Re: email header contains IP address of sending client

2014-12-09 Thread Martin Vegter
> On 12/04/2014 09:38 PM, Noel Jones wrote: > > You can remove or alter the line with a smtp_header_checks rule, but > be *very careful* not to alter unrelated headers, or Received: > headers that aren't yours. Construct your regexp carefully. > > Also be aware (at least in the past) some spam a

email header contains IP address of sending client

2014-12-04 Thread Martin Vegter
When I send email via my Postfix, the header actually contains the IP address of my laptop. Such as 192.168.1.113 [12.34.56.78]) in the example below: Received: from mail.origin.com (mail.origin.com [65.254.242.180]) by mail.destination.com (Postfix) with ESMTPS id 31A1B66 for ; Th

save message if blocked/rejected by body checks

2014-11-10 Thread Martin Vegter
I am using body checks as a very simple spam filter. It catches most of the marketing emails, with no false positives (so far): If a message is rejected, I can see it in my logs, i.e.: message content rejected But I am wondering what would happen, if a false positive occurs. in that case, I wo

Re: client hostname resolution

2014-08-26 Thread Martin Vegter
> On 08/26/2014 03:13 PM, Wietse Venema wrote: > Martin Vegter: >>> On 08/26/2014 12:56 AM, Viktor Dukhovni wrote: >>>> Are there any reasons against using chrooted smtp ? >>> >>> Chroot jails require an expert administrator, able to trouble-shoot >&

Re: client hostname resolution

2014-08-26 Thread Martin Vegter
> On 08/26/2014 12:56 AM, Viktor Dukhovni wrote: >> Are there any reasons against using chrooted smtp ? > > Chroot jails require an expert administrator, able to trouble-shoot > problems with plugins or system libraries that depend on resources > that may not exist in the jail. > > Debian made th

Re: client hostname resolution

2014-08-25 Thread Martin Vegter
> On 08/26/2014 12:11 AM, li...@rhsoft.net wrote: > Am 26.08.2014 um 00:04 schrieb Martin Vegter: >> I have turned off chroot for smtp and now it works. >> But that is not an optimal solution. I would like to keep chrooted smtp. > > why? > > you need to have a good

Re: client hostname resolution

2014-08-25 Thread Martin Vegter
> On 08/25/2014 11:28 PM, Wietse Venema wrote: >> Do I ned to change any settings in postfix, so that client IPs are >> resolved into hostnames? > > You need the correct DNS server in /etc/resolv.conf. > > You must not have "disable_dns_lookups=yes" in main.cf or master.cf. > > You must not have

client hostname resolution

2014-08-25 Thread Martin Vegter
Hello, I have noticed that my Postfix never resolves client IP Addresses into hostnames. In the logs I have always entries like the following: connect from unknown[173.194.40.54] I can resolve the IP manually into FQDN, using dig or host commands: host 173.194.40.54 So any DNS misconfigura

Re: delivering to Maildir when $HOME is unmounted

2014-07-25 Thread Martin Vegter
> On 07/25/2014 01:09 PM, Wietse Venema wrote: > Martin Vegter: >> >> It happened to me that NFS was down (or simply unmounted), >> $HOME/mail/Inbox did not exist, and new mail could not be delivered. I >> would have expected that Postfix would keep it until it can

delivering to Maildir when $HOME is unmounted

2014-07-25 Thread Martin Vegter
Hello, I am using Postfix with Maildir format, where user's mail is delivered to $HOME/mail/Inbox and the home is mounted from NFS. It happened to me that NFS was down (or simply unmounted), $HOME/mail/Inbox did not exist, and new mail could not be delivered. I would have expected that Postfix wo

error_limits fine tuning

2014-06-26 Thread Martin Vegter
Hello, I am wondering why the default error limits in Postfix are set so high: smtpd_soft_error_limit (default: 10) smtpd_hard_error_limit (default: 20) I have changed them to "3" and "${stress?1}${stress:5}" respectively, and my servers is still being flooded with "relay access denied".

Re: Opportunistic TLS vs. plain

2014-06-21 Thread Martin Vegter
> On 06/21/2014 01:11 PM, Stefan Foerster wrote: > > our current situation is as follows: > > 1. Public MX, very low incoming volume, "smtpd_tls_security_level = may" > 2. Senders aren't known beforehand, i.e. no previous business relationship. > 3. Senders' IT usually doesn't support DANE. > 4. I

filename format for maildir messages

2014-06-14 Thread Martin Vegter
Hello, I am using postfix with maildir format. The filenames of messages stored in maildir look something like this: 1402593073.Vfe00I75441M583245.alpha:2,S where the filename is subdivided into three pieces, separated with dots: .. As I see it, the whole point of the filename format speci