Re: postscreen log scanner script updated

Hi, Am 2014-09-29 18:18, schrieb Mike.: On 9/29/2014 at 10:44 AM Mike. wrote: |I cleaned up my pslogscan.sh script a bit. Aside from some general |cleanup, I did some re-formatting of the output to make it look a bit |cleaner, and allow for some flexibility in display widths. I also |went

Re: ldap help needed.

hi wietse, Am 2014-06-17 15:39, schrieb wie...@porcupine.org: Wietse Venema: [] Stopping Postfix Mail Transport Agent: postfix/usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: ldap_transport_result_filter=smtp:%s.24t.loc:25 Apparently, postconf 2.9-2.12 error

ldap help needed.

hello list, on debian 7.5 i installed postfix 2.9.6 with postfix-ldap package. in the main.cf: ... ldap_transport_result_filter = smtp:%s.24t.loc:25 virtual_mailbox_maps = ldap:ldap_users ## wichtig!! ldap:ldap_users muss hier mit aufgefuehrt werden, sonst werden alle Mails

tls question to viktor,

hello, viktor or any other. in the postfix tls readme: In order to use TLS, the Postfix SMTP server generally needs a certificate and a private key. Both must be in PEM format. i have setup this way in my main.cf: smtpd_tls_CAfile=

Limitation on outgoing mails

hi list, sorry to ask, but i CANT remember how the option is named in the main / master cf. theres an option to limit outgoing mails, lets say the mailserver has to send 1000 mails to google.com, u can say with this option not more then 10 mails at once to deliver. does any know what i mean

Re: Puzzling problem

Hello, Am 2014-01-09 05:26, schrieb Seann: Paul, First thing that caught my eye, is it looks like the reason for the bounce was the filter shell script died: Command died with status 1: /usr/local/bin/filter.sh. Command output: Jan 9 02:49:28.913 [29829] warn: netset: cannot

copy incoming mails to other account and strip out attachements?

hello list, its me again from hamburg. i googled some time to find a solution for following scene: incoming mails for import...@dingdong.com , should be copied to mob...@dingdong.com AND if Attachements are in the mail, they should be stripped out. Only in the account import...@dingdong.com

LDAP Fallback Question

hello list, we use LDAP in Postfix for User Management. Now i should setup a second LDAP server and postfix should use the second LDAP server when the first is not longer available. i searched inet but didnt really find a solution. can u help me or guide me? thank you marko

Re: LDAP Fallback Question

hallo patrick, Am 2013-11-13 10:29, schrieb Patrick Ben Koetter: * Marko Weber | ZBF we...@zackbummfertig.de: hello list, we use LDAP in Postfix for User Management. Now i should setup a second LDAP server and postfix should use the second LDAP server when the first is not longer available

Re: requiring TLS on a pool of servers

Hello, Am 2013-10-14 14:12, schrieb Dan Langille: I have a group of Postfix servers. I want communications between these servers to be TLS and clients must present a known certificate. These servers are also public-facing and accept incoming mail from servers not under my control. I just

dnsblog dnswl problem ?

hello, i use list.dnswl.org in postscreen_dnsbl_sites . in the logfiles i see: Sep 19 12:17:18 mail postfix/dnsblog[15318]: warning: dnsblog_query: lookup error for DNS query 35.64.91.217.list.dnswl.org: Host or domain name not found. Name service error for name=35.64.91.217.list.dnswl.org

Re: postscreen postscreen_dnsbl_sites order

Hi Wietse, Am 2013-09-04 23:45, schrieb wie...@porcupine.org: Marko Weber | ZBF: hello postfix list, maybe an easy quest for you. when i use multiple rbls in 'postscreen_dnsbl_sites' Yes... postscreen_dnsbl_sites = 1.list.org anotherlist.org nsafools.org obamaisadrama.org

postscreen postscreen_dnsbl_sites order

hello postfix list, maybe an easy quest for you. when i use multiple rbls in 'postscreen_dnsbl_sites' postscreen_dnsbl_sites = 1.list.org anotherlist.org nsafools.org obamaisadrama.org at example. are the entries of 'postscreen_dnsbl_sites' used in order like listed? or is postscreen

Re: How to send more than 1 email per sec per domain?

