RE: restricting who can be sent to.

2009-03-05 Thread Carver Banks
Thanks!
That worked, next time I will try and read better ;-)

Carver Banks

 -Original Message-
 From: owner-postfix-us...@postfix.org [mailto:owner-postfix-
 us...@postfix.org] On Behalf Of Barney Desmond
 Sent: Thursday, March 05, 2009 4:11 AM
 To: postfix users list
 Subject: Re: restricting who can be sent to.

 2009/3/5 Carver Banks carver.ba...@trustvesta.com:
   I tried the following:
 smtpd_recipient_restrictions = check_sender_access
 hash:/etc/postfix/allowed_recipients reject
  but it seems that allows me to restrict the user who is sending not
 the destination address,
  what I am trying to accomplish is to have many users of this system
 be able to only email a few addresses, not even each other. I
 understand if that is not possible with postfix, just trying to figure
 out if that is the case...

 Please re-read the example given, it was check_recipient_access, not
 check_sender_access as you've shown in your attempt


RE: restricting who can be sent to.

2009-03-05 Thread Carver Banks
Or so I thought..., that did restrict all mail to the internal recipients as 
well.

I need anyone in mydomain.com to be able to email anyone in mydomain.local, but 
I need users on mydomain.local to only be allowed to email a few people in 
mydomain.com, and none of the other members of mydoman.local.

I think postfix may not be able to accomplish what I desire, if I am wrong 
please correct me.

Carver


 -Original Message-
 From: Carver Banks
 Sent: Thursday, March 05, 2009 7:38 AM
 To: 'Barney Desmond'; postfix users list
 Subject: RE: restricting who can be sent to.

 Thanks!
 That worked, next time I will try and read better ;-)

 Carver Banks

  -Original Message-
  From: owner-postfix-us...@postfix.org [mailto:owner-postfix-
  us...@postfix.org] On Behalf Of Barney Desmond
  Sent: Thursday, March 05, 2009 4:11 AM
  To: postfix users list
  Subject: Re: restricting who can be sent to.
 
  2009/3/5 Carver Banks carver.ba...@trustvesta.com:
I tried the following:
  smtpd_recipient_restrictions = check_sender_access
  hash:/etc/postfix/allowed_recipients reject
   but it seems that allows me to restrict the user who is sending not
  the destination address,
   what I am trying to accomplish is to have many users of this system
  be able to only email a few addresses, not even each other. I
  understand if that is not possible with postfix, just trying to
 figure
  out if that is the case...
 
  Please re-read the example given, it was check_recipient_access, not
  check_sender_access as you've shown in your attempt


restricting who can be sent to.

2009-03-04 Thread Carver Banks
Hello,
I am in the process of setting up an internal mail server 
(carver-test.mydomain.local) using postfix, dovecot and squirrel mail.
I want the users of this system only be able send mail to a few users in 
mydomain.com
I imagine that there is an easy way to map this to a file, but I can't seem to 
find anything in my searches.

Thanks


Postconf -n:

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
inet_interfaces = all
mailbox_size_limit = 0
mydestination = carver-test.mydomain.local, carver-test.mydomain.com, localhost
mydomain = mydomain.local
myhostname = carver-test.mydomain.com
mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128
myorigin = /etc/mailname
readme_directory = no
recipient_delimiter = +
relay_domains = $mydestination, mydomain.com
relayhost = exchange.mydomain.com
smtp_generic_maps = hash:/etc/postfix/generic
virtual_gid_maps = static:1001
virtual_mailbox_base = /home/vmail/
virtual_mailbox_domains = mydomain.local
virtual_mailbox_maps = ldap:/etc/postfix/ldap-users.cf
virtual_uid_maps = static:1001



Carver Banks



RE: restricting who can be sent to.

2009-03-04 Thread Carver Banks
 -Original Message-
 From: owner-postfix-us...@postfix.org [mailto:owner-postfix-
 us...@postfix.org] On Behalf Of Noel Jones
 Sent: Wednesday, March 04, 2009 2:22 PM
 To: postfix-users@postfix.org
 Subject: Re: restricting who can be sent to.

 Carver Banks wrote:
  Hello,
  I am in the process of setting up an internal mail server (carver-
 test.mydomain.local) using postfix, dovecot and squirrel mail.
  I want the users of this system only be able send mail to a few users
 in mydomain.com
  I imagine that there is an easy way to map this to a file, but I
 can't seem to find anything in my searches.
 

