Re: spammers masquerading as me

2009-06-25 Thread Norbert P. Copones
On 1681 0, Stuart Matthews s...@eff.org wrote: Hi everyone, I am the systems administrator for the Electronic Frontier Foundation. I have been having a problem with getting spam that has a from of, for example, t...@eff.org (which is a valid email address). I would like my mail server to

Re: best practices for workstations that occasionally disconnect

2009-06-25 Thread William Yardley
On Wed, Jun 24, 2009 at 11:39:15PM -0700, William Yardley wrote: On Thu, Jun 25, 2009 at 12:25:41AM -0500, Noel Jones wrote: Maybe setting $bounce_queue_lifetime to 0 but leaving $maximal_queue_lifetime set to 5d+ would do the trick? [The main issue with this approach is that it will get rid

matching IP ranges in headers

2009-06-25 Thread Louis-David Mitterrand
Hi, A lot of spam comes from certain ip ranges (e.g. west africa) through relays (large ISPs) that would be too onerous to block. To filter these I am presently matching: /^((Received|X-Originating-IP):.+\b(124\.120\.1\.(IP RANGE IN REGEX)\b/ in pcre:/etc/postfix/header_access. But

Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread Ville Walveranta
Here's an idea.. maybe it's useful for someone, so I post it here. I'm setting up a local mail server to cache remote service's mail for faster access on the LAN. The remote server has an up-to-date SPF record that is updated whenever the sending IP ranges change. I want to limit unauthenticated

Re: customizing postfix logs with a mailing id

2009-06-25 Thread Stéphane MERLE
Magnus Bäck a écrit : On Mon, June 15, 2009 12:01 pm, Stéphane MERLE said: Can I, at least, add the from in the logs ? Jun 15 11:59:01 smtp postfix/smtp[3061]: 683EB37AECA3: to=kdkdlem...@live.fr, relay=mx1.hotmail.com[65.55.92.136]:25, conn_use=91, delay=401662,

Re: Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread Barney Desmond
The following is concept; I don't have the script yet ready, but it'll be easy to write with your favorite scripting language: --- 1. get your remote sender's current SPF record: dig yourremotesender.com txt   tempfile 2. parse the result in tempfile with regex:

Re: Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread Ville Walveranta
Thanks, I'll look into that; it'll simplify it a bit. Anything that is parsed from text output is obviously not super solid but for this application it'll suffice. The MX for the business domains in question is an external service that takes care of spam filtering, address consolidation, etc. The

Re: matching IP ranges in headers

2009-06-25 Thread Barney Desmond
2009/6/25 Louis-David Mitterrand vindex+lists-postfix-us...@apartia.org:        /^((Received|X-Originating-IP):.+\b(124\.120\.1\.(IP RANGE IN REGEX)\b/ in pcre:/etc/postfix/header_access. But converting IP ranges to regex'es is time consuming and error prone. Is there a way to use a cidr

Re: matching IP ranges in headers

2009-06-25 Thread Henrik K
On Thu, Jun 25, 2009 at 10:14:29PM +1000, Barney Desmond wrote: 2009/6/25 Louis-David Mitterrand vindex+lists-postfix-us...@apartia.org:        /^((Received|X-Originating-IP):.+\b(124\.120\.1\.(IP RANGE IN REGEX)\b/ in pcre:/etc/postfix/header_access. But converting IP ranges to regex'es

slow link

2009-06-25 Thread Ing. Davy Leon
Hello guys Before all, please forget my bad English. I'm newbie in postfix. I want to ask you a question. Let me explain the situation. I have a dialup link. When the link goes up automatically executes a postqueue -f command and mail is delivered. The problem is link speed, I'm getting

adding headers for bcc recipients

2009-06-25 Thread Bernardo Pons
Hi all, I'm looking for a way to add a header to the messages before they are delivered to a multidrop mailbox with virtual aliases. After searching the postfix-users list archives I've found that this subject has been already discused here and I've found a message from Zoltan Balogh that seemed

Re: slow link

2009-06-25 Thread Wietse Venema
Ing. Davy Leon: Hello guys Before all, please forget my bad English. I'm newbie in postfix. I want to ask you a question. Let me explain the situation. I have a dialup link. When the link goes up automatically executes a postqueue -f command and mail is delivered. The problem is link