Hi, Am 2013-08-13 18:10, schrieb DTNX Postmaster: On Aug 13, 2013, at 17:34, Noel Jones njo...@megan.vbhcs.org wrote: On 8/13/2013 10:26 AM, Philippe Bloix wrote: What i would like is : For example, my postfix relay accepts about 1000 emails (1 shot) from a SMTP client, then the postfix

Re: DSPAM Integration

hello, Am 2013-07-23 10:19, schrieb Phil Daws: Hello, I would love to integrate DSPAM with AmaViS and read somewhere that the best way for retraining would be to use a custom hook. My thinking is that the custom hook should check the SA score and if that believes it is SPAM then it would pass

Re: ratelimiting outgoing mail

hi, Am 2013-07-11 12:58, schrieb wie...@porcupine.org: Przemys?aw Orzechowski: Hi I need to setup server that will ratelimit outgoing mail but will accept all messages from authenticated users regardles of ratelimit. I know its somewhat strange approach but ... its higherups decission

Re: postfix munin graphs

Am 2013-06-19 09:56, schrieb Grant: I think I need to tell munin where my postfix logs are (/var/log/mail/current) since I use metalog. How can I do that? Instead of searching online, use the built-in pod based format, e.g.: $ munindoc postfix_mailstats You just improved my life. You

Re: 2.10 problem

Am 2013-06-04 15:00, schrieb Benny Pedersen: Grant skrev den 2013-06-04 01:45: The big config change I see referenced with regard to 2.10 is smtpd_relay_restrictions but I don't see how that could be related. My smtpd_relay_restrictions is blank. suggest to make it not in main.cf, but use

Re: postfix need reload after cidr changes?

hey wietse, Am 2013-05-23 21:33, schrieb wie...@porcupine.org: Marko Weber | ZBF: when i change a cidr map, do i have to reload postfix like on chnages by texthash? i was on http://www.postfix.org/cidr_table.5.html and cant find that info. It is safe to assume that if you change a file

ssl errors in log. error on remote or local side?

hello list, i find error entries like these in my logs: postfix/smtp[16790]: warning: TLS library problem: 16790:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340: does that mean openssl or something is broken on my machine? thanks marko

Re: ssl errors in log. error on remote or local side?

Am 2013-05-22 17:54, schrieb Viktor Dukhovni: On Wed, May 22, 2013 at 03:57:49PM +0200, Marko Weber | ZBF wrote: I find error entries like these in my logs: postfix/smtp[16790]: warning: TLS library problem: 16790:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340

Re: problem, pass bad header thru amavis and dont quarantine them

Hi Patrick, Am 2013-05-17 00:20, schrieb Patrick Ben Koetter: Marko, * Marko Weber | ZBF we...@zackbummfertig.de: hello, i set in amavid.conf : $final_bad_header_destiny = D_PASS; but in logs i see this lines; May 16 23:22:11 mail amavis[15703]: (15703-13) Passed BAD-HEADER-1

Re: problem, pass bad header thru amavis and dont quarantine them

, * Marko Weber | ZBF we...@zackbummfertig.de: hello, i set in amavid.conf : $final_bad_header_destiny = D_PASS; but in logs i see this lines; May 16 23:22:11 mail amavis[15703]: (15703-13) Passed BAD-HEADER-1 {RelayedOpenRelay,Quarantined}, [***.***.***.***] apache@***.de - r...@domain.de

postfix ssl errors in log, what does they mean?

hello , i find many of these in my mail.log: May 16 14:27:33 mail opendkim[2926]: 119CA2FB20: s=dktest d=porcupine.org SSL error:04091068:rsa routines:INT_RSA_VERIFY:bad signature is my openssl broken or something else glitchy? or does this mean the dkim from porcupine.org ist invalid?

Re: Postscreen config

Am 2013-04-24 15:59, schrieb Tony Nelson: After reading through the recent Postscreen DNSBL threads I decided to give it a try. I used Rob's example from http://rob0.nodns4.us/postscreen.html [1] as a leaping off point, but chose to leave pipelining disabled until I'm sure I understand what I

Re: Graphical stats by domain

Am 2013-04-04 10:12, schrieb Muzaffer Tolga Özses: On 04/04/2013 10:30 AM, Antoine Nguyen wrote: Muzaffer Tolga Özses to...@ozses.net wrote: Good morning everyone :) Do you guys know of a tool that will act like pflogsumm, only based on domain and graphical? Regards, Hi, take a look

Re: dictionary-attack

The table was created many years ago over an extended period of time,...:: so, its outdated? i think its better to use postscreen and a regular updated file like DROP from spamhaus. i refresh this DROP every hour. so maybe wrong listed candidates are deleted in the refreshed

