Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
Hello Peter and others, On Sat, Nov 23, 2013 at 1:38 AM, Peter pe...@pajamian.dhs.org wrote: On 11/23/2013 12:38 AM, Alexander Farber wrote: /etc/postfix/header_checks: /^To: \S+\.\S+\.\S+\.\s...@gmail.com mailto:s...@gmail.com$/i DISCARD /etc/postfix/main.cf http://main.cf:

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Benny Pedersen
Alexander Farber skrev den 2013-11-23 11:08: postmap seems not to like the whitespace after To:, should I replace that space by s+ as workaround? nope you dont postmap a pcre, regexp, cidr file

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread tejas sarade
Please read the below article carefully. It will save you a lot of trouble. http://www.postfix.org/SMTPD_ACCESS_README.html On Nov 23, 2013 3:39 PM, Alexander Farber alexander.far...@gmail.com wrote: Hello Peter and others, On Sat, Nov 23, 2013 at 1:38 AM, Peter pe...@pajamian.dhs.org wrote:

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
Does this doc really apply to my situation? (I'd like to discard some of the mails sent out by my CMS) On Sat, Nov 23, 2013 at 11:42 AM, tejas sarade tejas.a.sar...@gmail.comwrote: http://www.postfix.org/SMTPD_ACCESS_README.html Regards Alex

Re: can someone explain this SPF fail to me

2013-11-23 Thread li...@rhsoft.net
Am 23.11.2013 06:49, schrieb Benny Pedersen: jeffrey j donovan skrev den 2013-11-21 18:40: someu...@ncem-pa.org: host mail.ncem-pa.org[204.186.202.37] said: 554 5.7.1 someu...@ncem-pa.org: Recipient address rejected: Failed SPF check; beth.k12.pa.us, Redundant applicable 'v=spf1'

Postfix installation guid

2013-11-23 Thread Kranti Kiran Patnaik
Hi, Can someone share a very good postfix 2.10 installation guide for managing 2-5million emails per day? My current postfix is unable to handle such large volume as lot of emails are getting stuck in the incoming folder and thus the deliveries are delayed upto 2-3 days. My current postfix

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Wietse Venema
Alexander Farber: thank you! So I have moved the line /^To: \S+\.\S+\.\S+\.\s...@gmail.com$/i DISCARD to the file /etc/postfix/access, but when I run That is the wrong format. As documented in access(5) this requires an email address or domain name, not an email header. # postmap

Re: Postfix installation guid

2013-11-23 Thread tejas sarade
The most important thing when sorting out delay is to check logs for delay. It will give the processing time each Postfix component spent on email. Also check the full header of delayed mail. Read this two manuals. Postfix Performance tunning guide http://www.postfix.org/TUNING_README.html

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread tejas sarade
I would like to know current recipient restrictions. What is the output of following command. grep smtpd_recipient_restrictions /etc/postfix/main.cf On Sat, Nov 23, 2013 at 4:43 PM, Alexander Farber alexander.far...@gmail.com wrote: Does this doc really apply to my situation? (I'd like to

Re: Postfix installation guide

2013-11-23 Thread Wietse Venema
Kranti Kiran Patnaik: Hi, Can someone share a very good postfix 2.10 installation guide for managing 2-5million emails per day? My current postfix is unable to handle such large volume as lot of emails are getting stuck in the incoming folder and thus the deliveries are delayed upto 2-3

Re: Postfix installation guid

2013-11-23 Thread li...@rhsoft.net
Am 23.11.2013 13:39, schrieb Kranti Kiran Patnaik: Can someone share a very good postfix 2.10 installation guide for managing 2-5million emails per day? My current postfix is unable to handle such large volume as lot of emails are getting stuck in the incoming folder and thus the

Re: Postfix installation guid

2013-11-23 Thread Kranti Kiran Patnaik
How do i take that information from my server? I am new to this, can you guide me. Also if possible can you provide a good postfix configuration for my kind of setup. I am setting up a new server now with the latest postfix stable release. DO you think the default configuration would be ok. On

