Re: How to reject mails where from address and to address is myself.

2019-06-04 Thread Fernando Maior
Dear Anant, Systems architecture is your friend... I usually have the following servers: 1) E-mail firewall - a real/virtual computer, connected by one interface to the internet and by another interface to the local network, who only receives e-mail from outside, and don´t permit unwanted

Re: telnet hangs when I enable sasl

2017-06-05 Thread Fernando Maior
Hello, Roelof, >From this: totaal 16 drwxr-xr-x. 2 rootroot 24 5 jun 13:42 . drwxr-xr-x. 76 rootroot 8192 5 jun 15:26 .. -rw-r--r--. 1 postfix root 47 5 jun 13:42 smtpd.conf I believe you do not need to change owner/group of smtpd.conf; because postfix user already has access

Re: 53% of Postfix servers are black-listed (DNSBL)

2015-12-29 Thread Fernando Maior
To configure a smtp server is not easy task. It takes long, and you should be allways looking for new troubles. So, it is not only because lazy or not capable admins. Some of them just do not have the time to do it properly, because they have too much work to do already. Also, if the server is

Re: Blocking Nessus Scans

2015-11-30 Thread Fernando Maior
Hi, May be you should not relay messages for "nobody" to "root"... How are you doing this relaying? If you are using aliases, just delete the line "nobody: root" and rerun postconf. It will be delivered locally, so you can gain access to the emails. But it will not be delivered to root and

Re: Newbie question: purpose of mydomain

2015-06-29 Thread Fernando Maior
On Mon, Jun 29, 2015 at 7:49 AM, Wietse Venema wie...@porcupine.org wrote: John Gateley: Another newbie question: I am setting up Postfix to replace a long-standing qmail system. My plan is for all domains to be Virtual Mailbox domains. My question: what do I set mydomain to? I

Re: How to set Postfix to accept all mail on domain and forward mail for accounts not hosted to another MTA

2015-04-22 Thread Fernando Maior
Hi Daniel, Here we use another technique. For each user that we transfer from the old server to the new one, I just add a line in transport.cf saying the complete mailbox name for that user and the IP or DNS name of the new server. For example: ferna...@test.com : newserver.test.com Also, it

Re: How to allow each user on an Ubuntu server use his/her google email and password to send the email via google smtp?

2015-03-19 Thread Fernando Maior
de Tecnologia (31) 9226-9440 TIM On Wed, Mar 18, 2015 at 1:17 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Wed, Mar 18, 2015 at 07:38:33AM -0300, Fernando Maior wrote: You also may try sendemail. Look at http://caspian.dotconf.net/menu/Software/SendEmail. I use it to send

Re: How to allow each user on an Ubuntu server use his/her google email and password to send the email via google smtp?

2015-03-18 Thread Fernando Maior
You also may try sendemail. Look at http://caspian.dotconf.net/menu/Software/SendEmail. I use it to send emails from scripts directly to gmail accounts I use for servers backup control. --- Fernando Maciel Souto Maior On Wed, Mar 18, 2015 at 7:29 AM, Koko Wijatmoko k...@wijatmoko.name wrote:

Re: What is HyperSendmail v2007.08??

2015-03-16 Thread Fernando Maior
Hi, Look at main.cf parameter smtpd_banner, that is the parameter I was talking about in my previous e-mail. If you change that to HyperSendmail v2007.08 that is what you will see in your log. Regards, --- Fernando Maciel Souto Maior On Mon, Mar 16, 2015 at 10:03 AM, Fernando Maior

Re: What is HyperSendmail v2007.08??

2015-03-16 Thread Fernando Maior
Hi, If this is coming thru the initial dialog between MTAs, may be someone just changed the default string to something else. Is there a company called HyperMail? If so, that may be it. You may also look at this page in Wikipedia: http://en.wikipedia.org/wiki/Hypermail Regards, --- Fernando

Re: Postfix incompatibility safety net

2014-10-02 Thread Fernando Maior
Wietse, That safety net of yours should be a fantastic tool, and I congratulate you for the idea and implementation. Also, I am happy for using postfix, it seems it is the only smtp service with so much valuable and good contributions from the developers and contributors net. Best regards, ---

