Re: Invalid Header problems

2009-07-28 Thread Wietse Venema
Oscar Cruz: Hi folks i'm trying to figure out a problem with some domains when they send mails to my server. apparently the problem comes from an invalid header but i don't know what kind of parameter must change, cause this isn't happens with all the domains just with some ones. Jul 28

Re: What causes the message file too big error?

2009-07-30 Thread Wietse Venema
Seth Mattinen: I'm seeing Error: message file too big but I'm not sure what's causing it. The exact byte count of the message+headers is 100793284, but I have message_size_limit set to 104857600. Is there something else going into the size calculation that I'm missing? Yes, the message

Re: What causes the message file too big error?

2009-07-30 Thread Wietse Venema
Wietse Venema: Seth Mattinen: I'm seeing Error: message file too big but I'm not sure what's causing it. The exact byte count of the message+headers is 100793284, but I have message_size_limit set to 104857600. Is there something else going into the size calculation that I'm missing

Re: not receiving forwarded mail from postfix, all logs seem fine

2009-07-30 Thread Wietse Venema
dvodvo: Jul 30 00:59:44 mydomain postfix/smtp[13941]: 7D04B96117E4: to=mygmailn...@gmail.com, orig_to=d...@mydomain.ca, relay=gmail-smtp-in.l.google.com[209.85.133.27]:25, delay=1.6, delays=0/0.01/0.13/1.4, dsn=2.0.0, status=sent (250 2.0.0 OK 1248933584 d35si1808699and.15) The 250 2.0.0 OK

Re: ACCESS CONTROL FOR LOCAL PICKUP AND VIRTUAL DOMAINS

2009-07-31 Thread Wietse Venema
k p: Hi There, I have a real scenario that I'm not sure how to solve it, local clients on the same machine that postfix resides : I want them to be restricted to their particular virtual domains that they have access to: This is a sample: User one (UID/GID 500) :? has 2 virtual

Re: Received: headers and mail forwarding loops

2009-07-31 Thread Wietse Venema
Stefan F?rster: When I submit a mail to my Postfix server (using SASL auth over a TLS connection), Postfix adds the following received header: Received: from aletheia.cite.lan (33.33.33.333.dynamic.cablesurf.de [33.33.33.333]) (using TLSv1 with cipher ADH-AES256-SHA (256/256

Re: put mails in hold queue based on size

2009-08-01 Thread Wietse Venema
ram: Some users on my postfix system send *Huge* mails and I dont want the mails to be transferred during peak hours Is there a way I can put mail to hold , if size exceeds a particular limit Only via the policy daemon protocol. Wietse

Re: Omnipresent conversation with server timed out while sending message body)

2009-08-01 Thread Wietse Venema
Andrew T. Robinson: delay=2005, delays=1283/0/361/361, dsn=4.4.2, status=deferred delay=5004, delays=4283/0.01/361/361, dsn=4.4.2, status=deferred delay=7283, delays=6561/0.01/361/361, dsn=4.4.2, status=deferred I these numbers aren't modified for privacy reasons, Google is tarpitting your

Re: Postfix HELO FQDN requirement

2009-08-03 Thread Wietse Venema
John Peach: On Mon, 03 Aug 2009 13:18:52 +0200 Robin Smidsr__d ro...@smidsrod.no wrote: [snip] Willy De la Court wrote: Does this mean that all of the reject rules are in fact not RFC-conformant? The reason I mention reject_invalid_helo_hostname is that I'm unsure if the

Re: too many postfix smtp active internet connections

2009-08-03 Thread Wietse Venema
jessk...@brel.com: Dear netizens sorry to trouble you. My server is just overloaded with too much spams. When I view the output of netstat -ln, there are over 400 ip addresses connecting to my postfix server actively. In our mail.log, the connections are from these ip addresses that had

Re: No hash in Solaris 10

2009-08-03 Thread Wietse Venema
Mauricio Tavares: make makefiles CC=gcc \ CCARGS='-DUSE_TLS -DHAS_PCRE -DUSE_SASL_AUTH \ -DDEF_SERVER_SASL_TYPE=\dovecot\ \ -I/usr/sfw/include -I/opt/sfw/include -I/usr/local/include \ -I/usr/local/BerkeleyDB.4.7/include ' \ That does not enable any of the Postfix Berkeley DB

