Re: Better spam filter for postfix

2010-07-16 Thread Wietse Venema
Steve: > Original-Nachricht > > Datum: Fri, 16 Jul 2010 16:44:23 -0400 > > Von: Charles Marcus > > An: postfix-users@postfix.org > > Betreff: Re: Better spam filter for postfix Steve, I request that you end this thread. Wietse

Re: Postfix barfing on dovecot LDA transport

2010-07-16 Thread Wietse Venema
Corey Chandler: > Jul 16 14:52:13 Leavenworth postfix/pipe[31344]: fatal: user= > command-line attribute specifies mail system vmail group id 1008 As the error message says, you MUST NOT run non-Postfix programs with Postfix user or group privileges. Wietse

Re: client certificate?

2010-07-18 Thread Wietse Venema
Christopher Hilton: > Outlook express can be convinced to use 587 but my experience with > my users I find that Outlook sometimes changes the port setting > from 587 to 465 during configuration. > > You will need a certificate for this but if the number of clients > is small you don't have to go to

Re: set-permissions tweak

2010-07-18 Thread Wietse Venema
Corey Chandler: > I've had to run postfix set-permissions on my box to resolve a few > ownership issues. On this platform (Debian Lenny) a few things aren't what > set-permissions expects to find-- largely man pages that aren't compressed, > slightly different pathing, map files that aren't necess

Re: Exim & RFC compliant

2010-07-20 Thread Wietse Venema
Jerry: > I have been having an argument with an associate of mine who uses Exim > for his company's mail server. He claims that Exim is totally compliant > and that Postfix users claim otherwise to simply poison users against > using Exim. I have used Postfix for 4 years and would never dream of >

Re: smtpd_sender_login_maps, recipient_delimiter

2010-07-20 Thread Wietse Venema
Victor Duchovni: > On Tue, Jul 20, 2010 at 06:17:52AM +0200, Stefan Foerster wrote: > > > * Victor Duchovni : > > > On Sun, Jul 18, 2010 at 12:14:17PM +0200, Stefan Foerster wrote: > > > > > > > Given: A dedicated Postfix instance, configured to accept mails from > > > > SASL authenticated users.

Re: Postfix queue on ramdisk: Insufficient system storage

2010-07-21 Thread Wietse Venema
Ram: > One server of ours just accepts the mails from clients and then relays > the mails to other servers. > Since there is almost no mail queued on the server , I think it is will > be good to mount /var/spool/postfix on a tmpfs partition. > > The machine ( linux Centos 5.4 + postfix 2.7 ) ha

Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Wietse Venema
Ralf Hildebrandt: > * Ansgar Wiechers : > > > The issue with this attack is that it might exhaust CPU resources on the > > server without having to saturate the bandwidth, due to cryptographic > > operations required by SSL. > > Correct. > > > And that it seems to use BitTorrent as a multiplicat

Re: postfix/local segfaults

2010-07-21 Thread Wietse Venema
Kai Krakow: > Mystery solved: > > Adding "-O2" to CFLAGS (an "-Ox" parameter was missing) solved the problem. > Seems to be an GCC issue. I don't know if postfix should compile and work fine > without this or with another optimizer level. It *should* work with all optimization levels. except for:

Re: Postfix queue on ramdisk: Insufficient system storage

2010-07-21 Thread Wietse Venema
Ram: > One server of ours just accepts the mails from clients and then relays > the mails to other servers. > Since there is almost no mail queued on the server , I think it is will > be good to mount /var/spool/postfix on a tmpfs partition. You will lose all mail in the queue when the system cr

Re: postfix/local segfaults

2010-07-22 Thread Wietse Venema
Kai Krakow: > Bas, > > why should that make a difference if it was already proven that > changing the optimization level of the compiler fixes the issue, and > that it is probably a special corner case of hardened gcc3.4? I > suppose it has to do with it's stack protecting techniques etc. That is

Re: Feature request: postsuper release but don't delete (cloning?)

2010-07-22 Thread Wietse Venema
Patrick Ben Koetter: > I can put a mail on HOLD and release it later with the postsuper command. > That's great for debugging purposes, but only if I need to send the message > just once. > > Would it be possible to expand the postsuper command with an optional command > line parameter that releas

THREAD CLOSED (ISP Blocking of port 25)

2010-07-22 Thread Wietse Venema
Sahil Tandon: > Time of death on Thu, Jul 22: 01:57:34 UTC > > END OF THREAD. Please? :-) Yes. I was posting that when my hotel's internet connection broke. TRESPASSERS WILL BE REMOVED FROM THE LIST. Wietse

Re: Feature request: postsuper release but don't delete (cloning?)

