Re: Postfix install error

2009-02-03 Thread Wietse Venema
Victor Duchovni: On Tue, Feb 03, 2009 at 11:27:44AM -0800, Nandini Mocherla wrote: Hi I was installing Postfix postfix-2.5.5 on Solaris. At the time of compiling the Source with make I have defined the parameters (for changing the default values of the following from /etc/ to /opt

Re: Postfix install error

2009-02-03 Thread Wietse Venema
Nandini Mocherla: I have compiled it with the desired locations for all the parameters mentioned in my email. Then with make install it prompted me for the locations again and i have answered them changing the default ones. Then it copied/updated all the required files to the specified

Re: Postfix install error

2009-02-03 Thread Wietse Venema
Nandini Mocherla: make makefiles \ #AUXLIBS='-L/usr/mysql/lib/mysql -R/usr/mysql/lib/mysql -lmysqlclient -lldap -lpcre' \ AUXLIBS=-lpcre \ #AUXLIBS=-lpcre \ Your make makefiles command ends with the # character Wietse

Re: Postfix install error

2009-02-03 Thread Wietse Venema
Nandini Mocherla: On 02/ 3/09 02:07 PM, Wietse Venema wrote: Nandini Mocherla: make makefiles \ #AUXLIBS='-L/usr/mysql/lib/mysql -R/usr/mysql/lib/mysql -lmysqlclient -lldap -lpcre' \ AUXLIBS=-lpcre \ #AUXLIBS=-lpcre \ Your make makefiles command ends

Re: Postfix install error

2009-02-03 Thread Wietse Venema
Nandini Mocherla: Your make makefiles command ends BEFORE THE #AUXLIBS LINE You can't have shell comments in the middle of multi-line input. Wietse Thank You Wietse! I have removed that line and my make install proceeded further but this time it terminated with a diffrent

Re: PCRE help - unsTubscribe URL in body_check

2009-02-04 Thread Wietse Venema
Steven Redlich: /http:\/\/baddomain.com\/uTnsub\// There is no error with this PCRE pattern. It works as expected on my (non-Redhat) machine. % cat /tmp/x /http:\/\/baddomain.com\/uTnsub\// foo % postmap -q - pcre:/tmp/x EOF http://baddomain.com/uTnsub/ foobar EOF

Re: postfix queue grep

2009-02-04 Thread Wietse Venema
Victor Duchovni: [ Wietse is it safe to move queue files active - hold - incoming in a short time? Could some recipients be delivered twice by two delivery agents in parallel (both deliveries starting after the second incoming to active transition)? ] Each delivery agent holds a read

Re: active - incoming migration (was: Re: postfix queue grep)

2009-02-04 Thread Wietse Venema
Victor Duchovni: On Wed, Feb 04, 2009 at 12:24:23PM -0500, Wietse Venema wrote: Victor Duchovni: [ Wietse is it safe to move queue files active - hold - incoming in a short time? Could some recipients be delivered twice by two delivery agents in parallel (both deliveries starting

Re: Problems with Postfix / Round-Robin

2009-02-05 Thread Wietse Venema
Pablo Scheri: Hi all!, I am new in the forum. Please excuse me for my bad English. What I want to do is to set up a round-robin from the Postfix to various exchange servers | EXCH 1 (10.0.0.207) Inet = Postfix | | EXCH 2 (10.0.0.208)

Re: Problems with Postfix / Round-Robin

2009-02-05 Thread Wietse Venema
Bj?rn Ruberg: Pablo Scheri wrote: [...] The problem is that when I send mails to the postfix, for example 1000 mails, It routes 990 to one of the exchange (10.0.0.208) and 10 to the other one (10.0.0.207). I alter the order of the A records to see if it changes, but did not. In

Re: Problems with Postfix / Round-Robin

2009-02-05 Thread Wietse Venema
Wietse Venema: [ Charset UNKNOWN-8BIT unsupported, converting... ] Bj_rn Ruberg: Pablo Scheri wrote: [...] The problem is that when I send mails to the postfix, for example 1000 mails, It routes 990 to one of the exchange (10.0.0.208) and 10 to the other one (10.0.0.207

Re: Problems with Postfix / Round-Robin

2009-02-05 Thread Wietse Venema
Pablo Scheri: Hi, thanks for the quick answerd, the DNS is a local Bind. the command : $ postconf smtp_randomize_addresses tells me YES In the DNS Zone I define only one MX, and I set 2 A registries for that MX name. Now read my other reply. Look in the maillog file for the IP address

