er_checks:
> >
> > http://www.postfix.org/postconf.5.html#header_checks
>
> http://www.postfix.org/postconf.5.html#smtp_header_checks
Do you want to do this on INCOMING or OUTGOING mail?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
postfix-users@postfix.org: The list that makes you think!
* Eric Cunningham :
> Is there a way to exempt postmas...@my.domain, ab...@my.domain and
> u...@my.domain from header_checks and body_checks while still maintaining
> the functionality of those checks?
No.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel.
d does not always get
> to them right after release. A kindly-worded email to him might yield you
> an estimate of when he'll get to 2.6.
He's a bit busy right now due to family issues.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-15
still be incorrect.
Yes. But with simple stuff, it works.
> I've not tested this, but I assume you'd get some failure.
Or it "just don't work" :)
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschim
ery:
> 60.1.168.192.in-addr.arpa IN PTR +
Yes.
> Which in turn gives this;
> security: warning: client #12345: RFC 1918 response from
> Internet for 60.1.168.192.in-addr.arpa
The security warning is broken. Turn it off.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung
here is this behaviour documented?
> As a trusted and solid MTA there must be a way to get it to stop leaking
> rubbish DNS lookups from private networks ?
You could set up your forwarder/local DNS properly. This doesn't
happen here.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb
re also a total waste of network resources and
> bandwidth. The fix here is to stop the client making them, not to stop
> the resolver from answering them.
Usually, you would make BIND responsible for those local network, e.g.
with dummy zones. powerdns does this automatically (which seems to
lookup = yes
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
PP: MMDF gone mad with standards fever. Think "Brazil".
* Ralf Hildebrandt :
> > Indeed, Postfix does *not* perform DNS queries. However, it asks the
> > question in the first instance that results in the lookup. This is just
> > a case of arguing semantics. It is close to buggy behaviour IMHO. If it
> > produces
* Steve :
> On Tue, 2009-05-19 at 10:49 +0200, Ralf Hildebrandt wrote:
> > smtpd_peername_lookup = no
>
> Any idea what it defaults to Ralf?
postconf -d smtpd_peername_lookup
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-4
vered.
How do you check if the mail is in the mailbox?
> May 19 14:36:16 mail postfix/local[23411]: A1A88E6063B:
> to=, orig_to=, relay=local,
> delay=0, status=sent (delivered to maildir)
...
> home_mailbox = Maildir/
I guess the mail should be here:
mutt -f ~spamadmin/Maildir/
ride that with a message
> saying something like:
>
>is no longer valid; please contact at address>.
>
> Is such a thing possible with Postfix? Thanks!
man 5 relocated
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http:/
on refused
> telnet: Unable to connect to remote host: Connection refused
Bind postfix to all interfaces, not just localhost
> [r...@rs1 ~]# postconf -n
...
> inet_interfaces = localhost
Oingo Boingo
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450
alhost
Yes, that's why "postconf -n" is such a useful command
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
| <- You must be smarter than this stick to ride the Internet
ol, but on a "one size fits all"-basis.
> The real question I guess I am asking - is it possible to have three
> instances of Postfix running on the same box, listening on different
> ports, with separate queue directories?
Yes. 2.6.x can do it easily with the multiple instan
bout that one myself.
SPF sucks.
DKIM is better. But both are not really widespread
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
"Memory is like gasoline. You use it up when you are running. Of course you
atch
> and want to set up the connection of the outward arrow every 1 domain w
> ith 1 global IP.
> #Postfix use the first IP address assigning to the NIC as a source IP ad
> #dress.
>
> Is not there any good idea?
Setup a individual postfix instances, each one bind
* gohst...@bc.iij4u.or.jp :
> Hi!
> Thanks reply.
>
> After all may not you do it when you do not install postfix in every
> each IP address?
I beg your pardon? Either do it the way I outlined or it won't work :)
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartu
.
> (I may change USERINBOX to the external storage eventually) .
> not sure if there is a way to let procmail to stop the delivery to
> /var/mail? maybe I need to check procmail mailing lis.
SImply turn procmail off and all will be well
--
Ralf Hildebrandt
Postfix - Einrichtung, Betri
he correct address
> and if yes, how?
I fail to see how this is a postfix question!
