven't felt the need for the brackets. I do seem to have the NTLM module You need to add the [] not because you may or may not

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread fleon
Well, i tried with [] in both files, also tried changing the sasl password file to use domain\user instead of u...@domain.com and still i get the same errors. I wonder if exchange is rejecting anything without TLS. Our exchange has a self signed certificate and i know if i want to try TLS i will

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread li...@rhsoft.net
Am 10.02.2014 19:39, schrieb fleon: I added the debug command you requested so you can see the whole error. I don't seem to have dns issues so i haven't felt the need for the brackets. I do seem to have the NTLM module uninstall the NTLM module on my Fedora machines i had the same until yum

Re: Exchange 2007 gives 535 5.7.3 Authentication unsuccessful

2014-02-10 Thread Viktor Dukhovni
On Mon, Feb 10, 2014 at 11:51:31PM +0100, li...@rhsoft.net wrote: Am 10.02.2014 19:39, schrieb fleon: I added the debug command you requested so you can see the whole error. I don't seem to have dns issues so i haven't felt the need for the brackets. I do seem to have the NTLM module

does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Michael McCallister
Hi, Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For example, lets assume an IP lookup on zen.spamhaus.org returns nxdomain and postscreen_dnsbl_ttl is set to an hour - postscreen won't check again for another hour? Or does that caching only apply to non-nxdomain

Re: does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Wietse Venema
Michael McCallister: Hi, Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For example, lets assume an IP lookup on zen.spamhaus.org returns nxdomain and postscreen_dnsbl_ttl is set to an hour - postscreen won't check again for another hour? Or does that caching only apply

Re: does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Michael McCallister
On 2/10/2014 7:43 PM, Wietse Venema wrote: Michael McCallister: Hi, Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For example, lets assume an IP lookup on zen.spamhaus.org returns nxdomain and postscreen_dnsbl_ttl is set to an hour - postscreen won't check again for another

Re: does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Noel Jones
On 2/10/2014 9:45 PM, Michael McCallister wrote: On 2/10/2014 7:43 PM, Wietse Venema wrote: Michael McCallister: Hi, Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For example, lets assume an IP lookup on zen.spamhaus.org returns nxdomain and postscreen_dnsbl_ttl is set to

Re: does postscreen_dnsbl_ttl apply to nxdomain responses

2014-02-10 Thread Michael McCallister
On 2/10/2014 9:09 PM, Noel Jones wrote: On 2/10/2014 9:45 PM, Michael McCallister wrote: On 2/10/2014 7:43 PM, Wietse Venema wrote: Michael McCallister: Hi, Does postscreen_dnsbl_ttl apply to nxdomain responses as well? For example, lets assume an IP lookup on zen.spamhaus.org returns