Re: LMTP over TCP: connection refused

2009-08-05 Thread Wietse Venema
Magnus B?ck: On Wednesday, August 05, 2009 at 10:11 CEST, Robert Socha so...@eur.pl wrote: Evgeniy Arbatov pisze: This is what I have in master.cf: lmtp inet n - n - - lmtp I am sure all the LDAP lookups are working fine and I did

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Wietse Venema
Jaroslaw Grzabel: My company decided to limit a number of messages per day per IP. That's why we run anvil and limit 1000msg/24h/IP, so I put into main.cf: Don't use anvil(8) for long-term statistics. ANVIL(8) ANVIL(8) ... The

Re: How to queue messages with diffrent bounce time

2009-08-05 Thread Wietse Venema
Robert Socha: Hi, My problem is... :) I would like that the selected messages injected by specified interface remain in the queue for no longer than 2 hours. I used this configuration (master.cf), but it seems that it is not working as I want: bulk.example.pl: smtp inet n - n - -

Re: Postfix won't start when adding additional daemon entries in main.cf

2009-08-06 Thread Wietse Venema
James Hankins: amavisfeed unix- - n- 2 lmtp -o lmtp_data_done_timeout=1200 -o lmtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 and do a

Re: Enforcing CRLF line endings

2009-08-06 Thread Wietse Venema
Michal Ludvig: Hi all, is there any way for postfix to enforce CRLF line endings as required by RFC2822? At the moment it happily accepts Unix-style LF-only lines and I'd like to prevent that. CRLF are required by RFC 2821 (the same is true for its successor and predecessor). That is, email

Re: Wildcard certs - why only one level deep?

2009-08-07 Thread Wietse Venema
Chris Simmons: Hi all, In testing (and by reading the archives) I have found that postfix only supports one level of wildcard SSL certificates. That is to say, I can get a certificate for *.example.com that will match host1.example.com and host2.example.com, but won't match

Re: filtering mail from outside with dynamic address

2009-08-12 Thread Wietse Venema
Florin Andrei: Wietse Venema wrote: Florin Andrei: Florin Andrei wrote: Is there a way to bind the listener to an interface using the interface name (eth5:smtp) instead of the IP (1.2.3.4:smtp)? No. The bind(2) system call specifies an address. Not an interface, and not the route

Re: Postfix recompilation questions

2009-08-12 Thread Wietse Venema
Juraj Marusiak: Hi all, I have some questions regarding postfix. 1. I need to relay all emails through my ISP mail server which requires authentication (AUTH PLAIN LOGIN). In order to achieve this, i assume, i need SASL support compiled. Do I really need SASL compiled if i want to send

Re: Configurable replies for hardcoded REJECTS?

2009-08-13 Thread Wietse Venema
Dabrien 'Dabe' Murphy: Wietse Venema wrote: Instead of having to maintain a bazillion different reply parameters, would not it be sufficient to have one generic reply line that gets appended to all those reject commands? Hi Wietse, If the dilemma is between: I was thinking

Re: Postfix ipv6 rbl

2009-08-13 Thread Wietse Venema
Hari Hendaryanto: Hi, Does reject_rbl_client handle ipv6 address? In Postfix 2.6 and later. Wietse

Re: postscreen being exhausted?

2009-08-13 Thread Wietse Venema
Ralf Hildebrandt: * Ralf Hildebrandt ralf.hildebra...@charite.de: mail_version = 2.7-20090807 Some more details: Aug 13 14:52:40 mail-ausfall postfix/master[5607]: daemon started -- version 2.7-20090807, configuration /etc/postfix Aug 13 14:52:40 mail-ausfall postfix/master[5607]:

Re: postfix terminating on signal 15

2009-08-13 Thread Wietse Venema
Jeroen van Aart: I should add that I was miss interpreting the terminating on signal 15. That in fact is my monitor doing its work, which I installed after noticing postfix would regularly quit. It's likely the actual kill Internally, postfix stop uses SIGTERM to terminate the master

Re: postscreen being exhausted?

2009-08-13 Thread Wietse Venema
Ralf Hildebrandt: [ Charset UTF-8 unsupported, converting... ] * Wietse Venema wie...@porcupine.org: Oddly enough, this does only happen on mail-ausfall, mail, with the same master.cf doesn't show it... The message i logged only when you run an OLD master daemon. Very very strange

Re: postfix terminating on signal 15

2009-08-13 Thread Wietse Venema
Jeroen van Aart: Wietse Venema wrote: Internally, postfix stop uses SIGTERM to terminate the master daemon. This signal is also used by system shutdown procedures. Right, the monitor will use /etc/init.d/postfix stop|start in order to attempt to restart postfix. Postfix has proven

Re: postfix terminating on signal 15

2009-08-13 Thread Wietse Venema
Jeroen van Aart: Wietse Venema wrote: Postfix has proven to be rock solid, and there is no need to make it less reliable with trigger-happy babysitters. I am not giving any value judgement to postfix. In fact it's one of the few MTAs I would trust to run on any systems I manage

Re: postscreen being exhausted?

