Re: Postscreen update

2010-09-14 Thread Frank Doege
On 09/13/2010 10:55 PM, Wietse Venema wrote: Postscreen is a single Postfix 2.8 daemon that keeps spambots away from Postfix SMTP server processes, so that more Postfix server resources remain available for handling mail. It will hopefully become part of the next stable Postfix release. After

Re: Postscreen update

2010-09-14 Thread Ralf Hildebrandt
* Matt Hayes domin...@slackadelic.com: Thanks for the update. I'm working on implementing this now, however, I'm a bit confused with the postscreen_dnsbl_reply_map option. Why? It's just for mapping RBL names. Unless you have a paid subscription with spamhaus.org, you don't need it. --

Re: Problem not receiving mail with mydestinations not including mydomain

2010-09-14 Thread Jasper Jongmans
On 2010-09-14 07:24, Richard Chapman wrote: Sep 13 23:18:48 C5 postfix/smtpd[15614]: connect from unknown[192.168.0.166] Sep 13 23:18:48 C5 postfix/smtpd[15614]: 2CA8A1D2145A: client=unknown[192.168.0.166], sasl_method=PLAIN, sasl_username=richard Sep 13 23:18:48 C5 postfix/cleanup[15617]:

custom reject messages

2010-09-14 Thread Frank Doege
Hi all, id like to modify the message postfix sends to the server when it rejects an email in one of the checks performed. For example, 450 Helo command rejected: Host not found; http://readhereforemore.info that administrators which have no clue about email systems have a bit more

Re: Postscreen update

2010-09-14 Thread Wietse Venema
Frank Doege: On 09/13/2010 10:55 PM, Wietse Venema wrote: Postscreen is a single Postfix 2.8 daemon that keeps spambots away from Postfix SMTP server processes, so that more Postfix server resources remain available for handling mail. It will hopefully become part of the next stable

MX question

2010-09-14 Thread CT
General postfix question regarding MX lookups.. Does Postfix do an MX lookup on inbound mail as part of spam prevention or some other check.. ? Thx Charles

Re: MX question

2010-09-14 Thread Ralf Hildebrandt
* CT gro...@obsd.us: General postfix question regarding MX lookups.. Does Postfix do an MX lookup on inbound mail as part of spam prevention or some other check.. ? How would that help? What exactly are you trying to achieve? -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk

Re: MX question

2010-09-14 Thread Simon Waters
On Tuesday 14 September 2010 13:51:12 CT wrote: Does Postfix do an MX lookup on inbound mail as part of spam prevention or some other check.. ? Mind has check_sender_mx_access so and logs appropriate messages if the MX results are unacceptable. What are you trying to achieve, as it seems

only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Eero Volotinen
How to configure postfix only allow tlsv1 connections (no plaintext allowed) from defined ip ranges? three hosts are needed to communicate smarthost with tlsv1 only? br, -- Eero

Re: MX question

2010-09-14 Thread CT
On 09/14/2010 08:02 AM, Simon Waters wrote: On Tuesday 14 September 2010 13:51:12 CT wrote: Does Postfix do an MX lookup on inbound mail as part of spam prevention or some other check.. ? Mind has check_sender_mx_access so and logs appropriate messages if the MX results are unacceptable.

Re: MX question

2010-09-14 Thread Ralf Hildebrandt
* CT gro...@obsd.us: It was a question that came up in a discussion.. I have had issues in the past when delivering email and I did not have PTR in place.. the email was rejected.. That's not an MX problem, but a missing PTR. Postfix can check for this using:

Re: MX question

2010-09-14 Thread CT
Ralf.. A MX lookup is performed to check if the sender domain exists; it can be activated using: reject_unknown_sender_domain is what I was looking for.. Thank you .. Charles On 09/14/2010 08:18 AM, Ralf Hildebrandt wrote: * CTgro...@obsd.us: It was a question that came up in a

Problems to understand reject_unlisted_recipients

2010-09-14 Thread Christian Rößner
Hi, this is my first post here on that list, so I hope my question(s) are welcome :) I use the current 20100913 snapshot postfix release on a developer server (testing MTA). Nearly all is working flawlessly, except one problem that I found in my daily logs (this is a test, I did) The address

force startssl on port 25

2010-09-14 Thread fakessh
hi guru of postfix hi mouss and wieste hi all the users of ths list my question is simply is there a way to force startssl on port 25 or it is not a good method many returns are welcome