2010-07-22 Thread Wietse Venema
Patrick Ben Koetter: > > > Postfix queue files should not have multiple hard links. > > > > > > Consider using RSYNC to COPY the file from the hold queue to the > > > incoming queue, using the same file name. > > > > Once it's there, will it take the same path as the initial mail (on > > HOLD) wo

Re: postfix as forwarder and backscatterer problem

2010-07-22 Thread Wietse Venema
Vasya Pupkin: > Hello. > > First, I have spent two days reading articles and searching web for > solution but failed there. I am using postfix as an mx for my domains, > it accpets mail for different addresses withing my domains which is > then forwarded to other external domains, i.e. google.com

Re: postfix as forwarder and backscatterer problem

2010-07-22 Thread Wietse Venema
Vasya Pupkin: > > In particular, if a bounce is caused by a downstream MTA rejecting > > an email because it's too large, then that's an unavoidable bounce. > > But it's also unlikely to be backscatter > > In my case it was one of the most reasons why my server acted as a > backscatterer. You hav

Re: Feature request: postsuper release but don't delete (cloning?)

2010-07-23 Thread Wietse Venema
Victor Duchovni: > On Thu, Jul 22, 2010 at 09:24:52PM +0200, Ralf Hildebrandt wrote: > > > * Victor Duchovni : > > > > > Note, if rsync propagates file permissions before it copies file contents, > > > an incomplete queue file could be picked up by the queue manager before > > > it is completely

Re: Long term storage of undeliverable mail

2010-07-23 Thread Wietse Venema
Mark Goodge: > OK, I'm sure this is in the documentation somewhere, but my brain isn't > working this morning and I need to get a fix for this fairly quickly, so > I'm asking here instead :-) > > Anyway, I currently have a situation where mail is currently received by > machine A, which then fo

Re: milter still hungs (from time to time)

2010-07-23 Thread Wietse Venema
> > How can I help you to diagnose & solve the error?. With POSTFIX "smtpd -v" and "cleanup -v" logging for: - One message that demonstrates the problem. - The EXACT SAME MESSAGE with one letter changed in the recipient address, so that it does not demonstrate the problem. Do not send verbos

Re: Integration of milter results in postfix logs

2010-07-23 Thread Wietse Venema
Jesus Cea: > For instance, in sendmail I see things like this in the logs: > > Jul 23 20:10:09 XXX sendmail[9338]: [ID 801593 mail.info] > o6NIA6ef009338: Milter: to=, reject=451 Temporaly delayed. > Try later (3540) ... > Jul 23 20:10:56 XXX sendmail[9374]: [ID 801593 mail.info] > o6NIArA7009374:

Re: milter still hungs (from time to time)

2010-07-23 Thread Wietse Venema
Jesus Cea: > On 23/07/10 20:29, Wietse Venema wrote: > > - The EXACT SAME MESSAGE with one letter changed in the recipient > > address, so that it does not demonstrate the problem. > > Only one letter?. Then would be a non existant account. Is this test > useful to you?

Re: milter still hungs (from time to time)

2010-07-23 Thread Wietse Venema
Jesus Cea: > On 23/07/10 20:29, Wietse Venema wrote: > >> > >> How can I help you to diagnose & solve the error?. > > > > With POSTFIX "smtpd -v" and "cleanup -v" logging for: > > > > - One message that demonstrates the pr

Re: milter still hungs (from time to time)

2010-07-23 Thread Wietse Venema
Jesus Cea: > On 23/07/10 23:09, Wietse Venema wrote: > > This has nothing to do with milters. > > > > A diff between the logs shows that YOU disconnect from the submission > > port before POSTFIX has logged the final MIME boundary. > > > > I suspect that

smtp hung (was: milter still hungs)

2010-07-24 Thread Wietse Venema
Jesus Cea: -- Start of PGP signed section. > On 24/07/10 01:28, Wietse Venema wrote: > > 2) I repeat, the problem is that Postfix does not recognize the > > end of the message. > > I don't send the message completely. According to thunderbird, it sends The logging s

Re: milter still hungs (from time to time)

2010-07-24 Thread Wietse Venema
Jesus Cea: > Wietse, if you can confirm that postfix DOESN'T send to milter modules > the headers, EOH, body and EOB *UNTIL* it has received the complete > message via SMTP, I think I can move this issue to Thunderbird bugzilla. AFTER Postfix receives the ``.'', THEN Postfix sends headers, EOH, bo

