virtual_alias_maps works with hash but not LDAP (Postfix 2.5.1)

Hi, I am trying to build a scalable Postfix cluster (Postfix 2.5.1) serving 1000 - 30,000 users with LDAP. The idea is to store the account information inside LDAP and build Postfix servers, such that each server serves its own users, e.g. user1 on server1, user2 on server2 . Virtual

Re: Disabling SSLv2 on Postfox 2.5.1

2009/7/24 Jake Vickers j...@v2gnu.com: I ma having a spot of trouble disabling SSLv2 on a Postfix 2.5.1 installation (from Fedora 9 repo). Here is my postconf: $ postconf -n snip smtpd_tls_mandatory_protocols = !SSLv2 As documented, this shouldn't be necessary:

Re: self signed ssl certs

On Jul 22, 2009, at 16:51, Benny Pedersen m...@junc.org wrote: yes this is clear to me its is so, but i dont know why self signed ssl is being used so much when there is plenty of good trusted signers :/ Because a selfsigned cert is good enough and FREE.

Re: sieve instead procmail?

On Donnerstag 23 Juli 2009 Benny Pedersen wrote: sieve is cool yes, but deliver to a mailfolder dont need sieve if you add + addressing Yes, Benny, but 1) I need sieve to *decide* where the mail should be dropped. I receive mail to x...@y.z, which should go to folder AAA, so I'd need sieve to

Re: sieve instead procmail?

On Donnerstag 23 Juli 2009 Mikael Bak wrote: Postfix sends the email to amavisd-new for processing, and after that the email are pushed back to postfix for delivery. Your deliver program will have to be able to push back the email into postfix exactly as amavisd-new does. I think you have to

Re: Disabling SSLv2 on Postfox 2.5.1

Barney Desmond wrote: 2009/7/24 Jake Vickers j...@v2gnu.com: I ma having a spot of trouble disabling SSLv2 on a Postfix 2.5.1 installation (from Fedora 9 repo). Here is my postconf: $ postconf -n snip smtpd_tls_mandatory_protocols = !SSLv2 As documented, this

Re: Domain Key Issues

This is a Domain Keys issue. See the -i option to dk-filter to add which IPs should be signed. And note that Domain Keys is less used these days. Consider dropping it and using DKIM instead. Thanks for the suggestion. But it is Still Not Working. I tried with the -i filename option

Re: Disabling SSLv2 on Postfox 2.5.1

Jake Vickers wrote: Barney Desmond wrote: 2009/7/24 Jake Vickers j...@v2gnu.com: I ma having a spot of trouble disabling SSLv2 on a Postfix 2.5.1 installation (from Fedora 9 repo). Here is my postconf: $ postconf -n snip smtpd_tls_mandatory_protocols = !SSLv2 As

Re: Can't send mail using SSL -- Can send with TSL

S. Berch wrote: smtps inetn - - -- smtpd Note that this is in chroot mode. If the rest of your master.cf is not, it should be disabled. Other than that, good job.

Re: mydomain alias questions

Rodman Frowert wrote: I am wanting to accept mail for mydomain but I have users that don't need system (unix) accounts and I really don't want to create them just for their mail. Is there an easy way to lookup these users outside the local table? Also, what happens to my system users if

transition to Exchange mailstore from Cyrus

We currently have a postfix MX front-end that uses MailScanner, clamav, and spamassassin to preprocess incoming email. We use LDAP lookups to determine valid recipients. Email that makes it through all of that gets moved to a Cyrus imap mailstore using LMTP (mailbox_transport =

Re: sieve instead procmail?

Michael Monnerie wrote, at 07/23/2009 10:33 AM: I just need a sieve that can call an external program to deliver mails. Is that really not existing? Sieve is deliberately crippled in this way: http://sieve.info/ One of its design goals was to reduce the chance of users performing

Re: Domain Key Issues

Thanks fakessh, Dkimproxy did the Magic! works gr8.. for both - Domain Keys DKIM. Thanks Regards, Zakir H. Shaikh From: fakessh fake...@fakessh.eu To: Zakir Shaikh searchza...@yahoo.co.in Cc: postfix mailing list postfix-users@postfix.org;

Re: transition to Exchange mailstore from Cyrus

On Jul 24, 2009, at 9:45 AM, Jay Kusler kus...@nscl.msu.edu wrote: We currently have a postfix MX front-end that uses MailScanner, clamav, and spamassassin to preprocess incoming email. We use LDAP lookups to determine valid recipients. Email that makes it through all of that gets moved

