[IMGate] Error getting to Len
Len, I have been attempting to email you and I finally looked in the log and = see this: can you enlighten me on the reason? my address is in the to_relay_recipients.map file and it's postmapped. -- Date: Thursday, February 7, 2008 2:51 PM 09A0D1EC379 1210 Thu Feb 7 14:42:44 [EMAIL PROTECTED] (host mgw2.meiway.com[81.255.84.84] said: 450 4.1.7 [EMAIL PROTECTED] mt.us: Sender address rejected: unverified address: host mx1.gfps.k12.mt.= us[69.51.71.14] said: 450 [EMAIL PROTECTED]: Recipient address = rejected: Temporary failure of recipient account (in reply to RCPT TO = command) (in reply to RCPT TO command)) [EMAIL PROTECTED] =20
[IMGate] Invalid email returns from postfix
We recently moved to a new mailserver (MailTraq) but kept IMGate box as = our border server and need some help understanding what's occuring (I = think it's different than Imail was) Below are 3 log enties from my Postfix log. These are entries where our = internal mail server (behind postfix) are attempting to deliver a message, = multiple recipients. The 1st entry no user, the 2nd, incorrect destination = and then we get the too many errors back to our internal server. Is there some setting I can have in postfix so the conversation from my = internal server (mail.gfps.k12.mt.us) doe not error out and gets something = back so he can return this attempted delivery? What's occuring is this = message is retried (from internal to external server) for X days before = being returned to the sender. thanks, bob Jan 9 23:25:06 mx1 postfix/smtpd[1746]: A3F111EC374: reject: RCPT from = mail.gfps.k12.mt.us[69.51.71.16]: 554 [EMAIL PROTECTED]: Recipient address = rejected: undeliverable address: host scrubber.dca.net[216.158.48.62] said:= 550 cuda_nsu 5.1.1 User unknown (in reply to RCPT TO command); from=3D= [EMAIL PROTECTED] to=3D[EMAIL PROTECTED] proto=3DESMTP = helo=3Dgfps.k12.mt.us Jan 9 23:25:06 mx1 postfix/smtpd[1746]: A3F111EC374: reject: RCPT from = mail.gfps.k12.mt.us[69.51.71.16]: 450 [EMAIL PROTECTED]: Recipient = address rejected: unverified address: connect to mx.quigibo.com[67.15.76.= 50]: Connection refused; from=3D[EMAIL PROTECTED] to=3D= [EMAIL PROTECTED] proto=3DESMTP helo=3Dgfps.k12.mt.us Jan 9 23:25:06 mx1 postfix/smtpd[1746]: too many errors after RCPT from = mail.gfps.k12.mt.us[69.51.71.16] Jan 9 23:25:06 mx1 postfix/smtpd[1746]: disconnect from mail.gfps.k12.mt.= us[69.51.71.16]
[IMGate] Re: Invalid email returns from postfix
Does that mean then there is no way to play nicer with my internal mail = server so this particular message could be sent back to the sender on the = 1st attempt? =20 What the support folks for our new server say is Postfix is responding in = such a way as if to say 'Try again later'. We'll this message is never = going through. Can I set Postfix so, in a situation like this, it will = convey the 'return to sender' message instead? I would think incorrect emails are a fact of life, I'd just like my = teacher to know they entered it incorrect today, not 5 days from today. bob On Thursday, January 10, 2008 3:45 PM, Len Conrad [EMAIL PROTECTED] = wrote: Is there some setting I can have in postfix so the conversation from my = =3D internal server (mail.gfps.k12.mt.us) doe not error out and gets = something =3D back so he can return this attempted delivery? What's occuring is this = =3D message is retried (from internal to external server) for X days before = =3D being returned to the sender. thanks, bob Jan 9 23:25:06 mx1 postfix/smtpd[1746]: A3F111EC374: reject: RCPT from = =3D mail.gfps.k12.mt.us[69.51.71.16]: 554 [EMAIL PROTECTED]: Recipient addres= s =3D rejected: undeliverable address: host scrubber.dca.net[216.158.48.62] = said:=3D 550 cuda_nsu 5.1.1 User unknown (in reply to RCPT TO command); = from=3D3D=3D [EMAIL PROTECTED] to=3D3D[EMAIL PROTECTED] proto=3D3DESM= TP =3D helo=3D3Dgfps.k12.mt.us postfix recipient address verifaction proved the MX said=20 [EMAIL PROTECTED] is not a know recipient. no way to fix that,=20 other than to quit sending to unknown recipients. Jan 9 23:25:06 mx1 postfix/smtpd[1746]: A3F111EC374: reject: RCPT from = =3D mail.gfps.k12.mt.us[69.51.71.16]: 450 [EMAIL PROTECTED]: = Recipient =3D address rejected: unverified address: connect to mx.quigibo.com[67.15.76.