Re: Postfix installation guid

2013-11-23 Thread li...@rhsoft.net
Am 23.11.2013 15:25, schrieb Kranti Kiran Patnaik: I am going to have atleast 5 servers now to share the load, how do i split the MX? Can you guide me, do you have any documentation? On Sat, Nov 23, 2013 at 7:51 PM, li...@rhsoft.net mailto:li...@rhsoft.net Am 23.11.2013 13:39,

Re: Postfix installation guid

2013-11-23 Thread Kranti Kiran Patnaik
Hi We will have all *legit* mails only. Currently we are sending around 1.5 - 2 million emails per day and 5 million would be an expansion. We handle these for our clients. So with current congestion going on, we are expanding. Bounces are being handled by a program already. I have to now

Re: Postfix installation guide

2013-11-23 Thread Kranti Kiran Patnaik
THank You, we have filled these forms. But still we are facing delay in delivery, can you suggest with the postconf -n output that i have shared. On Sat, Nov 23, 2013 at 7:50 PM, Wietse Venema wie...@porcupine.org wrote: Kranti Kiran Patnaik: Hi, Can someone share a very good postfix

Re: Postfix installation guid

2013-11-23 Thread tejas sarade
w : for load free -m : for memory usage. First of all keep the default configuration, later on you can optimize it. On Sat, Nov 23, 2013 at 7:54 PM, Kranti Kiran Patnaik krantikiranpatn...@gmail.com wrote: How do i take that information from my server? I am new to this, can you guide me.

Re: Postfix installation guid

2013-11-23 Thread Kranti Kiran Patnaik
#w 09:29:42 up 9 days, 6:48, 2 users, load average: 0.00, 0.00, 0.00 # free -m total used free sharedbuffers cached Mem: 4041 3018 1022 0207 2415 -/+ buffers/cache:395 3645 Swap: 6000

Re: Postfix installation guide

2013-11-23 Thread Wietse Venema
Kranti Kiran Patnaik: THank You, we have filled these forms. But still we are facing delay in delivery, can you suggest with the postconf -n output that i have shared. The reason for delays is in the MAILLOG file. Look for the breakdown of the delays=a/b/c/d logging. The format of the

Re: Postfix installation guide

2013-11-23 Thread Kranti Kiran Patnaik
Sir, From my logs i found some as mentioned below. delays=3994/44/0.09/1.5, delays=4238/0.23/0/0.02 delays=2944/48/0.01/0.01 delays=903/0.08/0/0.01 delays=4893/48/0/0.01 Please advise. On Sat, Nov 23, 2013 at 8:35 PM, Wietse Venema wie...@porcupine.org wrote: Kranti Kiran Patnaik: THank

Re: Postfix installation guid

2013-11-23 Thread tejas sarade
Then there is no point in collecting usage details now. Can you tell me if the the source of the mails. On Sat, Nov 23, 2013 at 8:32 PM, Kranti Kiran Patnaik krantikiranpatn...@gmail.com wrote: #w 09:29:42 up 9 days, 6:48, 2 users, load average: 0.00, 0.00, 0.00 # free -m

Re: Postfix installation guid

2013-11-23 Thread Kranti Kiran Patnaik
Source of the mails is from our clients who send it to their clients for recruitment. On Sat, Nov 23, 2013 at 8:40 PM, tejas sarade tejas.a.sar...@gmail.comwrote: Then there is no point in collecting usage details now. Can you tell me if the the source of the mails. On Sat, Nov 23, 2013 at

Re: Postfix installation guide

2013-11-23 Thread Kranti Kiran Patnaik
I do see these kind of delays also in some lines. delays=11656/252/0.06/0.02 delay=65892, delays=65875/14/0.15/2 Please advise. On Sat, Nov 23, 2013 at 8:39 PM, Kranti Kiran Patnaik krantikiranpatn...@gmail.com wrote: Sir, From my logs i found some as mentioned below.