Re: Integration of milter results in postfix logs

2010-07-24 Thread Wietse Venema
Wietse: > Postfix does not log message changes unless you turn on debug > logging. Message changes can be quite extensive, such as deleting > a header, adding a header, or replacing the message body. Such > logging is not of interest for production usage. Jesus Cea: > I find it VERY useful for pr

Re: problem using smtp

2010-07-27 Thread Wietse Venema
> Jonathan Amiez put forth on 7/27/2010 8:26 AM: > > Le mardi 27 juillet 2010 15:15:24, Fons van der Beek a _crit : > > >> domain.com smpt:sbsserver:25 > > > > >> Anyone an idea what is wrong > > > Double-check your config, you wrote "sm

Re: problem using smtp

2010-07-27 Thread Wietse Venema
Stan Hoeppner: > Fons van der Beek put forth on 7/27/2010 10:53 AM: > > sorry... > > i just didn't see it. > > very stupid, but also gratefull > > Don't sweat it. Laugh about it instead. Exercise a little self deprecating > humor. Whenever this kind of thing happens, _always_ sa

Re: too much config version 2.5.5,

2010-07-29 Thread Wietse Venema
donovan jeffrey j: > version 2.5.5, > > greetings > im upgrading a couple of xserves to 10.6 from 10.4. the main.cf > used to be pretty straight forward. The default main.cf on 10.6 > snow leopard server has overwhelmed my old eyeballs. may new lines > most i understand but they pretty much list e

Re: too much config version 2.5.5,

2010-07-29 Thread Wietse Venema
donovan jeffrey j: > > On Jul 29, 2010, at 7:16 AM, Wietse Venema wrote: > > > The simplest way to upgrade an existing configuration is: > > > > - Back up the new main.cf, master.cf, postfix-files, postfix-script > > and post-install files. > > > >

Re: too much config version 2.5.5,

2010-07-29 Thread Wietse Venema
donovan jeffrey j: > thanks for the reply, i did the update and have no errors on postfix check. > > i have setup a test on my mx server to transport mail for > lukeskywal...@beth.k12.pa.us to mx2.beth.k12.pa.us ( my new 10.6 filter ) > > so far my mail2 primary mx can send to the filter (mx2).

Re: problem sending outside of local machine

2010-07-30 Thread Wietse Venema
Christopher Adams: > Hello, > > I have a new Postfix install running under Centos 5.3. I am able to send > mail from the command line, but anything sent from another machine is not > sent, nor is it logged. I have read the debugging information and hopefully, > I am sending some useful information

Re: Separate Submission Instance on Same IP as MX

2010-08-01 Thread Wietse Venema
Mike Morris: > Hi, > > I'm working on a mail server deployment that will only have one server > for MX and SASL submission purposes. Generally I like to have separate > Postfix instances to handle a specific task. In this case I'm running > in to problems when the submission instance uses the sa

Re: Providing SMTP relay access to roaming laptop without creating an open relay...

2010-08-01 Thread Wietse Venema
Peter L. Berghold: > Hi folks, > > In pseudo code here's how I want my outside mail exchange system to > behave: > On the Postfix server: /etc/postfix/main.cf: smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated <- for the roaming laptop ...

Re: Separate Submission Instance on Same IP as MX

2010-08-01 Thread Wietse Venema
Mike Morris: [ Charset ISO-8859-1 unsupported, converting... ] > On 08/01/2010 09:29 AM, Wietse Venema wrote: > > Mike Morris: > >> Hi, > >> > >> I'm working on a mail server deployment that will only have one server > >> for MX and SASL submi

Re: sqlite driver and centos

2010-08-02 Thread Wietse Venema
subscri...@viliar.net.ru: > On Mon, 02 Aug 2010 09:02:41 -0400, Brian Evans - Postfix List > wrote: > > On 8/2/2010 5:18 AM, subscri...@viliar.net.ru wrote: > >> I use postfix with sqlite patch about 2 years with small fix to > function > >> name. I > >> suggest to make something like this for pos

Re: sqlite driver and centos

2010-08-03 Thread Wietse Venema
subscri...@viliar.net.ru: > On Mon, 2 Aug 2010 14:36:35 -0400 (EDT), Wietse Venema > wrote: > > subscri...@viliar.net.ru: > >> On Mon, 02 Aug 2010 09:02:41 -0400, Brian Evans - Postfix List > >> wrote: > >> > On 8/2/2010 5:18 AM, subscri...@viliar.net.r

Re: Invalid warning list domain in BOTH mydestination and virtual_mailbox_domains

2010-08-03 Thread Wietse Venema
Lefteris Tsintjelis: > On Aug 2, 2010, at 10:47 am, Lefteris Tsintjelis wrote: > > > On Aug 2, 2010, at 3:59 am, Phill Macey wrote: > > > >> On 2 August 2010 10:10, Lefteris Tsintjelis wrote: > >>> This warning does not make any sense at all since there is no such thing > >>> listed in mydestin

Re: mailing lists and "unknown mail transport error"

2010-08-04 Thread Wietse Venema
See http://www.postfix.org/DEBUG_README.html#logging When Postfix does not receive or deliver mail, the first order of business is to look for errors that prevent Postfix from working properly: % egrep '(warning|error|fatal|panic):' /some/log/file | more Note: the most important message is

Re: why no configure script?