Re: Problems with Postfix / Round-Robin

2009-02-05 Thread Wietse Venema
Pablo Scheri: It is strange but I think I am using the 10.0.0.207 server only when the mail is get delayed. This is the log for a mail sent to the 10.0.0.208 server (from 100 mails received 98 mails): What is the output from: dig mx mx.trendargentina.com.ar Wietse

Re: Corrupted To: header

2009-02-05 Thread Wietse Venema
Clodoaldo Pinto Neto: The To: header I'm sending appears like this in the log: Feb 5 21:27:03 centos5151155 postfix/cleanup[4595]: B1AD3FF9A7: warning: header To: =?utf-8?q?D=C3=A9ste_Sobrenome_Grande_P=C3=B4cas_da_Silva_=3Cclodoaldo=5F?=? =?utf-8?q?pinto=40yahoo=2Ecom=2Ebr=3E?= from To:

Re: Corrupted To: header

2009-02-05 Thread Wietse Venema
Clodoaldo Pinto Neto: 2009/2/5 Wietse Venema wie...@porcupine.org: Clodoaldo Pinto Neto: The To: header I'm sending appears like this in the log: Feb 5 21:27:03 centos5151155 postfix/cleanup[4595]: B1AD3FF9A7: warning: header To: =?utf-8?q?D=C3=A9ste_Sobrenome_Grande_P=C3

Re: Trying to write a log parser, need some clarifications about log enteries.

2009-02-05 Thread Wietse Venema
Chris St Denis: [ Charset ISO-8859-1 unsupported, converting... ] First some background. What I am trying to do is write a script that syslog can be piped into that will parse the maillog in real time and insert the items into the database -- one row per queue ID (and possibly one per

Re: Huge header detection

2009-02-05 Thread Wietse Venema
Carlos Horowicz: Hello list, I recently found out an unsolicited e-mail that caused high CPU consumption by cyrus imap on different mailstores. The poisoned e-mail has a structure of over 31.000 repetiions of these 4 lines in the header MIME-Version: 1.0 Content-type: text/html;

Re: reject_rbl_client in hash

2009-02-06 Thread Wietse Venema
richard lucassen: Apparently, this: smtpd_client_restrictions = reject_rbl_client bl.spamcop.net reject_rbl_client list.dsbl.org reject_rbl_client virbl.dnsbl.bit.nl The above does RBL lookups (as requested by reject_rbl_client). replaced by this: smtpd_client_restrictions =

Re: Problems with Postfix / Round-Robin

2009-02-06 Thread Wietse Venema
The DNS looks good. Can you give output for: $ dig mx trendargentina.com.ar. $ dig a mx.trendargentina.com.ar. $ postconf | grep dns The records that result in some kind of error while delivering to the mx.trendargentina.com.ar machines. Something like: $ grep '10\.0\.0\.20..:25'

Re: Problems with Postfix / Round-Robin

2009-02-06 Thread Wietse Venema
Pablo Scheri: dig mx trendargentina.com.ar. Looks good... postconf | grep dns disable_dns_lookups = no lmtp_host_lookup = dns smtp_host_lookup = dns It's using DNS --- grep '10\.0\.0\.20..:25' /var/log/maillog | grep -v status= No

Enabling stress detection by default

2009-02-06 Thread Wietse Venema
With Postfix 2.5 I introdoced stress-dependent behavior in the SMTP server, but this was left turned off by default. I'm thinking of turning on some stress-dependent behavior by default in Postfix 2.6, to make Postfix look better in stupid benchmarks (just like in_flow_delay and

Re: Enabling stress detection by default

2009-02-06 Thread Wietse Venema
Noel Jones: Wietse Venema wrote: Something that will drastically cut the time per session: smtpd_timeout = ${stress?10s}${stress:300s} I would be concerned about sites that are chronically short of smtpd processes with an inexperienced or inattentive admin. Maybe 20s~30s rather than

Re: sasl compiling error

2009-02-06 Thread Wietse Venema
Mumtaz Ali: (set -e; echo [$i]; cd $i; make 'CC=gcc -Wmissing-prototypes -Wformat -DUSE_SASL_AUTH -DUSE_CYRUS_SASL \ -I/usr/local/include/sasl' update MAKELEVEL=) || exit 1; \ You mis-typed the make makefiles command. The is not supposed to be there. Wietse

Re: Enabling stress detection by default

2009-02-06 Thread Wietse Venema
Wietse Venema: smtpd_timeout = ${stress?10s}${stress:300s} smtpd_hard_error_limit = ${stress?2}${stress:20} I thought this was going to be easy, but the built-in default values for these parameters are type int, and do not accept the conditional expressions. Either this means changing the way

Re: Trying to write a log parser, need some clarifications about log enteries.