Re: slow link

2009-06-25 Thread Ing. Davy Leon
Thanks Wietse I'm checking the links right now. Thanks my friend David - Original Message - From: Wietse Venema wie...@porcupine.org To: Postfix users postfix-users@postfix.org Sent: Thursday, June 25, 2009 8:00 AM Subject: Re: slow link Ing. Davy Leon: Hello guys Before all,

customize bounce behavior

2009-06-25 Thread George Forman
Hi, I apologize if this has already been covered but I can't seem to find any information. I need to customize the bounce behavior for the following: 1. If a bounce message is created because it can't deliver to a specified list of email addresses we don't want a bounce returned. 2. If a

Header Time

2009-06-25 Thread Linux Addict
Hi, I am sure someone can clarify it for me. A device uses postfix relay to send mails out. When I receive them in outlook, they are 4 hrs behind. When I looked at the header, postfix seems to doing -400 (EDT). by postfixmta.domain.net (Postfix) with SMTP id 62B1257AB5 for myu...@mydomain.net;

Re: best practices for workstations that occasionally disconnect

2009-06-25 Thread Noel Jones
William Yardley wrote: I was thinking that setting $defer_transports might avoid $maximal_queue_lifetime, but from my tests, looks like that's not the case. What about holding the messages? Same thing? Messages on hold never expire (postfix ignores messages in the hold queue). When they are

Re: Header Time

2009-06-25 Thread ghe
On 6/25/09 9:50 AM, Linux Addict wrote: A device uses postfix relay to send mails out. When I receive them in outlook, they are 4 hrs behind. When I looked at the header, postfix seems to doing -400 (EDT). Hmmm. 4 hours. Are you using greylisting? -- Glenn English g...@slsware.com

Re: Incoming smtp: 554 Access Denied

2009-06-25 Thread Jesse Kretschmer
Noel Jones wrote: If not, they *should not* be connecting to your smtps port; their mail server is misconfigured and it's not your problem. This was exactly the problem. I did some troubleshooting with the mail admin of the sending server. One of their servers was attempting to connect on

Re: Header Time

2009-06-25 Thread Linux Addict
On Thu, Jun 25, 2009 at 1:41 PM, ghe g...@slsware.com wrote: On 6/25/09 9:50 AM, Linux Addict wrote: A device uses postfix relay to send mails out. When I receive them in outlook, they are 4 hrs behind. When I looked at the header, postfix seems to doing -400 (EDT). Hmmm. 4 hours. Are

Re: Header Time

2009-06-25 Thread Ralf Hildebrandt
* Linux Addict linuxaddi...@gmail.com: We are, but these aren't even going out. There is a transport map which directs it to internal exchange servers. I am curious where its getting the -400(EDIT) from. Please show the exact header... and 2 lines before and after. -- Ralf Hildebrandt

Re: Header Time

2009-06-25 Thread ghe
On 6/25/09 12:06 PM, Linux Addict wrote: I am curious where its getting the -400(EDIT) from. It's EDT, not EDIT. It means that the local time (Eastern Daylight Time) is 4 hours less than GMT... -- Glenn English g...@slsware.com

Re: Header Time

2009-06-25 Thread Sahil Tandon
On Jun 25, 2009, at 2:06 PM, Linux Addict linuxaddi...@gmail.com wrote: On Thu, Jun 25, 2009 at 1:41 PM, ghe g...@slsware.com wrote: On 6/25/09 9:50 AM, Linux Addict wrote: A device uses postfix relay to send mails out. When I receive them in outlook, they are 4 hrs behind. When I looked at

Re: spammers masquerading as me

2009-06-25 Thread Stuart Matthews
Hi all, That seems to have done it... banging my head against the problem all because of a typo. Thanks, Stu J.P. Trosclair wrote: Stuart Matthews wrote: I have already tried editing /usr/local/etc/postfix/access, adding: eff.orgREJECTyou can't send mail as me! And of course I

