TLS handshake failed

Hello, a user of my mail gateway has got the following messages while have tried to send a message to recipie...@recipdomain.tld,recipie...@recipdomain.tld: - Original Message - From: Mail Delivery Subsystem mailer-dae...@recipserver.tld To: sen...@senddomain.tld Sent: Tuesday, July 07,

RE: TLS handshake failed

Thanks, -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Charles Marcus Sent: Thursday, July 09, 2009 12:43 PM To: postfix-users@postfix.org Subject: Re: TLS handshake failed On 7/9/2009, Rocco Scappatura

RE: TLS handshake failed

Hello, -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Wietse Venema Sent: Thursday, July 09, 2009 12:47 PM To: Postfix users Subject: Re: TLS handshake failed Rocco Scappatura: # postconf -d | grep tls What web

RE: TLS handshake failed

+0200, Rocco Scappatura wrote: Hello, a user of my mail gateway has got the following messages while have tried to send a message to recipie...@recipdomain.tld,recipie...@recipdomain.tld: - Original Message - From: Mail Delivery Subsystem mailer-dae...@recipserver.tld

RE: sender_bcc_maps and performance

Thanks Victor, On Wed, Jul 01, 2009 at 02:48:00PM +0200, Rocco Scappatura wrote: Hello, I have enabled sender_bcc_maps in my main.cf. The lookup file has just 2 entries. What fraction of your traffic is sent by these 2 entries. Do you have content filters downstream

sender_bcc_maps and performance

Hello, I have enabled sender_bcc_maps in my main.cf. The lookup file has just 2 entries. I have noticed that the number of message in active queue grews as soon as I enable this feature. Is it so expensive? I otherwise can't figure out why active queues grows. Infact, I have verified that no

RE: Cryptic message for end users

Hello, Error 1: maildirmake: /pathto/user/: File exists Error 2: maildrop: maildir over quota. What you mean precisely? How I can find the mistake? Here my maildrop conf file: log test -d $HOME$DEFAULT `test -d $HOME$DEFAULT` if ($RETURNCODE != 0) { log mkdir -p

RE: Cryptic message for end users

Wietse, Ok Ralph, I have solved the two holes in conf file of Maildrop. Now I get the following over quota message: posta.sttspa.it #5.7.0 x-unix; maildrop: maildir over quota. Which is still not completely 'human-readble'. The error message is produced by maildrop, so

Cryptic message for end users

Hello, I have a postoffice system based on Postfix+MySQL+Courier-IMAP+Courier-authlib+Maildrop. I have enable quota checking with maildrop. When quota is overcame then Postfix get a permanent error by maildrop and generates a bounce with the following informations: mypostoffice.domain.tld

RE: Cryptic message for end users

Thanks Ralph, * Rocco Scappatura rocco.scappat...@infracom.it: Error 1: maildirmake: /pathto/user/: File exists Error 2: maildrop: maildir over quota. What you mean precisely? How I can find the mistake? Here my maildrop conf file: log test -d $HOME$DEFAULT `test -d $HOME

private/hash

Hello, I get: warning: connect #3 to subsystem private/hash: No such file or directory In main.cf I set: virtual_alias_domains = domain.tld virtual_alias_maps = hash:/etc/postfix/virtual while in /etc/postfix/virtual kubasms@ domain.tld autogerma@ domain2.tld kubasms-notifiche@

RE: private/hash

-Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Matt Hayes Sent: Friday, May 08, 2009 5:22 PM To: postfix-users@postfix.org Subject: Re: private/hash Rocco Scappatura wrote: Hello, I get: warning: connect

RE: private/hash

Hello, Rocco Scappatura: Hello, I get: warning: connect #3 to subsystem private/hash: No such file or directory You have configured a hash: LOOKUP TABLE where Postfix expects a SERVICE NAME (such as a content filter or policy service). Use ls -lt to find out what Postfix config

RE: private/hash

Sorry, On Fri May 8 2009 10:20:22 Rocco Scappatura wrote: I get: warning: connect #3 to subsystem private/hash: No such file or directory And which process gives you this warning? You snipped out significant portions of the log, so definitive help is not possible. May 8 17:16:50

RE: private/hash

Thanks all! -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Magnus Bäck Sent: Friday, May 08, 2009 6:00 PM To: postfix-users@postfix.org Subject: Re: private/hash On Friday, May 08, 2009 at 17:45 CEST, Rocco