2009-02-06 Thread Wietse Venema
Chris St Denis: Anyway, on to the problems. How do I deal with log entries like this. A queue ID is created, but nothing ever happens to it. There is no reject Wietse There was one valid recipient, but the mail transaction was not completed. This could be a header_checks rule, or a network

Re: postfix error: Connection refused by [127.0.0.1]

2009-02-06 Thread Wietse Venema
mantra UNIX: Feb 6 17:09:53 abc-host sendmail[11601]: n16N9rC7011601: from=root, That is NOT POSTFIX. Wietse

Re: Enabling stress detection by default

2009-02-07 Thread Wietse Venema
Daniel V. Reinhardt: ---Could there be a notification alert be sent via SMS or another means to the administrator of the post server in question, stating something is wrong with the server? This could be implemented by configuring a logfile monitoring program (swatch, logsurfer, etc.) to send

Re: forgery: config. flaws

2009-02-07 Thread Wietse Venema
bharathan kailath: hi al the following surprise me because postfix rejected this message! sill it Postfix rejected a RECIPIENT. Do not confuse a RECIPIENTS with MESSAGES. Wietse Feb 7 19:39:11 relay2 postfix/smtpd[19938]: BC5A2211EF: reject: RCPT from

Re: Virtual domains + address rewriting + transport ?

2009-02-08 Thread Wietse Venema
Tony Demark: Good day. I am have spent spent some time trying to figure out if the following Postfix config is possible and am hoping for some guidance. Short Synopsis: I would like to move some of my virtual domains to have their email hosted via a Google for Domains account.

Re: Virtual domains + address rewriting + transport ?

2009-02-08 Thread Wietse Venema
Tony Demark: On Feb 8, 2009, at 2:31 PM, Wietse Venema wrote: Tony Demark: I would like to move some of my virtual domains to have their email hosted via a Google for Domains account. While there are only a handful of accounts, most of the accounts have many aliases and have used

Re: Virtual domains + address rewriting + transport ?

2009-02-08 Thread Wietse Venema
Tony Demark: If the original server gets an email addressed to 'me- foo...@example.com', I need the email to be relayed to 'm...@example.com', not 'me-foo...@example.com'. /^(.+)(-.+)?...@example\.com$/$...@example.com OK ... I think I got this figured out. It ended up that the

Re: reject_unverified_sender vs greylisting

2009-02-08 Thread Wietse Venema
Jo?o Miguel Neves: Good evening, I recently enabled reject_unverified_sender in my postfix configuration, but it seems like it fails when the server against which the sender is verified uses greylisting. I've been getting log entries like (@ were replaced by _AT_): Feb 8 07:56:49 atlas

Re: Building postfix for packaging

2009-02-09 Thread Wietse Venema
Quanah Gibson-Mount: We currently use postfix as a part of our overall product, which means that it ends up being packaged inside our own RPM (or deb, etc) packages, and then redeployed when our product is installed. One thing I've noticed about the postfix build system in this is that it

Re: Building postfix for packaging

2009-02-09 Thread Wietse Venema
Victor Duchovni: On Mon, Feb 09, 2009 at 10:02:33AM -0800, Quanah Gibson-Mount wrote: You have not read PACKAGE_README. This is really the answer. I missed this document, things should work fine with it. One minor nit in the document, it uses xargs to collect a file list for tar,

Re: Building postfix for packaging

2009-02-09 Thread Wietse Venema
Quanah Gibson-Mount: --On Monday, February 09, 2009 12:57 PM -0500 Victor Duchovni victor.ducho...@morganstanley.com wrote: http://www.postfix.org/PACKAGE_README.html And just to confirm, the steps here worked beautifully, thank you. :) I did have to use an install root of /../

Re: DNS lookups not working?

