njabl.org shut down

2013-03-02 Thread Robert Schetterer
Hi for info

http://www.njabl.org/

March 1, 2013: NJABL is in the process of being shut down. The DNSBL
zones have been emptied. After the Internet has had some time to
remove NJABL from server configs, the NS's will be pointed off into
unallocated space (192.0.2.0/24 TEST-NET-1) to hopefully make the
shutdown obvious to those who were slower to notice.

its also included in policyd-weight


Best Regards
MfG Robert Schetterer

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer
Aufsichtsratsvorsitzender: Joerg Heidrich


Relay Host Based on From address

2013-03-02 Thread Dennis Putnam
I am running some mailman mailing lists and due to issues with my ISP's
SMTP server I need to use alternate mail relays. I need to configure
postfix to use a relay, with authentication, based on the local
originating address rather than the destination. Is this possible and
can someone point me in the right direction? Thanks.



signature.asc
Description: OpenPGP digital signature


Re: Relay Host Based on From address

2013-03-02 Thread Reindl Harald

Am 02.03.2013 13:01, schrieb Dennis Putnam:
 I am running some mailman mailing lists and due to issues with my ISP's
 SMTP server I need to use alternate mail relays. I need to configure
 postfix to use a relay, with authentication, based on the local
 originating address rather than the destination. Is this possible and
 can someone point me in the right direction? Thanks.

the From-header is not relevant for SMTP
becasue headers have nothing to do with the
SMTP MAIL FROM command

http://en.wikipedia.org/wiki/Bounce_address
___

however, besides these basics a mailadmin should know
http://www.postfix.org/postconf.5.html#sender_dependent_relayhost_maps

see example below

please totice that i use here the submission port 587
because if we speak about authentication we are acting
more than a MUA and submission a) requires auth and b)
has usually different restrictions because auth is given

notice also that how you write realyhost/port has to be 100%
identical in sasl_passwd and relayhost_maps and you
can list as much user/password/host-combinations as needed
___

/etc/postfix/main,cf:
smtp_sasl_auth_enable= yes
smtp_sender_dependent_authentication = yes
smtp_sasl_security_options   = noanonymous
smtp_sasl_password_maps  = hash:/etc/postfix/sasl_passwd
sender_dependent_relayhost_maps  = hash:/etc/postfix/relayhost_maps

/etc/postfix/sasl_passwd:
# AFTER CHANGES: postmap /etc/postfix/sasl_passwd
[relayhost]:587 username:password

/etc/postfix/relayhost_maps:
# AFTER CHANGES: postmap /etc/postfix/relayhost_maps
sen...@domain.tld [relayhost]:587



signature.asc
Description: OpenPGP digital signature


Re: Relay Host Based on From address

2013-03-02 Thread Wietse Venema
Dennis Putnam:
 I am running some mailman mailing lists and due to issues with my ISP's
 SMTP server I need to use alternate mail relays. I need to configure
 postfix to use a relay, with authentication, based on the local
 originating address rather than the destination. Is this possible and
 can someone point me in the right direction? Thanks.

http://www.postfix.org/SOHO_README.html#client_sasl_sender

This includes some features that you would not need. Just ignore them.

Wietse


Re: Relay Host Based on From address

2013-03-02 Thread Dennis Putnam
Exactly what I was looking for. I never would have thought used 'sasl
sender' in a search engine. Thanks.

On 3/2/2013 8:05 AM, Wietse Venema wrote:
 Dennis Putnam:
 I am running some mailman mailing lists and due to issues with my ISP's
 SMTP server I need to use alternate mail relays. I need to configure
 postfix to use a relay, with authentication, based on the local
 originating address rather than the destination. Is this possible and
 can someone point me in the right direction? Thanks.
 http://www.postfix.org/SOHO_README.html#client_sasl_sender

 This includes some features that you would not need. Just ignore them.

   Wietse





signature.asc
Description: OpenPGP digital signature


undelivered-Email

2013-03-02 Thread Ejaz
Why I am getting the bounce back message when copied myself, I am postfix
and MailScanner to relaying emails. 

