Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: [ Charset ISO-8859-1 unsupported, converting... ] On 21/02/2010 19:34, Darren Pilgrim wrote: Jonathan Tripathy wrote: Sorry I forgot to state that im only concerned with MY server here. For example, I don't want someone to telnet to MY postfix server, and give

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Wietse Venema: Jonathan Tripathy: On 21/02/2010 19:34, Darren Pilgrim wrote: Jonathan Tripathy wrote: Sorry I forgot to state that im only concerned with MY server here. For example, I don't want someone to telnet to MY postfix server, and give m...@mydomain.com for both sender

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: You forgot to set an owner rule for @domain. How would I do that? I'm not sure if this is relavent but I'm currently using: For complete description of a) the smtpd_sender_login_maps database queries b) the order of queries See:

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Wietse Venema: Jonathan Tripathy: You forgot to set an owner rule for @domain. How would I do that? I'm not sure if this is relavent but I'm currently using: For complete description of a) the smtpd_sender_login_maps database queries b) the order of queries See: http

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: You can also specify MULTIPLE maps: /etc/postfix:main.cf smtpd_sender_login_maps = mysql:whatever hash:/etc/postfix/default /etc/postfix/default: @example.com root Don't forget to postmap the /etc/postfix/default file. Great! That seemed to have

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: My main issue is that my backup mx doesn't have sasl enabled (It's relay only..) Why would your users submit mail to the backup MX host? Wietse

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: [The backup MX host accepts mail from forged local sender addresses, but the backup MX does not support SASL]. Actually, the MAILER-DAEMON message doesn't get queued at all! It just discards it when it can't find the user (If the from address was

Re: postfix explicit logging all failures in maillog

2010-02-22 Thread Wietse Venema
ram: On Sat, 2010-02-20 at 14:30 -0500, Victor Duchovni wrote: On Sat, Feb 20, 2010 at 03:43:25PM +0530, ram wrote: One of our clients sends contract notes to their customers and they require to store all logs of deliveries/bounces by some law. They have requirements like

Re: smtpd_banner question

2010-02-22 Thread Wietse Venema
Magnus B?ck: On Mon, February 22, 2010 9:50 am, Jon Tullett said: [...] My smtpd_banner is set to $mylocalhost ESMTP. The localhost is the full localname+domain. I took (Postfix) out of the banner because I'm paranoid and don't like advertising what specific software is offering a

Re: postfix explicit logging all failures in maillog

2010-02-22 Thread Wietse Venema
ram: Record status=deferred just like status=bounced or status=sent, and when a message expires, use the last status=deferred information. Thats a painful workaround. :-( Writing a clean log parser especially when your logs can get rotated anytime in between. For the next time that

Re: Add extra headers when forwarding

2010-02-22 Thread Wietse Venema
Shameem Ahamed: Currently, when the postfix forwards the mails to the forward server it is not adding any headers for the e-mail for which it forwards. As required by the SMTP protocol, Postfix prepends a Received: message header with the local queue ID, a date stamp, and other trace

Re: Add extra headers when forwarding

2010-02-22 Thread Wietse Venema
Shameem Ahamed: Yes it adds received header. But it doesn't add the user details. Below is the header details. Received: from mx1 (INBOUNDSERVER [IPADDRESS]) by FORWARDSERVER (Postfix) with ESMTP id BA40E4940D6 for RECIPIENT; Thu, 18 Feb 2010 02:19:28

Re: Add extra headers when forwarding

2010-02-22 Thread Wietse Venema
Shameem Ahamed: Yes it adds received header. But it doesn't add the user details. Received: from mx1 (INBOUNDSERVER [IPADDRESS]) by FORWARDSERVER (Postfix) with ESMTP id BA40E4940D6 for RECIPIENT; Thu, 18 Feb 2010 02:19:28 + (GMT)

Re: problem getting reject_sender_login_mismatch to work

2010-02-22 Thread Wietse Venema
Eric Haszlakiewicz: I'm trying to set up my mail server so it blocks emails that appears to come from the same address that they are going to. i.e. From: u...@example.com To: u...@example.com I figured a good way to do this would be with the reject_sender_login_mismatch which,