Re: Header Time

2009-06-25 Thread Linux Addict
On Thu, Jun 25, 2009 at 2:22 PM, Sahil Tandon sa...@tandon.net wrote: On Jun 25, 2009, at 2:06 PM, Linux Addict linuxaddi...@gmail.com wrote: On Thu, Jun 25, 2009 at 1:41 PM, ghe g...@slsware.comg...@slsware.comwrote: On 6/25/09 9:50 AM, Linux Addict wrote: A device uses postfix relay

Re: Header Time

2009-06-25 Thread ghe
I can't say much because I know next to nothing about Outlook and friends, but MS keeps time in local time (I hear), and *nix goes on GMT, and there's a 4 hour time correction for your local time, and you're seeing a 4 hour time change in your headers in mail being passed between *nix and MS.

Re: Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread Ville Walveranta
Here's the completed script (the IP/CIDR extract worked perfectly -- thanks Barney!): --- #!/bin/sh ORIGINAL=/usr/local/etc/postfix/tables/client_access_maps.cidr NEW=/tmp/postfix_clients.tmp dig +short senderdomain.net TXT | grep 'v=spf1' | egrep -o 'ip4:[0-9./]+' | sed 's/^ip4://' | sed 's/$/

Re: Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread J.P. Trosclair
Ville Walveranta wrote: It works except that the Postfix refresh message (postfix/postfix-script: refreshing the Postfix mail system) is displayed despite of the attempt to redirect it to /dev/null? Any idea how I could hide it? It's probably writing to stderr, postfix reload 2/dev/null #

Re: Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread Roderick A. Anderson
Ville Walveranta wrote: Here's the completed script (the IP/CIDR extract worked perfectly -- thanks Barney!): --- #!/bin/sh ORIGINAL=/usr/local/etc/postfix/tables/client_access_maps.cidr NEW=/tmp/postfix_clients.tmp dig +short senderdomain.net TXT | grep 'v=spf1' | egrep -o 'ip4:[0-9./]+' |

Re: Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread Gerardo Herzig
Ville Walveranta wrote: Here's the completed script (the IP/CIDR extract worked perfectly -- thanks Barney!): --- #!/bin/sh ORIGINAL=/usr/local/etc/postfix/tables/client_access_maps.cidr NEW=/tmp/postfix_clients.tmp dig +short senderdomain.net TXT | grep 'v=spf1' | egrep -o

Re: Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread Ville Walveranta
Perfect! Thanks all!!

Re: Header Time

2009-06-25 Thread Linux Addict
On Thu, Jun 25, 2009 at 4:17 PM, ghe g...@slsware.com wrote: I can't say much because I know next to nothing about Outlook and friends, but MS keeps time in local time (I hear), and *nix goes on GMT, and there's a 4 hour time correction for your local time, and you're seeing a 4 hour time

Re: Header Time

2009-06-25 Thread Noel Jones
Linux Addict wrote: On Thu, Jun 25, 2009 at 2:22 PM, Sahil Tandon sa...@tandon.net mailto:sa...@tandon.net wrote: On Jun 25, 2009, at 2:06 PM, Linux Addict linuxaddi...@gmail.com mailto:linuxaddi...@gmail.com wrote: On Thu, Jun 25, 2009 at 1:41 PM, ghe

Re: Header Time

2009-06-25 Thread Blake Hudson
Original Message Subject: Re: Header Time From: Linux Addict linuxaddi...@gmail.com I dont think this is something to do with outlook as I tested with yahoo and gmail as well. I see the same pattern. Looks to me message leaves postfix with updated time stamp. �Is there

Re: rejecting client=unknown[ip.ad.dr.ess]

2009-06-25 Thread mouss
LuKreme a écrit : On 22-Jun-2009, at 18:29, mouss wrote: Is there anyway to, if not outright reject anyone whose DNS shows up as unknown to at least tempfail them with a Ooops, your DNS is not resolving, try back later or something? if you insist, you could use one of

Re: customize bounce behavior

2009-06-25 Thread mouss
George Forman a écrit : Hi, I apologize if this has already been covered but I can't seem to find any information. I need to customize the bounce behavior for the following: 1. If a bounce message is created because it can't deliver to a specified list of email addresses we don't want