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
Hello, What about using iptables or other firewall ruling to rule out connections for SMTP from those CIDR ranges? Atenciosamente, --- Fernando Maciel Souto Maior Projetos e Soluções de Tecnologia (31) 9226-9440 TIM On Tue, Sep 2, 2014 at 8:45 AM, Noel Jones njo...@megan.vbhcs.org wrote: On

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
he is successfully authenticated. I have to receive e-mails also from Asia... Lubo M. -- http://LuMaX.acom.sk Dňa 2. 9. 2014 14:50 Fernando Maior wrote / napísal(a): Hello, What about using iptables or other firewall ruling to rule

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
in this case is that through my server was not sent e-mails from foreign... Thanks Kind regards -- Lubo M. http://LuMaX.acom.sk Dňa 2. 9. 2014 15:57 Fernando Maior wrote / napísal(a): Hi, Just think about this: some real and legitimate user may have

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
Hello, Also, I should be wary about using negates (!) on rules. I understand you know the use of postmap http://www.postfix.org/postmap.1.html command. I suggest using both notations (with ! and without ! before the cidr ip ranges) and using postmap extensively to test the real behaviour of the

Re: SMTP AUTH SASL only from specified IP address

2014-09-02 Thread Fernando Maior
On Tue, Sep 2, 2014 at 11:47 AM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Tue, Sep 02, 2014 at 09:15:32AM -0500, Noel Jones wrote: and the 'file.CIDR' contains: ! 195.98.0.0/19OK ! 195.98.128.0/19OK ! ...OK ! ...OK ! 212.26.160.0/19OK

Re: are these 'good and reliable' adls/dynamic pcre rejects?

2014-01-31 Thread Fernando Maior
On Fri, Jan 31, 2014 at 11:00 AM, li...@rhsoft.net li...@rhsoft.net wrote: Am 31.01.2014 13:41, schrieb Larry Stone: On Jan 30, 2014, at 10:21 PM, Noel Jones njo...@megan.vbhcs.org wrote: On 1/30/2014 7:17 PM, li...@sbt.net.au wrote: my pre configured Postfix inluded these

Re: tls question to viktor,

2014-01-29 Thread Fernando Maior
Did you try file /etc/ssl/zbfmail-cert/2013/mail.server.de.intermediate. crt? May be you will be surprised by the results... :-) Fernando On Wed, Jan 29, 2014 at 12:21 PM, nano nano...@bsdbox.co wrote: On 30/01/2014 12:51 AM, Marko Weber | ZBF wrote: hello, viktor or any other. in the

Re: Too much traffic

2013-04-02 Thread Fernando Maior
Hi, I am not an specialist in Postfix, just a common admin. Yet, I can see two things from your message: 1. You sure have a DNS resolution problem. No external server should be resolved to 192.168.x.x, that is an internal network. Also, the last two octets (255.255) are almost allways

Re: Forward internal RHEL6 server local user emails to postfix mailrelay

2013-04-02 Thread Fernando Maior
Hi, I would use transport maps. Just look at the /etc/postfix/transport file, there are instructions about how to config it. You may also need to change /etc/postfix/main.cf to activate the transport map. Try using these lines at the end of transport. example.com smtp:bar.example:25

Re: Too much traffic

2013-04-02 Thread Fernando Maior
** ** *From:* Fernando Maior [mailto:fernando.souto.ma...@gmail.com] *Sent:* Tuesday, April 02, 2013 5:25 PM *To:* Ceyhun Ganioglu *Cc:* postfix users *Subject:* Re: Too much traffic ** ** Hi, ** ** I am not an specialist in Postfix, just a common admin. Yet, I can see two things

Re: LDAP canonical_maps and domain rewriting

2013-03-20 Thread Fernando Maior
Patrick, I do not use canonical maps at all when using LDAP. I do not need it, because I just use mailForwardingAddress (actually an alias) to map the incoming email to the real mailbox. What I do: 1. Use the qmail.schema in OpenLDAP 2. Add objectClass: qmailUser to each user account

Re: LDAP canonical_maps and domain rewriting

2013-03-20 Thread Fernando Maior
Fernando, On 03/20/2013 05:40 PM, Fernando Maior wrote: Patrick, I do not use canonical maps at all when using LDAP. I do not need it, because I just use mailForwardingAddress (actually an alias) to map the incoming email to the real mailbox. What I do: 1. Use the qmail.schema in OpenLDAP