= =3D 50]: Connection refused; from=3D3D[EMAIL PROTECTED] = to=3D3D=3D [EMAIL PROTECTED] proto=3D3DESMTP helo=3D3Dgfps.k12.mt.us when trying to RAV [EMAIL PROTECTED] at=20 mx.quigibo.com[67.15.76.50], that MX refused the connection, no way=20 to fix that. Jan 9 23:25:06 mx1 postfix/smtpd[1746]: too many errors after RCPT from = =3D mail.gfps.k12.mt.us[69.51.71.16] smtpd_hard_error_limit has been exceeeded, probably too many=20 recipients were bad. quit sending bad recipients. Len
[IMGate] Re: Invalid email returns from postfix
below is the log from my non postfix server. It gets the 'too many errors'= back from mx but the line above is tagging the message for later retry. Postfix is validating the addresses during the communication with my new = mail server and just crapping out during the conversation.=20 Is there some way I can make this work differently during the send from my = internal mail server to my Postfix server? 0002 0001AA93 08/01/2008 13:00:12 RCPT TO:[EMAIL PROTECTED] us --- 450 [EMAIL PROTECTED]: Recipient address rejected:= unverified address: connect to mx.quigibo.com[67.15.76.50]: Connection = refused 0002 0001AA93 08/01/2008 13:00:12 Tagging message GFPS72D75723~mx1_= gfps_k12_mt_us for failure/later retry 0002 0001AA93 08/01/2008 13:00:12 RSET --- 250 Ok 0002 0001AA93 08/01/2008 13:00:12 Starting delivery of GFPS72F57A16 0002 0001AA93 08/01/2008 13:00:12 MAIL FROM:[EMAIL PROTECTED] k12.mt.us --- 250 Ok 0002 0001AA93 08/01/2008 13:00:12 RCPT TO:[EMAIL PROTECTED] --= - 450 [EMAIL PROTECTED]: Recipient address rejected: unverified = address: connect to besnan.net[208.73.212.12]: Connection refused 0002 0001AA93 08/01/2008 13:00:12 Tagging message GFPS72D76737~mx1_= gfps_k12_mt_us for failure/later retry 0002 0001AA93 08/01/2008 13:00:12 RSET --- 421 mx1.gfps.k12.mt.us = Error: too many errors 0002 0001AA93 08/01/2008 13:00:12 Starting delivery of GFPS72F57A17 0002 0001AA93 08/01/2008 13:00:12 MAIL FROM:[EMAIL PROTECTED] ---= =20 0002 0001AA93 08/01/2008 13:00:12 Tagging message GFPS72DB0147~mx1_= gfps_k12_mt_us for failure/later retry 0002 0001AA93 08/01/2008 13:00:12 QUIT --- =20 - 0001AA93 On Thursday, January 10, 2008 4:15 PM, Len Conrad [EMAIL PROTECTED] = wrote: Does that mean then there is no way to play nicer with my internal mail = =3D server so this particular message could be sent back to the sender on = the =3D 1st attempt? =3D20 you can comment out reject_unverified_recipient and all=20 undeliverable msgs will pile up postfix queue, cause postfix to=20 generate a non-delivery msgs back to the sender. just more work for=20 postfix for no advantage. What the support folks for our new server say is Postfix is responding = in =3D such a way as if to say 'Try again later'. no, bad recipient now is bad recipient later. postfix received a 5xx=20 fatal code from the remote MX, meaning do not try again later. We'll this message is never =3D going through. Can I set Postfix so, in a situation like this, it will = =3D convey the 'return to sender' message instead? That's job of the backend server when it can't deliver (to postfix). I would think incorrect emails are a fact of life good thinking! :) , I'd just like my =3D teacher to know they entered it incorrect today, not 5 days from today. postfix rejects immediately, the sending mailserver which sees the=20 bounce should also immediately generate a non-delivery msgs back to the sender. Len
[IMGate] question on shaw.ca
I received a message from IOC Mail Admins [EMAIL PROTECTED] concerning us blocking mal from shaw.ca. I did find multiple lines in the mta_clients_b.map (we are using it) that list shawcable.com. the specifi server ip that's being blocked is 64.59.134.9 should I allow this server? This file came with Len's install so I = hesitate altering the block. Looking for direction thanks bob
[IMGate] header checks.
