how to specify approved senders for recipient?

2018-10-29 Thread Chad M Stewart
I want to setup a method by which only senders which are in a defined list can send a message to a given recipient. Something like the following (in pseudo code) accept if sender and recipient The idea being that each recipient will have their own whitelist, and only messages from those

virtual_alias table rewrite and before_queue content filter

2014-10-28 Thread Chad M Stewart
I'm trying to get postfix --smtp-- amavisd --lmtp-- dovecot all setup and working nicely together. I've configured amavisd as a before_queue filter in Postfix. smtpd pass - - n - 20 smtpd -o smtpd_proxy_filter=127.0.0.1:10024 -o

Re: virtual_alias table rewrite and before_queue content filter

2014-10-28 Thread Chad M Stewart
Thanks Viktor. I know I've read that before but I deal with about 3 different MTAs in a given week, so I don't always remember all the in/outs of each. :) -Chad On Oct 28, 2014, at 8:52 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Tue, Oct 28, 2014 at 08:23:15PM -0500, Chad M

LDAP query not working

2014-10-27 Thread Chad M Stewart
I'm setting up LDAP to be used by Postfix, Dovecot, etc. for mail and other stuff. I'm not understanding why postfix is failing to find the virtual domain in question. I've got Dovecot setup and working against it, at least for authentication at this point. [root@mta03

Virtual aliases not working

2014-08-24 Thread Chad M Stewart
I'm not sure what I've done wrong, but aliases for virtual users is not working. A postmap -q key map returns what it should, but when I send a test message, the alias address is passed to the downstream system, instead of the result of the lookup. I'm setting up Postfix as a frontend to

Re: Virtual aliases not working

2014-08-24 Thread Chad M Stewart
On Aug 24, 2014, at 1:09 PM, Wietse Venema wie...@porcupine.org wrote: Chad M Stewart: I've followed http://www.postfix.org/VIRTUAL_README.html#virtual_mailbox (Non-Postfix mailbox store) or at least I've tried to follow it. :) Please post postconf -n output (that is what Postfix sees

Re: Virtual aliases not working

2014-08-24 Thread Chad M Stewart
On Aug 24, 2014, at 2:00 PM, Wietse Venema wie...@porcupine.org wrote: Please also examine postconf -P output. That shows parameter settings in master.cf that have higher precedence than main.cf. I suspect that you have receive_override_options in master.cf. That is normally used to

Re: Virtual aliases not working

2014-08-24 Thread Chad M Stewart
On Aug 24, 2014, at 2:20 PM, Wietse Venema wie...@porcupine.org wrote: You use smtpd_proxy_filter (the before-queue filter). This does not need receive_override_options, because mail takes a path that is not subject to double address mapping. The receive_override_options feature is needed

Time based blacklist or similar?

2013-04-03 Thread Chad M Stewart
Before I go and write my own solution I thought I'd see if anyone knows of an existing solution. Now and again I'd like to put an IP on a local blacklist and have an expiration time set as well. I'm using postscreen as well and ideally the blacklist will get implemented via postscreen.

Re: best email marketing software

2012-09-11 Thread Chad M Stewart
I don't think the problem will be with the marketing software, i.e. the component generating the messages, that is the easy part. The harder part is on the MTA to deliver those. Long ago I saw a request from a customer that wanted to be able to send out 1M in an hour I believe it was. I

Re: post screen - temp whitelist TTL

2012-08-04 Thread Chad M Stewart
On Aug 4, 2012, at 10:08 AM, /dev/rob0 wrote: I'm not addressing the subject of the post, but just picking over the configuration snippet. On Wed, Aug 01, 2012 at 09:48:45PM -0500, Chad M Stewart wrote: [root@mta01 /usr/local/etc/postfix]# postconf -n|grep postscreen [snip

Re: post screen - temp whitelist TTL

2012-08-02 Thread Chad M Stewart
On Aug 2, 2012, at 6:07 AM, Wietse Venema wrote: Chad M Stewart: I am not understanding something correctly. I'm using postscreen and noticed that a recently connected IP had was not marked as PASS OLD but rather PASS NEW. See log entires below PASS NEW means there was no cache entry

