Re: Limiting .forward file processing

2010-06-23 Thread Mariusz Kiełpiński
Victor Duchovni wrote: You don't postmap regexp tables. More importantly you are aliasing this address local-part in all remote domains to be local. That's wrong. You must list the local domains one by one in the transport table u...@a.example.com local_no_forward

Re: Spam filtering

2010-06-23 Thread Charles Marcus
On 2010-06-23 12:34 AM, Stan Hoeppner wrote: smtpd_recipient_restrictions = permit_mynetworks reject_unauth_destination permit_sasl_authenticated Under most circumstances, reject_unauth_destination should go *after* permit_sasl_authenticated, or your sasl authenticated

Re: Limiting .forward file processing

2010-06-23 Thread Victor Duchovni
On Wed, Jun 23, 2010 at 10:39:02AM +0200, Mariusz Kie?pi?ski wrote: That the real problem. I that case what option can be used to stop looking into these files. http://www.postfix.org/local.8.html -- Viktor.

Re: customizing received: headers

2010-06-23 Thread Wietse Venema
Keld Simonsen: You configre the program that invokes the Postfix sendmail command, so that it invokes the command like so: sendmail -XV -f owner-listname other-arguments... With Majordomo the sendmail command line is in a config file, buried in Perl syntax. Other list managers

Re: Spam filtering

2010-06-23 Thread Steffan A. Cline
Stan, Thanks for the quick reply. All I can say is WOW. I did poke around on this CentOS install and am not seeing a config file like you have but perhaps this is it: [r...@hosting1 ~]# find / -name postgrey /usr/sbin/postgrey /etc/rc.d/init.d/postgrey /var/spool/postfix/postgrey

Re: Spam filtering

2010-06-23 Thread Steffan A. Cline
Stan, Ok.. I did find where CentOS would store the config file. It appears that it puts it in /etc/sysconfig/postgrey I should have read the init script a little closer. So, I copied yours and pasted it into that file and should be ready there but my question still stands about whether or not a

Re: fail2ban for spamtraps

2010-06-23 Thread Phil Howard
On Tue, Jun 22, 2010 at 16:46, Michael Orlitzky mich...@orlitzky.com wrote: A word of caution: don't assume that everyone browses the web using a graphical web browser. People still browse from the command line, and more importantly, screen readers for the disabled. If you're going to hide an

Re: Spam filtering

2010-06-23 Thread Steve Linford
On 23 Jun 2010, at 06:34, Stan Hoeppner wrote: DKIM checks are pretty much useless for killing spam Currently true, but hopefully soon to change… Spamhaus is releasing two new DNSWLs in about 4 weeks time, one of which specifically validates DKIM domains against a list of verified known good

Re: fail2ban for spamtraps

2010-06-23 Thread Tom Hendrikx
On 23/06/10 16:28, Phil Howard wrote: On Tue, Jun 22, 2010 at 16:46, Michael Orlitzky mich...@orlitzky.com wrote: A word of caution: don't assume that everyone browses the web using a graphical web browser. People still browse from the command line, and more importantly, screen readers for

Re: fail2ban for spamtraps

2010-06-23 Thread Jerry
On Wed, 23 Jun 2010 17:21:21 +0200 Tom Hendrikx t...@whyscream.net articulated: Keep in mind: automated harvesters can impersonate regular people (or browsers), but they cannot think like one. Which, in some instances, might be considered a good thing. -- Jerry ✌ postfix-u...@seibercom.net

A list in a file

2010-06-23 Thread Phil Howard
I think maybe I'm missing something in the documentation, as I was sure Postfix could do this. What I want to do is take a list of things, such as the list of domains for virtual_mailbox_domains, right out of a file. This isn't a map. But do I still need to do a map, anyway?

Re: A list in a file

2010-06-23 Thread Noel Jones
On 6/23/2010 10:52 AM, Phil Howard wrote: I think maybe I'm missing something in the documentation, as I was sure Postfix could do this. What I want to do is take a list of things, such as the list of domains for virtual_mailbox_domains, right out of a file. This isn't a map. But do I still

Re: A list in a file

2010-06-23 Thread /dev/rob0
On Wed, Jun 23, 2010 at 11:52:31AM -0400, Phil Howard wrote: I think maybe I'm missing something in the documentation, as I was sure Postfix could do this. You are, it can. What I want to do is take a list of things, such as the list of domains for virtual_mailbox_domains, right out of a