RE: Redirect messages for just one recipient

Thanks Barney, thanks Noel, All works fine. Bye, rocsva -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Barney Desmond Sent: Wednesday, May 06, 2009 12:38 AM To: postfix users list Subject: Re: Redirect messages for

Redirect messages for just one recipient

Hello, I have a Postfix-based system which consist of a front end side (mail gateway) and a post office side. I receive messages for different domain. Every message destined for a domain, say domain.tld, is forwarded to the post office and there the recipient will eventually be translated and

Separating relay control from other checks

Hello, I felt interesting the discussion started by mouss in thread whitelist from spamhaus, and particularly the content of the email: http://archives.neohapsis.com/archives/postfix/2006-05/0598.html written by Viktor. Indeed, I have started since some weeks to use the Postfix SMTP policy

RE: Separating relay control from other checks

A further question: How I say to postfix to use 'smtpd_rcpt_restriction_classes' and where it will be evaluated? You can't. This is a hypothetical feature. It has not yet been (and may never be) implemented. :-( What a shame! I think that it could be very nice.. rocsca

RE: Separating relay control from other checks

Viktor, A further question: How I say to postfix to use 'smtpd_rcpt_restriction_classes' and where it will be evaluated? You can't. This is a hypothetical feature. It has not yet been (and may never be) implemented. :-( What a shame! I think that it could be very

RE: relayhost

Noel, I need to use 'mail()' PHP function on a UNIX system, which uses Postfix as MTA. On Linux systems, mail() function use the 'sendmail' program to transmit messages. And so, my PHP program uses postfix setup to transmit the messages. In particular, it looks up DNS for MX of

relayhost

Hello, I need to use 'mail()' PHP function on a UNIX system, which uses Postfix as MTA. On Linux systems, mail() function use the 'sendmail' program to transmit messages. And so, my PHP program uses postfix setup to transmit the messages. In particular, it looks up DNS for MX of destination

RE: Postoffice with virtual mailbox and a Maildrop issue [SOLVED]

Hello, Rocco Scappatura a écrit : [snip] Why the message is not delivered immediately to the virtual mailbox after vacation filter? because the domain is not listed as a virtual mailbox domain At first glance, I shoud say as above too, but I swear that the query is exactly

Re: Postoffice with virtual mailbox and a Maildrop issue

Thanks Magnus, append_at_myorigin = no deleted. I have the problem that mail destined to local virtual mailbox is not delivered locally, even if all looks up succesfully confirm tha the message have to be delivered locally: So what does happen to the messages? At the moment, I'm

Postoffice with virtual mailbox and a Maildrop issue

Hello, I'm setting up a postoffice platform based on Postfix+Courier-authlib-Courier-IMAP-Maildrop. Here my postfix parameters: # postconf -n alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases append_at_myorigin = no append_dot_mydomain = no bounce_size_limit = 1

policy service question

Hello, I'm trying to use a policy service to limit use of my SMTP gateway platform 'cause of heavy load that usually means hard delays to transmit messages. The policy service is bound to 10031 TCP port. I have so set postfix the use policy service at the and of recipient restriction and at

Re: SMTP relay only

Rocco Scappatura a écrit : Hello, I need to setup a mail server for outgoing email only. I clearly would like to restrict access to my networks only. Moreover, I would like to permit only to some envelope senders to relay email trhough a such MTA. And no other envelope sender should

Re: SMTP relay only

Victor, Finally I would like to deny message delivery to my mail server.. It should suffice to unset relay_domains or it is too restrictive doing so? to disable local delivery, check the FIREWALL README. I think this means:

RE: Timing question

Sorry for the delay.. Could you explain - in the same terms - how is quantified the time before a message is passed to the queue manager, after it is processed by the content filter? The time to deliver is measured as the time between MAIL FROM and end-of-data.

SMTP relay only

Hello, I need to setup a mail server for outgoing email only. I clearly would like to restrict access to my networks only. Moreover, I would like to permit only to some envelope senders to relay email trhough a such MTA. And no other envelope sender should be able to relay trhough this MTA. So

DSN on deferring

Hello, When I send a message to an inexistent email address and the receiving MTA is down, like the following example: av4 mail16:46:22postfix/smtppostfix/smtp[27440]: 11BD7750296: to=abcd...@destdomain.tld, relay=none, delay=10, delays=0.03/0/10/0, dsn=4.4.1, status=deferred

RE: SMTP sessions

Hi, I have a mail gateway system that consists of several Postfix+MySQL+Amavisd-new machines behind a load balancer. I have defined a balancing policy based on number of SMTP sessions that every server has to manage. New connections are given to the server with the fewest