Re: header_checks question

2010-02-22 Thread Wietse Venema
Ralf Hildebrandt: * Wietse Venema wie...@porcupine.org: But Exchange forgets the and just encodes L?stn?me, Firstn?me instead of L?stn?me, Firstn?me thus the quoted-string encapsulation is wrong?! RFC822..RFC5322 do not need quotes around text inside the =?iso-8859-1

Re: prepend headers logging

2010-02-22 Thread Wietse Venema
AMP Admin: is there away to stop prepend: header from being added to the logs? No. If it bothers you, use grep. Wietse

Re: copy all e-mails to a new domain

2010-02-23 Thread Wietse Venema
ram: On Tue, 2010-02-23 at 13:23 +0200, Razvan Cosma wrote: Hello, While moving the IMAP services to a new host, I'd need to copy all messages addressed to anyu...@example.com to the old inbox, and to the new at anyu...@tempsubdomain.example.com Virtual maps allows this, but needs

Re: Some questions about logging

2010-02-23 Thread Wietse Venema
Borja Marcos: Is there, maybe, a guarantee (due to the program flow in smtpd) that the message-id= line from cleanup will always be logged before the disconnected line from smtpd? When an SMTP client aborts prematurely, then the Postfix smtpd process will immediately log the disconnected

Re: header_checks question

2010-02-23 Thread Wietse Venema
lst_ho...@kwsoft.de: Zitat von Victor Duchovni victor.ducho...@morganstanley.com: On Mon, Feb 22, 2010 at 03:54:47PM -0500, Wietse Venema wrote: The rules for display names are in RFC*22. Look for the ABNF for display-name, phrase, word, and atom. Short answer: as long as =?iso

Re: How to tell which instance is which

2010-02-23 Thread Wietse Venema
Stan Hoeppner: Wietse Venema put forth on 2/23/2010 10:39 AM: Not all the world is Linux. In fact there are 10 times as many Macs. Wietse Venema put forth on 2/16/2010 10:01 AM: This is a technical mailing list. When you claim that something is bad, you need to support that claim

Re: header_checks question

2010-02-24 Thread Wietse Venema
lst_ho...@kwsoft.de: Zitat von Ralf Hildebrandt ralf.hildebra...@charite.de: * lst_ho...@kwsoft.de lst_ho...@kwsoft.de: The problem is that on some mails sent from Outlook it is not possible to answer with Thunderbird because the sender address is split into two invalid mailadresses

Re: header_checks question

2010-02-24 Thread Wietse Venema
lst_ho...@kwsoft.de: There is no wrong To-Header. File a bug-report with Mozilla. That's what i tried to find out: Who is at fault and what is the root-case... If the bug is still present in TB3 i will bother to file a bug. If software X mis-handles a correctly-formatted message header,

Re: Milter for processing bounces?

2010-02-25 Thread Wietse Venema
Kim Albee: What we want is the ability to have users send email from their email -- and have that email be represented in the From Email line (which is by default envelope-sender), and use SPF record for identifying our server as authorized to send emails on behalf of their domain, For that,

Re: Recipient limit..but where?

2010-02-26 Thread Wietse Venema
Niemi Hannu: Hello I have now tried to form a log file that contains both happy case (500 recipients) and unhappy one (501 recipients) To debug the case I created 999 bogus users with username us...@listserv.kuntaliitto.fi to user...@listserv.kuntaliitto.fi Because the log file is quite

Re: sender name from /etc/passwd

2010-02-26 Thread Wietse Venema
Pavel Urban: Hello, I've tried to migrate some 90 servers from Sendmail to Postfix, trying to keep the behavior as similar as possible. They were all simple null clients, sending mail via relayhost only. After some time I've noticed that some servers are sending their daily logwatch outputs

Re: Recipient limit..but where?

2010-02-26 Thread Wietse Venema
Niemi Hannu: Feb 26 08:41:43 listserv postfix/smtpd[32326]: unknown[10.0.17.127]: RCPT TO:user...@listserv.kuntaliitto.fi Feb 26 08:41:43 listserv postfix/smtpd[32326]: unknown[10.0.17.127]: 250 2.1.5 Ok Feb 26 08:41:43 listserv postfix/smtpd[32326]: unknown[10.0.17.127]: RSET Feb 26

Re: Listing relay_domains in a file

2010-02-26 Thread Wietse Venema
Wolfgang Zeikat: The relay_domains documentation says: Specify a list of host or domain names, /file/name patterns ... Would /file/name contain one domain per line? Zero or more patterns per line, with patterns separated by one or more space, tab, carriage return or newline characters, and

Re: RBL problem?