Re: A list in a file

2010-06-23 Thread Phil Howard
On Wed, Jun 23, 2010 at 12:01, Noel Jones njo...@megan.vbhcs.org wrote: The documentation shows what syntax is supported for each parameter.  Some -- but not all -- parameters support a plain file list. You can start here: http://www.postfix.org/postconf.5.html#virtual_mailbox_domains Been

Re: Outbound mail, relaying, Hotmail

2010-06-23 Thread Jason Bailey, Sun Advocate Webmaster
On 06/22/2010 10:56 PM, Stan Hoeppner wrote: Jason Bailey, Sun Advocate Webmaster put forth on 6/22/2010 10:32 PM: (Note: I do have to disclose one piece of information. Recently our server was automatically blacklisted by our ISP for spam that was being relayed through our system from a

Re: A list in a file

2010-06-23 Thread Noel Jones
On 6/23/2010 11:06 AM, Phil Howard wrote: On Wed, Jun 23, 2010 at 12:01, Noel Jonesnjo...@megan.vbhcs.org wrote: The documentation shows what syntax is supported for each parameter. Some -- but not all -- parameters support a plain file list. You can start here:

Re: A list in a file

2010-06-23 Thread Victor Duchovni
On Wed, Jun 23, 2010 at 11:20:47AM -0500, Noel Jones wrote: From the mydestination docs: a type:table lookup table is matched when a name matches a lookup key (the lookup result is ignored). All map files require a key result format. In the case of a map file used as a list, such as

Re: A list in a file

2010-06-23 Thread Phil Howard
On Wed, Jun 23, 2010 at 12:20, Noel Jones njo...@megan.vbhcs.org wrote: From the mydestination docs: a type:table lookup table is matched when a name matches a lookup key (the lookup result is ignored). All map files require a key  result format.  In the case of a map file used as a list,

Re: A list in a file

2010-06-23 Thread Noel Jones
On 6/23/2010 11:30 AM, Phil Howard wrote: On Wed, Jun 23, 2010 at 12:20, Noel Jonesnjo...@megan.vbhcs.org wrote: From the mydestination docs: a type:table lookup table is matched when a name matches a lookup key (the lookup result is ignored). All map files require a key result format. In

Re: A list in a file

2010-06-23 Thread Phil Howard
How would I do this for smtpd_recipient_restrictions? That question makes no sense.  Rephrase. I was looking for a general solution. I picked an example. But I apparently picked a bad example because the solution seems to be example specific. I guess I better not pick examples, anymore.

Re: A list in a file

2010-06-23 Thread Noel Jones
On 6/23/2010 11:40 AM, Phil Howard wrote: How would I do this for smtpd_recipient_restrictions? That question makes no sense. Rephrase. I was looking for a general solution. I picked an example. But I apparently picked a bad example because the solution seems to be example specific. I

Re: A list in a file

2010-06-23 Thread Victor Duchovni
On Wed, Jun 23, 2010 at 12:40:30PM -0400, Phil Howard wrote: How would I do this for smtpd_recipient_restrictions? That question makes no sense. ?Rephrase. I was looking for a general solution. I picked an example. But I apparently picked a bad example because the solution seems to

Re: A list in a file

2010-06-23 Thread Phil Howard
On Wed, Jun 23, 2010 at 12:44, Noel Jones njo...@megan.vbhcs.org wrote: There is no include syntax for main.cf itself. You can use a Makefile to build a main.cf from proto files, or use postconf -e ...  for program-controlled editing of main.cf. You'd still have to make it reload for

Re: A list in a file

2010-06-23 Thread Phil Howard
On Wed, Jun 23, 2010 at 12:46, Victor Duchovni victor.ducho...@morganstanley.com wrote: Most Postfix services (i.e. delivery agents and inet services) restart automatically after processing a ~100 requests, and reloads are not generally needed for parameters that touch these services. Hmmm.

smtpd_recipient_restrictions = reject_unlisted_recipient vs. smtpd_reject_unlisted_recipient = yes

2010-06-23 Thread Phil Howard
The default for smtpd_reject_unlisted_recipient is yes. How does that affect using reject_unlisted_recipient in smtpd_recipient_restrictions? Does it mean it is effectively included whether you include it or not? I presume I still need to list other things like smtpd_recipient_restrictions =