I'd like to add a header_check to discard any subjects that have=20
chase {any number of characters} $20 Reward Survey
can someone tell me how I structure that?
thanks, bob
[IMGate] Chase bank account spams
Curious, how are others handling spam with references to chase bank = accounts (and others)? I'm not sure I want to block by IP or by domain = name and it seems like there is alternate text in the messages. thanks, bob
[IMGate] check and remove with this header?
Has anyone or is there a way to catch a header like this and delete it = when found? If so, does it make sense? Received: from gfps.k12.mt.us (printempsdebourges.rain.fr [213.56.252.49]) by mx1.gfps.k12.mt.us (Postfix) with ESMTP id 273781EC323 it say it's received from our domain but actually from an external address.= I'm wondering if it makes sense to try and block received lines like this.= bob
[IMGate] Question on setup of body_checks
I am trying to setup body_checks.regexp to add the phrases for the spam = requesting assistance to get 142 million from nigeria. Anyway here what I have in the /etc/postfix/bodychecks.regexp: /(bobtests frankly is)/ 554 ACL body_checks_regexp Content of message body = rejected, content =3D $1 when I do a=20 postmap -q bobtests frankly is pcre:/etc/postfix/body_checks.regexp I get back: 554 ACL body_checks_regexp Content of message body rejected, content =3D = bobtests frankly is in my /etc/postfix/main.cf I have body_checks =3D pcre:/etc/postfix/body_checks.regexp body_checks_size_limit =3D 1500 but when I send a message with the body of bobtests frankly is I get the message back. I'm sending it to root that returns to me so I = know it's going through my imgate box. If I take the 554 ACL message off = and just REJECT it, it does not get delivered but I'l like the message in the = logfile for reference. Anyone know what I'm doing wrong? bob
[IMGate] Signed up for the spf stuff
Just curious on if any of you are signing up for this service? http://spf.pobox.com/
[IMGate] Re: is this a strange entry
ok thanks Len just wanted to make sure. bob On Tuesday, March 22, 2005 5:28 PM, Len Conrad [EMAIL PROTECTED] = wrote: I do have the PTR record now... not sure what I screwed up to not have = it =3D internally but I did. It is now there. I've been working with someone on their end and they don't see a reject = in =3D their logs. That's why I asked. Typically, the reject lists the remote = =3D server, not my server with the 554 error. for inbound, yet. but for outbound, RAV will be two rejects: their MX=20 rejects postfix's recipient, and so then postfix rejects Imail's recipient. This one is strange Should =3D I look for an entry for usa.redcross.org somewhere in one of my lists then?=3D NO! ask them why they are rejecting your outbound IP or whatever. you = can=20 see their 5xx reject text in the postfix log. so their MX should have=20 their reject of your postifx logged, too. Len
[IMGate] is this a strange entry
Hi, I am working a non-deliverable with redcross. Below what is strange to me = is the reject:RCPT from unknown[69.51.71.16] line. That is my imail server = but the 554 reason appears to be from the redcross.org server. Does this = seem strange to you? We cannot deliver mail to usa.redcross.org and am = trying to get it working... this one is from last week but the logfile looks exactly the same today. bob Mar 14 12:12:42 mx1 postfix/smtpd[34736]: NOQUEUE: reject: RCPT from = unknown[69.51.71.16]: 554 [EMAIL PROTECTED]: Recipient address = rejected: undeliverable address: host arcsmtp2.redcross.org[162.6.217.64] = said: 550 This system has been configured to reject your mail (in reply to = MAIL FROM command); from=3D[EMAIL PROTECTED] to=3D[EMAIL PROTECTED] redcross.org proto=3DESMTP helo=3Dmail.gfps.k12.mt.us
[IMGate] Re: is this a strange entry