2010-02-26 Thread Wietse Venema
David Schraeder: How are you guys getting those stats on the blocks? awk ' /blocked using [^;]+;/ { stats[$20]++ } END { for (name in stats) print name, , stats[name] } ' /var/log/maillog Wietse

Re: postmulti: inet_interfaces for each instance ?

2010-02-27 Thread Wietse Venema
David Touzeau: Dear I would like to implement multiple instances on my 2.7 postfix. After read the documentation (perhaps my english is very poor) i need to have a confirmation. did i need to disable master_service_disable and specify an IP address for each instance in inet_interfaces

Re: postmulti: inet_interfaces for each instance ?

2010-02-27 Thread Wietse Venema
David Touzeau: David Touzeau: Dear I would like to implement multiple instances on my 2.7 postfix. After read the documentation (perhaps my english is very poor) i need to have a confirmation. did i need to disable master_service_disable and specify an IP address for each

Re: Maildir creation

2010-03-01 Thread Wietse Venema
Jack Knowlton: I would like Postfix to accept mail for any recipient of that particular domain and create the matching Maildir once the first message has been received. Thanks, This is possible but I don't think it is a good idea to auto-create maildirs for users whose name starts with

Re: Milter invocation when sending to local mail

2010-03-01 Thread Wietse Venema
Yves Kreis: Dear, Does Postfix invoke milter when sending a DSN for local mail? Postfix does not filter messages that it creates itself. That includes bounces. As of Postfix 2.3 this is configurable for before-queue filters (i.e. milters and header/body_checks). For details, see:

Re: Error main.cf path, is it just me or is it a bug ?

2010-03-02 Thread Wietse Venema
Gregory BELLIER: Ok then, no problem, I'll just build in a different way and at the make makefiles, I use the option CCARGS='-DDEF_CONFIG_DIR=\/opt/postfix\' Then, the make install, root_folder = /opt/postfix When the make install procedure says: Please specify the prefix for installed

Re: tls vs ssl

2010-03-02 Thread Wietse Venema
Charles Marcus: On 2010-03-02 2:51 AM, Stan Hoeppner wrote: You've likely been using STARTTLS only, which doesn't require a key exchange as SSL/TLS does. ? You sure about that? I use only STARTTLS, and I always have to do the 'Confirm Security Exception' dance to accept the certificate

Re: Out: 452 Insufficient system storage

2010-03-02 Thread Wietse Venema
donovan jeffrey j: On Mar 2, 2010, at 7:31 PM, Daniel V. Reinhardt wrote: this is default on all my systems. MX1 /dev/disk1s3 77G51G26G66%/ MX2 /dev/disk0s3 234G46G 187G20%/ It may be worthwhile to run the Postfix

Re: Out: 452 Insufficient system storage

2010-03-02 Thread Wietse Venema
Wietse Venema: donovan jeffrey j: On Mar 2, 2010, at 7:31 PM, Daniel V. Reinhardt wrote: this is default on all my systems. MX1 /dev/disk1s3 77G51G26G66%/ MX2 /dev/disk0s3 234G46G 187G20%/ It may

Re: Out: 452 Insufficient system storage

2010-03-02 Thread Wietse Venema
donovan jeffrey j: On Mar 2, 2010, at 9:03 PM, Wietse Venema wrote: It may be worthwhile to run the Postfix fsspace test program. - Download any Postfix source code that compiles on your system. - cd into the source tree, then execute the following commands: make makefiles

Re: Out: 452 Insufficient system storage

2010-03-03 Thread Wietse Venema
donovan jeffrey j: Mar 3 09:49:59 mx1 postfix/smtp[1054]: name_mask: resource Mar 3 09:49:59 mx1 postfix/smtp[1054]: name_mask: software Mar 3 09:49:59 mx1 postfix/qmgr[603]: 0529299C4604: removed Mar 3 09:49:59 mx1 postfix/smtp[1054]: 127.0.0.1[127.0.0.1]: 220 [127.0.0.1] ESMTP