Re: adding headers for bcc recipients

2009-06-25 Thread mouss
Bernardo Pons a écrit : Hi all, I'm looking for a way to add a header to the messages before they are delivered to a multidrop mailbox with virtual aliases. After searching the postfix-users list archives I've found that this subject has been already discused here and I've found a

Re: Tip: Restricting mail reception using a remote service's SPF records

2009-06-25 Thread LuKreme
On 25-Jun-2009, at 14:33, Ville Walveranta wrote: It works except that the Postfix refresh message (postfix/postfix-script: refreshing the Postfix mail system) is displayed despite of the attempt to redirect it to /dev/null? Any idea how I could hide it? That refresh message is output on

Re: A question about the instance attribute in policy delegation

2009-06-25 Thread Sahil Tandon
On Thu, 25 Jun 2009, Rob Tanner wrote: I¹ve got a policy listener in place. It merely logs the request and returns an ³OK² and doesn¹t otherwise make any decisions. What I¹m noticing is many of the client requests do not even contain the instance attribute. My assumption from reading the

greylist and then still RBL?

2009-06-25 Thread LuKreme
I have the following in my main.cf: MAINCF #smtpd_reject_unlisted_sender = yes mime_header_checks = pcre:$config_directory/mime_headers.pcre smtpd_restriction_classes = check_greylist check_greylist = check_policy_service inet:127.0.0.1:10023 MAINCF (there are no leading spaces or stray ,'s, I

RE: customize bounce behavior

2009-06-25 Thread George Forman
Date: Thu, 25 Jun 2009 23:56:34 +0200 From: mo...@ml.netoyen.net To: postfix-users@postfix.org Subject: Re: customize bounce behavior George Forman a écrit : Hi, I apologize if this has already been covered but I can't seem to find any information. I need to customize the

Re: A question about the instance attribute in policy delegation

2009-06-25 Thread Victor Duchovni
On Thu, Jun 25, 2009 at 09:46:51PM -0400, Sahil Tandon wrote: On Thu, 25 Jun 2009, Rob Tanner wrote: I?ve got a policy listener in place. It merely logs the request and returns an ?OK? and doesn?t otherwise make any decisions. What I?m noticing is many of the client requests do not

Re: greylist and then still RBL?

2009-06-25 Thread Sahil Tandon
On Thu, 25 Jun 2009, LuKreme wrote: I have the following in my main.cf: MAINCF #smtpd_reject_unlisted_sender = yes mime_header_checks = pcre:$config_directory/mime_headers.pcre smtpd_restriction_classes = check_greylist check_greylist = check_policy_service inet:127.0.0.1:10023 MAINCF

Re: A question about the instance attribute in policy delegation

2009-06-25 Thread Sahil Tandon
On Thu, 25 Jun 2009, Victor Duchovni wrote: On Thu, Jun 25, 2009 at 09:46:51PM -0400, Sahil Tandon wrote: On Thu, 25 Jun 2009, Rob Tanner wrote: I?ve got a policy listener in place. It merely logs the request and returns an ?OK? and doesn?t otherwise make any decisions. What

Re: Header Time

2009-06-25 Thread Linux Addict
On Thu, Jun 25, 2009 at 5:11 PM, Blake Hudson bl...@ispn.net wrote: Original Message Subject: Re: Header Time From: Linux Addict linuxaddi...@gmail.com I dont think this is something to do with outlook as I tested with yahoo and gmail as well. I see the same pattern.

Re: A question about the instance attribute in policy delegation

2009-06-25 Thread Victor Duchovni
On Thu, Jun 25, 2009 at 10:36:09PM -0400, Sahil Tandon wrote: IIRC, the instance attribute identifies a mail transaction and is assigned before the queue-id. My bad reading of src/smtpd/smtpd_check.c, then. But does that mean an instance can exist *before* the first recipient is

Postfix Logfile

2009-06-25 Thread Schwalbe, Oliver
Hi there, i have a little problem to change time of logswitch for the postfix-logfile mail in /var/log/. the logswitch yet is every day at 11:00 am. The switch should take place at midnight. i can't find any parameter in main.cf or master.cf Kind regards Oliver