 Here's the general documentation on restricting who can send
 where:
 http://www.postfix.org/RESTRICTION_CLASS_README.html
 I tried the following:
smtpd_recipient_restrictions = check_sender_access 
hash:/etc/postfix/allowed_recipients reject
but it seems that allows me to restrict the user who is sending not the 
destination address,
what I am trying to accomplish is to have many users of this system be able to 
only email a few addresses, not even each other. I understand if that is not 
possible with postfix, just trying to figure out if that is the case...



 If this is strictly an internal system, you can use something
 simpler, such as:

 smtpd_recipient_restrictions =
check_recipient_access hash:/etc/postfix/allowed_recipients
reject

 where allowed_recipients lists the valid recipients as:
 us...@example.com  OK
 us...@example.com  OK

-- Noel Jones


Protocol error: host said: 250 2.0.0 Ok (in reply to DATA command)

2009-02-13 Thread Carver Banks
Hello Everyone,
I am seeing weird bounces on my postfix server and can't quite figure out why...
It looks like it is failing while passing the mail off to a spam appliance, but 
from the spam appliance side I see no record of the message. Also

Any ideas, I have a couple examples below?

Example Mail.log entry:

Feb 12 06:17:53 mail01 postfix/smtp[24220]: C06165CE92: 
to=user.n...@domain.com, relay=175.21.0.67[175.21.0.67]:2525, conn_use=18, 
delay=16, delays=1.4/13/0/1.7, dsn=5.5.0, status=bounced (Protocol error: host 
175.21.0.67[175.21.0.67] said: 250 2.0.0 Ok (in reply to DATA command))

Example Delivery Report (what was returned to sender):

Reporting-MTA: dns; mail01.domain.com
X-Postfix-Queue-ID: 8A4946447
X-Postfix-Sender: rfc822; outside.u...@outsidedomain.com
Arrival-Date: Tue, 10 Feb 2009 10:36:37 -0800 (PST)

Final-Recipient: rfc822; user.n...@domain.com
Original-Recipient: rfc822;user.n...@domain.com
Action: failed
Status: 5.5.0
Remote-MTA: dns; 175.21.0.67
Diagnostic-Code: smtp; 250 2.0.0 Ok


Thanks
Carver



RE: Protocol error: host said: 250 2.0.0 Ok (in reply to DATA command)

2009-02-13 Thread Carver Banks
I am kinda new to postfix
Would I use the following line in my main.cf?

smtp_discard_ehlo_keyword_address_maps = 175.21.0.67

Carver Banks


Vesta Corporation
11950 SW Garden Place
Portland, OR 97223
Direct: (503) 552-4045
Mobile: (503) 679-6363


-Original Message-
From: Noel Jones [mailto:njo...@megan.vbhcs.org]
Sent: Friday, February 13, 2009 10:03 AM
To: Carver Banks; postfix-users@postfix.org
Subject: Re: Protocol error: host said: 250 2.0.0 Ok (in reply to DATA command)

Carver Banks wrote:
 Hello Everyone,
 I am seeing weird bounces on my postfix server and can't quite figure out 
 why...
 It looks like it is failing while passing the mail off to a spam appliance, 
 but from the spam appliance side I see no record of the message. Also

 Any ideas, I have a couple examples below?

 Example Mail.log entry:

 Feb 12 06:17:53 mail01 postfix/smtp[24220]: C06165CE92: 
 to=user.n...@domain.com, relay=175.21.0.67[175.21.0.67]:2525, conn_use=18, 
 delay=16, delays=1.4/13/0/1.7, dsn=5.5.0, status=bounced (Protocol error: 
 host 175.21.0.67[175.21.0.67] said: 250 2.0.0 Ok (in reply to DATA command))


The SMTP protocol has gotten out of sync.  Often this is
caused by a poor PIPELINING implementation on the receiver.

You can disable postfix PIPELINING with
smtp_discard_ehlo_keywords or only for that destination using
smtp_discard_ehlo_keyword_address_maps
http://www.postfix.org/postconf.5.html#smtp_discard_ehlo_keywords

The above is really just a guess (although a pretty good one).
  If it doesn't help or you want to definitely diagnose the
problem you'll need to post a packet capture to the list
covering a time period when the error occurs.
http://www.postfix.org/DEBUG_README.html#sniffer

   -- Noel Jones