2009-02-10 Thread Wietse Venema
David Cottle: [ Charset ISO-8859-1 unsupported, converting... ] -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I see this a lot in my mail.log (unknown): Feb 10 20:38:28 server postfix/smtpd[21977]: connect from unknown[72.4.168.106] Feb 10 09:38:30 server postfix/smtpd[21977]:

Re: reject_unverified_sender vs greylisting

2009-02-10 Thread Wietse Venema
Juergen P. Meier: If everyone would use SAV, the ammount of SMTP traffic in the Internet would *double*. I bet most heavy duty mailssystems don't scale double. Go ahead and make my day. What is the basis for this claim? Wietse

Re: Getting localhost put in my From field

2009-02-10 Thread Wietse Venema
Xn Nooby: I have been trying to figure out how to get Postfix to not append localhost in to the From: field. I am sending email mostly between two local users, using RHEL5/Squirrelmail/Postfix/Dovecot. When I send an email from user_...@schoolretail.local to

Re: Massive Double Bounce problems

2009-02-10 Thread Wietse Venema
Thomas Glanzmann: Out: 220 erld671x.erlf.siemens.de ESMTP Postfix In: EHLO erld603x.erlf.siemens.de Out: 250-erld671x.erlf.siemens.de Out: 250-PIPELINING Out: 250-SIZE 104857600 Out: 250-VRFY Out: 250-ETRN Out: 250 8BITMIME In: MAIL FROM:double-bou...@erlf.siemens.de SIZE=1191

Re: DNS lookups not working?

2009-02-10 Thread Wietse Venema
jan gestre: On Tue, Feb 10, 2009 at 7:44 PM, Wietse Venema wie...@porcupine.org wrote: David Cottle: [ Charset ISO-8859-1 unsupported, converting... ] -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, I see this a lot in my mail.log (unknown): Feb 10 20:38:28 server postfix

Re: Massive Double Bounce problems

2009-02-10 Thread Wietse Venema
Thomas Glanzmann: I still don't get why postfix sends me a soft bounce to notify me that I'm running out of diskspace. Have you looked at the LOGFILE? that softbounce and so on until I'm out of resources. Shouldn't postfix detect that this is a tempfailure and do exactly nothing and retry a

Re: Problems with Postfix / Round-Robin

2009-02-10 Thread Wietse Venema
Pablo Scheri: Hi! I am not able to upload the files, I get a post error because I am exceeding the 4 characters. How can I send you the logs? May I upload them to rapidshare or something like that? You can upload to: ftp://ftp.porcupin.org/tmp/random/ files uploaded there cannot

Re: Problems with Postfix / Round-Robin

2009-02-10 Thread Wietse Venema
Pablo Scheri: Wietse, I am not able to access... It is not a productive environment, there is no private information. I upload it to http://rapidshare.com/files/196381965/postfix.rar.html It works fine as long as you use an FTP client. I see no hosts 10.0.0.207 etc. in your maillog file.

Re: Massive Double Bounce problems

2009-02-10 Thread Wietse Venema
Thomas Glanzmann: so what happened. erld671x is out of resources, it send an e-mail to postmas...@erld671x.erlf.siemens.de but because it is horrible misconfigured it sends that e-mail over its smart host which delivers it back, which results in a tempfailure which again triggers an out of

Re: No reason not to use reject_unverified sender (was Re: reject_unverified_sender vs greylisting)

2009-02-10 Thread Wietse Venema
Jo??o Miguel Neves: Pawe? Le?niak escreveu: Jo?o Miguel Neves pisze: Charles Marcus escreveu: Here's a link informing why indiscriminate use of SAV is bad, and what it should be used for: http://www.backscatterer.org/?target=sendercallouts OK, I've finished reading and analyzing

Re: [Fwd: Re: Fwd: Re: postfix, dovecot auth and rip/lip]

2009-02-10 Thread Wietse Venema
Nate: I noticed somebody wrote a patch for postfix-2.3.8. I'm not a C programmer myself, so I'm not sure of it's quality or if this code could be used or committed to the postfix source tree. Found at http://preview.tinyurl.com/b87z44 You are welcome to apply this patch, but it will not

PATCH: postfix, dovecot auth and rip/lip

2009-02-11 Thread Wietse Venema
Can someone have a look at this patch for Postfix = 2.5? The patch for Postfix 2.3 does not work because I had to add a SASL mechanism filter feature. Wietse *** xsasl_dovecot_server.c.orig Sun Mar 16 19:09:04 2008 --- xsasl_dovecot_server.c Wed Feb 11 10:26:37 2009 ***

Re: problem with virtual domains and mailman

2009-02-11 Thread Wietse Venema
G?ran H?glund: virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual-alias-maps.cf, proxy:mysql:/etc/postfix/mysql-virtual-mailbox-to-alias-maps.cf hash:/usr/local/mailman/data/aliases As I suspected, you are mixing local alias syntax with virtual alias syntax. The two have