Re: Postfix installation guid

2013-11-23 Thread tejas sarade
No, I mean mails are locally generated on server, or from local network to which server is connected, or from internet. On Sat, Nov 23, 2013 at 8:42 PM, Kranti Kiran Patnaik krantikiranpatn...@gmail.com wrote: Source of the mails is from our clients who send it to their clients for

Re: Postfix installation guide

2013-11-23 Thread Wietse Venema
Kranti Kiran Patnaik: Sir, From my logs i found some as mentioned below. delays=3994/44/0.09/1.5, That is your problem. If 1) You have master.cf transports with low process limit (or low per-destinaton concurrency), AND 2) Those transports have c/d delays that are more than a fraction of

Re: Postfix installation guide

2013-11-23 Thread Kranti Kiran Patnaik
cat /etc/postfix/master.cf # # Postfix master process configuration file. For details on the format # of the file, see the master(5) manual page (command: man 5 master). # # == # service type private unpriv chroot wakeup

Re: Postfix installation guid

2013-11-23 Thread Kranti Kiran Patnaik
From local network. On Sat, Nov 23, 2013 at 8:49 PM, tejas sarade tejas.a.sar...@gmail.comwrote: No, I mean mails are locally generated on server, or from local network to which server is connected, or from internet. On Sat, Nov 23, 2013 at 8:42 PM, Kranti Kiran Patnaik

Re: Postfix installation guide

2013-11-23 Thread tejas sarade
Mails are spending too much time in incoming queue. May be this will help. http://www.postfix.org/QSHAPE_README.html#incoming_queue On Sat, Nov 23, 2013 at 8:48 PM, Kranti Kiran Patnaik krantikiranpatn...@gmail.com wrote: I do see these kind of delays also in some lines.

Re: Postfix installation guid

2013-11-23 Thread Jim Seymour
On Sat, 23 Nov 2013 20:40:52 +0530 tejas sarade tejas.a.sar...@gmail.com wrote: Then there is no point in collecting usage details now. Can you tell me if the the source of the mails. For God's sake: Please learn how to trim quoted text. Thank you! And please read this:

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
$ grep smtpd_recipient_restrictions /etc/postfix/main.cf # through Postfix. See the smtpd_recipient_restrictions parameter # relay mail to. See the smtpd_recipient_restrictions description in $ postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory =

Re: Postfix installation guide

2013-11-23 Thread Wietse Venema
Wietse Venema: Kranti Kiran Patnaik: Sir, From my logs i found some as mentioned below. delays=3994/44/0.09/1.5, That is your problem. If 1) You have master.cf transports with low process limit (or low per-destinaton concurrency), See here: default_destination_concurrency_limit

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread tejas sarade
On Sat, Nov 23, 2013 at 9:39 PM, Alexander Farber alexander.far...@gmail.com wrote: $ grep smtpd_recipient_restrictions /etc/postfix/main.cf # through Postfix. See the smtpd_recipient_restrictions parameter # relay mail to. See the smtpd_recipient_restrictions description in It will not

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
postconf |grep smtpd_recipient_restrictions smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread tejas sarade
OK, got it. Add the following line in main.cf file to add new recipient restriction which will use pcre table. smtpd_recipient_restrictions = check_recipient_access pcre:/etc/postfix/pcre_recipients, permit_mynetworks, reject_unauth_destination Then create a file /etc/postfix/pcre_recipients

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread li...@rhsoft.net
Am 23.11.2013 20:18, schrieb tejas sarade: OK, got it. Add the following line in main.cf http://main.cf file to add new recipient restriction which will use pcre table. smtpd_recipient_restrictions = check_recipient_access pcre:/etc/postfix/pcre_recipients, permit_mynetworks,

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread tejas sarade
On Sun, Nov 24, 2013 at 12:55 AM, li...@rhsoft.net li...@rhsoft.net wrote: Am 23.11.2013 20:18, schrieb tejas sarade: OK, got it. Add the following line in main.cf http://main.cf file to add new recipient restriction which will use pcre table. smtpd_recipient_restrictions =