Re: PATCH reject_rhsbl_reverse_client

2010-03-04 Thread Wietse Venema
Noel Jones: This patch adds a reject_rhsbl_reverse_client function that uses the unverified client hostname for the RBL lookup. The idea is that this might increase rhsbl hit rates if the hostname is more frequently available. On the other hand, spam-only domains seem to usually have

Re: Postfix doesn't fall back on other IP addresses

2010-03-04 Thread Wietse Venema
Erik Logtenberg: Hi, I noticed that Postfix doesn't fall back on other IP addresses associated with a certain MX-server when it fails to accept mail, but only uses the firs IP address it finds. If that fails, Postfix will move on to the next MX-server, but won't try any other available IP

Re: Postfix doesn't fall back on other IP addresses

2010-03-04 Thread Wietse Venema
Erik Logtenberg: If your system has no useful IPv6 connectivity, disable IPv6 in Postfix. http://www.postfix.org/inet_protocols The issue is that other people with broken IPv6 connectivity have trouble delivering mail to me, because my mailservers have many different IP

Re: outbound sender

2010-03-05 Thread Wietse Venema
1. all mail from inside goes to this (edge - 1 ) postfix box. 2. if from trusted/don't-scan-it listsen...@domain.tld, then don't go to edge/out-MX relayhost, resolve/send directly to Internet. Use an access map with a nexthop-less FILTER action: FILTER smtp: This requires Postfix 2.7. See

Re: virtual domains

2010-03-05 Thread Wietse Venema
motty cruz: Mar 5 21:25:18 dagan pipe[4378]: fatal: pipe_command: execvp /var/mail: Permission denied and my master.cf maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/var/mail -d ${user} You are trying to EXECUTE a command /var/mail -d

Re: retry with ssmtp if smtp delivery fails

2010-03-05 Thread Wietse Venema
Roel van Meer: Victor Duchovni writes: This would be wrong. The ssmtp service, if it existed, is generally for submission, not inbound MX delivery, and almost always requires authentication, which you will not be able to provide. You would get random rejection of your email if you guess

Re: reverse dns fails with multiple domains

2010-03-06 Thread Wietse Venema
John WInther: Hi I host 6 mail domains. When I validate my mx configuration online with mxtoolbox.com, I got a fail with reverse dns lookup, my localhostname of the server is bsd5.homedom.local, and that is the domain reverse dns tested, ofcourse it fails hense it is not a public domain,

Re: Postfix doesn't fall back on other IP addresses

2010-03-07 Thread Wietse Venema
mouss: RFC 5321 (the same sentence is in 2821) says In any case, the SMTP client SHOULD try at least two addresses. so a client that only tries two addresses is compliant. If you use twenty IPs, be prepared to see clients ignore most of them (and no tuning of _your_ postfix will help). As

Re: Postfix doesn't fall back on other IP addresses

2010-03-07 Thread Wietse Venema
Timo Sirainen: On 8.3.2010, at 1.26, Wietse Venema wrote: smtp_address_preference (default: ipv6) Probably the whole reason for this thread was because of me. I used to have a working IPv6 setup, and then switched to a different ISP and just copied all my configs. Everything worked fine

Re: problem with relay, please help me...

2010-03-08 Thread Wietse Venema
Leonel Flor??n Selles: I have a problem, I'm configuring a mail server with postfix, to handle local mail, I have a mail server, in which I going to relay all the mails that my users send, I enter to my server via telnet, and I use the command ehlo to know all the option he have, this option

Re: Warning message

2010-03-08 Thread Wietse Venema
Jerry: FreeBSD 7.3-PRERELEASE Postfix (2.7-20100117) From time to time, when mail is being sent internally from one user to another on the same network, I see this warning message in the mail-log: warning: network_biopair_interop: error reading 5 bytes from the network: Connection reset

Re: conten filter and always_bcc parameter

2010-03-09 Thread Wietse Venema
Davy Leon: Hi folks I've been trying postfix version 2.3.3 + amavisd-new + clamav for a while and it's working pretty cool. I sent an email with a .EXE attached just for testing purposes, so I received a message from content-filter .. saying that's not allowed, but I can see in