Re: post screen - temp whitelist TTL

2012-08-02 Thread Chad M Stewart
On Aug 2, 2012, at 7:03 AM, Stan Hoeppner wrote: On 8/2/2012 6:26 AM, Chad M Stewart wrote: On Aug 2, 2012, at 6:07 AM, Wietse Venema wrote: Chad M Stewart: I am not understanding something correctly. I'm using postscreen and noticed that a recently connected IP had was not marked

post screen - temp whitelist TTL

2012-08-01 Thread Chad M Stewart
I am not understanding something correctly. I'm using postscreen and noticed that a recently connected IP had was not marked as PASS OLD but rather PASS NEW. See log entires below Aug 1 16:20:54 mta01 postfix/postscreen[41196]: CONNECT from [69.147.83.53]:56643 to [192.168.7.30]:25 Aug

Re: Why is after-queue content filter executing before-queue?

2012-05-18 Thread Chad M Stewart
On May 18, 2012, at 7:41 AM, Chris wrote: master.cf - smtp inet n - - - - smtpd -o content_filter=lmtp:unix:/tmp/dspam.sock Why did you remove that last line above? I thought about doing a before queue content filter, but that really kills user's ability to train dspam. :)

Re: content filtering restriction_classses

2012-05-17 Thread Chad M Stewart
Thank you Noel for the clarification. I think I've figured out how I want this all setup. :) -Chad

content filtering restriction_classses

2012-05-16 Thread Chad M Stewart
I can't figure out how to setup an additional content filter based on a restriction class. I need a clue stick applied, gently I hope. :-) High level of my setup reload -- version 2.9.1, configuration /usr/local/etc/postfix Internet - postscreen - smtpd ---LMTP-- content filter on

Policy delegation - message content?

2012-05-15 Thread Chad M Stewart
Is it possible for a policy server to get access to the message contents? At least headers? In reading http://www.postfix.org/SMTPD_POLICY_README.html it talks about after client has sent data. However since the protocol is name=value then I suspect the answer is no. Though i do see queue_id

postscreen - access list does not appear to be working

2012-05-12 Thread Chad M Stewart
It can be nice to have stupid systems out there that repeatedly connect and try to deliver junk, I can use for testing new rules. :) I'm trying to test blacklists in postscreen. From what I read on the postscreen readme, the following should work to block this IP, but alas the IP is still

Re: postscreen - access list does not appear to be working

2012-05-12 Thread Chad M Stewart
On May 12, 2012, at 2:49 PM, Wietse Venema wrote: Chad M Stewart: I don't understand why the IP would be whitelisted. I had stopped postfix, removed the postscreen cache and restarted postfix, thus no cache and this is the first time the IP has connected. Any ideas? Because you have

Re: a header check rule to do = or =

2012-05-06 Thread Chad M Stewart
On May 3, 2012, at 7:23 PM, Steve wrote: Below the untested code but I think it should work: =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= if /^X\-DSPAM\-Confidence\:\s+/ /^X\-DSPAM\-Confidence\:\s+(0\.[7-9]\d+)$/ DISCARD DSPAM confidence ${1} greater than 0.700 endif

a header check rule to do = or =

2012-05-03 Thread Chad M Stewart
Is it possible to write a header check (I'm thinking pcre is probably the way to go) that would find a header, and then take action based on the value of said header. Sample header X-spam-Confidence: 0.8505 In pseudo code I'd like something like if header (/X-spam-Confidence/)

Re: a header check rule to do = or =

2012-05-03 Thread Chad M Stewart
On May 3, 2012, at 5:26 PM, Steve stev...@gmx.net wrote: Original-Nachricht Datum: Thu, 3 May 2012 17:03:15 -0500 Von: Chad M Stewart c...@balius.com An: Postfix users postfix-users@postfix.org Betreff: a header check rule to do = or = Hello Chad

milter and restriction classes

2012-04-24 Thread Chad M Stewart
Is it possible to put the use of a smtpd_milter into a restriction class? From what I've read so far I'm suspect the answer is no. In which case I'll have to put the functionality into the milter itself, MIMEDefang in my case. I'd prefer to keep the restriction classes centralized if you

Apply rules/filters to some domains

2012-02-18 Thread Chad M Stewart
I am using postfix as a relay MTA, i.e. the MX points at it, it applies various filters and then relays the mail to final systems. Is it possible to configure postfix such that say some header checks are applied to certain domains that relay mail and not apply those checks to other domains?