TLS Question, untrusted connection

i sometimes mail with the deutschebank. when i send mails i use a tls_policy_map: db.com secure match=loninmrp23.uk.db.com:nyjinsmp07.us.db.com:loninmrp22.uk.db.com:loninmrp14.uk.db.com:nyginsmp02.us.db.com:nyjinsmp01.us.db.com .db.com secure

Re: Dont add the $myorigin domain to the FROM header field

Am 2013-03-22 18:50, schrieb Noel Jones: On 3/22/2013 11:44 AM, Victor d'Agostino wrote: Hi all, I use postfix as relay server to several internal domains. xxx is the main one. postconfig | grep domain prints : append_dot_mydomain = no mydomain = xxx myorigin = $mydomain relay_domains =

Re: TLS Question, untrusted connection

Am 2013-03-26 10:30, schrieb Reindl Harald: Am 26.03.2013 09:44, schrieb Marko Weber|ZBF: Mar 25 14:04:35 mail postfix/smtpd[31103]: Untrusted TLS connection established from loninmrp15.uk.db.com[160.83.44.131]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) why is on incoming mails

Postscreen dnsblog logentries

hello, i see alot of entries from postfix/dnsblog in my logs like this: postfix/dnsblog[30381]: warning: dnsblog_query: lookup error for DNS query 140.99.145.217.xx.zen.dq.spamhaus.net: Host or domain name not found. Name service error for

Re: is possible to use different SSL certificates for different domains?

The one Mailserver, that is doing mailing for N Domains, only need one Certificate. Other thing is with websites, they need each one. connect multiple ip´s to the server for multiple websites ssl certs. but the mailserver only one for himself. the other mailserver dont look what domain sends

Re: is possible to use different SSL certificates for different domains?

case and not's typical to do, and for this I prefer to comment to this list. If anyone knows how to create this rule, be grateful Thanks On 25/02/2013 10:46, Marko Weber | ZBF wrote: The one Mailserver, that is doing mailing for N Domains, only need one Certificate. Other thing is with websites

Re: Milter reply

Rene, why dont u use POLICYD for that? It can do the things u need and much more. have a look on http://policyd.sf.net/ dont reinvent the whhel. marko Am 12.07.2012 16:12, schrieb Wietse Venema: Ren? Klomp: Thanks. So that is the problem. What is the difference between smtp and the pickup

Re: Milter reply

rene, sorry, look here http://www.policyd.org/content/features Am 13.07.2012 09:23, schrieb Marko Weber: Rene, why dont u use POLICYD for that? It can do the things u need and much more. have a look on http://policyd.sf.net/ dont reinvent the whhel. marko Am 12.07.2012 16:12, schrieb

postfix reload shows unused parameter.

hello, when i do on console # postfix reload i get: /usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_create_maildirsize=yes /usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_mailbox_extended=yes /usr/sbin/postconf: warning:

Fallback if Amavisd-new not reachbale?

hello list, is there a way to give postfix a fallback if amavid-new is not reachable? situation: when amavis is down or not reachable, postfix should skip to deliver to amavis and skip this step. is there a way for this? thank you, marko

Re: virtual_alias_maps ignored when used dovecot-lda?

parameter: virtual_maildir_limit_message=Sorry, the user's maildir has overdrawn his diskspace quota, please try again later. postconf: warning: /etc/postfix/main.cf: unused parameter: transport_destination_recipient_limit=1 Am 08.06.2012 11:03, schrieb Marko Weber: Hello, i use virtual user

[SOLVED] virtual_alias_maps ignored when used dovecot-lda

mynetworks_style=host -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks,no_milters all works as expected. maybe this helps another one with same problem any day. marko Am 12.06.2012 13:00, schrieb Marko Weber: hello list, back again ;-) on the dovecot list i got hint

virtual_alias_maps ignored when used dovecot-lda?