Re: Warning message

2010-03-10 Thread Wietse Venema
Jerry: Mar 10 04:59:46 xxx postfix/smtpd[93352]: xx.my_domain.com[192.168.1.101]: QUIT Mar 10 04:59:46 xxx postfix/smtpd[93352]: xx.my_domain.com[192.168.1.101]: 221 2.0.0 Bye Mar 10 04:59:46 xxx postfix/smtpd[93352]: warning: network_biopair_interop: error reading 5

Re: Problem with Postfix/Cyrus-imap setup

2010-03-10 Thread Wietse Venema
Gijs: On 3/10/10 15:05 , Ansgar Wiechers wrote: On 2010-03-10 Gijs wrote: virtual_alias_maps = hash:/etc/postfix/virtual virtual_mailbox_domains = mydomain.com myotherdomain.com virtual_transport = lmtp:unix:/var/lib/imap/socket/lmtp /etc/postfix/virtual: t...@mydomain.com

Re: Problem with Postfix/Cyrus-imap setup

2010-03-10 Thread Wietse Venema
Gijs: On 3/10/10 15:37 , Wietse Venema wrote: Gijs: On 3/10/10 15:05 , Ansgar Wiechers wrote: On 2010-03-10 Gijs wrote: virtual_alias_maps = hash:/etc/postfix/virtual virtual_mailbox_domains = mydomain.com myotherdomain.com virtual_transport = lmtp:unix:/var/lib/imap/socket/lmtp

Re: Warning message

2010-03-10 Thread Wietse Venema
Victor Duchovni: On Wed, Mar 10, 2010 at 08:23:00AM -0500, Wietse Venema wrote: Mar 10 04:59:46 xxx postfix/smtpd[93352]: xx.my_domain.com[192.168.1.101]: QUIT Mar 10 04:59:46 xxx postfix/smtpd[93352]: xx.my_domain.com[192.168.1.101]: 221 2.0.0 Bye Mar 10 04

Re: Warning message

2010-03-10 Thread Wietse Venema
Victor Duchovni: On Wed, Mar 10, 2010 at 03:08:18PM -0500, Wietse Venema wrote: With TLS sessions, after QUIT processing, the server tries to perform a clean SSL_shutdown() of the SSL/TLS session. If the client closes the connection without performing the SSL_shutdown(), you'll see

Re: Warning message

2010-03-10 Thread Wietse Venema
Jerry: Wietse and Victor, from what I have deduced from reading your posts is that I can safely ignore the warning. Is that correct? I am really interested though in why this has suddenly started happening. I have not touched Postfix or claws-mail, my MUA, in months. Except for updating

Re: Sender and recipient dependant header checks

2010-03-11 Thread Wietse Venema
Bacfd Bubb: Hi, I've got a virtual domain setup with a box dedicated to spam filtering in front of it, to keep the hungry spam and av checks away from the mail server itself. Mail between domains is delivered as expected, but the behaviour I'm after is one where if the sender domain is

Re: Not adding the X-Original-To header

2010-03-11 Thread Wietse Venema
Richard Cooper: Hi All, Is there any way to tell Postfix to not add the X-Original-To header to messages it delivers? Have you tried: postconf | grep original_recipient Wietse

Re: If a message is destined for a content_filter, must we really check the transport map?

2010-03-11 Thread Wietse Venema
Michael Alan Dorman: Hey, all, I manage a high-volume mail installation, using an after-queue content filter for spam filtering. We use an ldap transport map (actually a couple of them) to direct each recipient's email to it's appropriate final destination. I recently got some errors

Re: Bounced mail's From is null

2010-03-12 Thread Wietse Venema
Jeff Huang: I found that the Return-Path is null when postfix send bounce mail.It = like this: Return-Path: This is required by the Internet mail protocol (RFC 821, RFC 2821, RFC 5321). It means that the bounce mail has no from,and some mailServer reject these email. Then those servers

Re: Return Path header

2010-03-12 Thread Wietse Venema
Luis Daniel Lucio Quiroz: Hi, i have a question, about return-path header in emails. Can i configure postfix to don't override this tag if it is alredy present? No. The Return-Path: header is added at the time of FINAL delivery. Regarding this question, I have other. Dont ask why

Re: Different header_checks depending on smtpd listener

2010-03-13 Thread Wietse Venema
Erik Logtenberg: Thanks, this works like a charm! Small question though, was there any way for me to figure this out by myself using the documentation? I notice that for each daemon there is extensive documentation on which configuration directives are supported, but I didn't see the

