Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Ralf Hildebrandt
"port 25" service, while MUA clients submit mail via the submission service (port 587) which normally requires client authentication, or via a "port 25" server that provides no MX service (i.e. a dedicated server that provides submission service on port 25). -- Ralf Hildebr

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Ralf Hildebrandt
k that it would connect > to 993 at least. 993 is IMAPS. So check if it is actually connecting to port 465 or 587. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 3

Re: ..::Rbl not working::..

2012-08-21 Thread Ralf Hildebrandt
has that ip > address listed but I'm still getting those emails. Which IP? Logs? > smtpd_recipient_restrictions = > permit_mynetworks,permit_sasl_authenticated,reject_rbl_client > zen.spamhaus.org,reject_rhsbl_sender > dsn.rfc-ignorant.org,reject_unauth_destination That look

Re: ..::Rbl not working::..

2012-08-21 Thread Ralf Hildebrandt
l, delay=0.87, delays=0.48/0.01/0/0.38, > dsn=2.0.0, status=sent (delivered to maildir) > Aug 21 09:33:59 mail postfix/qmgr[20868]: AB5455D5: removed > > That email was delivered. > > Regards. > -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Univ

Re: ..::Rbl not working::..

2012-08-21 Thread Ralf Hildebrandt
ebody on this thread already suggested) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: ..::Rbl not working::..

2012-08-21 Thread Ralf Hildebrandt
* Alfonso Alejandro Reyes Jiménez : > Thanks as I was telling I have one, but I think the issue is with the > forwarding Yes. Why are you forwarding at all? Simply let you DNS recurse & cache. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedi

Re: [SPAM] Re: The ultimate email server

2012-08-22 Thread Ralf Hildebrandt
* Daniele Nicolodi : > Looks like this is not possible with dspam alone. Googling, the only > proposed solution I found is to use a SMPT proxy which integrates dspam. Yeah, like amavisd -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin

Re: Interim NDR

2012-08-25 Thread Ralf Hildebrandt
Postfix to send a > mail after e.g. 4 hours that the delivery has failed and that the > system will try to send the message for another 5 days. > Is this possible? delay_warning_time = 4h -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin

Re: Postfix or ClamAV milter issue

2012-08-27 Thread Ralf Hildebrandt
me time NOT work with sendmail/cleanup. > local_recipient_maps = You shouldn't do that! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: Postfix or ClamAV milter issue

2012-08-27 Thread Ralf Hildebrandt
er both or non should work. Hm. Maybe a chroot issue? > non_smtpd_milters = unix:/var/clamav/clmilter.socket > smtpd_milters = unix:/var/clamav/clmilter.socket -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hi

Re: Interim NDR

2012-08-27 Thread Ralf Hildebrandt
the queue from time to time and amed my transport_maps, containing LOTS of mistyped domains that look like hotmail.com... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30

Re: Postfix or ClamAV milter issue

2012-08-27 Thread Ralf Hildebrandt
il incoming from another trusted SMTP > server, but it would be nice if we could block mail at this point. Just remove it from the non_smtpd_milters :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin

Re: REJECT with Before-Queue Content Filter?

2012-08-27 Thread Ralf Hildebrandt
filter that speaks SMTP. Use a milter or amavisd-new (or, for that matter, any filter solution that speaks SMTP). -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 5

Re: status=bounced (user unknown)

2012-08-28 Thread Ralf Hildebrandt
* Thufir : > Aug 28 02:40:57 dur postfix/smtpd[22388]: error: open database > /var/lib/mailman/data/aliases.db: No such file or directory postalias /var/lib/mailman/data/aliases -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin

Re: status=bounced (user unknown)

2012-08-28 Thread Ralf Hildebrandt
* Thufir : > Like that? Not sure how to see what's in aliases.db, but that seems right. Usually mailman creates that file, whenever you add a list. So maybe the path is completely wrong. Search for the proper location -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk

