Re: email header contains IP address of sending client

2014-12-09 Thread Martin Vegter
On 12/04/2014 09:38 PM, Noel Jones wrote: You can remove or alter the line with a smtp_header_checks rule, but be *very careful* not to alter unrelated headers, or Received: headers that aren't yours. Construct your regexp carefully. Also be aware (at least in the past) some spam

email header contains IP address of sending client

2014-12-04 Thread Martin Vegter
When I send email via my Postfix, the header actually contains the IP address of my laptop. Such as 192.168.1.113 [12.34.56.78]) in the example below: Received: from mail.origin.com (mail.origin.com [65.254.242.180]) by mail.destination.com (Postfix) with ESMTPS id 31A1B66 for

save message if blocked/rejected by body checks

2014-11-10 Thread Martin Vegter
I am using body checks as a very simple spam filter. It catches most of the marketing emails, with no false positives (so far): If a message is rejected, I can see it in my logs, i.e.: message content rejected But I am wondering what would happen, if a false positive occurs. in that case, I

Re: client hostname resolution

2014-08-26 Thread Martin Vegter
On 08/26/2014 12:56 AM, Viktor Dukhovni wrote: Are there any reasons against using chrooted smtp ? Chroot jails require an expert administrator, able to trouble-shoot problems with plugins or system libraries that depend on resources that may not exist in the jail. Debian made the

Re: client hostname resolution

2014-08-26 Thread Martin Vegter
On 08/26/2014 03:13 PM, Wietse Venema wrote: Martin Vegter: On 08/26/2014 12:56 AM, Viktor Dukhovni wrote: Are there any reasons against using chrooted smtp ? Chroot jails require an expert administrator, able to trouble-shoot problems with plugins or system libraries that depend

client hostname resolution

2014-08-25 Thread Martin Vegter
Hello, I have noticed that my Postfix never resolves client IP Addresses into hostnames. In the logs I have always entries like the following: connect from unknown[173.194.40.54] I can resolve the IP manually into FQDN, using dig or host commands: host 173.194.40.54 So any DNS

Re: client hostname resolution

2014-08-25 Thread Martin Vegter
On 08/25/2014 11:28 PM, Wietse Venema wrote: Do I ned to change any settings in postfix, so that client IPs are resolved into hostnames? You need the correct DNS server in /etc/resolv.conf. You must not have disable_dns_lookups=yes in main.cf or master.cf. You must not have

Re: client hostname resolution

2014-08-25 Thread Martin Vegter
On 08/26/2014 12:11 AM, li...@rhsoft.net wrote: Am 26.08.2014 um 00:04 schrieb Martin Vegter: I have turned off chroot for smtp and now it works. But that is not an optimal solution. I would like to keep chrooted smtp. why? you need to have a good reason besides i want chroot watching

delivering to Maildir when $HOME is unmounted

2014-07-25 Thread Martin Vegter
Hello, I am using Postfix with Maildir format, where user's mail is delivered to $HOME/mail/Inbox and the home is mounted from NFS. It happened to me that NFS was down (or simply unmounted), $HOME/mail/Inbox did not exist, and new mail could not be delivered. I would have expected that Postfix

Re: delivering to Maildir when $HOME is unmounted

2014-07-25 Thread Martin Vegter
On 07/25/2014 01:09 PM, Wietse Venema wrote: Martin Vegter: It happened to me that NFS was down (or simply unmounted), $HOME/mail/Inbox did not exist, and new mail could not be delivered. I would have expected that Postfix would keep it until it can deliver it to users mailbox, but instead

error_limits fine tuning

2014-06-26 Thread Martin Vegter
Hello, I am wondering why the default error limits in Postfix are set so high: smtpd_soft_error_limit (default: 10) smtpd_hard_error_limit (default: 20) I have changed them to 3 and ${stress?1}${stress:5} respectively, and my servers is still being flooded with relay access denied. I am

Re: Opportunistic TLS vs. plain

2014-06-21 Thread Martin Vegter
On 06/21/2014 01:11 PM, Stefan Foerster wrote: our current situation is as follows: 1. Public MX, very low incoming volume, smtpd_tls_security_level = may 2. Senders aren't known beforehand, i.e. no previous business relationship. 3. Senders' IT usually doesn't support DANE. 4. Incoming

filename format for maildir messages

2014-06-14 Thread Martin Vegter
Hello, I am using postfix with maildir format. The filenames of messages stored in maildir look something like this: 1402593073.Vfe00I75441M583245.alpha:2,S where the filename is subdivided into three pieces, separated with dots: time.delivery_identifier.hostname As I see it, the whole