Re: Feature request: configurable dnsbl scores in postscreen

2010-03-13 Thread Wietse Venema
Stefan Foerster: Now, feature request is actually not the right word - it's more an idea, and probably somebody just needs to tell me it's a bad one. With the postscreen_dnsbl_sites setting, each site administrator can configure a list of DNS blacklists that new SMTP connections will be

Re: Feature request: configurable dnsbl scores in postscreen

2010-03-14 Thread Wietse Venema
Patrick Ben Koetter: I think that a design (the stage before code is written) should consider how scoring would play with the other tests that postscreen implements, and how it would play with things that I intend to add such as light-weight greylisting. We can model postscreen-like

Re: sanity check

2010-03-14 Thread Wietse Venema
Noel Jones: On 3/13/2010 10:38 PM, Adam Lanier wrote: I've inherited a relatively large Postfix installation. Servers have a range of Postfix versions from 2.1.1 to 2.6.5. Master.cf and main.cf are included below. The inbound mail gateways are connected to the internet behind a

Re: Feature request: configurable dnsbl scores in postscreen

2010-03-14 Thread Wietse Venema
Stefan Foerster: [ Charset UTF-8 unsupported, converting... ] * Wietse Venema wie...@porcupine.org: I created postscreen because it is becoming too expensive to spend one server process per zombie connection. Instead, one postscreen process manages up to thousands of inbound connections

Re: Redefining myhosname to a location outside of main.cf

2010-03-15 Thread Wietse Venema
VR: On a test box in Postfix 2.5.5 I tried putting myhost.domain.tld in /etc/postfix/myhostname.cf and then defined myhostname = /etc/postfix/myhostname.cf in main.cf. Perhaps surprisingly, Postfix actually behaves as documented. Where does Postfix documentation say that myhostname

Re: Implementing SPF in Postfix

2010-03-15 Thread Wietse Venema
Security Admin (NetSec): Running Postfix as a mail gateway, version 2.6.5 and am finally getting around to implementing SPF in Postfix. I thought the TXT record in DNS would suffice which is how I have been running it. Found this how-to link http://www.howtoforge.com/postfix_spf Is

Re: RBL whitelist?

2010-03-15 Thread Wietse Venema
Erik Logtenberg: Is there a possibility to use a DNS-based RBL whitelist in Postfix? In The Netherlands we have an NL-Whitelist, which contains the IP's of all major ISP's. By using this whitelist one can make sure that accidental automatic blacklisting won't disrupt regular email traffic.

Re: RBL whitelist?

2010-03-15 Thread Wietse Venema
Victor Duchovni: With explicit DNSWL lookups, indeed defer_if_reject is acceptable, since the DWL is operated locally or by a competent provider and persistent temp failure of lookups is less likely. So it seems to me that this has cleaner semantics than check_client_access with name-based OK

Re: RBL whitelist?

2010-03-15 Thread Wietse Venema
Erik Logtenberg: However in the case where the whitelist is (completely) unavailable for some period of time, I still think that my suggestion applies, don't you agree? No. It is assumed that you use a sufficiently reliable DNSWL. Ideally a local mirror, and if it becomes

Re: RBL whitelist?

2010-03-15 Thread Wietse Venema
Wietse Venema: Erik Logtenberg: However in the case where the whitelist is (completely) unavailable for some period of time, I still think that my suggestion applies, don't you agree? No. It is assumed that you use a sufficiently reliable DNSWL. Ideally a local mirror

Re: Configuring a separate transport for NDRs

2010-03-16 Thread Wietse Venema
Aaron Roberts: Hi all, Can anyone suggest a way to force all NDRs generated by the bounce daemon to be delivered by a particular transport? You need to solve the right problem. Eliminate the reason why those bounce messages are sent. Wietse

Re: Lots of connections from Unknown

2010-03-16 Thread Wietse Venema
Manuel Mely: Do you have a monitoring tool in your network? Maybe it's a Nagios testing your smtp server. That also happens to me in my loadbalancer, keepalived test smtp port with a telnet and then disconnects and i have a lot of this message in my logs too. Is there a way to avoid this?