Re: Route incoming @server.example.com to j...@example.com

2012-08-28 Thread Ralf Hildebrandt
.@example.com /^From: .*@server1.example.com/ REDIRECT j...@example.com if the headers do indeed look like this in 100% of the cases. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin T

Re: Route incoming @server.example.com to j...@example.com

2012-08-28 Thread Ralf Hildebrandt
d be more elegant. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: Rejecting mail based on destination MX records

2012-08-28 Thread Ralf Hildebrandt
emon linke postfwd for that. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: Interim NDR

2012-09-01 Thread Ralf Hildebrandt
s..? that will hang > around till I don't want test anymore send mail to someb...@hotmial.com -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: Interim NDR

2012-09-01 Thread Ralf Hildebrandt
stfix/smtp[4832]: 4A7AC3806E4: > to=, relay=nullmx.hotmial.com[209.181.247.105]:25, > delay=1.5, delays=0.02/0/0.7/0.74, dsn=2.0.0, status=sent (250 ok > 1346495668 qp 25021) Oh wow, somebody got that domain :( Currently in my queue for ages: gm.de zfl.org bausch-lomb.de -- Ralf Hildebran

Re: Bulk Mailing Performance

2012-09-03 Thread Ralf Hildebrandt
not man enough for such a task and the absolute best you could > expect from any of them is about 100k messages per hour. I once sent 2096/min*60min = 125.760mails/minute on mail.python.org and there the generation of the mails is the limiting factor. -- Ralf Hildebrandt Geschäfts

Re: Bulk Mailing Performance

2012-09-03 Thread Ralf Hildebrandt
* Viktor Dukhovni : > Running a high volume bulk email platform is not a software problem. > It is a logistics problem. Enrolling on the whitelists and feedback > loops of various large email providers, handling bounce-backs, > jumping through rate-limit hoops, ... Absolutel

Re: Envelope headers in always_bcc

2012-09-05 Thread Ralf Hildebrandt
* Ram : > Can I get information of envelope recipients when I do a always_bcc > This is required If I use always_bcc to send to an archiving program. http://www.arschkrebs.de/postfix/postfix_archive.shtml -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk C

Alternative smtp_fallback_relay mechanism

2012-09-08 Thread Ralf Hildebrandt
shold = 2 or even smtp_fallback_relay_delivery_threshold = 3 which would allow a machine to "defeat" greylisting, while still using smtp_fallback_relay for the "tough cookies". Thoughts? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universität

Re: best email marketing software

2012-09-08 Thread Ralf Hildebrandt
to process a large quantity of > emails.It can be upto 6 emails a day depending on users request. I guess mailman is not an option because all mails need to be personalised? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Be

Re: Alternative smtp_fallback_relay mechanism

2012-09-08 Thread Ralf Hildebrandt
* Wietse Venema : > I suppose you have lots of logfile information. Does the evidence > support the idea that delaying smtp_fallback_relay would improve > the delivery life cycle? I'll check the use of the smtp_fallback_relay for different mailing campaigns. -- Ra

Re: Alternative smtp_fallback_relay mechanism

2012-09-08 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > I'll check the use of the smtp_fallback_relay for different mailing > campaigns. machine epsilon: Mails sent directly to MX: == 56423 (93.7%) Mails sent to fallback_relay: = 3735 (6.2%) Bounces: 83

Re: Alternative smtp_fallback_relay mechanism

2012-09-08 Thread Ralf Hildebrandt
d to all the > available hardware. Yes, I could do that. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@ch

Re: smtpd_proxy_filter (before-queue) per domain?