Go to the sent-folder, edit the mail, send it again.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
The Imperial Vendor or Con
is
> stopped any mail from being able to be delivered, probably because address
> rewriting uses this as the final destination. e.g. here is some of the
> header of an example mail to oli...@gtwm.co.uk
Yes.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Te
* Corey Chandler :
> Wietse Venema wrote:
>>
>> No MTA, including Postfix, sends bounce messages for mail that it
>> does not accept.
>>
>> Wietse
>>
> I'm pretty sure I've seen qmail do exactly this... :-p Some variation of
> its default "accept, then bounce" methodology...
In that case
* Zero Zeibov :
> I try to limit auth mech in postfix 2.6.1 on FreeBSD 6.4. For this
> I've added to main.conf:
>
> smtp_sasl_mechanism_filter = plain, login
smtpd_sasl_mechanism_filter = plain, login
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel.
* Tim Legg :
>
> According to 'postconf -d',
Which displays the default, not what you set...
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Wenn etwas Abstoßendes modern wird, ist es sofort anziehend.
Turns out Wietse was wrong:
http://lwn.net/SubscriberLink/334866/fffe7b1a0716c0e4/
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
I have never seen anything fill up a vacuum so fast and still suck.
-- Rob Pike
> > Turns out Wietse was wrong:
> > http://lwn.net/SubscriberLink/334866/fffe7b1a0716c0e4/
>
> All political; no real rational reasoning for it
I know, but still worth an informational message
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel.
llegal address syntax from unknown[ipaddress] in MAIL command:
> ''
>
> Can anyone give me a solution for this.
Show the complete, unmodified log entry.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpf
* K bharathan :
> the attached is a header of a spam mail; i found the dates are different and
> delivered today; but inbox date shows 13/02/2009;
> what could have gone wrong?
Nothing.
> Date: Fri, 13 Feb 2009 05:48:52 - (GMT)
--
Ralf Hildebrandt
Postfix - Einrichtung,
* K bharathan :
> i find myself dumb on this
> appreciate an explanation
"Date:" is just a header - meaning the user can specify it, just like
"To:", "Subject:" or "Cc:". It need not be correct.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und
>
> /j10[0-3][0-9][0-...@domain\.com/ thisaddr...@domain.com
/^j10[0-2][0-9][0...@domain\.com$/ thisaddr...@domain.com
/^j10...@domain\.com$/ thisaddr...@domain.com
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerb
* Sthu Pous :
> Interesting to note, but on
>
> postconf -d
>
> I see mynetworks = 127.0.0.0/8 v.x.y.z/25 192.168.0.0/24
>
> from whence it comes?
postconf -d shows the defaults
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (
not found
/usr/libexec/postfix/postfix-script: 346: /bin/env: not found
/usr/libexec/postfix/postfix-script: 346: /bin/env: not found
r...@hanni:/etc/postfix# which env
/usr/bin/env
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
ied changing the smtp_helo_name as you
can see.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Netzwerkgrundlagen anhand Windows lernen zu wollen ist doch wie seine
ersten sexuellen Erfahrungen mit einer Prostituierten
* Wietse Venema :
> Ralf Hildebrandt:
> > Jun 5 15:35:18 hanni postfix-ram/smtp[24385]: warning: smtp_fallback_relay
> > configuration problem
> > smtp_fallback_relay = [194.126.158.237]
>
> I don't think you can set smtp_fallback_relay to the local SMTP por
ly suspected the HELO...
> Either play games in main.cf:inet_interfaces or with master.cf,
> or use a non-default SMTP port.
Yes, that works
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
I dropped my compute
logs you posted.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Wenn die Leute mit dem Logfile die IT-Kompetenz von einem Kilo
Torfmoos an den Tag legen, ist dem Anschein nach davon auszugehen,
dass sie schlicht nicht f
* Pascal Maes :
> hello,
>
>
> In master.cf, I have
>
> smtp inet n - n - 100 smtpd
>
>
> Is there a way to measure the number of connections to see how many times
> the limit is reached ?
Postfix logs a warning once the limit is
/24
>
>
> In that case, the client 130.104.104.130 is no more considered from our
> networks and the rate limiting should be applied.
> Right ?
The customer might not even be allowed to relay anymore. Don't know
if you want this.
--
Ralf Hildebrandt
Postfix - Einrichtung, Bet
#
> geoff.sw...@wemade.com OK
>
> /etc/postfix/transport:
> wemade.com smtp:pop.wemade.com
wemade.com [pop.wemade.com]
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Ein
t;
> Could I configure Postfix so that the message generated by Postfix when
> the quota is exceeded, is easier to understand by end user? Or is a
> matter of maildrop?