Re: A list in a file

2010-06-23 Thread Ralf Hildebrandt
* Phil Howard ttip...@gmail.com: Been trying to figure that out. I'm wanting to use CDB. But it wasn'tfile.out taking it. I guess what I need to do is give each domain a dummy value. awk '{printf(%s OK\n,$1)}' file file.out postmap file.out -- Ralf Hildebrandt Geschäftsbereich IT |

Re: smtpd_recipient_restrictions = reject_unlisted_recipient vs. smtpd_reject_unlisted_recipient = yes

2010-06-23 Thread Jerry
On Wed, 23 Jun 2010 13:15:02 -0400 Phil Howard ttip...@gmail.com articulated: The default for smtpd_reject_unlisted_recipient is yes. How does that affect using reject_unlisted_recipient in smtpd_recipient_restrictions? Does it mean it is effectively included whether you include it or not?

Re: smtpd_recipient_restrictions = reject_unlisted_recipient vs. smtpd_reject_unlisted_recipient = yes

2010-06-23 Thread Noel Jones
On 6/23/2010 12:15 PM, Phil Howard wrote: The default for smtpd_reject_unlisted_recipient is yes. How does that affect using reject_unlisted_recipient in smtpd_recipient_restrictions? It allows you to control *when* the check is performed. Does it mean it is effectively included whether

Re: smtpd_recipient_restrictions = reject_unlisted_recipient vs. smtpd_reject_unlisted_recipient = yes

2010-06-23 Thread Phil Howard
On Wed, Jun 23, 2010 at 13:55, Jerry postfix-u...@seibercom.net wrote: I use Dovecot for virtual transport also. I don't remember exactly why; however, I had to place this in the main.cf file:        dovecot_destination_recipient_limit = 1 By the way, your smtpd_banner may make you feel

Re: smtpd_recipient_restrictions = reject_unlisted_recipient vs. smtpd_reject_unlisted_recipient = yes

2010-06-23 Thread Noel Jones
On 6/23/2010 1:12 PM, Phil Howard wrote: On Wed, Jun 23, 2010 at 13:55, Jerrypostfix-u...@seibercom.net wrote: I use Dovecot for virtual transport also. I don't remember exactly why; however, I had to place this in the main.cf file: dovecot_destination_recipient_limit = 1 Does

Re: Disabling checking for my own hostname in smtp connections to transports

2010-06-23 Thread Oguz Yilmaz
For the case, mail server is not necessarily a Postfix. Yes it is a workaround to find different myhostname variable setting then hostname of the real mail server. internet - postfix relay -mail server mail.mydomain.com

Re: fail2ban for spamtraps

2010-06-23 Thread Michael Orlitzky
On 06/23/2010 11:21 AM, Tom Hendrikx wrote: Actually, when using a visual browser, people still can use their own colouring (again, the visually impaired). What you are suggesting is generating browser-specific output. This practise has been tried, tested, and discarded in webdesign country for

Re: smtpd_recipient_restrictions = reject_unlisted_recipient vs. smtpd_reject_unlisted_recipient = yes

2010-06-23 Thread Phil Howard
On Wed, Jun 23, 2010 at 14:12, Noel Jones njo...@megan.vbhcs.org wrote: It's about controlling when the check takes place. Some people like to reject unlisted recipients before other (maybe more expensive) checks.  Some people like to reject connections for RBL or blacklist before checking

virtual_mailbox_maps - just for virtual(8) ?

2010-06-23 Thread Phil Howard
Is virtual_mailbox_maps just for virtual(8) (the postfix virtual delivery agent ... which I am not using) ... or is it also used for smtpd_reject_unlisted_recipient even when virtual_transport = something else like dovecot? Can it just have an OK value to mean yeah, this is a real recipient here,

Re: smtpd_recipient_restrictions = reject_unlisted_recipient vs. smtpd_reject_unlisted_recipient = yes

2010-06-23 Thread Noel Jones
On 6/23/2010 2:12 PM, Phil Howard wrote: On Wed, Jun 23, 2010 at 14:12, Noel Jonesnjo...@megan.vbhcs.org wrote: It's about controlling when the check takes place. Some people like to reject unlisted recipients before other (maybe more expensive) checks. Some people like to reject connections

RE: (solved) Installing smtp auth did not help my spam issue Below is example

2010-06-23 Thread Josh Cason
First of all thank you so much for helping me. I found it was a hacked user account in the e-mail system. Not only did they use his e-mail account they used his webmail too. Once I changed his password. As of yet they have gave up trying. I'm amazed I did not catch this sooner. I did catch

Postfix helo.regexp file for stopping same to/from address

2010-06-23 Thread Josh Cason
A while back I setup a helo.regexp file. I have changed it around a bit. I'm trying to stop e-mail that is sent to/from the same e-mail address but not my system. The idea was if they are sending mail to themselves from my ip address. It would be blocked. Example from my test server:

Re: virtual_mailbox_maps - just for virtual(8) ?