Thanks Len, I do have the PTR record now... not sure what I screwed up to not have it = internally but I did. It is now there. I've been working with someone on their end and they don't see a reject in = their logs. That's why I asked. Typically, the reject lists the remote = server, not my server with the 554 error. This one is strange Should = I look for an entry for usa.redcross.org somewhere in one of my lists then?= On Tuesday, March 22, 2005 4:39 PM, Len Conrad [EMAIL PROTECTED] = wrote: Mar 14 12:12:42 mx1 postfix/smtpd[34736]: NOQUEUE: reject: RCPT from =3D unknown[69.51.71.16]: why don't you have PTR for your Imail box? 554 [EMAIL PROTECTED]: Recipient address =3D rejected: undeliverable address: host arcsmtp2.redcross.org[162.6.217.64]= =3D said: 550 This system has been configured to reject your mail (in reply = to =3D MAIL FROM command); your postfix is doing RAV to verify recipient [EMAIL PROTECTED] redcross.org= ,=20 but redcross MX is rejecting it, so postfix rejects the mail from your=20 Imail as bad recipient. postfix can't deliver it, so postifx rejects it. Len
[IMGate] Strange happenings with Imailuser transfer to imgate
I had been sailing along fine with moving my imailusers to imgate with the = imailusersextract routine. I came in this morning and had failure messages = that the user on the imgate box did not exist. Unknown user: [EMAIL PROTECTED] I could not find anything that had been changed. After a short time, I = just rebooted the Imgate box and it started working again. Has anyone seen this occur before? This is the 1st time it's occured here = and I suspect there is a reason... thanks, bob
[IMGate] Re: issues with aol
thanks kevin and len, the strange thing is I am getting nothing back from AOL either in the = headers or body that indicate anything from my server. I did setup the spam phrase in imail and am getting headers from my imail = box but only from the message inbound from aol reporting the spam report, = nothing outbound at all from my machine to imgate. the mynetworks settings in my main.cf only contain my imgate box and my = imail server so it seems like it's just not coming from me. I've called aol twice trying to get additional info but they are not much = help. On Monday, December 27, 2004 7:28 PM, Kevin Coveney [EMAIL PROTECTED] = wrote: I signed up for the feeback loop for my domain with aol. I am now =3D receiving messages from them indicating mail sent from our site that is = =3D being reported to them as spam. yep, if your mailbox users forward their message to AOL then use the report as spam feature in their mailbox, they are reporting your server since it was the source. In the message I receive there is nothing I can use to track it down. =3D If you're using IMail as the forwarder, look in the header of the = embedded message and you should see something that ties it to at least a domain. Something like the received from SMTP32-FWD message. I've warned my customers that complaints to AOL of this type can and will force us to cease forwarding their mail. Keep an eye out for increased activity as there are levels that once hit AOL will start blocking mail from your mail server based on it's IP address. -Kevin
[IMGate] Re: strange postfix startup message
ok, that got rid of the errors on the postfix start. however, I still have no /var/log/maillog I did move it from /var/log/maillog to /usr/bob/maillog this morning while = i was digging out of our problem... did that break something. Insidently, the problem this morning was that we had an infected computer = in our network that found our imgate box and was spewing like crazy. We = run declude on the imail box but nothing on our imgate box and config our = clients to use imail. The infected computer must have finally hit the IP = of our imgate to start the flood. if anyone runs similar to this, make sure your internal clients cannot use = port 25 on your imgate box or you could end up like we did tough lesson= . On Friday, December 17, 2004 10:22 AM, Len Conrad [EMAIL PROTECTED] = wrote: postfix check -- redisplays the same errors for postdrop and postqueue postfix upgrade -- is not a valid command, upgrade does not list my mistake, in the src directly, after compiling, make upgrade Len