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
I see, thanks to you both! The #danger doc not probably doesn't apply here, but still good to know.

postprox per recipient

2013-11-23 Thread Ian Baldwin
Hi there, I am trying to setup a postprox based filter only for one recipient but it fails me altogether, no matter what I do. The last setup I have is routing messages by way of a transport map directive such as acco...@test.au postprox:[127.0.0.1]:10027 where in master.cf I have postprox

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Peter
On 11/23/2013 11:08 PM, Alexander Farber wrote: thank you! So I have moved the line /^To: \S+\.\S+\.\S+\.\s...@gmail.com mailto:s...@gmail.com$/i DISCARD to the file /etc/postfix/access, but when I run # postmap /etc/postfix/access I get the warning: postmap: warning:

Re: explicit cipher list

2013-11-23 Thread Andreas Schulze
Zitat von Viktor Dukhovni postfix-us...@dukhovni.org: With smtpd(8) there are no implicit exclusions so you can build the full list yourself if you want. For example with opportunistic TLS (may): $ server_ciphers() { local use skip ciphers exclude e case $1 in

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Peter
On 11/24/2013 08:18 AM, tejas sarade wrote: You can use the DISCARD instead of REJECT. I wouldn't recommend that, unless there is a very specific reason for it as a rule of thumb it's rarely a good idea to DISCARD mail. In this particular case REJECT will work just fine, REJECT followed by a

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Peter
On 11/24/2013 08:25 AM, li...@rhsoft.net wrote: have fun with reject_unauth_destination too late and check_recipient_access says PERMIT instead DUNNO a major mistake and becuase it is made too often smtpd_relay_restrictions was included in the lastest releases

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread li...@rhsoft.net
Am 23.11.2013 22:48, schrieb Peter: On 11/24/2013 08:25 AM, li...@rhsoft.net wrote: have fun with reject_unauth_destination too late and check_recipient_access says PERMIT instead DUNNO a major mistake and becuase it is made too often smtpd_relay_restrictions was included in the lastest

Re: explicit cipher list

2013-11-23 Thread Viktor Dukhovni
On Sat, Nov 23, 2013 at 10:40:05PM +0100, Andreas Schulze wrote: But when I disable RC4 in smtpd_tls_exclude_ciphers (I assume) it's also not used when I enforce encrypt mode !? This script don't say so. Yes, you're right, the script did not cover that case accurately, the code from smtpd(8)

Re: explicit cipher list

2013-11-23 Thread Andreas Schulze
Zitat von Viktor Dukhovni postfix-us...@dukhovni.org: For bonus points, you could look at smtpd_tls_askccert and smtpd_tls_req_ccert. If either is set to yes, append ':!aNULL' to the raw openssl cipher list. could you please tell more about that? Andreas

Re: postprox per recipient

2013-11-23 Thread Wietse Venema
Ian Baldwin: localhost:10027 inet n n n - - spawn user=vscan argv=/usr/local/sbin/postprox -v -c ... Nov 24 07:01:13 aminoacid postfix/smtp[21274]: 80F96303AE7: to=acco...@test.au, relay=127.0.0.1[127.0.0.1]:10027, delay=303, delays=1.9/0.02/301/0,

Re: explicit cipher list

2013-11-23 Thread Viktor Dukhovni
On Sat, Nov 23, 2013 at 11:08:56PM +0100, Andreas Schulze wrote: For bonus points, you could look at smtpd_tls_askccert and smtpd_tls_req_ccert. If either is set to yes, append ':!aNULL' to the raw openssl cipher list. could you please tell more about that? Not much more to tell,

Re: explicit cipher list

2013-11-23 Thread Viktor Dukhovni
On Sat, Nov 23, 2013 at 10:42:23PM +, Viktor Dukhovni wrote: for askcc in smtpd_ask_ccert smtpd_req_ccert Make that: for askcc in smtpd_tls_ask_ccert smtpd_tls_req_ccert -- Viktor.