Re: question about searching log files

On 01/25/2017 04:44 PM, Fazzina, Angelo wrote: Hi, I am trying to grep out all the log lines for a particular connection. I added logging to see the cipher being used when connecting, now i want to see if anyone is actually getting connected and sending emails. Obviously with many threads,

Re: SPF and forwarding

Hi, On 07/26/2015 01:34 AM, Robert Schetterer wrote: Am 26.07.2015 um 03:04 schrieb Alex: Hi, I have a postfix-2.10.5 server on fedora, and have several users that forward their mail through to gmail. This is apparently enough to break SPF and make gmail think I'm the originator of the email,

Re: Outbound rate limiting

On 07/03/2015 04:07 PM, Marius Gologan wrote: You forward messages repeatedly, flooding this mailing list too. I received a Wietse automated message saying they were rejected for various reasons pertaining to words in the body and was told to retry. Google it doesn't think differently,

Re: Outbound rate limiting

Hi, How do people generally deal with these? They, and the some of the network around them, are promoted to my packet filter for a few months. If I see nothing in 3 months or so, they get unblocked. To easy the load on my packet filter, not on the spammers. These are messages being

Re: Outbound rate limiting

On 07/03/2015 03:23 PM, Marius Gologan wrote: As per your errors, you send Unsolicited Messages. If that is the case then is not related to sending rates, but to spam complaints rate. Our system has detected an unusual rate of unsolicited mail originating from your IP address 1. Recipients

Re: Understanding sender_access

Hi, I'm trying to understand how to reject mail not within my domain claiming it's from my domain. I understand body_checks can be used to block mail From: my domain, and check_sender_access can be used to block MAIL FROM my domain, but don't understand the implications of doing that. I have

Understanding sender_access

Hi, I'm trying to understand how to reject mail not within my domain claiming it's from my domain. I understand body_checks can be used to block mail From: my domain, and check_sender_access can be used to block MAIL FROM my domain, but don't understand the implications of doing that. I

Rejecting spoofed emails

Hi, I'm struggling with trying to determine for sure if my domain is protected from spoofing (and backscatter) attacks. I'm also working on building an SPF record, but would like to do what I can with postfix first. It is my understanding that SPF will block based on invalid

Re: backwards-compatible settings

Hi, Jun 8 21:20:03 mail02 postfix[22018]: Postfix is running with backwards-compatible default settings Meaning the compatibility level is not set the requisuite minimum value. This applies whether or not the relevant parameters have been explicitly set. Okay, I think I understand now. I

Re: backwards-compatible settings

Hi, I've upgraded from postfix-2.10.5 on fedora20 to postfix-3.0.1 on fedora22 and receiving the backwards-compatibility warning. I've checked all of the settings on the COMPATIBILITY_README page, and adjusted the relay_domains setting, which was the only one that applied to my config. I'm

Re: backwards-compatible settings

Hi, I've upgraded from postfix-2.10.5 on fedora20 to postfix-3.0.1 on fedora22 and receiving the backwards-compatibility warning. I've checked all of the settings on the COMPATIBILITY_README page, and adjusted the relay_domains setting, which was the only one that applied to my config. I'm

backwards-compatible settings

Hi, I've upgraded from postfix-2.10.5 on fedora20 to postfix-3.0.1 on fedora22 and receiving the backwards-compatibility warning. I've checked all of the settings on the COMPATIBILITY_README page, and adjusted the relay_domains setting, which was the only one that applied to my config. I'm

Re: Rate limiting guidance needed

On 06/05/2015 02:00 AM, Glenn English wrote: If it's possible to throttle based on MX record for a domain, I'd really appreciate your help. I do it with the iptables packet filter (I'm on Linux, but I suspect there are similar packages on other systems). I'm doing packet shaping with

Re: Rate limiting guidance needed

Hi, If it's possible to throttle based on MX record for a domain, I'd really appreciate your help. Hi, Alex. I don't do it that way, but that sounds simpler than the way I do it! Interested to see what others come up with. I didn't receive any other responses. Is that because it's

Re: postfix stats

Hi, I've been using pflogsumm but it's old and doesn't know about postscreen. I'd like to see how many connections are being refused by postscreen. What do you like? logwatch? awstats? other? http://logreporters.sourceforge.net/ I believe logwatch now includes recent copies of these two,

Re: Stan Hoeppner's fqrdns.pcre file?

Hi, I should have mentioned that I actually did that, once I couldn't find Stan's site: https://github.com/stevejenkins/hardwarefreak.com-fqrdns.pcre For those who are using it, I've replaced it with a version from March 2013 instead of March 2012.

Re: Stan Hoeppner's fqrdns.pcre file?

Hi, check_client_access uses the verified name, which is more conservative. I wasn't convinced this was a good idea, so I played it safe. So check_client_access is performing an additional DNS query on the hostname to check if it matches the IP? Right. Awesome, thanks. I'm learning all

Re: Stan Hoeppner's fqrdns.pcre file?