2010-08-04 Thread Wietse Venema
Jay G. Scott: > every time i try to go to a newer version of postfix, the > installation overwrites the previous version. and that You can choose the install location. Wietse

Re: Separate Submission Instance on Same IP as MX

2010-08-06 Thread Wietse Venema
Mike Morris: > approach. Out of curiosity, what would your reasons be for suggesting > running postscreen with 2.7 rather than using a 2.8 snapshot? Wouldn't > similar instability concerns about the latter apply to the former? The difference is that stable release features not change except in c

Re: check if incoming server is SMTP or ESMTP

2010-08-06 Thread Wietse Venema
Manuel Mely: > Hi, > > I've programmed one script for checking the allowed message size for > every user on my network. I started programming this script based on > the greylist perl example script that it's in the postfix > documentation[1] (very nice start point). > The script is working well bu

Re: Postfix SMTP AUTH using Oracle

2010-08-06 Thread Wietse Venema
Zhou, Yan: > Hi there, > > I have seen success stories with SMTP AUTH integrating with both MySQL > and LDAP, but our user/configuration are stored in Oracle 10g database. > Is there any info. on integrating Postfix with Oracle? If you use DOVECOT SASL, look in the DOVECOT documentation. If you

Re: check if incoming server is SMTP or ESMTP

2010-08-08 Thread Wietse Venema
it. You can use different master.cf configurations for smtpd, if local and remote clients have different limits (use a different server IP address). Wietse > On 8/6/10, Wietse Venema wrote: > > Manuel Mely: > >> Hi, > >> > >> I've programmed one script for

Re: check if incoming server is SMTP or ESMTP

2010-08-08 Thread Wietse Venema
Manuel Mely: > On 8/8/10, Wietse Venema wrote: > > Manuel Mely: > >> Hi Wietse, > >> > >> My server is acting as relay for my network, so my internal clients > >> are MTAs that uses ESMTP. The problem is when other servers in > >> internet

Re: mailing lists and "unknown mail transport error"

2010-08-09 Thread Wietse Venema
In case you wonder, I wrote Postfix. Perhaps you can follow instructions in http://www.postfix.org/.DEBUG_README.html#logging TURN OFF -v logging before you do this. Wietse

Re: mailing lists and "unknown mail transport error"

2010-08-09 Thread Wietse Venema
Dominik Storck: > Hello Wietse, > > I have been tracking down to "Automatically tracing a Postfix daemon > process" from the DEBUG_README. This is how I got the log snippet. > > Can't reproduce the error now after deleting unnecessary .forward files. Please do not waste your time with verbose lo

Re: mailing lists and "unknown mail transport error"

2010-08-10 Thread Wietse Venema
Dominik Storck: > Hello Wietse, > > I have been looking for these error messages over and over before I > started digging deeper. There are none of the error,fatal,warning or > panic messages before. The first error log entry to occur is the unknown > mail transport error, really. Looking at t

Re: mailing lists and "unknown mail transport error"

2010-08-10 Thread Wietse Venema
Phill Macey: > On 10 August 2010 21:35, Wietse Venema wrote: > > > When you have a many-recipient "all" alias, you need to set up an > > "owner-all" alias in the alias database (with the right-hand side > > being the adminstrator of the "al

Re: statvfs errors

2010-08-10 Thread Wietse Venema
CJ Keist: > I'm trying to install postfix-2.7.2-RC2 on Solaris 10 sparc system. > Make and install goes through fine. postfix starts up with no errors. > But getting the following errors in the log file: > > Aug 10 09:58:43 mail1 postfix/smtpd[173]: [ID 947731 mail.crit] fatal: > statvfs .:

Re: Email delivery fails on postfix on heavy load

2010-08-11 Thread Wietse Venema
Sharma, Ashish: > Hi, > > I have a postfix(postfix 2.6.5) mail receiving server. > > On this I have used an email filter (sendmail-jilter > http://sendmail-jilter.sourceforge.net/) that have some of my custom code. > Following setting is used for the milter in 'main.cf': > > #Milter support fo