2012-09-10 Thread Ralf Hildebrandt
* Wietse Venema : > Simson Garfinkel collected hundreds of second-hand disk drives, and > a good way to identify the user of the disk was to look for the > most frequent email address. > http://www.dfrws.org/2006/proceedings/10-Garfinkel.pdf That was one awesome talk he did there

Re: Postscreen Error: /usr/libexec/postfix/postscreen: No such file or directory

2012-09-11 Thread Ralf Hildebrandt
HISTORY This service was introduced with Postfix version 2.8. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.h

Re: Why i cann't email to majord...@openssl.org

2012-09-15 Thread Ralf Hildebrandt
ur server doesn't have an reverse DNS entry. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: Why i cann't email to majord...@openssl.org

2012-09-15 Thread Ralf Hildebrandt
* LEON : > Hi, > > This is my static ip mail server,ISP give me the ip,and i install > the bind9 in this mail server,can you tell me how to do ? You ISP needs to setup the reverse DNS entry (I guess). -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwe

Re: Why i cann't email to majord...@openssl.org

2012-09-15 Thread Ralf Hildebrandt
169 Guangdong Province Network country:CN origin: AS17816 mnt-by: MAINT-CNCGROUP-RR changed:ab...@cnc-noc.net 20060118 source: APNIC So maybe try ab...@cnc-noc.net (although this seems to be a bit over the top, rather contact your sales representative)

Re: Why i cann't email to majord...@openssl.org

2012-09-15 Thread Ralf Hildebrandt
* LEON : > What command to get this information? host -t ns 54.107.218.in-addr.arpa -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30

Re: tlsproxy appears to be greylisting - is this normal behaviour?

2012-09-18 Thread Ralf Hildebrandt
sbl_action = enforce > postscreen_dnsbl_sites = bl.spamcop.net, zen.spamhaus.org, cbl.abuseat.org > postscreen_greet_action = enforce > postscreen_non_smtp_command_enable = yes two of them. postscreen_bare_newline_enable and postscreen_non_smtp_command_enable -- Ralf Hildebrand

Re: tlsproxy appears to be greylisting - is this normal behaviour?

2012-09-18 Thread Ralf Hildebrandt
* Chris Horry : > Ralf, > > I knew I'd missed something, thanks for the clarification. Those tests are useful, nonetheless :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 |

Which server is that?

2012-09-19 Thread Ralf Hildebrandt
esn't know these either. What IS this? aemsg is answered like this: aemsg 500 Command unrecognized: Rejecting command, Not an AE box or source Not Allowed AE box? What's an AE box? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin

[OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
www.pimda.eu Host www.pimda.eu not found: 3(NXDOMAIN) # host -t mx www.pimda.eu Host www.pimda.eu not found: 3(NXDOMAIN) According to the docs, host "By default, it looks for A, , and MX records". But why am I getting three results? Usually I'm only getting ONE!

Re: [OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
d the record and fails. > Basically ns1.bdm.microsoftonline.com says "I'm not authoritative for > that, look at ns1.bdm.microsoftonline.com" ... which is of course > broken. That's the Microsoft way... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk

Re: [OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
dig + trace found me the entries. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: [OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
TION: ns2.bdm.microsoftonline.com. 3600 IN A 157.56.81.41 ns2.bdm.microsoftonline.com. 3600 IN 2a01:111:f406:3403::41 ns1.bdm.microsoftonline.com. 3600 IN A 207.46.15.59 ns1.bdm.microsoftonline.com. 3600 IN AAAA 2a01:111:f406:1804::59 ;; Query time: 122 msec ;; SERVER: 207.46.15.59#53(207.46.15

Re: [OT] DNS insights required

2012-09-19 Thread Ralf Hildebrandt
lags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;www.pimda.eu. IN ;; AUTHORITY SECTION: www.pimda.eu. 1 IN SOA ns1.bdm.microsoftonline.com. msnhst.mi

Re: Proper forwarding behaviour

2012-09-23 Thread Ralf Hildebrandt
blacklisted anyway (since it's the source). SRS can help nevertheless, since forwarding breaks SPF. As a benefit it allows you to notice bounces and react accordingly. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hinde

Re: sporadic bouts of lost connections to exchange 2010 hub transport

2012-09-24 Thread Ralf Hildebrandt
e very first stage, before pipelining is even attempted. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: sporadic bouts of lost connections to exchange 2010 hub transport

2012-09-24 Thread Ralf Hildebrandt
ng here as well. Twice in 4 weeks. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebra...@charite.de | http://www.charite.de

Re: sporadic bouts of lost connections to exchange 2010 hub transport

2012-09-25 Thread Ralf Hildebrandt
Perhaps off topic, but do you have any links to documents or similar > that proves that there is a problem between the two operationg systems > with regard to TCP window scaling. This is the first time I hear about > this to be honest. I was wondering about this as well. I m

Re: Recipient Address local part starting with - (hyphen) - illegal address?