Hello, i use virtual user and virtual domains in postfix with mysql. to existing users the mails will be delivered. but when i create a alias (postfixadmin), the mail is bounced. Jun 8 10:50:40 mail dovecot: auth-worker: sql(postmas...@zbfxxx.de): Unknown user Jun 8 10:50:40 mail

Multi-recipient bounce 550 5.5.3

Hello, i try to send mails to postmaster@ + abuse@ to the mailserver i work on. I get these log messages on the server when mails arrive for postmaster/abuse: Multi-recipient bounce 550 5.5.3 Jun 7 10:14:01 mail postfix/lmtp[18106]: C976F11C688: to=postmas...@test.de,

Re: Multi-recipient bounce 550 5.5.3

Am 07.06.2012 14:40, schrieb Ralf Hildebrandt: * Marko Weber we...@zackbummfertig.de: Hello, i try to send mails to postmaster@ + abuse@ to the mailserver i work on. I get these log messages on the server when mails arrive for postmaster/abuse: Multi-recipient bounce 550 5.5.3 Jun 7 10:14

smtpd_reject_footer wrong error code

hello, on our mx01 and mx02 we validate recipient adresses with 'reject_unverified_recipient'. now i one case, the mx01 or mx02 connects on the destination machine and tries to validate the recipient. the result is: 550 5.1.1 p...@domainn.tld: Recipient address rejected: undeliverable

Re: PostScreen taking too long time to send greeting

You can try with the default: postscreen_greet_wait = ${stress?3}${stress:8}s you still get error message then ? marko Am 15.05.2012 13:20, schrieb vishesh kumar: Hi Members, I have following setup related to postscreen greeting  ---

Re: A major fuckup on part of spamhaus:

WTF ! Am 04.05.2012 13:12, schrieb Ralf Hildebrandt: http://www.spamhaus.org/sbl/query/SBL138067 The evidence section lists inetnum: 95.218.0.0 - 95.219.255.255, yet spamhaus listed 93.218.0.0/15 (93 instead of 95)! 93.218.0.0/15 includes large parts of german Deutsche Telekom dialups :|

multiple check_helo_access

hello, is there any benefit of multiple check_helo_access? i see in some configs check_helo_access is in smtpd_helo- smtpd_sender- smtpd_recipient_restrictions. my understanding is that check_helo_access is in smtpd_helo_restrictions enough. am i wrong? thanks, marko

Postfix Configuration Update

Hello List, is an postfix reload performing an postfix upgrade-configuration ? Or do i have to execute postfix upgrade-configuration seperately? when do i have to use postfix upgrade-configuration? normal edits in the main.cf / master.cf i can activate with postfix reload, or? thank you,

mx_backup, main mx misuse?

hello, i plan a postfix server as mx-backup. how can i control on this mx-backup, that people dont use this server as main mx? is there a way to do this? thanks from cloudy hamburg marko

Re: [SPAM] Someone is harassing my smtp.

Am 23.04.2012 06:50, schrieb Olivier Pavilla: Hi everyone. For several months my smtp is harassing by someone located in Taiwan. This people is using any taiwanese IP. My logs are ful with this something like this: Apr 23 06:35:31 corellia postfix/smtpd[26906]: NOQUEUE: reject: RCPT from

250 Msg

Hello, i see some Servers greeting with this: 250-barracuda.annonet.de Hello mail.tig.de [x8.x6.5x.1x9], pleased to meet you Is it possible to such personel Greetings in Postfix too? marko

Postscreen Exchanger policy Question

hi list, Under MAIL EXCHANGER POLICY TESTS i see this: By listening on both primary and backup MX addresses, postscreen(8) can deny the temporary whitelist status to clients that connect only to backup MX hosts. I dont get it at all. When my backup MX is not on the same

smtpd_sasl_type

hello list, i set in my main.cf smtpd_sasl_type = dovecot but in the logfiles i find this: Dec 1 08:25:05 fallbackhost postfix/smtp[1204]: warning: unsupported SASL client implementation: cyrus Dec 1 08:25:05 fallbackhost postfix/smtp[1204]: fatal:

Limit amount of mails per sender a day?

Hello, is it possible to rate the amount of sent mails per user? Goal is: each mail user should not be possible to send more then 10.000 mails each day. And is it possible to set per user (mailaccount) ? thanks marko

Postscreen Blacklist

Hello i created an etc/postfix/postscreen_access.cidr in my postfix dir. now postscreen checks on connect for the entries. i set one server in the list with reject Is it right, that the test mail goes thru postfix? i see in logs : Sep 27 16:43:30 netcogw postfix/postscreen[15206]: CONNECT

Re: Postscreen Blacklist

Thanks rob0, when i set postscreen_blacklist_action = drop all works like a charm. marko, from sunny hamburg Am 27.09.2011 17:08, schrieb /dev/rob0: On Tuesday 27 September 2011 09:52:16 Marko Weber wrote: Hello i created an etc/postfix/postscreen_access.cidr in my postfix dir. now