Re: postfix benchmark performance

2009-02-11 Thread Wietse Venema
Silas Boyd-Wickizer: Hello, I'm doing some experiments with a synthetic benchmark and postfix. My current postfix configuration can deliver ~3000 msg/sec to 1000 virtual mailboxes; however, the system (16 core/4x4 AMD opteron) is ~90% idle. All logs and queues reside Why do you believe

Re: Enforcing TLS by recipient and sender domain

2009-02-12 Thread Wietse Venema
Urban Hillebrand: Hello list, is there a way to enforce TLS dependent on the sender domain? Yes. Use check_sender_access and reject_plaintext_session. Wietse Background: Many customers are using our SMTP infrastructure (opportunistic TLS is active). Now one customer wants to

Re: Add X-Envelope From/To into incoming mail

2009-02-12 Thread Wietse Venema
Petr Hude?ek: Hi everybody! I need add X-Envelope From: and X-Envelope To: into incoming mail from envelope mail, no from head mail! I use Postfix and procmail. Can you help me, please? Use PREPEND actions in access maps. http://www.postfix.org/SMTPD_ACCESS_README.5.html

Re: Enforcing TLS by recipient and sender domain

2009-02-12 Thread Wietse Venema
Victor Duchovni: On Thu, Feb 12, 2009 at 08:33:35AM -0500, Wietse Venema wrote: is there a way to enforce TLS dependent on the sender domain? This would have to be simulated with sender_dependent_relayhost_maps. Specify a Postfix instance that encrypts all outbound mail. Postfix

Re: How disk I/O affect postfix performance ?

2009-02-13 Thread Wietse Venema
Wietse Venema: Yu (Irvin) Fan: Hi, We're building a box to run two postfix instances to receive and send high volume of emails. According to the documentation it's better to run the two instances on separate disks for performance reason. I'm trying to understand how exactly does

Re: throtling / queue management system

2009-02-13 Thread Wietse Venema
Gerardo Herzig: Wietse Venema wrote: Gerardo Herzig: Hi all. Im want something for throtling msgs, say if user X sends more than 10 emails/minute, then requeue next msgs from user X with some lower priority. Postfix has no queue priotity. When the street to the airport is congested

Re: unknown mail transport error

2009-02-13 Thread Wietse Venema
Henri Chevreton: Feb 13 14:25:37 alty postfix/master[3972]: warning: process /usr/lib/postfix/local pid 19045 killed by signal 6 That is your problem. Wietse

Re: DSN: Improper sequence of commands in postfix 2.5.4

2009-02-13 Thread Wietse Venema
Eddy Beliveau: Hi! I'm using Postfix 2.5.4 and it worked well. Thanks ;-) One of my academic user received this error message Google didn't help me much Do you know what can cause this failure ? Is it cause by my server ? Reporting-MTA: dns;bay0-imc3-s4.bay0.hotmail.com

Re: Protocol error: host said: 250 2.0.0 Ok (in reply to DATA command)

2009-02-13 Thread Wietse Venema
Carver Banks: Hello Everyone, I am seeing weird bounces on my postfix server and can't quite figure out why... It looks like it is failing while passing the mail off to a spam appliance, but from the spam appliance side I see no record of the message. Also Any ideas, I have a couple

Re: How disk I/O affect postfix performance ?

2009-02-13 Thread Wietse Venema
Yu (Irvin) Fan: Hi Wietse, Thanks for the quick answer. Can I say that the postfix performance is affected by small file read/write speed of the disk? Many email messages small. Therefore performance is dominated by rotational and seek latencies (absent a large persistent buffer between the

Re: Using relative paths in main.cf

2009-02-13 Thread Wietse Venema
George Forman: Hi,I have created a main.cf.auth and linked it to main.cf in /opt/zimbra/p -f.auth/conf directory.I am using alternate_config_directories to specify a p -arent directory path, such as,alternate_config_directories = /opt/zimbra/pf. -auth/confqueue_directory =

Re: Protocol error: host said: 250 2.0.0 Ok (in reply to DATA command)

2009-02-13 Thread Wietse Venema
Carver Banks: -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Wietse Venema Sent: Friday, February 13, 2009 10:57 AM To: Postfix users Subject: Re: Protocol error: host said: 250 2.0.0 Ok (in reply to DATA command

Re: Trying to set up Amavis, getting missing transport typefield error.

2009-02-14 Thread Wietse Venema
James Homuth: Feb 14 11:12:14 nova postfix/master[27805]: fatal: /etc/postfix/master.cf: line 115: missing transport type field What is line 115 of master.cf? From the original message: 127.0.0.1:10025 inet n- n - - smtpd #Line 115, per the log

Re: Trying to set up Amavis, getting missing transport typefield error.