2012-09-26 Thread Ralf Hildebrandt
* Harakiri : > When trying to sent a mail to -u...@domain.com postfix will complain allow_min_user = yes -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450

Re: Can't send mails outside my domain

2012-10-01 Thread Ralf Hildebrandt
* Alumno Etsii : > client.devels.es exists (and resolves), but r...@client.devels.es doesn't $ host client.devels.es Host client.devels.es not found: 3(NXDOMAIN) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin

Re: Can't send mails outside my domain

2012-10-01 Thread Ralf Hildebrandt
* Alumno Etsii : > 2012/10/1 Ralf Hildebrandt > > > * Alumno Etsii : > > > > > client.devels.es exists (and resolves), but root@client.devels.esdoesn't > > > > $ host client.devels.es > > Host client.devels.es not found: 3(NXDOMAIN) > &g

Re: transport: list of domains

2012-10-02 Thread Ralf Hildebrandt
to set the smtp_concurrency_limit for these domains > without creating thousands of lines with > > domainnametransport: domainname domainname: domainname is a copy of the "smtp...smtp" line in master, renamed to "domainname...smtp"

Re: Content filtering messages from sasl authenticated users

2012-10-02 Thread Ralf Hildebrandt
uot;FILTER foobar:dummy" if the user has authenticated (sasl_username attribut is non-empty) See http://www.postfix.org/SMTPD_POLICY_README.html for the policy delegation stuff See http://www.postfix.org/access.5.html for the "FILTER:" stuff -- Ralf Hildebrandt Geschäftsber

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Ralf Hildebrandt
NA184.82.205.246 ny.dfleur.com.3566INA209.144.26.231 ;; Query time: 4 msec ;; SERVER: 127.0.1.1#53(127.0.1.1) ;; WHEN: Wed Oct 3 22:21:22 2012 ;; MSG SIZE rcvd: 100 -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin

Re: MX vs A records

2012-10-11 Thread Ralf Hildebrandt
st sitting in the queues, doing nothing. > > How would one deal with this? > > 1 of the domains in quetions is: opnet.net opnet.net error:5.1.1 One cannot send mail there in transport_maps -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmediz

Re: MX vs A records

2012-10-11 Thread Ralf Hildebrandt
ly the table has some thousand recors from the last 2 years > -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hilde

Re: Block sending from non-US IPs

2012-10-18 Thread Ralf Hildebrandt
tfix, but this combination has me > scratching my head. Is it doable? The best thing I can think of would be a policy daemon which uses libgeoip. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 |

Re: Postfix and RBL program in the same server

2012-10-18 Thread Ralf Hildebrandt
Is it posible to configure that? cat /etc/resolv.conf postfix check -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hilde

Re: Postfix and RBL program in the same server

2012-10-18 Thread Ralf Hildebrandt
* Arantza Serrano : > [root@comfix1des postfix]# cat /etc/resolv.conf > search midominio > nameserver XXX.XXX.XXX.XXX > nameserver YYY.YYY.YYY.YYY use nameserver 127.0.0.1 -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Cam

Re: Postfix and RBL program in the same server

2012-10-18 Thread Ralf Hildebrandt
Configure the DNS on 127.0.0.1 to use itself for RBL queries and XXX.XXX.XXX.XXX & YYY.YYY.YYY.YYY as forwarder -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450

Re: stat=queue and /var/spool/clientmqueue

2012-10-18 Thread Ralf Hildebrandt
BTW I'm asking here infos on how manage correctly these mails to > postfix. I'm not 100% sure the problem is on /bin/mail, or if postfix > simply could be configured to look on this queue too. Maybe you have postfix and sendmail installed side by side and /bin/mail is using the sen