Re: Domain Key Issues

i use dkimproxy 1.1 , I dont use the beta release on my box On Fri, 24 Jul 2009 19:36:28 +0530 (IST), Zakir Shaikh searchza...@yahoo.co.in wrote: Thanks fakessh, Dkimproxy did the Magic! works gr8.. for both - Domain Keys DKIM. Thanks Regards, Zakir H. Shaikh

Re: Disabling SSLv2 on Postfox 2.5.1

Jake Vickers wrote: I also tried these settings (smtpd_tls_mandatory_protocols = !SSLv2) on a Debian build (running 2.3.8) with a self-signed cert and am still getting a SSLv2 connection. I'm sure I'm missing something glaringly obvious... smtpd_tls_mandatory_protocols only takes effect

Re: mydomain alias questions

Brian, Unless I am just not seeing, it, that document describes ONLY virtual domains. I want to be able to receieve mail for clients that are in mydomain, yet they are not system user accounts. For example: If, in main.cf, my domain is listed as: mydomain = xyz.com And I want to get mail

Re: Disabling SSLv2 on Postfox 2.5.1

Noel Jones wrote: Jake Vickers wrote: I also tried these settings (smtpd_tls_mandatory_protocols = !SSLv2) on a Debian build (running 2.3.8) with a self-signed cert and am still getting a SSLv2 connection. I'm sure I'm missing something glaringly obvious... smtpd_tls_mandatory_protocols

transport maps using from address field filtering

Hi, I must have been searching at the wrong place or using the wrong keywords as I have been trying to find how to correctly transport to a particular smtp relay or have postfix do a MX query based on the from address field. I did look at the postfix doc, in se's and the postfix-users archives

Re: mydomain and alias questions

Noel, I understand that anything for mydomain is looked up in /etc/passwd which is a type of local recipitant table. But what if I want to feed that lookup system another file in addition to the /etc/passwd file? I was looking at the local_recipitant_maps parameter but haven't quite figured

Re: transport maps using from address field filtering

On Fri, Jul 24, 2009 at 11:50:19AM -0400, Etienne Simard wrote: Hi, I must have been searching at the wrong place or using the wrong keywords as I have been trying to find how to correctly transport to a particular smtp relay or have postfix do a MX query based on the from address field. I

Re: mydomain alias questions

Rodman Frowert wrote: Brian, Unless I am just not seeing, it, that document describes ONLY virtual domains. I want to be able to receieve mail for clients that are in mydomain, yet they are not system user accounts. For example: If, in main.cf, my domain is listed as: mydomain = xyz.com

Re: mydomain alias questions

Ahhh, now that makes more sense. I'll check it out. Thanks Brian! Rodman - Original Message - From: Brian Evans - Postfix List grkni...@scent-team.com To: Postfix users postfix-users@postfix.org Sent: Friday, July 24, 2009 11:06 AM Subject: Re: mydomain alias questions Rodman

Re: transport maps using from address field filtering

Kenneth Marshall wrote: On Fri, Jul 24, 2009 at 11:50:19AM -0400, Etienne Simard wrote: Hi, I must have been searching at the wrong place or using the wrong keywords as I have been trying to find how to correctly transport to a particular smtp relay or have postfix do a MX query based on the

Re: mydomain alias questions

Rodman Frowert wrote: Ahhh, now that makes more sense. I'll check it out. Thanks Brian! In addition, the local(8) delivery agent drops privileges to that of the UNIX user in question. You can/will hit errors if they do not exist. The virtual(8) delivery agent can be statically assigned a

Re: transport maps using from address field filtering

Etienne Simard: Hi, I must have been searching at the wrong place or using the wrong keywords as I have been trying to find how to correctly transport to a particular smtp relay or have postfix do a MX query based on the from address field. I did look at the postfix doc, in se's and the

RE: transport maps using from address field filtering

Thanks for the hint Noel. The problem I found with sender_dependent_relayhost_maps is that This information is overruled with relay_transport, default_transport and with the transport(5) table. so if you already have a transport map for that particular domain, it won't work. I will

Re: Many SQL Lookups on outbounding mails

Clunk == Clunk Werclick clunk.wercl...@wibblywobblyteapot.co.uk writes: Clunk I think perhaps 4-12 queries per message is not optimal? Use proxymap(8) to reduce the number of queries made to the backend database. It is just as fast in my experience as a hash table. Basically, everywhere you

Re: which address is which?

Ralf Hildebrandt a écrit : * Andrew Thompson andre...@aktzero.com: I'm a little confused by this entry in my log: Received: from adsl-dynamic-pool-xxx.fpt.vn (unknown [118.71.113.83]) by mx.myserver.com (Postfix) with ESMTP id DAB68800D3 for __use...@aktzero.com; Thu, 23 Jul 2009