2009-02-14 Thread Wietse Venema
James Homuth: Feb 14 11:12:14 nova postfix/master[27805]: fatal: /etc/postfix/master.cf: line 115: missing transport type field What is line 115 of master.cf? From the original message: 127.0.0.1:10025 inet n- n - - smtpd #Line 115, per the log

Re: postmap changed between 2.3.8 and 2.5.5

2009-02-16 Thread Wietse Venema
Harakiri: --- On Mon, 2/16/09, Ralf Hildebrandt ralf.hildebra...@charite.de wrote: From: Ralf Hildebrandt ralf.hildebra...@charite.de Subject: Re: postmap changed between 2.3.8 and 2.5.5 To: postfix-users@postfix.org Date: Monday, February 16, 2009, 8:00 AM * richard lucassen

Re: Requeue if DNS server is down

2009-02-17 Thread Wietse Venema
Erik Paulsen Skaalerud: Hi. Does postfix hold mails in queue if it cant contact any DNS server? Yes. You may want to read up on email RFCs if you're concerned about the handling of mail delivery errors. http://tools.ietf.org/html/rfc5321 Wietse We just lost our fibre link

Re: Requeue if DNS server is down

2009-02-17 Thread Wietse Venema
Erik Paulsen Skaalerud: We just lost our fibre link (including all DNS resolution) and it seems like many of our internal users get a 450 error with Recipient address rejected: Domain not found. That is because YOU configured Postfix to reject mail with reject_unknown_recipient_domain.

Re: pipe - setup question

2009-02-18 Thread Wietse Venema
Jon Drukman: I read this page http://www.postfix.org/FILTER_README.html but I am not having any luck getting my pipe set up. I want to make it so all mail destined for a particular subdomain is run through a script and then discarded. For that, FILTER_README is not applicable (it delvers

Re: pipe - setup question

2009-02-18 Thread Wietse Venema
Jon Drukman: still getting this to=in...@in.thismoment.com, relay=local, delay=0.05, This mail is sent to LOCAL not PIPE. Your transport map is not working. Wieste

Re: pipe - setup question

2009-02-18 Thread Wietse Venema
Jon Drukman: On Wed, Feb 18, 2009 at 2:15 PM, Wietse Venema wie...@porcupine.org wrote: Jon Drukman: still getting this to=in...@in.thismoment.com, relay=local, delay=0.05, This mail is sent to LOCAL not PIPE. Your transport map is not working. $ cat transport in.thismoment.com

Re: pipe - setup question

2009-02-18 Thread Wietse Venema
Jon Drukman: in...@in.thismoment.com: Recipient address rejected: User unknown in local recipient table; from=jdruk...@gmail.com USE relay_domains and relay_recipient_maps NOT virtual_alias_* NOT virtual_mailbox_* NOT mydestination

Re: should main.cf treat whitespace characters identically?

2009-02-18 Thread Wietse Venema
Travis: I recently started bouncing email because (it appears) I had a mixture of space-indentation and tab-indentation on the multi-line $mydestinations line. Should postfix really be doing this? It seems straightforward to me to treat all whitespace the same, and it would prevent a

Re: Limit rate/concurrency to a given domain

2009-02-19 Thread Wietse Venema
Santiago Romero: Wietse Venema escribi?: default_destination_rate_delay (default: 0s) The default amount of delay that is inserted between individual deliv- eries to the same destination; with per-destination recipient limit 1, a destination is a domain

Re: Postfix problems when system spool has files

2009-02-19 Thread Wietse Venema
Quanah Gibson-Mount: I've been running into a really odd (bizarre) problem with Postfix that only seems to happen on Mac OSX 10.5 (leopard). I'm really at a loss to explain why things break the way they do, but it definitely happens. I thought maybe some folks on the list might have some

Re: multiple domains, same ip, different helo replies

2009-02-20 Thread Wietse Venema
Aggelos: I have the following question concerning setup for multiple domains on the same host machine: Let us say that in /etc/postfix/main.cf we have the following: mydestination = a.domain.com, b.domain.com, c.domain.com We have setup DNS so that all mx records for the above domains

Re: network biopair interop

2009-02-20 Thread Wietse Venema
Guy Story KC5GOI: I received a error in my log watch report that I have not seen before and just wanted to get a idea of what I am seeing. Based on a match from a Google search back in 2004 it looks like a dirty disconnect could cause the error message below. I snagged the entries in the log

Re: dovecot_destination_recipient_limit not appearing in postconf -n ?