Re: Connection Refused when sending on from local domain

2010-08-11 Thread Wietse Venema
> Aug 11 20:15:41 myhost sendmail[17048]: o7B9uJjQ015169: > to=, ctladdr= (0/0), > delay=15:19:22, xdelay=00:00:00, mailer=esmtp, pri=1560372, > relay=mail.example.com., dsn=4.0.0, stat=Deferred: Connection refused by > mail.example.com. That is the Sendmail MTA, not POSTFIX. Wietse

Re: Speed up queue injection

2010-08-13 Thread Wietse Venema
Ralf Hildebrandt: > * Ram : > > > Mail in plain text format , mime encoded message > > OK! > > > Currenlty I get 40/s - 45/s > That sounds normal. Any filtering (in these cases you should inject in > a way that bypasses and filters) > > But I want it to be atleast 100/s > > Two machineS? > re

Re: Send Message when reject_unknown_hostname is invoked

2010-08-13 Thread Wietse Venema
jason hirsh: > I am apparently having an issue with some servers whose mail is being > rejected because of > > reject_unknown_hostname > > the reject was shown here > > Aug 11 00:21:36 xxx postfix/smtpd[96422]: NOQUEUE: reject: RCPT > from mail01a.yesbank.com[65.196.66.182]: 450 4.7.1

Re: Resource allocation issue

2010-08-15 Thread Wietse Venema
Alex: > Hi, > > I'm running an older version of postfix and a 2.6.35 Linux kernel, and > recently started seeing these messages: > > Aug 14 19:52:01 smtp01 postfix/postsuper[2634]: fatal: setuid(103): > Resource temporarily unavailable > > How can I troubleshoot this? On many systems setuid() i

Re: Resource allocation issue (SOLVED)

2010-08-15 Thread Wietse Venema
Alex: > For reference, there was nothing further in the system or postfix > logs, dmesg, or even by increasing the postfix logging level to the > best of my ability. When the kernel reports "Resource temporarily unavailable", that's all that Postfix can report without second-guessing the kernel.

Re: Resource allocation issue (SOLVED)

2010-08-15 Thread Wietse Venema
Alex: > Hi, > > >> For reference, there was nothing further in the system or postfix > >> logs, dmesg, or even by increasing the postfix logging level to the > >> best of my ability. > > > > When the kernel reports "Resource temporarily unavailable", that's > > all that Postfix can report without

Re: Speed up queue injection

2010-08-16 Thread Wietse Venema
Stan Hoeppner: > Google uses less than 1/10th of 1% "Enterprise grade" hardware, using the > typical definition of "Enterprise grade", in their operations. And Google is > the undisputed single largest operator of servers on the planet. I think that > qualifies them as an "Enterprise". ;) Indeed

Re: Speed up queue injection

2010-08-17 Thread Wietse Venema
Stan Hoeppner: > Wietse Venema put forth on 8/16/2010 2:36 PM: > > Stan Hoeppner: > >> Google uses less than 1/10th of 1% "Enterprise grade" hardware, using the > >> typical definition of "Enterprise grade", in their operations. And Google > &g

Re: separate bounced and regular email after using transport

2010-08-17 Thread Wietse Venema
Zhou, Yan: > Hi there, > > I have defined my own process to handle all incoming emails, by using a > local transport. My master.cf has entry like this, where the Python > script delegates each mail processing to somewhere else. > > connector unix - n n - - pi

Re: separate bounced and regular email after using transport

2010-08-18 Thread Wietse Venema
Zhou, Yan: > > > > By default, Postfix delivery decisions are based solely on envelope > > recipient addresses. If you send mail to a non-existent address, > > then the non-delivery report will be sent to your email address. > > > > You can configure Postfix via access(5), header_checks(5) and >

Re: permit_mynetworks in smtpd_helo_restrictions

2010-08-19 Thread Wietse Venema
p...@alt-ctrl-del.org: > I take it that I am expected to bottom post here. But is it ok, if I crop > out parts of the original message (if it's long)? Yes. Wietse

Re: greet_pause feature with postfix?

2010-08-19 Thread Wietse Venema
Morten P.D. Stevens: > Hi, > > is there a greet_pause feature in postfix comparable with the sendmail > greet_pause feature? > > For example: FEATURE(`greet_pause',5000) If you have a zombie problem, then delaying every SMTP session is a terrible idea. The expirimental Postfix release has a be

Re: greet_pause feature with postfix?