2009-08-14 Thread Wietse Venema
Ralf Hildebrandt: * Wietse Venema wie...@porcupine.org: I removed the warning for services with process limit = 1 in the 2.7-nonprod release series, when I added the postscreen daemon. I installed the non - non-prod-version and kept the master.cf entries :( Aha. I haven't yet ported

Re: Improper command pipelining after QUIT

2009-08-14 Thread Wietse Venema
Stefan F?rster: Dear members of postfix-users, can anyone of you please explain to me what the following log entry means: postfix/smtpd[8558]: improper command pipelining after QUIT from unknown[64.8.20.35] This means that the client sent QUITCRLF followed by something else; a sign of

Re: Improper command pipelining after QUIT

2009-08-14 Thread Wietse Venema
Stefan F?rster: * Wietse Venema wie...@porcupine.org: Stefan F?rster: Dear members of postfix-users, can anyone of you please explain to me what the following log entry means: postfix/smtpd[8558]: improper command pipelining after QUIT from unknown[64.8.20.35

Re: postfix terminating on signal 15

2009-08-15 Thread Wietse Venema
Jeroen van Aart: I am pretty sure the babysitter does a few false restarts just because the system is overloaded and it's not getting a response soon enough. But without it you'd have an MTA less system for days. It's checking connectivity on 127.0.0.1:25 with a timeout of 35 seconds, which

Re: Postfix + Vda patch - problems with bounce

2009-08-15 Thread Wietse Venema
Benny Pedersen: On Fri, 14 Aug 2009 21:21:47 -0300, Marcelo Terres mhter...@gmail.com wrote: I know that, and I'm looking for help there too. This patch is not a supported part of Postfix. For support please go to the maintainers of the patch. Wietse

Re: Postfix + Vda patch - problems with bounce

2009-08-17 Thread Wietse Venema
Marcelo Terres: Well, let me change the subject a little: Anybody can indicate me a policy daemon or some solution to reject messages for over quota at smtp time ? I suggest: maintain an SMTPD access map that rejects mail for users that are over quota; update this access map a few times a

Re: Notification of non-delivery

2009-08-17 Thread Wietse Venema
Eduardo J?nior: Hi, where can I read about this? How can I change the format and what each part means? You can configure the text (see: man 5 bounce) before the non-deliverable recipients, but you cannot configure the format of bounce messages. The format is defined in Internet RFC

Re: postfix terminating on signal 15

2009-08-18 Thread Wietse Venema
Jeroen van Aart: Aug 15 02:55:06 prod101 postfix/master[9402]: warning: process /usr/lib/postfix/qmgr pid 9582 exit status 1 Good. Now look for error/fatal/warning loggings BEFORE this record. Wietse http://www.postfix.org/DEBUG_README.html#logging Look for obvious signs of trouble

Re: Notification of non-delivery

2009-08-18 Thread Wietse Venema
Eduardo J?nior: and I have some doubts. This: With Postfix 2.4 and later, a message is returned as either message/rfc822 (the complete original) or as text/rfc822-headers (the headers only) does means that if my postifxis 2.4 the body of the message sent doesn't included in the bounce

Re: postfix terminating on signal 15

2009-08-18 Thread Wietse Venema
Jeroen van Aart: That's it until Aug 15 02:55:06 prod101 postfix/master[9402]: warning: process /usr/lib/postfix/qmgr pid 9582 exit status 1 I don't think so. Instead of YOU filtering by hand a long file, let the COMPUTER do the work for you: egrep '(warning|error|fatal|panic):'

Re: Sendmail interface questions

2009-08-19 Thread Wietse Venema
Chris Smith: Hi, I'm hoping to obtain some confirmation on the data format the sendmail interface expects, I am under the impression that as a NIX program it will expect emails using LF for new lines as opposed to the SMTP standard of CRLF. How does this apply to line folding? Does Postfix

Re: postfix original recipient

2009-08-19 Thread Wietse Venema
Gaby L: - I want to use virtual_alias_maps but I want to appear original destination address in header. It is possible? As documented (man 5 virtual), virtual_alias_maps changes the ENVELOPE address not the HEADER address. Wietse Thanks Postfix logs the orig_to

Re: postfix original recipient

2009-08-20 Thread Wietse Venema
...@de.opel.com From: Dragos Dobre dragos.do...@gm.com Date: Mon, 17 Aug 2009 12:19:09 +0200 X-MIMETrack: Serialize by Router on DERUEMA16/M/GMSERVER/GMC at 17.08.2009 12:19:12 Content-Type: multipart/mixed; boundary==_mixed 0038B094C125761 - Original Message - From: Wietse Venema

Re: Postfix queue problem?