2009-02-22 Thread Wietse Venema
The postconf command does not read master.cf, therefore parameters such as transport_destination_recipient_limit parameters usually don't appear in postconf output. Wietse

Re: LMTP delivery and DSN action value for success

2009-02-23 Thread Wietse Venema
Michel S?bastien: Hi all. I use LMTP transport to deliver mails into Cyrus and when asking DSN success I got an action relayed. Besides final delivery, LMTP is also used to deliver mail into content filters. The advantage of LMTP is that the protocol reports one end-of-message

Re: Sending SSL/TLS state to Dovecot auth

2009-02-23 Thread Wietse Venema
Victor Duchovni: On Mon, Feb 23, 2009 at 02:18:01PM -0500, Timo Sirainen wrote: In some setups it's useful for authentication handling to know if the connection is SSL/TLS secured. The patch below should tell this to Dovecot. It compiles, but other than that I haven't yet tested it.

Re: Sending SSL/TLS state to Dovecot auth

2009-02-23 Thread Wietse Venema
Timo Sirainen: On Mon, 2009-02-23 at 14:32 -0500, Victor Duchovni wrote: On Mon, Feb 23, 2009 at 02:18:01PM -0500, Timo Sirainen wrote: In some setups it's useful for authentication handling to know if the connection is SSL/TLS secured. The patch below should tell this to Dovecot.

Re: Sending SSL/TLS state to Dovecot auth

2009-02-23 Thread Wietse Venema
Timo Sirainen: On Mon, 2009-02-23 at 16:49 -0500, Wietse Venema wrote: It's basically the same thing as disable plaintext authentication, except on a per-user (or per-domain, or per-source-IP-range) basis rather than globally. There are probably some other use cases that I've heard

Re: anvil - dynamical limits

2009-02-24 Thread Wietse Venema
Andre H?bner: Hello, i try to find further infos for anvil-service and how to use it. In my Maillogs i see some statistics written by anvil but i do not understand the plan to use anvil to do a client based session/request control. anvil is not a policy tool. It is a safty mechanism.

Re: postfix-2.6-20090224-nonprod doesn't build

2009-02-25 Thread Wietse Venema
Ralf Hildebrandt: ... but then I didn't read the INSTALL document to see if something changed fundamentally... The error is: [src/postmulti] gcc -Wmissing-prototypes -Wformat -Wl,--as-needed -DUSE_TLS -DHAS_PCRE -DHAS_CDB -DSNAPSHOT -DNONPROD -g -O -I. -I../../include -DLINUX2 -c

Re: smtp_tls_CAfile

2009-02-25 Thread Wietse Venema
Manuel P?gouri?-Gonnard: Hi, I'm afraid I don't understand what the directive smtp_tls_CAfile does exactly. According to postconf(5), smtp_tls_CAfile (default: empty) The file with the certificate of the certification authority (CA) that issued the Postfix SMTP client

Re: exclude one domain from reject_unknown_sender_domain

2009-02-26 Thread Wietse Venema
Harakiri: Hi, i have one specific sender domain which should be allowed to sent over postfix servers, however this domain is not registered as MX or DNS. Is there a way to exclude this domain from the reject_unknown_sender_domain check? Maybe a whitelist for this setting or add the

Re: /usr/sbin/sendmail requeue and address expansion

2009-02-26 Thread Wietse Venema
Look for receive_override_options in the MASTER.CF file examples of the FILTER_README documentation. Wietse

Re: Possible reasons for qmgr loading the system?

2009-02-26 Thread Wietse Venema
Santiago Romero: I case it happens again ... Where or what should I take a look? At OS level (disk or network I/O, processes...) I didn't see anything before the postfix restart... Try ``strace -o filename -p pid'' or the equivalent for your OS. Wietse

Re: Possible to defer delivery when command_time_limit is exceeded?

2009-02-26 Thread Wietse Venema
ericmason: I had some issues with my mailbox storage drive this morning and Postfix started bouncing messages with this message: Command time limit exceeded: /usr/bin/maildrop I see the timeout is configurable with command_time_limit, but don't see any way to defer the message instead

Re: multiple A records for the name of an MX

2009-02-27 Thread Wietse Venema
Some systems try only one IP address per MX record (per the RFC they assume that one name is one host; if one IP address is dead so will the others). Postfix does not distinguish between one MX record with many A records, or many equal-preference MX records with one A record. Wietse