Re: postfix-user list features undocumented

2012-10-20 Thread Ralf Hildebrandt
course, you mean > something different when you say "post acknowledgements". Also something that Mailman does: If a post is held and later released by an admin, one can receive a "post acknowledgements" (which only makes sense when you're NOT a member or you disabled recei

Re: Postfix Move Emails to TMP Queue Directory if recipent limit is more than 5

2012-10-25 Thread Ralf Hildebrandt
* Prashanth P.Nair : > Is it possible to Move any Emails to TMP Queue Directory if recipients are > more than 5 in Postfix 2.6 ? What is the function of the "TMP Queue Directory"? -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: M

Re: Postfix Move Emails to TMP Queue Directory if recipent limit is more than 5

2012-10-25 Thread Ralf Hildebrandt
* Prashanth P.Nair : > Exact Requirement is ,If any email's have more than 10 recipient's ,I don't > want to deliver those mail's to recipient's instead of that I want to move > those email to tmp queue folder. Later then Administrator manually check > the tmp queue and process the emails Use a po

Re: Postfix Move Emails to TMP Queue Directory if recipent limit is more than 5

2012-10-25 Thread Ralf Hildebrandt
* Prashanth P.Nair : > ok..Is it Possible Hold the queue If recipient Limit is more than 10 Yes. > and > process the HOLD queue using Perl script? You can use mailq to get queueIDs and then use postcat & postsuper from perl. -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstra

Re: Specify alternate delivery for expired mails

2012-10-29 Thread Ralf Hildebrandt
* Ram : > The problem is when the mail has been on my postfix relay server for > 5 days and then the mail bounces back, postfix does not log for > which recipient the mail failed Really? What DOES it say? -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München

Re: upgrade behavior when smtpd_relay_restrictions is explicitly empty in main.cf

2012-10-31 Thread Ralf Hildebrandt
* Sahil Tandon : > In Postfix 2.10 Snapshot 20121022, conf/post-install tests whether > smtpd_relay_restrictions is already set with: > > test -n "`$POSTCONF -c $config_directory -nh smtpd_relay_restrictions`" > > This evaluates to false when smtpd_relay_restrictions is explicitly set > to the

Re: Only check_policy_service for authenticated / relayed emails

2012-10-31 Thread Ralf Hildebrandt
* Tobia Conforto : > Hello > > Can I configure Postfix 2.7 to only run check_policy_service for SASL > authenticated emails? Not really. You can if SASL authenticated email come in via an alternate port. As an alternative you can make your policy daemon CHECK for the attributes sasl_method sas

Re: postfix delivery delay causing duplicate mail delivery

2012-10-31 Thread Ralf Hildebrandt
* Fred Ho : > Hi, > I am running Postfix version 2.5.6 on RedHat 4 and is experiencing > periodic duplicated mails.The RedHat mailserver is the mailhub > receiving incoming mails from the ISP and forward mails to the > internal mail server. > Occasionally, users are complaining receiving > duplica

Re: postfix delivery delay causing duplicate mail delivery

2012-10-31 Thread Ralf Hildebrandt
* Fred Ho : > Hi, > There's the SonicWall FW in between. What should I look for?I have the LAN > MTU = 1420 on the RedHat server matching that of the ISP router. I thought it might have something to do with "smtp protocol fixup", which is horrible broken on PIX/ASA firewalls. > > > Oct 31 10:15:

Re: postfix delivery delay causing duplicate mail delivery

2012-10-31 Thread Ralf Hildebrandt
* Fred Ho : > Hi, > Between 10:15:17 and 13:04:23 there's no 4803D7F20 related items like that of > F097C7F1F. > Oct 31 10:15:14 mailgate2 postfix/smtp[9660]: 2C9897F20: > to=, relay=outbound10.ttasia.com[210.17.183.10]:25, > delay=2.2, delays=0.05/0/0.05/2.1, dsn=2.6.0, status=sent (250 2.6.0