 

 

From: mailer-dae...@cyberia.net.sa [mailto:mailer-dae...@cyberia.net.sa] 

Sent: Sunday, February 24, 2013 4:46 PM

To: i...@cyberia.net.sa

Subject: Undeliverable mail: RE: Cyberia preparation for the OTL Board

 

Failed to deliver to ''i...@cyberia.net.sa''

SMTP module(domain *) reports:

host 212.119.64.177 says:

501 5.1.3 Bad recipient address syntax

 

 

 

Regards, 
__
Mohammed Ejaz 
Sr,Systems Administrator
Middle East Internet Company (CYBERIA)
Riyadh, Saudi Arabia
Phone: +966-1-4647114  Ext: 140
Mobile +966-562311787
Fax: +966-1-4654735
E-mail: me...@cyberia.net.sa

 





Re: undelivered-Email

2013-03-02 Thread Reindl Harald


Am 02.03.2013 15:31, schrieb Ejaz:
 Why I am getting the bounce back message when copied myself, I am postfix and 
 MailScanner to relaying emails.
 
 From: mailer-dae...@cyberia.net.sa [mailto:mailer-dae...@cyberia.net.sa]
 Sent: Sunday, February 24, 2013 4:46 PM
 To: i...@cyberia.net.sa
 Subject: Undeliverable mail: RE: Cyberia preparation for the OTL Board
 
 Failed to deliver to ''i...@cyberia.net.sa''
 SMTP module(domain *) reports:
 host 212.119.64.177 says:
 501 5.1.3 Bad recipient address syntax

sorry, but postfix is only the messenger
ask postmas...@cyberia.net.sa



signature.asc
Description: OpenPGP digital signature


Re: undelivered-Email

2013-03-02 Thread Wolfgang Zeikat

In an older episode, on 2013-03-02 15:37, Reindl Harald wrote:

sorry, but postfix is only the messenger
ask postmas...@cyberia.net.sa



I think that Ejaz is postmas...@cyberia.net.sa:

Mohammed Ejaz
Sr,Systems Administrator
Middle East Internet Company (CYBERIA)
Riyadh , Saudi Arabia
Phone: +966-1-4647114  Ext: 140
Mobile +966-562311787
Fax: +966-1-4654735
E-mail: me...@cyberia.net.sa




Re: undelivered-Email

2013-03-02 Thread Reindl Harald


Am 02.03.2013 15:45, schrieb Wolfgang Zeikat:
 In an older episode, on 2013-03-02 15:37, Reindl Harald wrote:
 sorry, but postfix is only the messenger
 ask postmas...@cyberia.net.sa

 
 I think that Ejaz is postmas...@cyberia.net.sa:
 
 Mohammed Ejaz
 Sr,Systems Administrator

ok, OK

but postfix is still only the messenger
SMTP module(domain *) reports: does not come from postfix
so the question is what does this software that postfix rejects

Failed to deliver to ''i...@cyberia.net.sa''
the single quote twice is suspect
smells like MailScanner mangles something



signature.asc
Description: OpenPGP digital signature


NJABL is dead

2013-03-02 Thread The Doctor
Please stop using NJABL
-- 
Member - Liberal International  This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca
God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! 
http://www.fullyfollow.me/rootnl2k  Look at Psalms 14 amnd 53 on Atheism

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



Re: undelivered-Email

2013-03-02 Thread Wietse Venema
Ejaz:
 ''i...@cyberia.net.sa''

That is indeed invalid address syntax.

Wietse


question re. sasl authentication

2013-03-02 Thread Miles Fidelman

Hi Folks,

I just had a users' password compromised - with the result that a bunch 
of spam was sent through her account.  (Fixed by changing her password.)


But, in the process, I had to learn a lot about how Postfix wires 
together with Cyrus SASL, and that in turn with PAM.  I discovered 
something that confuses me, and I hope someone can help:


- our system is set up to authenticate smtpd transactions via saslauthd 
(and then to pam_unix to the password db)


- as soon as I changed the user's password, IMAP started failing 
authentication and the password had to be changed, BUT...


- we could still SEND mail via smtpd using either username/newpassword 
or username/oldpassword


- eventually this timed out and the old password stopped working

- obviously the old password was being cached somewhere, my assumption 
being in the saslauthd credentials cache, BUT, that doesn't explain why 
smtpd continued to accept the old password for a while


Which leads to several questions:

- the general one: anybody know what's going on?

- is postfix doing some of its own authentication caching (as suggested 
by the variable smtp_sasl_auth_cache_time)


- and most important: is there a way to flush the cache?

Thanks very much,

Miles Fidelman

--
In theory, there is no difference between theory and practice.
In practice, there is.    Yogi Berra