Re: Odd postfix LDAP behavior

2011-10-26 Thread Viktor Dukhovni
On Tue, Oct 25, 2011 at 10:14:39PM -0700, Quanah Gibson-Mount wrote: Ok, logs were still on the server I was using earlier. Here's part of one of the connections in question. LDAP server logs are no way to report a suspected Postfix issue to this list. They are for LDAP administrators, not

Re: Using Roundcube to send mail on localhost

2011-10-26 Thread Tobias Hachmer
On 26.10.2011 02:20, Harald Koch wrote: On 25/10/2011 5:29 PM, Seth Kneller wrote: I have postfix and roundcube installed on the same server, postfix is setup to use SASL auth and STARTTLS and I can send messages from remote clients. However I cannot send messages from roundcube on the

Re: Using Roundcube to send mail on localhost

2011-10-26 Thread Stan Hoeppner
On 10/25/2011 4:57 PM, Seth Kneller wrote: I apologise, the reason I have posted here is that I cannot see anything that is wrong with my roundcube configuration. However I suspect that maybe it can't cope with STARTTLS? STARTTLS is meant for over-the-wire security. It's unnecessary when

Re: Using Roundcube to send mail on localhost

2011-10-26 Thread Stan Hoeppner
On 10/25/2011 5:19 PM, Noel Jones wrote: Probably the best solution is to uncomment the smtps wrappermode SSL master.cf entry, then configure roundcube to submit mail on ssl port 465. Maybe I'm missing something Noel. Why have RC use auth for relay submission when both RC and Postfix reside

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nerijus Kislauskas
On 10/25/2011 03:09 PM, Nerijus Kislauskas wrote: So why it is important to return something from LDAP in order to be *sure* entry exists? Search without result_attribute responds with 1 match. Why it can't be a key for descision, that there is a entry and let message to pass through? Thanks

greylisting + postfix 101

2011-10-26 Thread Razvan Chitu
Hello all, Please take a moment and point me in the right direction: I would like to set up a greylisting solution (such as postgrey or greylist.pl) only for one recipient (local delivery to *nix account). A link or any pointer in the right direction would be welcomed. Cheers, -- Razvan

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nikolaos Milas
On 26/10/2011 10:29 πμ, Nerijus Kislauskas wrote: On 10/25/2011 03:09 PM, Nerijus Kislauskas wrote: So why it is important to return something from LDAP in order to be *sure* entry exists? Search without result_attribute responds with 1 match. Why it can't be a key for descision, that there is

Re: greylisting + postfix 101

2011-10-26 Thread lst_hoe02
Zitat von Razvan Chitu c...@topedge.ro: Hello all, Please take a moment and point me in the right direction: I would like to set up a greylisting solution (such as postgrey or greylist.pl) only for one recipient (local delivery to *nix account). A link or any pointer in the right

Virtual Domain Restrictions

2011-10-26 Thread Pa - Soscpd
Hello List My first time here so, please, point me any mistakes. I need some special setup for my postfix server (running postfix-2.6.5 + mysql on x86_64 kernel 2.6.31) with 11 virtual domains. I have several users that does not need to send email offsite, so I've managed to create

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nerijus Kislauskas
On 10/26/2011 11:02 AM, Nikolaos Milas wrote: On 26/10/2011 10:29 πμ, Nerijus Kislauskas wrote: If you don't want to check users, use: relay_recipient_maps = (i.e. without any value) You may want to read this message: http://tech.groups.yahoo.com/group/postfix-users/message/279682

Re: Spammers attempting SASL auth.

2011-10-26 Thread Duane Hill
On Mon, 17 Oct 2011, Simon Brereton wrote: Hi This is a new one on me - I've never seen spammers attempt to use to SASL Auth to inject spam. Has anyone else seen this? Oct 17 15:07:16 mail postfix/smtpd[14422]: connect from unknown[208.86.147.92] Oct 17 15:07:16 mail dovecot: auth(default):

Re: Spammers attempting SASL auth.