2010-08-19 Thread Wietse Venema
Morten P.D. Stevens: > is there a greet_pause feature in postfix comparable with the > sendmail greet_pause feature? > > For example: FEATURE(`greet_pause',5000) Wietse: > If you have a zombie problem, then delaying every SMTP session > is a terrible idea. > > The expirimental Postfix release has

Re: set-uid warning on mail sent from cron

2010-08-20 Thread Wietse Venema
Jordan Russell: > Whenever cron (cronie-1.4.5-2.fc13.i686 on Fedora 13) sends mail to a > non-root local user, e.g.: > >12 * * * * someuser echo test In which file is this? /etc/crontab does not document the use of username fields in my Fedora 13 test box, nor would I expect to see username

Re: set-uid warning on mail sent from cron

2010-08-20 Thread Wietse Venema
Jordan Russell: > Should I just ignore the warnings from postfix? Does invoking sendmail > this way present any sort of security risk? I think it is bogus fron cron to invoke (mail or other) commands with EUID root and UID non-root. Wietse

Re: Multi-domain certificates and TLS

2010-08-21 Thread Wietse Venema
Alex: > Aug 6 09:44:20 smtp01 postfix/smtp[24772]: setting up TLS connection > to mail.messaging.microsoft.com > Aug 6 09:44:20 smtp01 postfix/smtp[24772]: Peer verification: > CommonName in certificate does not match: > mail.global.frontbridge.com != mail.messaging.microsoft.com The certificate

Re: virtual deliveries

2010-08-21 Thread Wietse Venema
Edward avanti: > Halo list, > > We have thousands domain and user, we have two different configuration, we > now look to make one. > > Anyone suggest how have postfix virtual deliver binary, deliver mail to > format of > /virtual/domain_first letter/domain_second > letter/domain_third_letter/doma

Re: advise needed: unknown mail transport error; panic: file size limit < message size

2010-08-22 Thread Wietse Venema
Squeeshh Me: > Aug 21 11:12:55 node1 kernel: pid 40382 (virtual), uid 5000: exited on > signal 6 For details, look in your MAILLOG file. Wietse http://www.postfix.org/DEBUG_README.html#logging Look for obvious signs of trouble Postfix logs all failed and successful deliveries to a logf

Re: advise needed: unknown mail transport error; panic: file size limit < message size

2010-08-22 Thread Wietse Venema
Squeeshh Me: > Hi, > > Thanks for replying. My bad, I realised I posted the log message from > /var/log/message. It's quite similar to what I get in postfix log > too. Here's the postfix /var/log/mailog version of a test mail that I just > sent, hope this is better (also there are no other warnin

Re: advise needed: unknown mail transport error; panic: file size limit < message size

2010-08-22 Thread Wietse Venema
Squeeshh Me: > Wietse: ok, here it is: > egrep '(warning|error|fatal|panic):' /var/log/maillog | more > > Aug 22 21:50:17 node2 postfix/virtual[71240]: panic: file size limit > 100 < message size 1498997. Your Postfix version was modified with an unofficial patch that implements quota in th

Re: Selective smtpd_helo_restrictions question

2010-08-22 Thread Wietse Venema
Stan Hoeppner: > That's not necessarily true. It depends on the order of his > smtpd_*_restrictions and whether he's using delayed evaluation. If he's > using the multiple section restrictions style with delayed eval it's > possible he may have an "OK" in a later table that causes the mail to be

Re: Milter i-macro not set at EOM stage

2010-08-22 Thread Wietse Venema
Erik Logtenberg: > Hi, > > I wrote a small milter using Sendmail::Milter in perl. This worked okay > with postfix 2.6.5, but it doesn't with 2.7.0. I use the i-macro > (postfix queue-id) in the EOM-callback function. Previously, the i-macro > was always set at this stage, but now this is no longer

Re: relayhost if fail

2010-08-23 Thread Wietse Venema
listadecorreo: [ Charset ISO-8859-1 unsupported, converting... ] > Hi to all > > In the configuration of my main.cf, I have all mail sent to an external > server (relayhost) I can do to check if the server is operational and if > it fails to send all mail to another server > > relayhost=xxx.xxx

Re: Rewriting Date header for local senders, or something like that.