2009-08-20 Thread Wietse Venema
Junior Tux: Dear all , i have a big problem with postfx queue. I'm using postfix amavis spamassain. But queue has 5 mails. it's sending very slow. What Can i do ? Thanks. The first thing you should do is search the logfile for signs of trouble that causes programs to fail.

Re: real-world issues with smtpd_tls_ask_ccert?

2009-08-21 Thread Wietse Venema
Noel Jones: Victor Duchovni wrote: On Fri, Aug 21, 2009 at 06:09:52AM -0500, Noel Jones wrote: Ralf Hildebrandt wrote: Aug 20 22:49:01 server postfix/smtpd[7724]: connect from unknown[XXX.YYY.ZZZ.KKK] Aug 20 22:49:02 server postfix/smtpd[7724]: setting up TLS connection from

Re: Any C api to access Postfix programmatically?

2009-08-22 Thread Wietse Venema
? ???: Hi ! Is there any Programming Interface (api) , so that a Postfix instance could be accessed programmaticaly, say, a C program? Currently, all the SUPPORTED interfaces require that non-Postfix code communicates with Postfix via some protocol: examples are the SMTP

Re: Building milter in PHP

2009-08-22 Thread Wietse Venema
none none: I've setup postfix for before queue I have not chosen to install milter but to create my own. I did that in PHP. Now, I am at a part, where my PHP milter has to communicate with postfix. Aim is to get string from postfix, evaluate it and send it back to postfix. So I started

Re: Non deterministic usage of STARTTLS

2009-08-24 Thread Wietse Venema
Noel Jones: -- Aug 22 07:52:12 zerhuel postfix/smtpd[2109]: initializing the server-side TLS engine This is logged ONCE when a postfix/smtpd process starts up. Then, it handles one or more SMTP clients. So, 'initializing the server-side TLS engine' is logged only before the FIRST SMTP

Re: smarthost issue

2009-08-26 Thread Wietse Venema
Ing. Davy Leon: Hi all I have a postfix 2.3.3 running on Centos 5.3. Postfix delivers mail through an authenticated smarthost based on a per user authentication. Everything works fine until some smarthost's account get blocked for some brute force attack or something. The fact is that any

Re: smarthost issue

2009-08-26 Thread Wietse Venema
the Google system, and try queries of the form: site:postfix.org postmaster bounce This will lead you to quite rapidly to pages such as: http://www.postfix.org/postconf.5.html#notify_classes Wietse Thanks David - Original Message - From: Wietse Venema wie

Re: postfix terminating on signal 15

2009-08-26 Thread Wietse Venema
Jeroen van Aart: Wietse Venema wrote: Jeroen van Aart: Yes I did: egrep '(warning|error|fatal|panic):' /var/log/mail.* | grep qmgr gunzip -c /var/log/mail.*.*.gz | egrep '(warning|error|fatal|panic):' | grep qmgr How much time is between the LAST qmgr[9582] logfile record BEFORE

Re: Reverse DNS fails with cannot find your hostname when forward IP is wrong

2009-08-27 Thread Wietse Venema
Michael Monnerie: I've just had a very strange bug which cost me an hour to find. mailserver: postfix-2.5.1-28.5 On the mailserver, I should receive mail from 212.69.162.205. # dig -x 212.69.162.205 showed me a correct, existing PTR: 205.192-28.162.69.212.in-addr.arpa. 3600 IN PTR

Re: Forwarding to two servers

2009-08-27 Thread Wietse Venema
tom lee: If there can be some delay between receipt and replication, something like rsync will work fine, although it will propagate users' mistakes. If you need the message delivered to both stores at roughly the same time, the virtual_alias_maps solution would work, or you can e.g. have

Re: Best way to create a redundant server

2009-08-27 Thread Wietse Venema
bsd: Hello, Here is the situation, we have a primary mail server located in the data center of an African Operator. Unfortunately the internet link is not steady at all and It tends to fail every week for couple of hours and sometimes even for days. For strategical reasons this