Re: LDAP canonical_maps and domain rewriting

2013-03-19 Thread Fernando Maior
Hello, All this seems to be something very different from what postfix and other smtp usually does. So, may be the problem is with the concept, not with the implementation. May I ask you why you need to change the domain name part of the mail delivery address? Can you provide us with information

Re: LDAP canonical_maps and domain rewriting

2013-03-16 Thread Fernando Maior
Hi Patrick, If you use the hash table, and issue the postmap command, what is the output? Regards, --- Fernando Maciel Souto Maior On Sat, Mar 16, 2013 at 2:19 PM, Patrick Lists postfix-l...@puzzled.xs4all.nl wrote: Hi all, Venturing into postfix+openldap country I bumped into a challenge:

Re: is possible to use different SSL certificates for different domains?

2013-03-03 Thread Fernando Maior
May be we can put that into the Postfix documentation page, in Specific environments section. Also, may be DNS can be there, both are environments anyway... Just 2 cents... Best regards, --- Fernando Maciel Souto Maior On Wed, Feb 27, 2013 at 6:17 PM, /dev/rob0 r...@gmx.co.uk wrote: On Mon,

Re: Possible to dedicate a number of smtpd processes for OUTBOUND mail only ??

2013-02-25 Thread Fernando Maior
Hi, Let me see: 1. You have a gateway that receive the incoming connection and relays it to your 3 mail servers 2. The 3 mail servers are behind the firewall, and answers to the same domain If you are just like that, may be you need not to take care of the attacks when they arrive

Re: Which server is that?

2012-09-19 Thread Fernando Maior
Hi, May be it is a DirectAdmin host. Have a look at www.directadmin.com... aemsg and smtpb4pop should be customer implementations to the directadmin mail server, they are using exim, which I believe is highly configurable... BUT... I do not know for sure... Best regards, --- Fernando Maciel

Re: The ultimate email server

2012-08-15 Thread Fernando Maior
. May be your opinion will change after that. Best regards--- Fernando Maior On Wed, Aug 15, 2012 at 9:09 AM, Mikkel Bang facebookman...@gmail.comwrote: I'm trying to configure the ultimate email server for this webapp that needs to send and receive / forward emails to and from thousands

Re: always_bcc

2012-08-14 Thread Fernando Maior
messages and install it in the second server. Not easy task, sure... May be you should look at the source for bounce service daemon. Best regards, --- Fernando Maior On Tue, Aug 14, 2012 at 10:48 AM, Alfredo Saldanha asalda...@infolink.com.br wrote: Thank you, but how about to disable

Re: always_bcc

2012-08-08 Thread Fernando Maior
. You may have a look at the transport table doc at http://www.postfix.org/transport.5.html Fernando Maior On Tue, Aug 7, 2012 at 9:54 AM, Alfredo Saldanha asalda...@infolink.com.brwrote: Hi there, I'm trying to implement always_bcc to send a copy of all received messages to another server. My

Re: Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-28 Thread Fernando Maior
instead of postfix. Fernando Maior

Re: problem with rejecting helo

2012-03-16 Thread Fernando Maior
On Fri, Mar 16, 2012 at 2:22 PM, Jack jacklistm...@gmail.com wrote: Hello All, ** ** I’m having a problem where I am rejecting messages from one of our servers, but I’m not clear as to why. ** ** We are using: check_helo_access hash:/etc/postfix/helo_access ** **

Re: postmas...@mydomain.com

2011-11-18 Thread Fernando Maior
a lot from. Try looking at http://www.postfix.org/BASIC_CONFIGURATION_README.html, at least. Fernando Maior

Re: Distribute mail based on sending domain?

2011-11-08 Thread Fernando Maior
Hi, May be you should have a look at transports table, at http://www.postfix.org/transport.5.html There are some useful examples you should try. Best regards, --- Fernando Maciel Souto Maior LPIC/1(31908), LinuxCounter(391325) On Tue, Nov 8, 2011 at 3:53 AM, vr postfix-u...@iotk.net wrote:

Re: Distribute mail based on sending domain?

