Re: Fail2ban for postfix not blocking

2015-06-15 Thread Wietse Venema
John Fawcett: Jun 15 00:21:59 server01 postfix/postscreen[2134]: NOQUEUE: reject: RCPT from [114.24.2.181]:4289: 550 5.7.1 Service unavailable; client [114.24.2.181] blocked using zen.spamhaus.org; from=z200...@yahoo.com.tw, to=gk49f...@yahoo.com.tw, proto=SMTP, helo=80.237.194.71 postscreen

Re: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 06:41:55AM +0200, Martin S wrote: I might be extremely dense but what I don't understand now is: The setup works if I am loged in to the system, e.g. by imap through mail2web. Then I can send mail from my server to the world or between mailboxes on the server.

Re: Di I need to open port 25?

2015-06-15 Thread Mike McKoy
You shouldn't worry about that as long as you a patched up. If you have no need to receive email from the outside you can block it but you need to have it unblocked for outgoing. Amazon only restricts you if you have more than one IP. Doesn't sound like that's an issue. If you are running cpanel

Re: Di I need to open port 25?

2015-06-15 Thread Mike McKoy
Who is your host? IF its amazon they have to unblock port 25 for sending if you have more than one IP address. You might want to make sure they don't have any restrictions on you. And...if they do they should have procedures for getting them lifted. -- Mike McKoy *404.590.7176*

Re: Di I need to open port 25?

2015-06-15 Thread Jithesh AP
Yes it is amazon and i can restrict or remove the restriction on port 25, i asked this question as i saw requests coming in from unknown hosts that i know are not aware of my domain (since mine is very new). That's when i was thinking why not block 25 and asked this question :) Regards

Re: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 03:20:35PM +0200, Martin S wrote: OK maybe I was unclear. Or you're still confused or both. I am talking about a site that I am authorative for. It's my own domain. DNS points to this server. If you can't post logs that illustrate the various cases under discussion

Re: Newbie Header Issues

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 08:49:51AM -0400, Mike McKoy wrote: Ok i'm the kind of guy you guys probably hate. I'm having header issues and getting blocked repeatedly I'm not sure if received from is referring to the hostname but I think it is. Generally, the HELO name, which by default Postfix

Re: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Martin S
OK maybe I was unclear. Of course I understand that. I am talking about a site that I am authorative for. It's my own domain. DNS points to this server. 2015-06-15 14:38 GMT+02:00 Viktor Dukhovni postfix-us...@dukhovni.org: On Mon, Jun 15, 2015 at 06:41:55AM +0200, Martin S wrote: I might be

Re: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Martin S
The setup works if I am loged in to the system, e.g. by imap through mail2web. Then I can send mail from my server to the world or between mailboxes on the server. Sending mail *FROM* your server to the world means that the recipient is in some other domain, not yours. You said it, not I.

Newbie Header Issues

2015-06-15 Thread Mike McKoy
Ok i'm the kind of guy you guys probably hate. I'm having header issues and getting blocked repeatedly I'm not sure if received from is referring to the hostname but I think it is. I want reverse DNS to work correctly. How do i fix this? Can you guys point out everything you see wrong with this

Re: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Michael Munger
Martin: IMAP is managed by courier, which is a different list. So, it is not useful to reference that here except for the fact that it proves MySQL is able to look up your receiving account, which means that that account / the tables are setup properly. Your problem has nothing to do with IMAP.

Re: Di I need to open port 25?

2015-06-15 Thread L. D. James
On 06/14/2015 11:54 PM, Jithesh AP wrote: Hi I am newbie into mail and mTA setup. I have my port 465 smtps/587 (submission) working, so do i need to keep port 25 open? I am asking this because when i try to telnet gmail then it does not work, so was wondering if blocking port 25 will stop

Re: Di I need to open port 25?

2015-06-15 Thread Jithesh AP
THank you for the responses, really helped my understanding :) Regards Jithesh On Mon, 15 Jun 2015 00:06:14 -0700, Dennis Carr dennistheti...@chez-vrolet.net wrote: On Sun, 14 Jun 2015 20:54:58 -0700 Jithesh AP jithesh...@gmail.com wrote: I am newbie into mail and mTA setup. Welcome.

Re: TLS_README and computing fingerprint values

2015-06-15 Thread Viktor Dukhovni
On Sun, Jun 14, 2015 at 11:45:48PM -0400, b...@bitrate.net wrote: On a related note, is it possible for a public key fingerprint to collide with the certificate fingerprint of some other cert? No more likely than colliding with another public key, or two certificates colliding with each other.