Re: Reverse DNS fails with cannot find your hostname when forward IP is wrong

2009-08-28 Thread Wietse Venema
Michael Monnerie: On Donnerstag 27 August 2009 Wietse Venema wrote: And this was logged when a reverse hostname resolved to the wrong IP address: ? ? Aug 26 00:26:12 spike postfix/smtpd[13393]: warning: 61.135.132.106: address not listed for hostname relay2nd.mail.sohu.com I just

Re: Helo command rejected: Domain not found

2009-08-28 Thread Wietse Venema
Ralf Hildebrandt: [ Charset UTF-8 unsupported, converting... ] * Ralf Hildebrandt ralf.hildebra...@charite.de: Which Postfix restriction generates: Helo command rejected: Domain not found? From the log on albatross.python.org: Aug 21 15:07:07 albatross postfix/smtpd[15378]:

Re: Helo command rejected: Domain not found

2009-08-28 Thread Wietse Venema
Wietse Venema: Ralf Hildebrandt: * Ralf Hildebrandt ralf.hildebra...@charite.de: Which Postfix restriction generates: Helo command rejected: Domain not found? From the log on albatross.python.org: Aug 21 15:07:07 albatross postfix/smtpd[15378]: NOQUEUE: reject_warning

Re: how well set + anvil

2009-08-29 Thread Wietse Venema
fakessh: hi all hi list how well set + anvil I would like to fine tune + anvil Do not change these settings unless they cause problems. Wietse I wish there was not time to expectations identified in the original configuration of postfix. I would minimize the role of + anvil

Re: Multiple SMTP Servers (Postfix Cluster)

2009-08-29 Thread Wietse Venema
Klaus Engelmann: I tried to use the $transport_maps. Not to sound hostile, but could you be bothered to provide some concrete evidence in the form of configuration and logging, as requested in the mailing list welcome message, repeated below? Wietse TO REPORT A PROBLEM see

Re: Helo command rejected: Malformed DNS server reply

2009-08-29 Thread Wietse Venema
Jim Wright: On Aug 28, 2009, at 5:50 PM, Noel Jones wrote: Mail from yahoo.com is now rejected with: Aug 28 16:24:05 mgate2 postfix/smtpd[53002]: NOQUEUE: reject: RCPT from web34202.mail.mud.yahoo.com[66.163.178.117]: 554 5.7.1 web34202.mail.mud.yahoo.com: Helo command rejected:

Re: Multiple Ldap Servers

2009-08-31 Thread Wietse Venema
Victor Duchovni: On Mon, Aug 31, 2009 at 10:19:48AM -0400, Wietse Venema wrote: Aug 31 09:09:20 server postfix/smtpd[17106]: warning: dict_ldap_lookup: Search error -5: Timed out Aug 31 09:09:20 server postfix/cleanup[17106]: warning: AEF14688F: virtual_alias_maps map lookup

Re: Multiple Ldap Servers

2009-08-31 Thread Wietse Venema
Victor Duchovni: On Mon, Aug 31, 2009 at 10:33:54AM -0400, Wietse Venema wrote: Victor Duchovni: On Mon, Aug 31, 2009 at 10:19:48AM -0400, Wietse Venema wrote: Aug 31 09:09:20 server postfix/smtpd[17106]: warning: dict_ldap_lookup: Search error -5: Timed out

Re: Multiple Ldap Servers

2009-08-31 Thread Wietse Venema
Victor Duchovni: On Mon, Aug 31, 2009 at 01:40:34PM -0400, Wietse Venema wrote: We just pass a list of servers to the LDAP library. Perhaps the simplest enhancement would be to rotate the server list when a query times out, before asking the LDAP library to re-connect

Re: Variables in delayed notification mail.

2009-09-02 Thread Wietse Venema
Guy: Hi, I'm using a slight variation of the default delay notification template which includes things like $delay_warning_time_hours and $maximal_queue_lifetime_days. A lot of users (ours anyway) won't read past the word MAILER-DAEMON so if it's possible I'd like to be able to make the

Re: Deferred queue settings?

2009-09-02 Thread Wietse Venema
Remy Lambert: I'm a Postfix n00b, so I may be asking a loaded question...but here goes: Recently, a user of mine sent an email to an incorrect address - he garbled the domain name. It took six days for our mail server to decide that it was undeliverable... [snip] Indeed, the mail system

Re: Deferred queue settings?