Re: SMTP sessions

Victor, I fear that the problem is that for each session I can have an unsettled number of messages sent over that session (It could be happen? If yes, It could be depend on MTA settings?) other then an unsettled size of SMTP traffic (which it determs the latency of messages and it

Re: SMTP sessions

Thanks Viktor, 1) Once a client (or another MTA) establish a TCP connection with listening port bounded by the SMTP daemon of Postfix, could happen that more then one email messages are sent over that TCP connection, before it is closed? Sure this is possible, but it is unlikel to

RE: SMTP sessions

Hello, I have a mail gateway system that consists of several Postfix+MySQL+Amavisd-new machines behind a load balancer. I have defined a balancing policy based on number of SMTP sessions that every server has to manage. New connections are given to the server with the fewest

Re: check_client_access

Mouss, and your explanation was about a receiver. That's 3 different things... So.. What I have to do to block a message based on the receiver? check_recipient_access. PS. it would be safer to put your check_sender_access in smtpd_sender_restrictions so that an error in your sql

Re: check_client_access

How do I have to modify it so that I could block an email address either if is the sender or one of the recipients, AND either if the message is incoming or outgoing? Maybe so (assuming that the action will never be OK)... smtpd_client_restrictions = check_client_access

Re: check_client_access

Mouss, [snip] :-D [snip] dogs ate logs? Very cool from you.. as usual! You have won a prize.. :-) -- Is it ok so? ;-) - show logs that prove what you claimed Feb 1 06:02:50 av5 postfix/smtpd[32172]: NOQUEUE: reject: RCPT from unknown[83.103.67.197]: 550 5.1.1 st...@receiver.tld:

Re: check_client_access

Sorry, How do I have to modify it so that I could block an email address either if is the sender or one of the recipients, AND either if the message is incoming or outgoing? Maybe so (assuming that the action will never be OK)... smtpd_client_restrictions = check_client_access

Re: check_client_access

Mouss, How do I have to modify it so that I could block an email address either if is the sender or one of the recipients, AND either if the message is incoming or outgoing? Maybe so (assuming that the action will never be OK)... smtpd_client_restrictions = check_client_access

Re: Timing question

Thanks Wietse and Victor, For example consider the log relative to the relay entries (to the cntent filer and to postfix without conten filter): 1) Jan 30 10:02:17 av5 postfix/smtp[10603]: C0AFB226F23: to=recei...@domain.tld, relay=127.0.0.1[127.0.0.1]:10026, delay=8.9,

Recipient verification from post-office in down stream issue

Hello, My postfix server i configured to reject unverified server for a domain recipient.tld. The record MX for this domain points to my server. When my MTA receive messages for recipient.tld, then the messages are forwarded to the server with IP 10.30.32.7. In main.cf I have.

check_client_access

In smtpd_recipient_restrictions I put as first line: check_sender_access proxy:mysql:/etc/postfix/mysql-check-sender-access.cf The check looks up the database for an address or a domain ad returns an action (OK, REJECT, and so on). Last day my server receives a lot of messages for an email

Re: Timing question

For example consider the log relative to the relay entries (to the cntent filer and to postfix without conten filter): 1) Jan 30 10:02:17 av5 postfix/smtp[10603]: C0AFB226F23: to=recei...@domain.tld, relay=127.0.0.1[127.0.0.1]:10026, delay=8.9, delays=1.3/0/0/7.7, dsn=2.0.0,

Re: Timing question

Wietse, Could you explain - in the same terms - how is quantified the time before a message is passed to the queue manager, after it is processed by the content filter? The time to deliver is measured as the time between MAIL FROM and end-of-data. Sorry for my bad english.. To be

Re: check_client_access

Thanks, In smtpd_recipient_restrictions I put as first line: check_sender_access proxy:mysql:/etc/postfix/mysql-check-sender-access.cf The check looks up the database for an address or a domain ad returns an action (OK, REJECT, and so on). This sounds bad; you should not OK based

Timing question

Hello. I have a Postfix+Amavisd-new+MySQL+ClamAV mail gateway system. I'm observing time spent by a messagge in (Amavisd-new) content_filter of postfix (I trascure deliberately the time spent by a message to be processed by postfix, because it is neglegible with respect to the filter). I grep a

Re: Timing question

I have a Postfix+Amavisd-new+MySQL+ClamAV mail gateway system. I'm observing time spent by a messagge in (Amavisd-new) content_filter of postfix (I trascure deliberately the time spent by a message to be processed by postfix, because it is neglegible with respect to the filter). I grep a

RE: SMTP sessions

I have a mail gateway system that consists of several Postfix+MySQL+Amavisd-new machines behind a load balancer. I have defined a balancing policy based on number of SMTP sessions that every server has to manage. New connections are given to the server with the fewest connections?