Re: /var/log/mail.info

2012-11-01 Thread Ralf Hildebrandt
* thorso...@lavabit.com : > Hi, > > I'm getting the following connections from suspicious IPs. > > $ sudo more /var/log/mail.info > > postfix/smtpd[PID]: connect from unknown[IP] > postfix/smtpd[PID]: lost connection after UNKNOWN from > unknown[IP] > postfix/smtpd[PID]: disconnect from un

Re: dnsblog lookup error questions

2012-11-01 Thread Ralf Hildebrandt
* Alex : > Hi, > > I have a fc15 server with postfix-2.8.10 and have enabled postscreen. > I've enabled it before without any difficulty, so I'm not sure what > I'm doing wrong in this case. For some reason it is printing these > errors periodically: > > Oct 31 23:41:15 portal postfix/dnsblog[152

Re: dnsblog lookup error questions

2012-11-01 Thread Ralf Hildebrandt
* Alex : > > cat /etc/resolv.conf > > postfix check > > > > what's the output of those? > > It's set up to use the local caching server, good. Which server is the caching server asking? > and doesn't otherwise > have any resolution issues. Even when I try to resolve that host using > 8.8.4.4,

Re: Does an option "include" exist?

2012-11-02 Thread Ralf Hildebrandt
* /dev/rob0 : > I'm not saying it is a "bad" idea. It might even be something for > Wietse to consider if/when work begins on a non-compatible Postfix > "3.0". I think it would be difficult to ensure downgradability with > such a feature. I sure is a way of making the config LESS redundant and

Re: Postfix Move Emails to TMP Queue Directory if recipent limit is more than 5

2012-11-05 Thread Ralf Hildebrandt
* Prashanth P.Nair : > Thanks for the advise. > > I found that we can achieve this using header_check . > > # restrict based on message header content header_checks = > pcre:/etc/postfix/header_checks > > /etc/postfix/header_checks: > > /^To:([^@]*@){1,}/HOLD Sorry, your message has too man

Re: Postfix Move Emails to TMP Queue Directory if recipent limit is more than 5

2012-11-05 Thread Ralf Hildebrandt
* /dev/rob0 : > But what happens when some smartaleck uses an "@" sign in the RFC > 5322 "display-name" field, as I did, above? It will break. > Joe@work > Joe@home Amen to that. I've seen that even in the From: header! -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraß

Re: Verify cache missing?

2012-11-08 Thread Ralf Hildebrandt
* Nikolaos Milas : > On 8/11/2012 2:42 μμ, Nikolaos Milas wrote: > > >So, I conclude that in this case there is no such cache because > >reject_unverified_recipient is at the end of > >"smtpd_recipient_restrictions", so in essence it is never used... > > Now that I re-think it over, in fact there

Re: FROM: Address re-writing using regexp:/etc/postfix/sender_canonical for particular emails.

2012-11-12 Thread Ralf Hildebrandt
* Prashanth P.Nair : > How to re-write "From: My Self " to From: My Self < > mys...@thatdomain.com> using regexp . > > I know the sender_canonical_maps changes both the envelop sender address > and header sender address according to the sender_canonical_classes. > > Below regexp is converting all

Re: pcre:header_check

2012-11-21 Thread Ralf Hildebrandt
* prashuppp p : > I was trying to HOLD all the emails which has more then 2 recipient's > using header_checks = pcre:/etc/postfix/header_checks > > /^(Cc|To):([^@]*@){2,}/ HOLD header_checks only apply (AS THE NAME SAYS!) to... the headers. No header, no match. > But not working for the below

Re: pcre:header_check

2012-11-21 Thread Ralf Hildebrandt
* prashanth p : > ok..great..Is there any other method to do for envelope also..I need it for > both.. You'd need a policy_daemon for that. Didn't you ask that before? postfwd can easily do that. -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der