2009-09-02 Thread Wietse Venema
...@postfix.org] On Behalf Of Wietse Venema Sent: Wednesday, September 02, 2009 9:49 AM To: Postfix users Subject: Re: Deferred queue settings? Remy Lambert: I'm a Postfix n00b, so I may be asking a loaded question...but here goes: Recently, a user of mine sent an email to an incorrect

Re: Deferred queue settings?

2009-09-02 Thread Wietse Venema
LuKreme: On 2-Sep-2009, at 11:09, Remy Lambert wrote: I come from the land of MS Exchange so, although I'm competent I'm not sure one is allowed to use MS Exchange and competent in the same sentence without a negation. Only half kidding :) LuKreme, stick to the technical topic,

Re: Sub-domain Alias Assistance

2009-09-04 Thread Wietse Venema
Henri Shustak: I am guessing that in the earlier version of postfix the entire email address was being examined and now this is not the case. The local(8) delivery agent has never used the domain in aliases(5). You can verify this yourself. All the releases are available on-line, starting

Re: Logging mystery

2009-09-04 Thread Wietse Venema
Jozsef Kadlecsik: The policyd can't generate log entries out of the blue - but why those messages were not logged then by postfix? What policyd messages are you referring to? What email messages were delivered, and what is the evidence in Received: headers that those messages were handled by

Re: Logging mystery

2009-09-04 Thread Wietse Venema
Jozsef Kadlecsik: On Fri, 4 Sep 2009, Wietse Venema wrote: Jozsef Kadlecsik: The policyd can't generate log entries out of the blue - but why those messages were not logged then by postfix? What policyd messages are you referring to? Home-breed, but free to use by anyone

Re: Logging mystery

2009-09-05 Thread Wietse Venema
Jozsef Kadlecsik: On Fri, 4 Sep 2009, Victor Duchovni wrote: On Fri, Sep 04, 2009 at 12:57:09PM -0400, Wietse Venema wrote: Jozsef Kadlecsik: On Fri, 4 Sep 2009, Wietse Venema wrote: Jozsef Kadlecsik: The policyd can't generate log entries out of the blue - but why

Re: Are queue IDs unique within a sinlge instance?

2009-09-05 Thread Wietse Venema
Stefan F?rster: Given no external interference, are queue IDs unique within a single instance for the whole span a message stays within qmgr's control, or can a mail in e.g. the deferred queue, share an ID with a message in the active queue? Postfix queue IDs are used as message file names.

Re: LDAP user lookup

2009-09-06 Thread Wietse Venema
Raimund Eimann: Hi, maybe it's me having completely weird ideas, but the existing Google results for postfix ldap howto are not very satisfactory for me: That's because LDAP is not really the right search term. Postfix can use MySQL, PostgreSQL, and so on for similar purposes. Information

Re: ldap result_attribute coalesce

2009-09-06 Thread Wietse Venema
Jack Bates: How can I configure an LDAP map to use one result attribute if it exists, and another if not? Specify two maps xxx_maps = ldap:/file/1 ldap:/file/2 where file2 resolves what file1 doesn't. Wietse

Re: missing 'client=' in log file

2009-09-07 Thread Wietse Venema
Martina Tomisova: Hi, I'm analyzing logs to find the spam source and I've understood that if someone sends the message, one of the first lines written to the log file is a line containing the queue id and 'client=IP_ADDRESS'. But That is incorrect. The SMTP server logs the client= once

Re: missing 'client=' in log file

2009-09-07 Thread Wietse Venema
Wietse Venema: Martina Tomisova: Hi, I'm analyzing logs to find the spam source and I've understood that if someone sends the message, one of the first lines written to the log file is a line containing the queue id and 'client=IP_ADDRESS'. But That is incorrect. The SMTP server

Re: missing 'client=' in log file

2009-09-07 Thread Wietse Venema
Martina Tomisova: [ Charset ISO-8859-1 unsupported, converting... ] not every time. Actually this line is missing just in cases the spam is sent. :) How's that possible? Any ideas how can I get the IP address of the sender in such case? From the SMTP server's PROCESS ID field in the

Re: --- Delivery report unavailable ---

2009-09-07 Thread Wietse Venema
Stefan Bunse: --4D1DB6737244.1252203488/newsbox.webmatch.de Content-Description: Notification Content-Type: text/plain; charset=us-ascii This is the mail system at host newsbox.webmatch.de. I'm sorry to have to inform you that your message could not be delivered to one or more