Re: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 09:41:30AM -0400, Michael Munger wrote: As Viktor said, we need logs and your main.cf file. Use pastebin to send. For the record, I generally ignore posts that expect me to go to pastebin and the like to see the relevant content. Include logs and configuration settings

Re: Newbie Header Issues

2015-06-15 Thread Mike McKoy
Hi victor, so i changed the hostname to mail1.mymodeltalk.com and then speciefied the internet hostname as mymodeltalk.com. Now when i restart postfix it fails. What have I done wrong? I'm ultimately trying to configure more than one sending IP. -- Mike McKoy *404.590.7176*

Re: Newbie Header Issues

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 10:45:50AM -0400, Mike McKoy wrote: Hi Victor, so I changed the hostname to mail1.mymodeltalk.com and then specified the internet hostname as mymodeltalk.com. Now when I restart postfix it fails. What have I done wrong? I'm ultimately trying to configure more than one

Re: Fwd: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 05:51:09PM +0200, Martin S wrote: Which was kindof the point, MySQL is able to resolve the address. So, OK I'm attaching the main.cf file below: FWD: Strangely enough I'm not seeing anything in the logs that clearly says it fails to resolve the address. Still no

Fwd: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Martin S
Which was kindof the point, MySQL is able to resolve the address. So, OK I'm attaching the main.cf file below: FWD: Strangely enough I'm not seeing anything in the logs that clearly says it fails to resolve the address. # See /usr/share/postfix/main.cf.dist for a commented, more complete

Re: messages queue not delivered with sasl.

2015-06-15 Thread basteon
this looks like was solved by adding more about smtpd: smtpd_sasl_auth_enable = yes add: smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = cyrus and now people can't login in smtp

Re: messages queue not delivered with sasl.

2015-06-15 Thread basteon
sorry, I mean this host when talk about MS exchange server: Jun 16 14:48:21 mail postfix/smtp[13974]: 36CC478001C: to=u...@primorsky.ru, relay=mail.primorsky.ru[80.89.7.143]:25, delay=2339, delays=2338/0/1.1/0, dsn=4.3.0, status=deferred (local data error while talking to

Re: Di I need to open port 25?

2015-06-15 Thread Bill Cole
On 15 Jun 2015, at 18:44, Mike McKoy wrote: I believe what Larry said is correct. I would use a port forward rule to forward mail from other MTA's to port 587. You can do this easy with Iptables. Plenty of examples are on the net. [...] i'm i'm wrong someone correct me. You're wrong.

Re: Newbie Header Issues

2015-06-15 Thread Noel Jones
On 6/15/2015 7:01 PM, Mike McKoy wrote: I have one more question for those who have the time to answer. I ran a deleverability test and am getting this warning. *Reverse DNS is not a Valid Hostname* * * What should I do to clear this up? Here is my header once again. Delivered-To:

Re: Fwd: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Martin S
I am closing this now. The problem is not with Postfix IMAP or anything with the installation apparently. I *am* sorry for wasting peoples time, including my own. The installation actually recieves mail - despite firm statements to the contrary. I have tested the installation from Kmail and

Re: messages queue not delivered with sasl.

2015-06-15 Thread Noel Jones
On 6/14/2015 10:55 PM, basteon wrote: hi there, I got another trouble with sending mails when I use sasl with postfix. For instance, use send message inside server, but not put it into imap folder and keep it in queue. Jun 15 13:15:51 mail postfix/smtpd[1732]: BD4FA758A81:

Re: Di I need to open port 25?

2015-06-15 Thread Larry Stone
On Mon, 15 Jun 2015, L. D. James wrote: You don't need to open port 25. Port 25 is for sending, not receiving mail. Many administrators consider Port 25 a security risk and block it to prevent having their system exploited. You can use port 587 for sending rather than Port 25. Some

Re: Fwd: Fwd: newbie faq - sorry: recipient lists

2015-06-15 Thread Martin S
You've not configured any relay_recipient_maps, so this system cannot be rejecting relay recipients. Seems your problem is fictional. I've followed http://learnlinuxonline.com/servers/how-setup-linux-mail-server-debian-ubuntu The only place in that instruction where it says

Re: Newbie Header Issues

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 03:50:33PM -0400, Mike McKoy wrote: I changed the hostname to mail1.mymodeltalk.com in CENTOS and I changed myhostname=mymodeltalk.com in main.cf. Now postfix won't start. That's absurd. Something else changed, possibly damaging main.cf. Perhaps invisible control

Re: Newbie Header Issues

2015-06-15 Thread Mike McKoy
I changed the hostname to mail1.mymodeltalk.com in CENTOS and I changed myhostname=mymodeltalk.com in main.cf. Now postfix won't start. -- Mike McKoy *404.590.7176* http://MyForeverHair.com http://www.MyModelTalk.com http://InCrowdUSA.net http://www.google.com/profiles/mikemckoy On Mon, Jun 15,

Re: Newbie Header Issues

2015-06-15 Thread Mike McKoy
yup that did it. you are awesome. tell me your birthday so i can send you endearing ecards on your birthdays for the rest of your life :) seriously thanks a bunch. -- Mike McKoy *404.590.7176* http://MyForeverHair.com http://www.MyModelTalk.com http://InCrowdUSA.net