Re: qmgr watchdog timeout

2010-03-16 Thread Wietse Venema
Ing. Andr?s E. Gallo: Hi there, I am running a fresh install of FreeBSD 8.0, with Postfix 2.8-20100306, amavisd-new, SA like MTA, besides Squid and Bind DNS. It was running as secondary MX, and not sending mails -besides bounces- for a week or so since install without problems.

Re: Problems using STARTTLS off campus

2010-03-16 Thread Wietse Venema
On-campus: ... 250-STARTTLS ... Off-campus: 250-XXXA CISCO fixup mode is an amazing technical achievement. It will XXX server words not on a whitelist (and as the A at the end demonstrates, it does this close to perfection). It will XXX client commands not on a whitelist, as

Re: qmgr watchdog timeout

2010-03-16 Thread Wietse Venema
Postfix runs fine on FreeBSD 8 (here, since November 2009) as well as any FreeBSD vesion that I have been running since I started work on Postfix in 1997. Your problem is a broken operating system that causes timeouts in Amavis, Postfix, and in other programs. This is the Postfix mailing list.

Re: Can I Omit Same Values

2010-03-16 Thread Wietse Venema
Carlos Mennens: I noticed today that many items expressed in main.cf appear to be what I think is default value and should not be expressed. I was wondering if this logic is correct: If the following two values are identical, can I simply remove the parameter from 'main.cf'? r...@mail:~#

Re: Delay Warnings are not being sent

2010-03-16 Thread Wietse Venema
Stephen Carville: I am trying to get delay warnings to be sent to users with no success. How do you know the difference between not sent and not received? Wietse

Re: delivery temporarily suspended

2010-03-17 Thread Wietse Venema
Sasa: I can this errore in log: Mar 17 11:47:36 mail postfix/smtp[7690]: 77F5726A1E9: to=fili...@domain.biz, orig_to=fili...@domain.biz, relay=127.0.0.1[127.0.0.1]:10024, delay=1868, delays=0.36/1568/300/0, dsn=4.4.2, status=deferred (conversation with 127.0.0.1[127.0.0.1] timed out

Re: LMTP delivery and VERP

2010-03-17 Thread Wietse Venema
Jesus Cea: Hi all. Sorry if the question is a FAQ, but I am a new postfix user, Google has not helped me, neither the postfix online docs. If I send a mail to jcea+...@jcea.es, Postfix checks j...@jcea.es in the virtual table and recognizes the user. But when Postfix sends the message to

Re: LMTP delivery and VERP

2010-03-17 Thread Wietse Venema
Jesus Cea: If I send a mail to jcea+...@jcea.es, Postfix checks j...@jcea.es in the virtual table and recognizes the user. But when Postfix sends the message to the storage backend, via LMTP, the destination is jcea+...@jcea.es, and I would like to get the LMTP rcpt to j...@jcea.es.

Re: reject_authenticated_sender_login_mismatch only for some logins

2010-03-17 Thread Wietse Venema
ram: I need to implement smtpd login maps on our postfix servers so as minimize the chances of a compromised client machine screwing our smtp relay. But this cannot be done overnight. There are various clients who use different envelope sender domains (for perfectly legitimate reasons) and

Re: Dynamic message_size_limit

2010-03-17 Thread Wietse Venema
Giovanni Mancuso: Hi, i have a question about message_size_limit parameter. Can i set this parameter to get the value from ldap? Else, can i write a Policy Delegator that do it? The policy delegation protocol allows you to reject arbitrary message sizes. However, you do not know the

Re: Delay Warnings are not being sent

2010-03-17 Thread Wietse Venema
Stephen Carville: On Tue, Mar 16, 2010 at 5:41 PM, Wietse Venema wie...@porcupine.org wrote: Stephen Carville: I am trying to get delay warnings to be sent to users with no success. How do you know the difference between not sent and not received? Good point. All I know is to look

Re: Reject_unlisted_recipient issue

2010-03-18 Thread Wietse Venema
Oleksii Krykun: If I use smtpd_reject_unlisted_recipient=yes or smtpd_recipient_restrictions=reject_unlisted_recipient options all messages to non-existant addresses are rejected. But if anybody sends message to multiple addresses in same domain and one of them doesn't exist then postfix

Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-18 Thread Wietse Venema
Sean Reifschneider: I'm reporting this primarily because the other searching I've done has turned up this same error message, but with nothing that clearly points out what the root of the issue really is. I'm hoping someone can shed some light on it. We've been having little if any luck