The latter. It even says so:
maildirmake: /pathto/user/: File exists
maildrop: maildir over quota.
the script
* K bharathan :
> hi all
> what's the default deferred mail retry time in postfix?
retry time for what?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Standard Cyrus SASL behaviour. SASL developers do
0s, with every unsuccessful retry the timespan
between to attempts is increased.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Windows is the answer, but only if the question was 'what is the
intellectual equivale
* Truth Seeker :
>
>
> Dear Pros,
>
> how can i stop accepting mails on postfix server from all my clients
> but at the same time, i want to postfix to complete the tasks in the
> queue.
With 2.6.x
postconf -e master_service_disable=inet
postfix reload
--
Ral
lease suggest...
Update?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Given the opacity of the product, how could a Windows admin ever know
as much about Windows as a UNIX admin does about UNIX?! (Roger B. A.
Kl
* Truth Seeker :
>
>
> Dear Pros;
>
> 1. Is there any way to flush all mails to a particular domain from the
> deferred queue?
Yes
man postqueue
> 2. How can i flush just one mail say mail message id 6E4D82ED19E from the
> deferred queue?
man postqueue
--
ier/bin/maildirmake $HOME$DEFAULT`
Either the line above
> log "/usr/local/courier/bin/maildirmake -q $MAILDIRQUOTA $HOME$DEFAULT"
> `/usr/local/courier/bin/maildirmake -q $MAILDIRQUOTA $HOME$DEFAULT`
Or the line above is causing error 1!
> .
> .
> .
> TO "$HOM
rtstand ?
No. Do you want sender based routing?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Sysadmins don't go to hell; we're already doing our time in purgatory.
* Antonio Hooper :
> > No. Do you want sender based routing?
> exactly. is it possible ?
http://www.postfix.org/SOHO_README.html
Supporting multiple ISP accounts in the Postfix SMTP client
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570
receives a
> message with a web link, explaining that is the first that it sends
> mail to me and need to authenticate.
This is a backscatter source and will get you blacklisted in no time.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http
ckscatter issue.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
"I had a fortune cookie the other day and it said: 'Outlook not so
good'. I said: 'Sure, but Microsoft ships it anyway'."
line. Postfix keeps doing this until the problematic
condition has not happened for at least 1000 seconds
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
The only secure Microsoft software is what's still shrink-wrapped in the
warehouse.
specific
> values.
>
> Any idea if it is possible to use map or pointers to a file for this config?
Use a makefile to assemble main.cf from parts
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Realist: Optimist mit Erfahrung
* Harakiri :
> > Use a makefile to assemble main.cf from parts
>
> How should that work if i just have unison/rsync between a few servers and
> they only sync each other - there is no option to execute make everytime
Simply run "make" in the directory every minute.
d_error_sleep_time = 1s
That does not enable anvil.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
The only certainty about documentation is that whoever wrote it
"might" have understood it. The rest of us may not be so lucky.
* Simon Jones :
> > That does not enable anvil.
> can you point me to some docs on how to do it perhaps? would be much
> appreciated, this is something i cam across today so apologies for
> coming across as a complete noob...
http://www.postfix.org/TUNING_README.html#conn
. Did you throw enough
shit in the general direction of the fan to faicilitaty a hitting of the
fan?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
"The percentage of users running Windows NT Workstation 4.0 who
* Ralf Hildebrandt :
> Shit needs to hit the fan before something happens. Did you throw enough
> shit in the general direction of the fan to faicilitaty a hitting of the
> fan?
If the shit doesn't hit the fan, Postfix will log some info - in my
case every 10 minutes:
Jun 10
must be performed from a client OUTSIDE of $mynetworks
Or you just say:
smtpd_client_event_limit_exceptions =
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Ballmer should step down in favour of Mr T, because he
ing at postfix.org. Can anyone tell me?
postconf -d |grep version
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
If we can dispel the delusion that learning about computers should be
an activity of fiddling with
> --master.cf--
> smtp inet n - n - - smtpd -v
>
> -- end of postfinger output --
>
>
> WTF am I doing wrong ??
Show all of master.cf
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (
* Steve :
> Is this right?
Yes
> "You cannot whitelist a sender or client in an access list to bypass
> header or body checks. Header and body checks take place whether you
> explicitly "OK" a client or sender, in access lists, or not."