Re: reporting

2012-11-21 Thread Ralf Hildebrandt
* Muhammad Yousuf Khan : > is there any way that i can collect reports in which i can check who > is the "sender" who is the "receiver" what was the mail "subject", if You can log this using header_checks with: /^Subject:/ WARN and mime_header_checks with: /filename=\"(.*)\.(...)\"$/ WARN Atta

Re: reporting

2012-11-21 Thread Ralf Hildebrandt
* Muhammad Yousuf Khan : > > and mime_header_checks with: > > /filename=\"(.*)\.(...)\"$/ WARN Attachment $1.$2 > > Thanks for the help. but any suggestion for the attachment size. Not possible with postfix alone. If you put Amavis in the loop, you get to see the attachment names & sizes at log

Re: NDR not received while relaying

2012-11-22 Thread Ralf Hildebrandt
* Muhammad Yousuf Khan : > i am using my ISP relay. and i don't receive NDRs for any invalid or > unknown account. is this default. or i must be doing some config > mistakes. Maybe your ISP relay is blocking bounces. > however, in log files i can see that my message has been relayed to > the ISP

Re: Configure open relay on specific port

2012-11-22 Thread Ralf Hildebrandt
* Patric Falinder : > So it's not possible to have Postfix listening on another port with > different settings, like skipping the authentication bit and have it > act like an open relay? Well of course: -o smtpd_recipient_restrictions=... -o ... -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 4

Re: "mail forwarding loop" from certain spam only

2012-11-29 Thread Ralf Hildebrandt
* Noel Jones : > On 11/28/2012 1:17 PM, Will Yardley wrote: > > [Apologies in advance for the less than complete information below; > > hoping someone may have an idea of what's happening anyway] > > > > I'm having a problem where messages are accepted but then seem to > > generate a mail forwardi

DNS issue

2012-11-29 Thread Ralf Hildebrandt
I'm seeing a DNS problem I cannot fathom: # host 65.171.152.29 Host 29.152.171.65.in-addr.arpa not found: 2(SERVFAIL) Hm. So who's authoritative? # host -t ns 171.65.in-addr.arpa 171.65.in-addr.arpa name server ns1-auth.sprintlink.net. 171.65.in-addr.arpa name server ns3-auth.sprintlink.net. 171

Re: Bad address syntax

2012-11-29 Thread Ralf Hildebrandt
* Muzaffer Tolga Özses : > Hi, > > I'm getting the log entry in my to=, relay=none, > delay=0, delays=0/0/0/0, dsn=5.1.3, status=bounced (bad address > syntax). Googling says I should add allow_min_users = yes, which I > would like to confirm. root@/etc/mailname is wrong syntax. Period. Stop send

Re: Bad address syntax

2012-11-29 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > * Muzaffer Tolga Özses : > > Hi, > > > > I'm getting the log entry in my to=, relay=none, > > delay=0, delays=0/0/0/0, dsn=5.1.3, status=bounced (bad address > > syntax). Googling says I should add allow_min_users = yes, which I >

Re: Bad address syntax

2012-11-29 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > * Ralf Hildebrandt : > > * Muzaffer Tolga Özses : > > > Hi, > > > > > > I'm getting the log entry in my to=, relay=none, > > > delay=0, delays=0/0/0/0, dsn=5.1.3, status=bounced (bad address > > > syntax)

Re: avoiding overload on port 587

2012-11-30 Thread Ralf Hildebrandt
* Robert Schetterer : > Am 30.11.2012 11:44, schrieb Tomas Macek: > > I cannot apply firewall rules on 587, because our clients travel with > > their notebooks and still want to send their emails through our mailserver. > > use fail2ban etc for blocking dynamic, brute force attacks to > submission

Re: Problem migrating a mail domain (loops back)

2012-12-04 Thread Ralf Hildebrandt
* d.davo...@mastertraining.it : > This is from /var/log/syslog: > > Dec 4 15:13:41 mail2 postfix/smtpd[26204]: 4E21EA735A: > client=unknown[192.168.2.203] > Dec 4 15:13:41 mail2 postfix/cleanup[26207]: 4E21EA735A: > message-id=<20121204151341.3478.f-zambe...@mastertraining.it> > Dec 4 15:13:4