SMTP sessions

Hello. I have a mail gateway system that consists of several Postfix+MySQL+Amavisd-new machines behind a load balancer. I have defined a balancing policy based on number of SMTP sessions that every server has to manage. But, even if the session is perfectly balanced, I see that the average

RE: Share postfix config directory

rocsca From: Thomas [mailto:t...@tja-server.de] Sent: Thursday, January 15, 2009 2:58 AM To: Rocco Scappatura Cc: postfix users list Subject: Re: Share postfix config directory I never had a problem to do exactly this ... For what do you need the hostname of the server? My main.cf does

RE: Share postfix config directory

I have different SMTP gateways each one configurred exactly at the same manner. The only difference is the hostname. I would like to know if I could define /etc/postfix as an NFS share somewhere and export it on each of my SMTP gateways. The aim is obviously to change

Share postfix config directory

Hello, I have different SMTP gateways each one configurred exactly at the same manner. The only difference is the hostname. I would like to know if I could define /etc/postfix as an NFS share somewhere and export it on each of my SMTP gateways. The aim is obviously to change only one

RE: Share postfix config directory

I have different SMTP gateways each one configurred exactly at the same manner. The only difference is the hostname. I would like to know if I could define /etc/postfix as an NFS share somewhere and export it on each of my SMTP gateways. The aim is obviously to change only one

RE: User unknown in relay recipient table (SOLVED)

Rocco Scappatura a écrit : Dec 12 16:55:33 av1 postfix/smtpd[25586]: NOQUEUE: reject: RCPT from unknown[IP Primary MX for extdomain.tld]: 550 5.1.1 u...@extdomain.tld: Recipient address rejected: User unknown in relay recipient table; from=em...@domain.tld to= u...@extdomain.tld

Avoiding spam scan for a specific recipient

Hello, I have a Postfix+MySQL+Amavisd-new platform. Time ago I get some hint for avoiding spam scan for a particular sender an a particular client. In particular, in /etc/postfix/main.cf I put: smtpd_restriction_classes = from_policy_bank_senders from_policy_bank_senders =

User unknown in relay recipient table

Hello, I have a Postfix MTA which is configured to check recipients for a domain listed in table relay_domains, before to forward the message to the appropriate post office. All has worked fine, until the MTA has been configured as backup MX for an external domain, say extdomain.tld. Since

RE: User unknown in relay recipient table

Dec 12 16:55:33 av1 postfix/smtpd[25586]: NOQUEUE: reject: RCPT from unknown[IP Primary MX for extdomain.tld]: 550 5.1.1 u...@extdomain.tld: Recipient address rejected: User unknown in relay recipient table; from=em...@domain.tld to= u...@extdomain.tld proto=ESMTP helo=MYPC The error

RE: Postfix and quota clarification

On Mon, Nov 24, 2008 at 4:49 AM, mouss [EMAIL PROTECTED] wrote: Jose Ildefonso Camargo Tolosa a écrit : However, Postfix supports access maps that can reject mail for over-quota users, if you are willing to periodically add up all the mail each user has. I have been using filesystem

Postfix and quota clarification

Hello, I have a post-office platform based on Postfix-2.5.2+Courier-IMAP-4.0.1-Courier-authlib-0.53+MySQL-5.0.33. Can someone give some hint on how enable (and verify that works) quota on mailboxes? Thanks, rocsca

RE: SOLVED: SMTP transaction interrupted

Here is one event in a tcpdump file that I received a few hours ago (full context is below the signature): 10:49:57.930285 80.74.176.142.25 217.11.85.59.2528: . ack 1998901 win 32767 nop,nop,sack sack 1 {1994821:1996181} (DF) What happens is that the receiver

RE: SMTP transaction interrupted

Rocco Scappatura: 12:31:06.808714 O client.1395 server.25: . 1931191:1932551(1360) ack 358 win 65178 (DF) Can you show the TCP handshake (SYN/SYN+ACK/ACK) with TCP options. You are right, there is no TCP option. I will try to dump another SMTP session. This time directly on mail

RE: SMTP transaction interrupted

Which tcpdump version is this? Where are the time stamps and the packets with data (Len0)? tcpdump show only initial packet data by default and -s0 show all data. Is usefull when decode HEX (-xX) or ASCII (-A) I repeat, there is no need to look at the data itself. However, this

RE: SOLVED: SMTP transaction interrupted

I think I have solved the mystery. But I can offer you only a workaround, to turn off selective ACK support. Here is one event in a tcpdump file that I received a few hours ago (full context is below the signature): 10:49:57.930285 80.74.176.142.25 217.11.85.59.2528: .