Hi, I assume that means you use it in header_checks? It's still a client check; I have smtpd_recipient_restrictions = ... check_client_access pcre:$maps/generic_rdns.pcre, If you're using a version of postfix later than 2.6, you should be using

Re: Stan Hoeppner's fqrdns.pcre file?

Hi, On 04/27/2015 10:44 PM, Michael Orlitzky wrote: On 04/27/2015 06:55 PM, Alex Regan wrote: Hi, I assume that means you use it in header_checks? It's still a client check; I have smtpd_recipient_restrictions = ... check_client_access pcre:$maps/generic_rdns.pcre

Re: Stan Hoeppner's fqrdns.pcre file?

Hi, On 04/27/2015 10:44 PM, Michael Orlitzky wrote: On 04/27/2015 06:55 PM, Alex Regan wrote: Hi, I assume that means you use it in header_checks? It's still a client check; I have smtpd_recipient_restrictions = ... check_client_access pcre:$maps/generic_rdns.pcre

Rejecting domains with access lists

Hi, I have a fedora20 system with postfix-2.10.5 and trying to figure out sender_restrictions and client_restrictions and how access tables work. I've read the first five google results, including the access(5) man page, and don't understand the pattern matching. How can I match all users

Re: Rate limiting to gmail, yahoo

Hi, I posted the message below a few days ago, and haven't seen any responses. Were my questions too confusing or did I otherwise not provide the info necessary to help with my problem? Thanks, Alex On 04/18/2015 10:25 PM, Alex Regan wrote: Hi, I have a fedora20 system with postfix-2.10.5

Rate limiting to gmail, yahoo

Hi, I have a fedora20 system with postfix-2.10.5 that is primarily used as a mail store. I'd like to get some kind of rate limiting working to build a better reputation with gmail and other systems. This server has a couple of hundred IMAP users for a branch of a larger company. The mail is

Re: Sender access issues

Hi, A few days ago I was having an issue with not being able to use sender_access to permit mail with non-existent hostnames to be delivered that would normally be rejected: Feb 24 16:48:55 mail01 postfix/smtpd[1945]: NOQUEUE: reject: RCPT from smtp.lanyonmail.com[50.56.12.142]: 450 4.1.8

Re: Sender access issues

Hi, What does the below report (with the exact address from the unmunged log message): $ sender=myuser@lanyonrs.local $ postmap -q $sender hash:/etc/postfix/sender_checks I had *@lanyonrs.local OK in sender_checks and it printed nothing. I added the explicit email address

Re: Sender access issues

Hi, Feb 24 16:48:55 mail01 postfix/smtpd[1945]: NOQUEUE: reject: RCPT from smtp.lanyonmail.com[50.56.12.142]: 450 4.1.8 myuser@lanyonrs.local: Sender address rejected: Domain not found; from=myuser@lanyonrs.local to=phyl...@example.com proto=ESMTP helo=Mail.LanyonMail.com That was two days

Sender access issues

Hi, I have a postfix-2.10.5 system on fedora20 and having some trouble with mail being rejected due to unknown senders: Feb 24 16:48:55 mail01 postfix/smtpd[1945]: NOQUEUE: reject: RCPT from smtp.lanyonmail.com[50.56.12.142]: 450 4.1.8 myuser@lanyonrs.local: Sender address rejected: Domain

Re: Sender access issues

Hi, On 02/24/2015 08:34 PM, Viktor Dukhovni wrote: On Tue, Feb 24, 2015 at 08:07:59PM -0500, Alex Regan wrote: smtpd_recipient_restrictions = ... check_sender_access hash:/etc/postfix/sender_checks

Re: Sender access issues

Hi, smtpd_recipient_restrictions = reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unlisted_recipient, permit_mynetworks, reject_unauth_destination, check_client_access hash:/etc/postfix/client_checks,

Transport maps and rate limiting

Hi, I have a fedora20 server with postfix-2.10.5 I'm trying to configure rate limiting for outbound mail to google, yahoo, etc, in hopes of not only building a better reputation with these systems, but also to prevent my outbound pipe from being saturated. I've configured a few of the

Re: Building a spam honeypot, or need to exclude domains/users from RBLs

Hi, Is there any existing documentation on how to create a spam honeypot as it relates to doing it on a production server, or do I really need to just create a virtual machine with a basic postfix configuration to do this? You can use postfix smtp-sink to implement a simple spam collector. It

Building a spam honeypot, or need to exclude domains/users from RBLs

Hi, I'm using postfix-2.10.5 on fedora20 with amavisd-new and spamassassin, as well as greylisting, and would like to create a spam honeypot. The problem is that postfix is configured on my system with zen, postscreen, and other methods to block spam based on IP. Is there any way to disable