Re: force startssl on port 25

2010-09-14 Thread Matt Hayes
On 9/14/2010 1:11 PM, fakessh wrote: hi guru of postfix hi mouss and wieste hi all the users of ths list my question is simply is there a way to force startssl on port 25 or it is not a good method many returns are welcome I don't recommend doing that as not all MTAs on the

Re: force startssl on port 25

2010-09-14 Thread fakessh
On Tue, 14 Sep 2010 13:17:56 -0400, Matt Hayes domin...@slackadelic.com wrote: On 9/14/2010 1:11 PM, fakessh wrote: hi guru of postfix hi mouss and wieste hi all the users of ths list my question is simply is there a way to force startssl on port 25 or it is not a good method many

Re: Seeking recommendation for before-queue content filter capable of removing headers

2010-09-14 Thread Ralph Seichter
On 13.09.10 16:15, Mark Martinec wrote: With the help of custom hooks this can be achieved by amavisd itself Thank you for the sample code and for your detailed explanations regarding the configuration options. The reason the DKIM document suggests not to sign Received header fields is for

Re: force startssl on port 25

2010-09-14 Thread Morten P.D. Stevens
-Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of fakessh Sent: Tuesday, September 14, 2010 7:11 PM To: Postfix users Subject: force startssl on port 25 hi guru of postfix hi mouss and wieste hi all the users of ths

Re: only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Jeroen Geilman
On 09/14/2010 03:06 PM, Eero Volotinen wrote: How to configure postfix only allow tlsv1 connections (no plaintext allowed) from defined ip ranges? three hosts are needed to communicate smarthost with tlsv1 only? If these hosts are using you as their smarthost, simply whitelist their IPs.

Re: custom reject messages

2010-09-14 Thread Jeroen Geilman
On 09/14/2010 12:13 PM, Frank Doege wrote: Hi all, id like to modify the message postfix sends to the server when it rejects an email in one of the checks performed. For example, 450 Helo command rejected: Host not found; http://readhereforemore.info Any check_*_access map can return an

Re: Problems to understand reject_unlisted_recipients

2010-09-14 Thread Jeroen Geilman
On 09/14/2010 04:42 PM, Christian Rößner wrote: Sep 11 10:34:36 mx0 postfix/lmtp[29594]: 40FC3520A6: to=ad4f0.5040...@roessner-net.com, relay=127.0.0.1[127.0.0.1]:24, delay=0.39, delays=0.19/0.06/0.01/0.13, dsn=5.1.1, status=bounced (host 127.0.0.1[127.0.0.1] Who is that ? said: 550

Re: only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Eero Volotinen
2010/9/15 Jeroen Geilman jer...@adaptr.nl: On 09/14/2010 03:06 PM, Eero Volotinen wrote: How to configure postfix only allow tlsv1 connections (no plaintext allowed) from defined ip ranges? three hosts are needed to communicate smarthost with tlsv1 only? If these hosts are using you as

Re: only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Noel Jones
On 9/14/2010 8:06 AM, Eero Volotinen wrote: How to configure postfix only allow tlsv1 connections (no plaintext allowed) from defined ip ranges? three hosts are needed to communicate smarthost with tlsv1 only? br, -- Eero Postfix TLS controls are described here

Re: only allow tlsv1 connection from spesific ip addresses

2010-09-14 Thread Victor Duchovni
On Tue, Sep 14, 2010 at 04:06:34PM +0300, Eero Volotinen wrote: How to configure postfix only allow tlsv1 connections (no plaintext allowed) from defined ip ranges? three hosts are needed to communicate smarthost with tlsv1 only? The Postfix SMTP server has no per-client TLS cipher/protocol

Re: Problems to understand reject_unlisted_recipients

2010-09-14 Thread Stan Hoeppner
Jeroen Geilman put forth on 9/14/2010 5:56 PM: On 09/14/2010 04:42 PM, Christian Rößner wrote: Sep 11 10:34:36 mx0 postfix/lmtp[29594]: 40FC3520A6: to=ad4f0.5040...@roessner-net.com, relay=127.0.0.1[127.0.0.1]:24, delay=0.39, delays=0.19/0.06/0.01/0.13, dsn=5.1.1, status=bounced (host

Re: custom reject messages

2010-09-14 Thread Frank Doege
On 09/15/2010 01:47 AM, Jeroen Geilman wrote: On 09/14/2010 12:13 PM, Frank Doege wrote: Hi all, id like to modify the message postfix sends to the server when it rejects an email in one of the checks performed. For example, 450 Helo command rejected: Host not found;