Re: SOLVED: SMTP transaction interrupted

Rocco Scappatura: I think I have solved the mystery. But I can offer you only a workaround, to turn off selective ACK support. Here is one event in a tcpdump file that I received a few hours ago (full context is below the signature): 10:49:57.930285

RE: authentication failed

postfix/smtpd[19545]: warning: unknown[xxx.yyy.www.zzz]: SASL LOGIN authentication failed: authentication failure I do get those all the time. Users mistyping their passwords, usernames, client's getting AUTH all wrong and so on. OK. then postfix/smtpd[19545]: lost

RE: authentication failed

I'm facing a problem with a client that can't send email trough my mail gateway.. After connection, in mail log, I get: postfix/smtpd[19545]: warning: unknown[xxx.yyy.www.zzz]: SASL LOGIN authentication failed: authentication failure then postfix/smtpd[19545]: lost connection after

RE: authentication failed

postfix/smtpd[19545]: warning: unknown[xxx.yyy.www.zzz]: SASL LOGIN authentication failed: authentication failure I do get those all the time. Users mistyping their passwords, usernames, client's getting AUTH all wrong and so on. OK. then postfix/smtpd[19545]: lost connection

RE: SMTP transaction interrupted

Oct 29 10:27:58 av3 postfix/smtpd[16988]: connect from unknown[xxx.yyy.www.zzz] Oct 29 10:27:58 av3 postfix/smtpd[16988]: 7B98D75008D: client=unknown[xxx.yyy.www.zzz] Oct 29 10:34:25 av3 postfix/smtpd[16988]: timeout after DATA from unknown[xxx.yyy.www.zzz] Oct 29 10:34:25 av3

authentication failed

Hello, I'm facing a problem with a client that can't send email trough my mail gateway.. After connection, in mail log, I get: postfix/smtpd[19545]: warning: unknown[xxx.yyy.www.zzz]: SASL LOGIN authentication failed: authentication failure then postfix/smtpd[19545]: lost connection after

SMTP transaction interrupted

Hello, I can't identify the cause of impossibility to relay emails through my Postifix mail gateway, from a Outlook express client. From mail log, I saw: postfix/smtpd[16988]: connect from unknown[xxx.yyy.www.zzz] postfix/smtpd[16988]: 7B98D75008D: client=unknown[xxx.yyy.www.zzz]

RE: SMTP transaction interrupted

I can't identify the cause of impossibility to relay emails through my Postifix mail gateway, from a Outlook express client. Indeed, I get the problem while sending email with attachment with size above 5-6 MB.. From mail log, I saw: postfix/smtpd[16988]: connect from

RE: SMTP transaction interrupted

I can't identify the cause of impossibility to relay emails through my Postifix mail gateway, from a Outlook express client. Indeed, I get the problem while sending email with attachment with size above 5-6 MB.. From mail log, I saw: postfix/smtpd[16988]: connect from

RE: Postfix statistics from log stored on RDBMS

I have hacked pflogsumm so that it could be read log from database used by PHP-syslog-ng. If someone is interested, I will make it public. rocsca -Original Message- From: [EMAIL PROTECTED] [mailto:owner-postfix- [EMAIL PROTECTED] On Behalf Of Rocco Scappatura Sent: Friday, September

Postfix statistics from log stored on RDBMS

Hello, I have several Postfix+Amavisd-new+MySQL mail gateways. I have configured syslog service on that machines to send logs to a centralized syslog server, which stores received logs on mysql DBMS. BTW, I lookup the logs using Php-Syslog-NG. Anyway, logs on each machine are stored also as

RE: Postfix statistics from log stored on RDBMS

-Original Message- From: Robert Schetterer [mailto:[EMAIL PROTECTED] Sent: Thursday, September 18, 2008 3:06 PM To: Rocco Scappatura Cc: postfix-users@postfix.org Subject: Re: Postfix statistics from log stored on RDBMS Rocco Scappatura schrieb: Hello, I have several

advanced mysql lookup

Hello, I would like to add further condition for delivery of email messages. In my main.cf I have this setting: virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-transport.cf where mysql-trasport.cf contains: select_field = domain where_field = domain additional_conditions = and active