Re: Two different IP for one mx

2018-01-29 Thread
On 30 Jan 2018 3:43 a.m., "Paul" wrote: On 29/01/2018 21:09, jin&hitman&Barracuda wrote: > Hi > > We are tring to move our mx server to another isp. They gave us an IP > address but there is some strange points. When i try to connect any mail > related port on that ip, it send my connection to

Re: Upgrade to -3.2.5: permissions question

2018-01-29 Thread Viktor Dukhovni
>> Therefore, while it may be possible to attempt to work around this >> in Postfix, the only sensible solution is at the OS level. > > Alas, those linking restrictions are still disabled by default on a > vanilla linux kernel (upstream rejected the patch to enable them), and > on every non-linux

Re: Upgrade to -3.2.5: permissions question

2018-01-29 Thread Michael Orlitzky
On 01/29/2018 03:31 PM, Viktor Dukhovni wrote: > > This issue affects a lot more than just Postfix, for example tar(1) > when run as root will chown files to the owner listed in the archive > metadata, and is almost certainly equally exposed. I'm not 100% sure, but it looks like GNU tar will use

Re: Two different IP for one mx

2018-01-29 Thread Paul
On 29/01/2018 21:09, jin&hitman&Barracuda wrote: Hi We are tring to move our mx server to another isp. They gave us an IP address but there is some strange points. When i try to connect any mail related port on that ip, it send my connection to our new postfix server. There is a destination

Re: Server will send spam

2018-01-29 Thread Kevin A. McGrail
On 1/29/2018 4:59 PM, Maurizio Caloro wrote: Since today me Email Server will be send a lot of rubish, and i dont know why please can any one give me here any little Help! The evidence you sent shows from a brief review that it's coming from your mail server.  I think you likely have a us

Server will send spam

2018-01-29 Thread Maurizio Caloro
hello Since today me Email Server will be send a lot of rubish, and i dont know why please can any one give me here any little Help! I have a lot of "Mail Delivery System " error and i dont see from where this mails will come and why me Server this email will be send! me Server will

Re: Two different IP for one mx

2018-01-29 Thread Kevin A. McGrail
On 1/29/2018 5:03 PM, jin&hitman&Barracuda wrote: It is 192.168.34.30/24 So that's a Class C (256 IPs) block from the reserved private class B address block*.  So you are definitely NATted if you have access to the internet. If you have a 1:1 NAT and can do port fo

Re: Two different IP for one mx

2018-01-29 Thread
On 30 Jan 2018 12:56 a.m., "Kevin A. McGrail" wrote: On 1/29/2018 4:09 PM, jin&hitman&Barracuda wrote: > We are tring to move our mx server to another isp. They gave us an IP > address but there is some strange points. When i try to connect any mail > related port on that ip, it send my connecti

Re: Two different IP for one mx

2018-01-29 Thread Kevin A. McGrail
On 1/29/2018 4:09 PM, jin&hitman&Barracuda wrote: We are tring to move our mx server to another isp. They gave us an IP address but there is some strange points. When i try to connect any mail related port on that ip, it send my connection to our new postfix server. There is a destination nat o

Two different IP for one mx

2018-01-29 Thread
Hi We are tring to move our mx server to another isp. They gave us an IP address but there is some strange points. When i try to connect any mail related port on that ip, it send my connection to our new postfix server. There is a destination nat on it. It is strange becouse i can't see my actual

Re: Upgrade to -3.2.5: permissions question

2018-01-29 Thread Viktor Dukhovni
> On Jan 29, 2018, at 12:21 PM, Michael Orlitzky wrote: > > My question is, can't the $mail_owner -- who knows that this is going to > take place eventually -- throw a hard link into the active queue that > points to a sensitive file? Proof of concept: > > $ sudo su postfix -s /bin/sh -c 'ln

Re: Upgrade to -3.2.5: permissions question

2018-01-29 Thread Michael Orlitzky
On 01/29/2018 12:25 PM, Joris (ideeel) wrote: > > Doesnt postfix use proxymap for that? > http://www.postfix.org/proxymap.8.html > For what? I'm wondering whether or not the upgrade procedure is safe w.r.t. the $mail_owner user.

Re: Upgrade to -3.2.5: permissions question

2018-01-29 Thread Michael Orlitzky
On 01/28/2018 01:53 PM, Viktor Dukhovni wrote: > > You're not supposed to do this "by hand". Instead, when upgrading from > source, run: > > # postfix set-permissions upgrade-configuration > How sensitive is the $mail_owner account? From what I gather, the set-permissions script (which defe

Re: removing postgrey - reconfigring postix

2018-01-29 Thread john
On 2018-01-24 07:15 PM, Peter wrote: On 24/01/18 19:32, john wrote: Is there a write up of how to setup up postscreen for maximum spam control. Of course there's the official docs, POSTSCREEN_README and postscreen(8). I also recommend this: http://rob0.nodns4.us/postscreen.html Peter * S

Re: removing postgrey - reconfigring postix

2018-01-29 Thread john
On 2018-01-24 07:15 PM, Peter wrote: On 24/01/18 19:32, john wrote: Is there a write up of how to setup up postscreen for maximum spam control. Of course there's the official docs, POSTSCREEN_README and postscreen(8). I also recommend this: http://rob0.nodns4.us/postscreen.html Peter * S

Re: Message-ID

2018-01-29 Thread G
On 01/28/2018 12:04 PM, Karol Augustin wrote: On 2018-01-28 9:25, CP wrote: on 01/27/2018 09:30 PM, Karol Augustin wrote: With Message-ID header and dovecot lmtp (I think lda works also) you eliminate  (a lot!!) of these duplicates so try it if you have the same problem. In my case I have a robo