2011-10-26 Thread Patrick Ben Koetter
* Duane Hill duih...@gmail.com: On Mon, 17 Oct 2011, Simon Brereton wrote: This is a new one on me - I've never seen spammers attempt to use to SASL Auth to inject spam. Has anyone else seen this? Oct 17 15:07:16 mail postfix/smtpd[14422]: connect from unknown[208.86.147.92] Oct 17

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nikolaos Milas
On 26/10/2011 12:06 μμ, Nerijus Kislauskas wrote: you miss a point. It's not about the usage of one or another postfix config parameter. It is about postfix behavior based on LDAP protocol search operation/results. Sorry, I misread your initial post. Nick smime.p7s Description: S/MIME

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread lst_hoe02
Zitat von Nerijus Kislauskas nerijus.kislaus...@ktu.lt: On 10/26/2011 11:02 AM, Nikolaos Milas wrote: On 26/10/2011 10:29 πμ, Nerijus Kislauskas wrote: If you don't want to check users, use: relay_recipient_maps = (i.e. without any value) You may want to read this message:

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Noel Jones
On 10/26/2011 4:06 AM, Nerijus Kislauskas wrote: As I can see now, postfix decides, that user exists when some attribute (or set of attributes) is returned from a search operation. And in my opinion that is wrong behavior. LDAP search operation returns DN (or set of DN's) everytime the search

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nerijus Kislauskas
On 10/26/2011 01:28 PM, lst_ho...@kwsoft.de wrote: In some cases the results from a database lookup are needed in others not Exactly. I should be able to get them, when I need them, and not when I don't. It's not about problems, it's about protocols and the way they are used. -- Pagarbiai,

Re: Using Roundcube to send mail on localhost

2011-10-26 Thread Noel Jones
On 10/26/2011 2:19 AM, Stan Hoeppner wrote: On 10/25/2011 5:19 PM, Noel Jones wrote: Probably the best solution is to uncomment the smtps wrappermode SSL master.cf entry, then configure roundcube to submit mail on ssl port 465. Maybe I'm missing something Noel. Why have RC use auth for

Re: Virtual Domain Restrictions

2011-10-26 Thread Noel Jones
On 10/26/2011 2:56 AM, Pa - Soscpd wrote: Hello List My first time here so, please, point me any mistakes. I need some special setup for my postfix server (running postfix-2.6.5 + mysql on x86_64 kernel 2.6.31) with 11 virtual domains. I have several users that does not need to

Re: Using Roundcube to send mail on localhost

2011-10-26 Thread Seth Kneller
On 26.10.2011 07:58, Tobias Hachmer wrote: On 26.10.2011 02:20, Harald Koch wrote: On 25/10/2011 5:29 PM, Seth Kneller wrote: I have postfix and roundcube installed on the same server, postfix is setup to use SASL auth and STARTTLS and I can send messages from remote clients. However I cannot

Re: Protocol error: postfix-2.3 vs. 2.9

2011-10-26 Thread Wietse Venema
Ralf Hildebrandt: relay=mail.charite.de[141.42.202.200]:25, delay=6.4, delays=0.27/0.01/6.1/0, dsn=5.5.0, status=bounced (Protocol error: host mail.charite.de[141.42.202.200] refused to talk to me: 220-mail.charite.de ESMTP 421-4.3.2 All server ports are busy 421 4.3.2 This is fixed in

Re: Protocol error: postfix-2.3 vs. 2.9

2011-10-26 Thread Ralf Hildebrandt
* Wietse Venema wie...@porcupine.org: Ralf Hildebrandt: relay=mail.charite.de[141.42.202.200]:25, delay=6.4, delays=0.27/0.01/6.1/0, dsn=5.5.0, status=bounced (Protocol error: host mail.charite.de[141.42.202.200] refused to talk to me: 220-mail.charite.de ESMTP 421-4.3.2 All server

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nerijus Kislauskas
On 10/26/2011 02:09 PM, Noel Jones wrote: The postfix database interface is a general-purpose mechanism, not an LDAP interface. In the case of relay_recipient_maps, the requirement is that a result must be returned, but the value is not used. As long as a lookup returns anything, the user is

Using Postfix to check and verify SPF

2011-10-26 Thread Simon Brereton
Hi I finally got around to implementing SPF for my mail server and domains. A lot easier than I thought it would be, certainly much easier than DKIM and I'm ashamed I didn't do it earlier. In the course of doing that, I noticed that gmail/yahoo both add X-Headers about the validity of the

Re: Using Postfix to check and verify SPF

2011-10-26 Thread Scott Kitterman
On 10/26/2011 10:17 AM, Simon Brereton wrote: ... So my obvious question to the list is - Can I get amavis to explicity add a header with the SPF validity, and if not, can I do this with policyd? And if not, and I must install postfix-policyd-spf-python or postfix-policyd-spf-perl which do you

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Wietse Venema
Nerijus Kislauskas: On 10/26/2011 02:09 PM, Noel Jones wrote: The postfix database interface is a general-purpose mechanism, not an LDAP interface. In the case of relay_recipient_maps, the requirement is that a result must be returned, but the value is not used. As long as a lookup

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Noel Jones
On 10/26/2011 8:56 AM, Nerijus Kislauskas wrote: On 10/26/2011 02:09 PM, Noel Jones wrote: The postfix database interface is a general-purpose mechanism, not an LDAP interface. In the case of relay_recipient_maps, the requirement is that a result must be returned, but the value is not used.