2011-11-08 Thread Fernando Maior
Hi, Just when I pressed send I realize that may be the sender dependent relayhost maps should be useful too. Have a look at it, if you please. http://www.postfix.org/postconf.5.html#sender_dependent_relayhost_maps Atenciosamente, --- Fernando Maciel Souto Maior LPIC/1(31908),

Re: spf configuration woes

2011-11-04 Thread Fernando Maior
for config file. Fernando Maior

Re: Multi-Instance-Questions

2011-09-27 Thread Fernando Maior
On Tue, Sep 27, 2011 at 6:29 AM, Thomas Trepper thomas.trep...@blueclaim.com wrote: Hi Stan, thanks a lot for your eMail und sorry for the inconvenience. Here is the hundred feet back down big picture: :-) Postfix 2.5 on ubuntu 8.04.4. One physical interface with two public IPs. eth0 -

Re: How should I get user/Group security right when using lots of other apps with Postfix ?

2011-09-23 Thread Fernando Maior
On Fri, Sep 23, 2011 at 7:56 AM, Wietse Venema wie...@porcupine.org wrote: daver.mail...@operamail.com: Should all these apps share users, maybe one of the Postfix users?  Or should they be left as root user, with configs in /root/.appname, for example? As documented :-) Postfix must not

Re: Postfix NDR

2011-09-09 Thread Fernando Maior
On Thu, Sep 8, 2011 at 6:09 PM, Jean-Luc CHANDEZON knut...@gmail.com wrote: 2011/9/8 Fernando Maior fernando.souto.ma...@gmail.com On Thu, Sep 8, 2011 at 10:22 AM, Wietse Venema wie...@porcupine.org wrote: Jean-Luc CHANDEZON: Hello, I believe my request is very simple, but I don't find

Re: Postfix NDR

2011-09-08 Thread Fernando Maior
On Thu, Sep 8, 2011 at 10:22 AM, Wietse Venema wie...@porcupine.org wrote: Jean-Luc CHANDEZON: Hello, I believe my request is very simple, but I don't find how I can do that. When you receive a NDR from postfix server, the mail is sent by MAILER-DAEMON@hostname.local. I would to change the

Re: Problem with postfix and amavis

2011-08-22 Thread Fernando Maior
Andrea, How did you look at the final delivered mail? Did you use cat or vi or another text editor? Cause if you just try using a webmail or mail client you may not be able to see those headers... Best regards, --- Fernando Maciel Souto Maior Projetos e Soluções de Tecnologia LPIC/1(31908),

Re: changing relayhost based on sender

2011-08-04 Thread Fernando Maior
Hi Michael, Did you try to unset the default relayhost and then setup sender_dependent_relayhost_maps for the domains and users that should have a relayhost AND no setup maps for the domains and users that should not have a relayhost? Also, may be there is another way to accomplish what you

Re: Upgrading Postfix and invalid/obseleted config values.

2011-03-18 Thread Fernando Maior
with IMAP/POP servers thru their mail client programs. So, it makes sense that Dovecot takes care of the quotas, instead of Postfix. Also, Wietse's suggestion of Dovecot Postfix with LMTP is just the default I use for new or renewed installations. Fernando Maior

Re: Windows Live problems

2011-03-18 Thread Fernando Maior
Mark, Would you kindly post to the list the output for postconf -n ? Fernando Maior

Re: Postscreen + Postfix configuration

2011-03-17 Thread Fernando Maior
On Thu, Mar 17, 2011 at 1:46 AM, Noel Jones njo...@megan.vbhcs.org wrote: On 3/16/2011 10:11 PM, Fernando Maior wrote: On Wed, Mar 16, 2011 at 11:39 PM, Wietse Venema wie...@porcupine.org mailto:wie...@porcupine.org wrote: Fernando Maior: What is not clear for me is: do I need

Postscreen + Postfix configuration

2011-03-16 Thread Fernando Maior
, reject_multi_recipient_bounce, permit 8 Many thanks! Fernando Maior

Re: Postscreen + Postfix configuration

2011-03-16 Thread Fernando Maior
On Wed, Mar 16, 2011 at 11:39 PM, Wietse Venema wie...@porcupine.orgwrote: Fernando Maior: What is not clear for me is: do I need to change my main.cf in order to run postscreen and do not duplicate its functionality in postfix? See: http://www.postfix.org/POSTSCREEN_README.html#intro