Re: Newbie Header Issues

2015-06-15 Thread Mike McKoy
OK this is how my header looks now. Is that almost perfection? I still see Received: from inform.mymodeltalk.com (localhost.localdomain [127.0.0.1]). Is that a HELO and is it a problem when sending bulk mail? Delivered-To: mikemc...@gmail.com Received: by 10.36.51.18 with SMTP id

Re: Newbie Header Issues

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 05:31:40PM -0400, Mike McKoy wrote: OK this is how my header looks now. Is that almost perfection? I still see Received: from inform.mymodeltalk.com (localhost.localdomain [127.0.0.1]). Is that a HELO and is it a problem when sending bulk mail? Delivered-To:

Re: Newbie Header Issues

2015-06-15 Thread Mike McKoy
OK i have two instances... the first instance starts and then the second instance tries too. I do appreciate the kind help thus far. *The error is*: postfix-immt/postfix-script[20418]: fatal: the Postfix mai l system is already running -- Mike McKoy *404.590.7176*

Re: Newbie Header Issues

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 05:14:36PM -0400, Mike McKoy wrote: OK i have two instances... the first instance starts and then the second instance tries too. I do appreciate the kind help thus far. *The error is*: postfix-immt/postfix-script[20418]: fatal: the Postfix mai l system is

Re: Newbie Header Issues

2015-06-15 Thread Viktor Dukhovni
On Mon, Jun 15, 2015 at 05:27:26PM -0400, Mike McKoy wrote: You are awesome. tell me your birthday so i can send you endearing ecards on your birthdays for the rest of your life :) You can make up your own Viktor appreciation day, it need not be my birthday. :-) On Viktor appreciation day,

Re: Di I need to open port 25?

2015-06-15 Thread Michael
Quoting Jithesh AP jithesh...@gmail.com: I have my port 465 smtps/587 (submission) working, so do i need to keep port 25 open? You need to open port 25 in order to receive mails on our server. I am asking this because when i try to telnet gmail then it does not work, so was wondering if

Re: Di I need to open port 25?

2015-06-15 Thread Dennis Carr
On Sun, 14 Jun 2015 20:54:58 -0700 Jithesh AP jithesh...@gmail.com wrote: I am newbie into mail and mTA setup. Welcome. =) I have my port 465 smtps/587 (submission) working, so do i need to keep port 25 open? I am asking this because when i try to telnet gmail then it does not work, so

Fail2ban for postfix not blocking

2015-06-15 Thread John Fawcett
I recently noticed that my fail2ban settings were no longer triggering on postfix. I'd advise anyone who uses fail2ban to check their filter configuration (e.g. /etc/fail2ban/filter.d/postfix.conf) and to run it through fail2ban-regex with some example log lines that are required be blocked. The

Re: Newbie Header Issues

2015-06-15 Thread Mike McKoy
ha. Thanks man. You shall be honored and remembered timelessly in song -- Mike McKoy *404.590.7176* http://MyForeverHair.com http://www.MyModelTalk.com http://InCrowdUSA.net http://www.google.com/profiles/mikemckoy On Mon, Jun 15, 2015 at 5:46 PM, Viktor Dukhovni postfix-us...@dukhovni.org

Re: Di I need to open port 25?

2015-06-15 Thread Mike McKoy
I believe what Larry said is correct. I would use a port forward rule to forward mail from other MTA's to port 587. You can do this easy with Iptables. Plenty of examples are on the net. If you are authenticating mail that you send then you must connected to a MTA (SMTP server) and that could be

Re: Newbie Header Issues

2015-06-15 Thread Mike McKoy
I have one more question for those who have the time to answer. I ran a deleverability test and am getting this warning. *Reverse DNS is not a Valid Hostname* What should I do to clear this up? Here is my header once again. Delivered-To: mikemc...@gmail.com Received: by 10.36.51.18 with SMTP id

Re: Newbie Header Issues

2015-06-15 Thread Wietse Venema
Mike McKoy: I have one more question for those who have the time to answer. I ran a deleverability test and am getting this warning. *Reverse DNS is not a Valid Hostname* Would you mind sharing with us what program produces that warning? My crystal ball isn't working. Wietse What

Re: Newbie Header Issues

2015-06-15 Thread Mike McKoy
Yes sir, thanks for replying. I found out via this link: http://mxtoolbox.com/SuperTool.aspx?action=smtp%3amymodeltalk.comrun=toolpage# I'm trying to separate newsletter traffic from my system member communications via a forum i run. use of the newsletter was important communications between

Re: Newbie Header Issues

2015-06-15 Thread Wietse Venema
Mike McKoy: Yes sir, thanks for replying. I found out via this link: http://mxtoolbox.com/SuperTool.aspx?action=smtp%3amymodeltalk.comrun=toolpage# I'm trying to separate newsletter traffic from my system member communications via a forum i run. use of the newsletter was important