2010-08-23 Thread Wietse Venema
Jose Ildefonso Camargo Tolosa: > I have to ask: is there a way of making postfix rewrite Date header to > server's time for authenticated mail? (or at list for a range of IPs), No, but it is possible to delete the Date: header for mail that is received via the submission service. In the master.cf

DNS Whitelisting

2010-08-23 Thread Wietse Venema
Noel Jones: [ Charset UTF-8 unsupported, converting... ] > On 8/23/2010 8:48 AM, Ralf Hildebrandt wrote: > > * p...@alt-ctrl-del.org: > >> I find that a lot of spam comes from recently registered, throw away > >> domains. The new domain may be used as the sender, hostname, or name > >> server. > >>

Re: Speed up queue injection

2010-08-23 Thread Wietse Venema
On Tue, Aug 17, 2010 at 01:41:20PM -0500, Stan Hoeppner wrote: > Anyway, if you had the time and inclination and were able to get > your hands on a few units, it would be great to see some basic > queue performance data from you on SSD vs a disk based test rig > you use. Victor Duchovni: > All ben

Re: relayhost if fail

2010-08-23 Thread Wietse Venema
listadecorreo: > > See: http://www.postfix.org/postconf.5.html#smtp_fallback_relay > > > Thanks a lot i'm using smtp_fallback_relay but show tis error > > Aug 23 19:27:52 jupiter postfix/smtpd[15705]: ECC30EA056: > client=unknown[10.111.100.100] > Aug 23 19:27:55 jupiter postfix/c

Re: Delay deliver to a group of domains

2010-08-23 Thread Wietse Venema
Pablo Garcia Melga: > Hi, I have a group of domains, that can't cope with our delivery rate, > I need to send them mail at most at 1/second, how should I achieve > that ? > I tried to create a new transport in master.cf and reroute these > domains thru this transpor but it doesn't seems to work. >

Re: Selective smtpd_helo_restrictions question

2010-08-24 Thread Wietse Venema
Charles Marcus: > On 2010-08-22 8:38 PM, Stan Hoeppner wrote: > > Stan Hoeppner put forth on 8/22/2010 7:34 PM: > >> So if we reverse the scenario and put the "REJECT" first, it's a final > >> decision? If so, and if I've described the situation correctly, why do > >> we have this opposite behavi

Re: Delay deliver to a group of domains

2010-08-24 Thread Wietse Venema
Pablo Garcia Melga: > I added the following lines to the configuration > > master.cf > > smtpslow unix - - n - - smtp > > transport > > yahoo.com smtpslow: > yahoo.com.ar smtpslow: > yahoo.com.mx smtpslow: > ymail.com smtpslow: > > main.cf > > transpo

Re: DNS Whitelisting

2010-08-24 Thread Wietse Venema
Stan Hoeppner: > Wietse Venema put forth on 8/23/2010 10:11 AM: > > Noel Jones: > > > (Might be time to revisit DNS whitelists in > >> postfix.) > > > > Maybe someone can draft a strawman user interface: > > > > - what is the configu

Re: Multiple Domains; No Local Accounts - bad uid in virtual_uid_maps

2010-08-24 Thread Wietse Venema
Mike: > Aug 24 17:21:48 sato postfix/virtual[581]: warning: recipient > m...@example.com: bad uid example.com/mike/ 3001 3001 in > virtual_uid_maps Please RTFM the documentation. http://www.postfix.org/postconf.5.html#virtual_uid_maps http://www.postfix.org/virtual.8.html Wietse

Re: build custom milter with milter_protocol=6

2010-08-25 Thread Wietse Venema
Ram: > I have a custom milter for userwise blacklists/whitelists I have been > running with postfix 2.3.4 > > > Now when I upgraded to postfix 2.7 I get this error > > "can't read SMFIC_DATA reply packet header: Success" > > This works if I use milter_protocol=2. But how do I build my milte

Re: build custom milter with milter_protocol=6

2010-08-25 Thread Wietse Venema
Wietse Venema: > Ram: > > I have a custom milter for userwise blacklists/whitelists I have been > > running with postfix 2.3.4 > > > > > > Now when I upgraded to postfix 2.7 I get this error > > > > "can't read SMFIC_DATA repl

Re: DNS Whitelisting

2010-08-25 Thread Wietse Venema
Stan Hoeppner: > Noel Jones put forth on 8/24/2010 2:18 PM: > > > - This is specific for dnswl.org. Postfix needs a general mechanism. > > Other whitelists are not required to follow dnswl.org's 127.0.x.y > > mechanism. > > Yeah, I used this example as dnswl is, afaik, the most "established" of

Re: pickup: fatal: watchdog timeout

2010-08-25 Thread Wietse Venema
Stefan Foerster: > Hello world, > > I am concerned about those log entries: > > Aug 24 21:16:51 drought postfix/pickup[23165]: fatal: watchdog timeout > Aug 24 21:16:52 drought postfix/master[4713]: warning: process > /usr/libexec/postfix/pickup pid 23165 exit status 1 > Aug 24 21:33:31 drought

Re: Postfix integration: Oracle or LDAP?