2010-06-23 Thread Victor Duchovni
On Wed, Jun 23, 2010 at 03:39:58PM -0400, Phil Howard wrote: Is virtual_mailbox_maps just for virtual(8) (the postfix virtual delivery agent ... which I am not using) ... or is it also used for smtpd_reject_unlisted_recipient even when virtual_transport = something else like dovecot? Can it

postmap -q and ldap

2010-06-23 Thread Quanah Gibson-Mount
I'm trying to test a new .cf file that uses ldap with postmap, and I noticed that it fails to actually honor the fields set in the file. I'm going off of the documentation found at http://www.postfix.org/LDAP_README.html#example_group. [zim...@freelancer conf]$ postmap -q

Re: postmap -q and ldap

2010-06-23 Thread Quanah Gibson-Mount
--On Wednesday, June 23, 2010 5:15 PM -0400 Victor Duchovni victor.ducho...@morganstanley.com wrote: File names must start with / or .. Thanks. It looks like the online documentation needs updating to match this. postmap -q global_us...@zimbra.com ldap:/opt/zimbra/conf/ldap-groups.cf

Re: postmap -q and ldap

2010-06-23 Thread Victor Duchovni
On Wed, Jun 23, 2010 at 02:20:34PM -0700, Quanah Gibson-Mount wrote: --On Wednesday, June 23, 2010 5:15 PM -0400 Victor Duchovni victor.ducho...@morganstanley.com wrote: File names must start with / or .. Thanks. It looks like the online documentation needs updating to match this.

Re: virtual_mailbox_maps - just for virtual(8) ?

2010-06-23 Thread Phil Howard
On Wed, Jun 23, 2010 at 17:06, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Wed, Jun 23, 2010 at 03:39:58PM -0400, Phil Howard wrote: Is virtual_mailbox_maps just for virtual(8) (the postfix virtual delivery agent ... which I am not using) ... or is it also used for

Re: customizing received: headers

2010-06-23 Thread Keld Simonsen
On Wed, Jun 23, 2010 at 09:24:34AM -0400, Wietse Venema wrote: I'm happy to naswer questions about Postfix in the limited time that I have. If you need custom work on other applications you learn to do it yourself, or you find someone else. That is certainly an understandable position, and I

Re: Postfix helo.regexp file for stopping same to/from address

2010-06-23 Thread mouss
Josh Cason a écrit : A while back I setup a helo.regexp file. I have changed it around a bit. I'm trying to stop e-mail that is sent to/from the same e-mail address but not my system. The idea was if they are sending mail to themselves from my ip address. It would be blocked. Example from

Re: fail2ban for spamtraps

2010-06-23 Thread mouss
Tom Hendrikx a écrit : On 23/06/10 16:28, Phil Howard wrote: On Tue, Jun 22, 2010 at 16:46, Michael Orlitzky mich...@orlitzky.com wrote: A word of caution: don't assume that everyone browses the web using a graphical web browser. People still browse from the command line, and more

Stop spammers using outdated MX records.

2010-06-23 Thread Hal Douglas
Hi all, I've encountered a problem that I'd really appreciate some help with. We've been running postfix (v2.4.5) for a while in our DMZ, it handles email for three domains, one is delivered locally to the postfix machine, the other two are forwarded inside the firewall to one of two

Re: Stop spammers using outdated MX records.

2010-06-23 Thread Sahil Tandon
On Thu, 2010-06-24 at 12:47:50 +1000, Hal Douglas wrote: Domain2.edu smtp:[10.2.3.5] Domain2 has recently been signed up for a cloud spam scanning service, so our postfix host is no longer MX for this domain, the spam scanning service is MX and forwards mail to out

Re: Postfix helo.regexp file for stopping same to/from address

2010-06-23 Thread Victor Duchovni
On Thu, Jun 24, 2010 at 12:20:23AM +0200, mouss wrote: This mail is coming from postini. if you use postini, there's nothing you can do with the envelope (and even if you do content filtering, you shouldn't reject mail. it's too late). Postini implement an SMTP proxy, not a store-and-forward