>
> I'm gob sm
postmulti command. Works as
documented. I tried :)
> Have all inbound mail go to the first service, where mail from
> whitelisted sources is handled, then all remaining mail is delivered to
> the second service which does header checks before processing the mail.
> But there may be other g
keep making excuses for it so we don't upset *you know who*
I read the other mail about pasting the headers into the body and then
the header_checks trigger again. Can you show a minimal example for
that (with log lines)?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung
mail4.xx.co.uk
> (xx) with ESMTPA id B9F16AC09D??for ; Fri, 12 Jun
> 2009 11:01:58 +0100 (BST) from mail4[192.168.1.xx];
> from= to= proto=ESMTP
> helo=<[192.168.1.xx]>: 5.7.1 dynamic host in headers
The regular expression is too broad, since it also matches the "fo
* Ralf Hildebrandt :
> * Steve :
>
> > /^Received: from.*(cmodem|dhcp|adsl|broadband|dynamic)/ REJECT dynamic host
> > in headers
>
> OK
>
> > In the logs; tripped on the header filter;
> > Jun 12 11:01:58 mail4 postfix/cleanup[1419]: B9F16AC09D: reject:
ODY* of an email.
Your system generates headers on it's own, to which the header_checks
apply.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
It's not that I'm so smart , it's just that I stay with problems longer.
-- Albert Einstein
-- in this case "btbroadband.com"
matches "broadband" you'll be seeing this, since you own Received headers
will match the header_checks regexp.
You COULD strip your own internal Received: headers to avoid this. But
that's solving the wrong proble
* Ralf Hildebrandt :
> > > /^Received: from .*(cmodem|dhcp|adsl|broadband|dynamic).*by / REJECT
> > > dynamic host in headers
> > >
> > > It's worth a try.
>
> > Indeed, but it's *not* in the header section of the email, is it! It has
* EASY steve.h...@digitalcertainty.co.uk :
> Yep, I had already done that. I tried the same thing to ab...@bt.com and
> got the same result.
Log entry for exactly that case?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-15
estrictions?
Yes.
> Or I must put each restrictions in each stage?
No.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
"You know the world is going crazy when the best rapper is a white
guy, the bes
ished. But what does the "20" signify?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Now that we know Microsoft's plan for world domination isn't superman
supposed to come out and kick some ass?
* Stefan Palme :
>
> On Tue, 2009-06-16 at 16:43 +0200, Ralf Hildebrandt wrote:
> > I'm trying out postscreen. No unexpected explosions so far.
> > ...
>
> May I ask what exactly "postscreen" is? I've never heard about it
> and can not find any re
me kind of
dialup. maybe I'll whip up some gnuplot graphs...
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
In brightest day, in blackest night
no evil shall escape my sight!
for those that worship evil's mi
:)
> Early results indicate that 1/3 of all the "new" hosts is a
> pre-greeter, at least with my own porcupine.org mail server.
> I may report more at the Berlin mailserver conference.
I'm collecting data at python.org and here...
--
Ralf Hildebrandt
Postfix - Einrichtung
* Ralf Hildebrandt :
> % awk '/PREGREET/ {print $NF}' /var/log/mail.log |sort | uniq -c | sort -n
>
> emits
> ...
> 25 urhousecareer.info??
> 26 dmx1.bfi0.com??
> 104 freenet.de??
> 111 gmx.de??
> 113 t-online.de??
> 113 w
is a little bit complicated and refer to MMS center. I use a
> postfix like a SMTP proxy for modification and so on.
Aha.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
What about the four lusers of the ap
rfaces = IP1
smtp_bind_address = IP1
and the other
inet_interfaces = IP2
smtp_bind_address = IP2
but that's somewhat obvious. Setting myhostname properly would also
make sense.
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.compute
client safe.dnsbl.sorbs.net,
> reject_rbl_client cbl.abuseat.org,
>
> Since the end of May blacklisting is performing worse. Is there an
> explanation for this?
Of course.
Read: http://dsbl.org/
Remove list.dsbl.org
Replace pbl.spamhaus.org with zen.spamhaus.org
Remove cbl.abuseat.org, which i
* Ralf Hildebrandt :
> Of course.