Re: piped transports error message

2009-09-07 Thread Wietse Venema
Sahil Tandon: On Mon, 07 Sep 2009, Marcel Montes wrote: I have a transport that pipes to a perl script. Everything is fine and dandy, but whenever the script fails the whole perl error message gets appended right after the failure_template message. I've checked bounce(5), bounce(8),

Re: Listing IP addresses in mail queue

2009-09-08 Thread Wietse Venema
Noel Jones: On 9/8/2009 6:20 AM, Duncan B. wrote: Hi, Firstly this is my first post to the list, so apologies if I've not correctly followed any procedures. I'm a new user to Postfix (ex Qmail user) and love it. However, there is one feature of qmqtool that was very useful:

Re: Listing IP addresses in mail queue

2009-09-08 Thread Wietse Venema
Duncan B.: On Tue, 8 Sep 2009, Wietse Venema wrote: Indeed, qshape targets outflow. Inflow analysis is easily done based on logfile records. Are you able to recommend any methods / tools to extract this information from the log files, Wietse, or is it just a case of writing a script

Re: Listing IP addresses in mail queue

2009-09-08 Thread Wietse Venema
Duncan B.: On Tue, 8 Sep 2009, Wietse Venema wrote: Postfix doesn't store IPs in the queue file, so there is no such tool for postfix. Client information records were added late in the Postfix life cycle, and they are used mainly by for xforward and milters. However, the 'qshape

Re: How to add more than one recipient on the notice recipient

2009-09-08 Thread Wietse Venema
Mark Johnson: All, How can I add more one recipient? I want both webmaster and postmaster can receive error email. The default setting: bounce_notice_recipient = postmaster delay_notice_recipient = postmaster error_notice_recipient = postmaster I know Sendmail can just add next to it

Re: Weird postfix looping for some emails

2009-09-09 Thread Wietse Venema
Preston Lord: Hi All, We are having an issue with postfix where some messages keep looping to the local recipient every hour or so. Servers that we consistently have trouble with are apple.com servers : in this example bz1.apple.com . I will post the details below, but the server

Re: Exempting localhost from STARTTLS

2009-09-09 Thread Wietse Venema
Gerard: I use fetchmail to harvest mail from a couple of accounts. I added this to the main.cf file and fetchmail stopped delivering mail. smtpd_tls_security_level = encrypt This was the error message: fetchmail: SMTP error: 530 5.7.0 Must issue a STARTTLS command first fetchmail: SMTP

Re: piped transports error message

2009-09-10 Thread Wietse Venema
Marcel Montes: What does postfix actually add to the bounce message? The STDERR output if the return status is not 0? Postfix absorbs stdout and stderr. There is some information in the pipe(8) man page, but it is not complete. Wietse DIAGNOSTICS Command exit status codes

Re: Formatting of 544- ... lines in Undelivered Mail Returned to Sender

2009-09-10 Thread Wietse Venema
Robin Whittle: I am not sure whether this is specified in an RFC, but I understand that for every part of the remote MTA's response which starts with 544- there should be a new line in the message to the sender. Error reports are standardized in 346[1-4]. I invite you to point out the

Re: Exempting localhost from STARTTLS

2009-09-10 Thread Wietse Venema
Gerard: On Wed, 9 Sep 2009 15:30:22 -0400 (EDT) wie...@porcupine.org (Wietse Venema) wrote: Gerard: I use fetchmail to harvest mail from a couple of accounts. I added this to the main.cf file and fetchmail stopped delivering mail. smtpd_tls_security_level = encrypt

Re: Writing an after-queue content filter in php

2009-09-10 Thread Wietse Venema
Mathias Tausig: Hy! I want to write an after-queue content filter for my postfix installation which is invoked by spawn (according to the FILTER_README from postfix.org). My problem is, that the input/output part simply does not work. I am sending a 220 localhost SMTP foo to STDOUT at

Re: forged domain in message-id?

2009-09-10 Thread Wietse Venema
LuKreme: I've started seeing forged domain name in Message-ID: header: covisp.net recently when sending from a covisp.net email address. I suspect that it is the OS X Mail.app generating it's own Message-ID. Some mail client software will use the domain as the message-id domain.