Re: dict_fnmatch again

2010-03-18 Thread Wietse Venema
Michael Tokarev: A few years ago I implemented a new dict for Postfix, dict_fnmatch. It is a shell-style pattern matcher with patterns placed _inline_, right in the config file, without any additional files like pcre/regex (the simplest dictionaries which does not use indexed files) and

Re: FW: PCI Compliance

2010-03-18 Thread Wietse Venema
Jonathan Tripathy: So, back to postfix, can it do such a thing? Act as a proxy and not a store and forward relay http://www.postfix.org/SMTPD_PROXY_README.html Someone will still have to monitor the logfile, and deal with postmaster notification email depending on how the notify_classes

Re: delivery temporarily suspended

2010-03-18 Thread Wietse Venema
Sasa: I have disabled amavisd-new and the new mail are deliveriy quickly but for all mails that stay in queue I have: mail transport unavailable ?? what I can to delivery all mails ? http://www.postfix.org/DEBUG_README.html#logging

Re: MDN and mupliple recipients

2010-03-18 Thread Wietse Venema
Dimitrios Karapiperis: Hi When someone sends an e-mail to multiple recipients and requests read receipt the MDN mechanism works fine but on the receipt message itself, the sender receives that recipie...@domain.tld, recipie...@domain.tld have read the message without knowing who exactly is

Re: delivery temporarily suspended

2010-03-18 Thread Wietse Venema
- From: Wietse Venema wie...@porcupine.org To: Sasa s...@shoponweb.it Cc: Vladimir Dvorak vladimir.dvo...@vdsoft.org; postfix-users@postfix.org Sent: Thursday, March 18, 2010 3:12 PM Subject: Re: delivery temporarily suspended Sasa: I have disabled amavisd-new and the new mail

Re: delivery temporarily suspended

2010-03-18 Thread Wietse Venema
Please follow instructions in: http://www.postfix.org/DEBUG_README.html#logging Do not change the logging. Use the EXISTING logging. Wietse

Re: MDN and mupliple recipients

2010-03-18 Thread Wietse Venema
H Wietse Venema: Postfix does not send mail read notifications. Hi Wietse You mean that these notifications are not part of the Postfix System? Postfix sends *delivery* notifications; for examples of these, see the output from the postconf -b command. *Delivery* notifications are send

Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-18 Thread Wietse Venema
Sean Reifschneider: On 03/18/2010 05:57 AM, Wietse Venema wrote: If the Postfix milter_protocol setting specifies a too high version, the libmilter library simply hangs up without logging We've tried protocol versions 2, 4, and 6 with the same error. We've also tried two

Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-19 Thread Wietse Venema
Wietse Venema: Sean Reifschneider: On 03/18/2010 05:57 AM, Wietse Venema wrote: If the Postfix milter_protocol setting specifies a too high version, the libmilter library simply hangs up without logging We've tried protocol versions 2, 4, and 6 with the same error. We've

Re: Counting clients in smtpd_client_recipient_rate_limit with XFORWARD

2010-03-19 Thread Wietse Venema
Patrick Ben Koetter: When a message reenters from an instance that uses XFORWARD, for example amavis, will Postfix count the IP used twice and, for example, add that to smtpd_client_recipient_rate_limit? Rate limits apply to the real client IP address not the forwarded one, subject to

Re: overide transport table

2010-03-19 Thread Wietse Venema
Robert Schetterer: Hi @ll, is there a way to overide transport table for specific sender domains Content filter overrides transport_maps. Wietse

Re: overide transport table

2010-03-19 Thread Wietse Venema
Robert Schetterer: Am 19.03.2010 11:41, schrieb Wietse Venema: Robert Schetterer: Hi @ll, is there a way to overide transport table for specific sender domains Content filter overrides transport_maps. Wietse Thx Wiestse for info, such was i expected, in my/this case

Re: Mails bounced 550 5.7.1

2010-03-19 Thread Wietse Venema
Sam Przyswa: Hi, On last Postfix install on new server some mails are refused with error 550 5.7.1 se the report : x...@aflo.be: host gw.aflo.be[87.66.26.108] said: 550 5.7.1 Your email messages have been blocked by the recipient OR

<    9   10   11   12   13   14   15   16   17   18   >