>
> Read: http://dsbl.org/
> Remove list.dsbl.org
>
> Replace pbl.spamhaus.org with zen.spamhaus.org
>
> Remove cbl.abuseat.org, which is included in cbl.abuseat.org
Remove cbl.abuseat.org, which is included zen.spamhaus.org :) (sorr
* K bharathan :
> my setup:
> external relay1 -->internal postfix mail server
>
> how can i restrict postfix to receive only mails from relay1; can i do it
> through a access map?
mynetworks = externalrelay1
smtpd_recipient_restrictions =
permit_mynetworks
reject
--
Can I change hash_queue_depth on the fly? I mean, with a queue already
filled? If so, how? stop, change, start?
--
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Wenn die Leute mit dem Logfile die IT-Kompetenz von
* Wietse Venema :
> Ralf Hildebrandt:
> > Can I change hash_queue_depth on the fly? I mean, with a queue already
> > filled? If so, how? stop, change, start?
>
> If you don't change hash_queue_depth of the active queue, edit
> main.cf, then "postfix reload".
* The Doctor :
> I am contemplating howto use spamassassin effectively with postfix.
Usually we use amavisd-new
* The Doctor :
> I tried runing amavisd but it is running into weird errors.
It's the wrong list here, but usually one shows the errors and is
being helped :)
* Wietse Venema :
> Perhaps there a case of name confusion. There are several tools
> that have "amavis" in the name. The one that reportedly works well
> with Postfix is called "amavisd-new".
Well, the other project are dead, really. amavis is nowadays synonym
for Mark^h^h^h^hamavisd-new.
Anyw
* Sahil Tandon :
> Noel are you suggesting something might not work for me because I don't
> know how to use it? Blasphemer!
Sigged.
* The Doctor :
> Anyway to use the spamassassin headers to reject mail
> instead of using amavisd?
amavisd-new USES Mail::SpamAssassin
* Steve :
> Hi,
>
> I'm running through the brilliant 'Book of Postfix' and running into
> some confusion with anvil/rate control - specifically syntax. around
> page 384
>
> smtpd_client_connection_limit_exceptions =
> smtpd_client_connection_rate_limit = 3
> smtpd_client_connection_count_limit
* Ralf Hildebrandt :
> > Which makes me wonder what the right syntax should be. Has the syntax
> > changed since the box was produced or is it going to change in the near
> > future?
>
> The former. The concept stays the same, though.
Reason: When the book was writte
* Steve :
> smtpd_client_event_limit_exceptions = my_networks
smtpd_client_event_limit_exceptions = $mynetworks
> or
>
> smtpd_client_event_limit_exceptions = my_networks, 1.2.3.4, 5.6.7.8
smtpd_client_event_limit_exceptions = $mynetworks, 1.2.3.4, 5.6.7.8
> and that will be good?
Yep
You
our server. I investigated
>> and found that postfix was rejecting the sending server with:
>> NOQUEUE: reject: RCPT from bb02d1.eurorscg.com[69.74.116.40]: 554 5.7.1
>> : Client host rejected: Access
>> denied;
>
> This looks like a REJECT from a check_client_
[1]xremov...@psyop.tv> proto=ESMTP
>helo=
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebra...@charite.de | http://www.charite.de
uth_destination check_client_access
> hash:/usr/local/etc/postfix/whitelist
An entry in /usr/local/etc/postfix/whitelist could cause a rejection
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Be
* Jesse Kretschmer :
> Ralf Hildebrandt wrote:
>> Nothing in here cold cause what you see.
>> Show master.cf please
> [r...@mail ~]# sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/main.cf
This hardly shows master.cf :)
--
Ralf Hildebrandt
Ge
ct
THIS could be the problem.
This would cause the reject as you see it in the log :)
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fa
* Noel Jones :
> Jesse,
>
> You may find it helpful to add
>-o syslog_name=postfix-smtps
> to the above options to differentiate logging from the smtps service.
Amen to that!
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin
gt;>> -o smtpd_client_restrictions=permit_sasl_authenticated,reject
>>>
>> THIS could be the problem.
>> This would cause the reject as you see it in the log :)
>>
> I've been reading the docs. I am not sure what the correct solution is,
Simply turn it off.
CO
es to 1
What kind of super flaky LMTP server is that?
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebra...@charite.de | http://www.charite.de
* Linux Addict :
> We are, but these aren't even going out. There is a transport map which
> directs it to internal exchange servers.
>
> I am curious where its getting the -400(EDIT) from.
Please show the exact header... and 2 lines before and after.
--
Ralf Hildebrandt
Ge
ecause postfix doesn't rotate its log, but some other
software does. Like logrotate. Depending on your OS.
--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 15
701 - 800 of 1381 matches
Mail list logo