Re: Using Postfix to check and verify SPF

2011-10-26 Thread Simon Brereton
On 26 October 2011 10:27, Scott Kitterman post...@kitterman.com wrote: On 10/26/2011 10:17 AM, Simon Brereton wrote: ... So my obvious question to the list is - Can I get amavis to explicity add a header with the SPF validity, and if not, can I do this with policyd?  And if not, and I must

Re: Using Postfix to check and verify SPF

2011-10-26 Thread Scott Kitterman
On 10/26/2011 10:44 AM, Simon Brereton wrote: On 26 October 2011 10:27, Scott Kittermanpost...@kitterman.com wrote: On 10/26/2011 10:17 AM, Simon Brereton wrote: ... So my obvious question to the list is - Can I get amavis to explicity add a header with the SPF validity, and if not, can I do

Hourly postfix consultant needed

2011-10-26 Thread Dan Richman
Hello - We are in need of an hourly resource to ask questions get configuration help for postfix from time to time. Email me privately if you're interested: d...@danrichman.com Thanks -

Re: Hourly postfix consultant needed

2011-10-26 Thread Dan Richman
Update: Found someone. That was fast. Thanks!

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Viktor Dukhovni
On Wed, Oct 26, 2011 at 04:56:40PM +0300, Nerijus Kislauskas wrote: On 10/26/2011 02:09 PM, Noel Jones wrote: The postfix database interface is a general-purpose mechanism, not an LDAP interface. In the case of relay_recipient_maps, the requirement is that a result must be returned, but

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nerijus Kislauskas
On 10/26/2011 08:11 PM, Viktor Dukhovni wrote: The LDAP table driver considers entries that match the query filter, but which lack the requested attributes, or have only empty values for the requested attributes to not be matching attributes. The Postfix dictionary abstraction above the

Re: A Problem No One Has Solved According To Googling

2011-10-26 Thread Jeroen Geilman
On 2011-10-26 01:37, Jack Fredrikson wrote: **Hey, everybody: thanks so much for trying to help. I really appreciate it. But I've killed a week and before I kill myself, I'm throwing in the towel until I build that new

Re: Using Postfix to check and verify SPF

2011-10-26 Thread Steve Fatula
So my obvious question to the list is - Can I get amavis to explicity add a header with the SPF validity, and if not, can I do this with policyd?  And if not, and I must install postfix-policyd-spf-python or postfix-policyd-spf-perl which do you recommend and why? Can't help you with Amavis,

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Wietse Venema
Nerijus Kislauskas: On 10/26/2011 08:11 PM, Viktor Dukhovni wrote: The LDAP table driver considers entries that match the query filter, but which lack the requested attributes, or have only empty values for the requested attributes to not be matching attributes. The Postfix dictionary

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Viktor Dukhovni
On Wed, Oct 26, 2011 at 09:17:17PM +0300, Nerijus Kislauskas wrote: On 10/26/2011 08:11 PM, Viktor Dukhovni wrote: The LDAP table driver considers entries that match the query filter, but which lack the requested attributes, or have only empty values for the requested attributes to not be

Re: Virtual Domain Restrictions

2011-10-26 Thread Pa - Soscpd
Em 26/10/2011 09:23, Noel Jones escreveu: On 10/26/2011 2:56 AM, Pa - Soscpd wrote: Hello List My first time here so, please, point me any mistakes. I need some special setup for my postfix server (running postfix-2.6.5 + mysql on x86_64 kernel 2.6.31) with 11 virtual domains. I have

Config check

2011-10-26 Thread IT geek 31
Hi, I'm trying to achieve the following: Stop spammers (obviously) Permit relaying when I'm outside the network (using SASL) After reading through postconf, to prevent duplicate checks I removed a number of checks from smtpd_sender_restrictions, so that it now looks like this:

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nerijus Kislauskas
On 10/26/2011 11:06 PM, Viktor Dukhovni wrote: Lose the attitude or go away. You're new here, it rather presumptuous to start lecturing people who've been here for 10+ years. Then I will hit myself in the cheek. The Postfix LDAP driver does not know whether the result is wanted or not

Re: Config check

2011-10-26 Thread /dev/rob0
On Wednesday 26 October 2011 16:28:43 IT geek 31 wrote: I'm trying to achieve the following: Stop spammers (obviously) Permit relaying when I'm outside the network (using SASL) After reading through postconf, to prevent duplicate checks I removed a number of checks from