Re: bounce_queue_lifetime vs maximal_queue_lifetime

2009-02-27 Thread Wietse Venema
Sriram Nyshadham: Hello All, I need help finding out what parameter overrides what out of bounce_queue_lifetime and maximal_queue_lifetime. On our MTAs, bounce_queue_lifetime = 0d and maximal_queue_lifetime = 5d. So, according to the definition, when bounce_queue_lifetime is set to 0

Re: sending email with Gnus

2009-03-02 Thread Wietse Venema
Ralf Hildebrandt: * LuKreme krem...@kreme.com: Postfix does not 'support' TLS at all. I wouldn't say it that way. STARTTLS looks like TLS support, if you ask me It should work with Gnu TLS as well as with any other TLS library. As far as I knwo it doesn't :) A couple years ago,

Re: sending email with Gnus

2009-03-02 Thread Wietse Venema
Ralf Hildebrandt: * Wietse Venema wie...@porcupine.org: A couple years ago, Gnu TLS would exit the program (exit status 2) instead of reporting an error to Postfix, so that Postfix could switch to plaintext where appropriate. http://www.postfix.org/TLS_README.html#build_tls Should

Re: Prioritising outgoing mail

2009-03-02 Thread Wietse Venema
Wouter van Marle: On 2 Mar 09, at 23:09, Victor Duchovni wrote: On Mon, Mar 02, 2009 at 10:44:21PM +0800, Wouter van Marle wrote: Hi list, From me a question that seems to be asked now and then here, but I could not find any answers even on whether this is possible in the first

Re: there is no pipe process running

2009-03-03 Thread Wietse Venema
Erik Morton: Hello, I've been following the Content Filter tutorial (http://www.postfix.org/FILTER_README.html ) with little success. Postfix logs ALL delivery attempts, successful or otherwise, in the maillog file. http://www.postfix.org/DEBUG_README.html#logging

Re: there is no pipe process running

2009-03-03 Thread Wietse Venema
Erik Morton: Thanks. I am running with -D (strace) and -v enabled and I'm not seeing anything fatal or related to a pipe process. So what does Postfix log when delivering mail? http://www.postfix.org/DEBUG_README.html#mail Wietse

Re: anvil limiting for subnets

2009-03-03 Thread Wietse Venema
Ondrej Holecek: hello, is there a possibility to limit connection count for whole subnet? when I have: smtpd_client_connection_count_limit = 2 it limits each IP to max 2 connections, but when attacker has /24 subnet, he can easily create 508 connections If the attacker has a botnet,

Re: smtpd_recipient_restrictions suddenly stopping mail

2009-03-03 Thread Wietse Venema
Kevin Bailey: Today, about 80% of emails started getting bounced back with: So we commented out the spamcop line... then we got So we commented out the spamhaus line... then we got Then we commented out the rfc-ignorant.org line and the mail is getting through. So the restrictions line

Re: Variables for addresses in master.cf

2009-03-03 Thread Wietse Venema
Daniel L. Miller: Does Postfix support variables (I suppose defined in main.cf) to be used for internet addresses in master.cf? Example: main.cf: inbound_interface = 192.168.0.10 outbound_interface = 192.168.0.11 master.cf: inbound_interface:25 inet n - - - - smtpd

Re: modify ldap return query value

2009-03-03 Thread Wietse Venema
Evelio Vila: so I would like to modify the return_attribute to pass postfix only the user part of the mail field. See: man ldap_table | less +/result_format Also, could several queries can be combined to form the desired result? You can't make multiple queries per result. Wietse

Re: Problem with ldap table lookups and TLS

2009-03-03 Thread Wietse Venema
Victor Duchovni: With OpenLDAP 2.4 it is possible to set the TLS properties for a particular LDAP connection (not just global properties), and to associate a new OpenLDAP managed TLS context for the connection via the new LDAP_OPT_X_TLS_NEWCTX option. Try this completely untested patch (it

Botnet detection (pre-greet experiments)

2009-03-04 Thread Wietse Venema
A couple years ago there was a discussion about having Postfix SMTP servers pause for several seconds at the start of each SMTP session, and reject the session if the client speaks first. The idea was that this is a sure sign that the client is a piece of crapware. Although the idea of proactive

Re: Trouble sending mail to a piped alias

2009-03-04 Thread Wietse Venema
Kirk Strauser: $ sudo /usr/local/www/data/bugzilla/email_in.pl /tmp/bugtest This executes the command as ROOT. This test is invalid because: Mar 4 09:46:31 web2 local[61974]: fatal: execvp /usr/local/www/data/bugzilla/email_in.pl: No such file or directory This executes the command as

  1   2   3   4   5   6   7   8   9   10   >