Re: postfix maildir outside of user home dirs

2009-09-10 Thread Wietse Venema
Sukh Khehra: I am installing postfix on a box where all users don't necessarily have a home directory. Anyone know of a way to configure home_mailbox to an absolute path(with username var) so every user's mailbox directory resides under one top level directory? If the user has no UNIX

Re: Formatting of 544- ... lines in Undelivered Mail Returned to Sender

2009-09-11 Thread Wietse Venema
Robin Whittle: http://tools.ietf.org/html/rfc3464#section-2.3.6 diagnostic-code-field = Diagnostic-Code : diagnostic-type ; *text Since the Status code will sometimes be less precise than the actual transport diagnostic code, the Diagnostic-Code field is provided

Re: Writing an after-queue content filter in php

2009-09-11 Thread Wietse Venema
Mathias Tausig: Am Donnerstag, den 10.09.2009, 10:18 -0400 schrieb Wietse Venema: [...] This is an output buffering problem. You need to flush output after each reply, perhaps by calling the flush() function. Hy! No, I am afraid that this is not the problem. I am sendig you a few

Re: Writing an after-queue content filter in php

2009-09-11 Thread Wietse Venema
The php-net-smtp PEAR module implements an SMTP client; you may be able to pick some pieces to do the server portion of the protocol. Wietse

Re: public/pickup error message

2009-09-11 Thread Wietse Venema
Wietse Venema: Quanah Gibson-Mount: Sep 11 09:24:05 zimbra postfix/postdrop[89912]: warning: unable to look up public/pickup: No such file or directory postdrop will chdir to the queue directory in `postconf -dh config_directory`/main.cf You can't override this unless the non

Re: public/pickup error message

2009-09-11 Thread Wietse Venema
Victor Duchovni: On Fri, Sep 11, 2009 at 02:53:17PM -0400, Victor Duchovni wrote: On Fri, Sep 11, 2009 at 11:49:03AM -0700, Quanah Gibson-Mount wrote: Don't forget that sendmail(1) is outside the persistent master-managed Postfix service and can en-queue mail (to disk) for later

Re: Fast up the mail queue

2009-09-11 Thread Wietse Venema
Alejandro Facultad: Dear all, I have Debian Etch + Postfix 2.3.8 and I want to fast up te mail queue, because sometines I notice that the messages are delivered with some delay. The reason for the delay is logged in the maillog file. How can acelerate the sending of messages in Postfix ???

Re: NDR status written to headers rather than body?

2009-09-11 Thread Wietse Venema
Paul Cockings: Hi List - I send a mail to d...@gdshgf.ggg via my postfix server I get a an NDR back with the a 550 Host or domain name not found (in the body) - That works like normal Now I'd like to alter things; When I get an NDR I'd like to parse the header only to find who the

Re: ulimit throttling observed on AIX

2009-09-11 Thread Wietse Venema
Kenneth Stephen: [ Charset ISO-8859-1 unsupported, converting... ] Hi, I have a .forward file on an AIX system running postfix which sends the mail to a program. Here is what I've observed on that machine: userid = x machine = somehost from a login session for x: $ ulimit -a |

Re: Reject if no listed in sender list

2009-09-11 Thread Wietse Venema
mic...@casa.co.cu: hello list Turns out I use a webmail (horde) in my workplace but apparently has a bug, somehow are generating large numbers of messages to various servers on the internet, yahoo, aol, hotmail and others. to keep me look like an open relay server. Sep 11 03:01:43

Re: error message

2009-09-11 Thread Wietse Venema
ghe: On Sep 11, 2009, at 5:51 PM, Mike Cappella wrote: I don't understand this line from today's logwatch report: 308 *Warning: Database file needs update This message appears when you have a map file that requires postmap'ing to bring the db file up to date relative to the

Re: Formatting of 544- ... lines in Undelivered Mail Returned to Sender

2009-09-12 Thread Wietse Venema
Seth Mattinen: Multiline responses in SMTP are (as far as I know) not allowed. I'm sure Wietse will correct me it I'm wrong, but I can't ever recall it. They are allowed. In fact, most EHLO server responses are multi-line. Wietse

Re: question about policy daemon time limit

2009-09-12 Thread Wietse Venema
Egoitz Aurrekoetxea Aurre: Hi, I'm pretty sure about this but... I prefer asking for being totally sure. Hey mates imagine a policy daemon has a (server time limit) time limit of 3600 seconds... like hasn't arrived the max_idle time... spawn doesn't close it and now it's near to

Re: Fwd: question about policy daemon time limit

2009-09-12 Thread Wietse Venema
Egoitz Aurrekoetxea Aurre: When you are running the policy service under the spawn daemon: 1) The time limit BEGINS after an SMTP server connects to the policy server port, when a new policy daemon process is created. Thus, an SMTP server always mates with a policy server that

<    2   3   4   5   6   7   8   9   10   11   >