2010-08-25 Thread Wietse Venema
Zhou, Yan: > Hi there, > > We want to implement SMTP authentication in Postfix and support multiple > virtual domains. Rather than having user/domain/endpoint in different > files, we prefer them either in database (Oracle) or LDAP. I am trying > to weigh the pros and cons of both options. I have

Re: Postfix integration: Oracle or LDAP?

2010-08-25 Thread Wietse Venema
Patrick Ben Koetter: > > There currently exists no Oracle client for Postfix. Maybe someone > > can donate an ODBC (or other cross-platform) client. It would be > > a little slower, but would allow Postfix to talk to lots of databases > > without needing a driver for everything and the kitchen sink

Re: DNS Whitelisting

2010-08-25 Thread Wietse Venema
Noel Jones: > As I see it, there are two complementary paths we can take > with DNS whitelists, each with a slightly different purpose. > While these are both useful, neither depends on the other, so > postfix can implement either or both. I'll read the entire proposal later. Would this notatio

Re: DNS Whitelisting

2010-08-25 Thread Wietse Venema
Noel Jones: > On 8/25/2010 4:27 PM, Wietse Venema wrote: > > Noel Jones: > >> As I see it, there are two complementary paths we can take > >> with DNS whitelists, each with a slightly different purpose. > >> While these are both useful, neither depends on the

Re: DNS Whitelisting

2010-08-26 Thread Wietse Venema
Matthias Leisi: > On Wed, Aug 25, 2010 at 11:27 PM, Wietse Venema wrote: > > > ?dnswl1.example.com=127.0.0.2*weight1, dnswl2.example.com=127.0.0.1*weight2 > > ?dnsbl3.example.com=127.0.0.3*weight3, dnsbl4.example.com=127.0.0.1*weight4 > > What about wildcarding? dns

Re: DNS Whitelisting

2010-08-26 Thread Wietse Venema
Stan Hoeppner: > Wietse Venema put forth on 8/25/2010 4:27 PM: > > Noel Jones: > >> As I see it, there are two complementary paths we can take > >> with DNS whitelists, each with a slightly different purpose. > >> While these are both useful, neither depend

Re: version of sendmail vacation for postfix

2010-08-26 Thread Wietse Venema
Daniel Prieto: > Is there a substitute 'vacation' feature from Sendmail for Postfix for > all my users? Is Postfix.admin the best bet? > I compiled vacation on my linux box and enable my .forward file with > \user1, "|/usr/bin/vacation user1" but the sender doesn't get a > 'vacation' message bac

Re: which ldap version does Postfix support?

2010-08-26 Thread Wietse Venema
Zhou, Yan: > Hi There, > > What version of LDAP interface does Postfix 2.4.x support? Try: the Postfix 2.4 LDAP_README file. Wietse

Re: DNS Whitelisting

2010-08-26 Thread Wietse Venema
Noel Jones: > This looks like a useful concept. If we use "*" as an octet > wildcard, we'll need to use something else as the weight > modifier. dnsbl_site=127.0.*.3w1 seems reasonable. You can't use an alphanumerical operator such as "w", because the "=127.0.*.3" portion is optional.

Re: DNS Whitelisting

2010-08-26 Thread Wietse Venema
Noel Jones: > This looks like a useful concept. If we use "*" as an octet > wildcard, we'll need to use something else as the weight modifier. > dnsbl_site=127.0.*.3w1 seems reasonable. On 8/26/2010 2:28 PM, Wietse Venema wrote: > You can't use an alphanumerical o

Re: version of sendmail vacation for postfix

2010-08-26 Thread Wietse Venema
Daniel Prieto: > So what is the alternative to vacation for Postfix? On 8/26/2010 11:15 AM, Ralf Hildebrandt wrote: > Huh? Why alternative? The "normal" vacation works just fine. > Just read the manpage, there are options to answer to every mail etc. Daniel Prieto: > I've used it for a long

Re: DNS Whitelisting

2010-08-26 Thread Wietse Venema
On 8/26/2010 4:14 PM, Wietse Venema wrote: > The more precise solution is to implement wildcards with ranges: > > example.com=127.0.[0-128].3*1 > example.com=127.0.[0-5,6-9].3*1 Noel Jones: > I like the range idea. You want proto docs reflecting that > syntax? Yes, that woul

Re: Another "timed out while sending end of data" Error

2010-08-26 Thread Wietse Venema
Lie, Jafaruddin: > There's an ASA 5500 inbetween, but the SMTP fixup protocol has been turned > off, Prove it. Wietse

<    11   12   13   14   15   16   17   18   19   20   >