Good tutorial on basic, outgoing-only mail

2011-10-26 Thread René Fournier
I'm slowly switching all my UNIX needs over to Macports packages, from Mac OS X Server's Admin console. This means learning a few new things, such as mail in general, and Postfix in particular. Now, I've found lots of tutorials on Postfix that cover a range of topics, seemingly for

Re: Config check

2011-10-26 Thread IT geek 31
Hi Rob Thanks for your reply - that's certainly cleared a few things up! check_recipient_access hash:/usr/pkg/etc/postfix/access, access is a bad name for this. Since you're checking recipient addresses, I would suggest a name of rcpt_access, or similar. I've renamed this to sender_access

Re: Good tutorial on basic, outgoing-only mail

2011-10-26 Thread Wietse Venema
Ren? Fournier: I'm slowly switching all my UNIX needs over to Macports packages, from Mac OS X Server's Admin console. This means learning a few new things, such as mail in general, and Postfix in particular. Now, I've found lots of tutorials on Postfix that cover a range of topics,

Re: Odd postfix LDAP behavior

2011-10-26 Thread Quanah Gibson-Mount
--On October 26, 2011 6:08:56 AM + Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Tue, Oct 25, 2011 at 10:14:39PM -0700, Quanah Gibson-Mount wrote: Ok, logs were still on the server I was using earlier. Here's part of one of the connections in question. LDAP server logs are

Re: Odd postfix LDAP behavior

2011-10-26 Thread Quanah Gibson-Mount
--On October 26, 2011 4:45:01 PM -0700 Quanah Gibson-Mount qua...@zimbra.com wrote: I'm using simple binds as I have since postfix 2.3. I actually was not aware the code for using SASL mechanism binds had been added to postfix. Very happy to know that. ;) I have my own test server set up

Re: Good tutorial on basic, outgoing-only mail

2011-10-26 Thread René Fournier
On 2011-10-26, at 5:41 PM, Wietse Venema wrote: With high enough volume it may be more productive to hire a professional email service provider (ESP). I'm not in that business. For a variety of reasons, this isn't an option for us. Any suggestions where to start? I suppose there's a bit of

Re: Good tutorial on basic, outgoing-only mail

2011-10-26 Thread /dev/rob0
On Wednesday 26 October 2011 18:09:56 René Fournier wrote: Now, I've found lots of tutorials on Postfix that cover a range of topics, seemingly for moderate-to-complex needs. Mine are pretty simple. I have a server that simply needs to send out notification emails on a regular, high-volume

Re: Good tutorial on basic, outgoing-only mail

2011-10-26 Thread Viktor Dukhovni
On Wed, Oct 26, 2011 at 07:42:54PM -0600, Ren? Fournier wrote: High-volume email is not covered in Postfix documentation as the requirements are complex and subject to change. Well, high volume is maybe overstating it. I would guess a few hundred outgoing emails a day, mostly to

PROPOSED PATCH. Please test (was: Odd postfix LDAP behavior)

2011-10-26 Thread Viktor Dukhovni
On Wed, Oct 26, 2011 at 05:10:41PM -0700, Quanah Gibson-Mount wrote: I'm using simple binds as I have since postfix 2.3. I actually was not aware the code for using SASL mechanism binds had been added to postfix. Very happy to know that. ;) I have my own test server set up now so I can

Re: PROPOSED PATCH. Please test (was: Odd postfix LDAP behavior)

2011-10-26 Thread Quanah Gibson-Mount
--On October 27, 2011 4:14:12 AM + Viktor Dukhovni postfix-us...@dukhovni.org wrote: Therefore, I propose the following Postfix fix/work-around which is required for anyone running Postfix 2.3 or later, linked with OpenLDAP 2.4 or later (perhaps even late 2.3.x releases, I just compared

Re: relay_recipient_maps and LDAP as backend

2011-10-26 Thread Nikolaos Milas
On 27/10/2011 12:59 πμ, Nerijus Kislauskas wrote: (a) group needs read permission on result_attribute attributes, while (b) group needs only search permission. What I want from all ot this, that postfix would be able to work with minimal required ldap access permissions. And now you require

Re: Good tutorial on basic, outgoing-only mail

2011-10-26 Thread René Fournier
Well, I checked, I was off a bit. About 10,000 per day. Still low though it seems. On 2011-10-26, at 9:40 PM, Viktor Dukhovni wrote: On Wed, Oct 26, 2011 at 07:42:54PM -0600, Ren? Fournier wrote: High-volume email is not covered in Postfix documentation as the requirements are complex and