Re: Problem migrating a mail domain (loops back)

2012-12-04 Thread Ralf Hildebrandt
* d.davo...@mastertraining.it : > Dec 4 15:13:41 mail2 postfix/smtp[26167]: 4E21EA735A: > to=, relay=none, delay=0.1, > delays=0.1/0/0/0, dsn=5.4.6, status=bounced (mail for mastervoice.it loops > back to myself) What is the result of % host -t mx mastervoice.it on that machine? -- [*] sys4

Re: timeout problem

2012-12-18 Thread Ralf Hildebrandt
* ml : > (host ks3.kimsufi.com[/var/run/dspam/dspam.sock] said: 421 4.3.0 > Deferred: 451-4.7.0 DNS timeout > (in reply to end of DATA command)) Looks like a problem within dspam -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaf

Re: postconf expansion

2012-12-28 Thread Ralf Hildebrandt
* Wietse Venema : > OK, the 20121224 Christmas edition does this and more, and it also > produces more warnings. As for the latter I wonder if it will freak > out people and would need to be shut up at install/upgrade time. Didn't freak me out, but instead it listed an actual error. So it's no b

Re: Question About Log entries

2013-01-28 Thread Ralf Hildebrandt
* Bob Cohen : > Follows are several maillog entries. I'm not clear on how to read them. > > warning: restriction `reject_rbl_client' after `permit' is ignored > Does this mean, Postfix rejected an email based on the > reject_rbl_client rule, which was placed in the main.cf after the > permit. An

smtpd_command_filter counterpart?

2013-02-06 Thread Ralf Hildebrandt
I can use smtpd_command_filter to add "NOTIFY=NEVER" and thus suppress bounces from my own Postfix. But how can I remove the "NOTIFY=NEVER" again when sending mail (maybe via a specific SMTP transport) to some external host? Sounds like I'm looking for smtp_command_filter? -- [*] sys4 AG http:

Re: Archiving mails based on subject - Was: Re: sometimes_bcc?

2013-02-07 Thread Ralf Hildebrandt
* Robert Schetterer : > Am 07.02.2013 14:38, schrieb Marcio Merlone: > > Em 07-02-2013 11:19, Noel Jones escreveu: > >> Regardless of how you state the problem, it should already be clear > >> that postfix does not have native capability to do selective BCC based > >> on the subject. > > Yes, it wa

Re: questions about functions in postfix

2013-02-07 Thread Ralf Hildebrandt
* deconya : > Hi list > > Im looking to activate a smarthost in my postfix, and for this I need to > use the function smtp_sasl_password_maps. I have and old server 2.5.5 > and Im not sure if was supported in this old version. Where can I see > the changelogs to confirm this? postconf smtp_sasl_p

Re: Our postfix works fine, but it is very slow when we send newsletter

2013-02-21 Thread Ralf Hildebrandt
* Vince Wang : > Hello, > > We have a configured postfix email server worked well when we had it on the > public IP. After we moved it behind our firewall on a intranet with ip > 192.168.xxx.xxx, we found it is very slow when we send newsletter. Logs? > As I just start learning about postfix

Re: reject empty sender address for authenticated users

2013-02-27 Thread Ralf Hildebrandt
* Piotr Rotter : > I want to disallow this because is rarely (probably poor mail > clients) and make more difficult to automatic parsing amavis logs > like this > > 2013-02-25T04:29:47+01:00 kurier4 amavis[20204]: (20204-10) Passed > CLEAN, <> -> , Hits: -2.56, tag=-999, tag2=5, > kill=10, queued

Serving Dovecot mailbox quota status to Postfix

2013-04-11 Thread Ralf Hildebrandt
I wrote a little something about how to prevent delivery to mailboxes over quota while still being in the SMTP dialogue: http://sys4.de/en/blog/2013/04/08/postfix-dovecot-mailbox-quota/ (Postfix/Dovecot) -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Si

<    7   8   9   10   11   12   13   14   15   16   >